diff --git a/js/package.json b/js/package.json
index 75c3ec39e..35e5d81c1 100644
--- a/js/package.json
+++ b/js/package.json
@@ -220,7 +220,7 @@
     "module-details-from-path": "^1.0.4",
     "mustache": "^4.2.0",
     "pluralize": "^8.0.0",
-    "simple-git": "^3.21.0",
+    "simple-git": "^3.36.0",
     "source-map": "^0.7.4",
     "termi-link": "^1.0.1",
     "unplugin": "^2.3.5",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b8d228f2e..89c346431 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -386,8 +386,8 @@ importers:
         specifier: ^8.0.0
         version: 8.0.0
       simple-git:
-        specifier: ^3.21.0
-        version: 3.21.0
+        specifier: ^3.36.0
+        version: 3.36.0
       source-map:
         specifier: ^0.7.4
         version: 0.7.4
@@ -2937,6 +2937,12 @@ packages:
   '@shikijs/vscode-textmate@10.0.2':
     resolution: {integrity: sha512-83yeghZ2xxin3Nj8z1NMd/NCuca+gsYXswywDy5bHvwlWL8tpTQmzGeUuHd9FC3E/SBEMvzJRwWEOz5gGes9Qg==}
 
+  '@simple-git/args-pathspec@1.0.3':
+    resolution: {integrity: sha512-ngJMaHlsWDTfjyq9F3VIQ8b7NXbBLq5j9i5bJ6XLYtD6qlDXT7fdKY2KscWWUF8t18xx052Y/PUO1K1TRc9yKA==}
+
+  '@simple-git/argv-parser@1.1.1':
+    resolution: {integrity: sha512-Q9lBcfQ+VQCpQqGJFHe5yooOS5hGdLFFbJ5R+R5aDsnkPCahtn1hSkMcORX65J2Z5lxSkD0lQorMsncuBQxYUw==}
+
   '@sinclair/typebox@0.27.8':
     resolution: {integrity: sha512-+Fj43pSMwJs4KRrH/938Uf+uAELIgVBmQzg/q1YG10djyfA3TnrU8N8XzqCh/okZdszqBQTZf96idMfE5lnwTA==}
 
@@ -6806,8 +6812,8 @@ packages:
   simple-get@4.0.1:
     resolution: {integrity: sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==}
 
-  simple-git@3.21.0:
-    resolution: {integrity: sha512-oTzw9248AF5bDTMk9MrxsRzEzivMlY+DWH0yWS4VYpMhNLhDWnN06pCtaUyPnqv/FpsdeNmRqmZugMABHRPdDA==}
+  simple-git@3.36.0:
+    resolution: {integrity: sha512-cGQjLjK8bxJw4QuYT7gxHw3/IouVESbhahSsHrX97MzCL1gu2u7oy38W6L2ZIGECEfIBG4BabsWDPjBxJENv9Q==}
 
   simple-wcswidth@1.1.2:
     resolution: {integrity: sha512-j7piyCjAeTDSjzTSQ7DokZtMNwNlEAyxqSZeCS+CXH7fJ4jx3FuJ/mTW3mE+6JLs4VJBbcll0Kjn+KXI5t21Iw==}
@@ -10411,7 +10417,7 @@ snapshots:
   '@openai/agents-core@0.0.14(ws@8.18.3)(zod@3.25.76)':
     dependencies:
       '@openai/zod': zod@3.25.67
-      debug: 4.4.1
+      debug: 4.4.3
       openai: 5.11.0(ws@8.18.3)(zod@3.25.76)
     optionalDependencies:
       '@modelcontextprotocol/sdk': 1.18.0
@@ -10436,7 +10442,7 @@ snapshots:
     dependencies:
       '@openai/agents-core': 0.0.14(ws@8.18.3)(zod@3.25.76)
       '@openai/zod': zod@3.25.67
-      debug: 4.4.1
+      debug: 4.4.3
       openai: 5.11.0(ws@8.18.3)(zod@3.25.76)
     transitivePeerDependencies:
       - supports-color
@@ -10459,7 +10465,7 @@ snapshots:
       '@openai/agents-core': 0.0.14(ws@8.18.3)(zod@3.25.76)
       '@openai/zod': zod@3.25.67
       '@types/ws': 8.18.1
-      debug: 4.4.1
+      debug: 4.4.3
       ws: 8.18.3
     transitivePeerDependencies:
       - bufferutil
@@ -10851,6 +10857,12 @@ snapshots:
 
   '@shikijs/vscode-textmate@10.0.2': {}
 
+  '@simple-git/args-pathspec@1.0.3': {}
+
+  '@simple-git/argv-parser@1.1.1':
+    dependencies:
+      '@simple-git/args-pathspec': 1.0.3
+
   '@sinclair/typebox@0.27.8': {}
 
   '@sinonjs/commons@3.0.1':
@@ -12137,7 +12149,7 @@ snapshots:
       minimatch: 9.0.5
       mustache: 4.2.0
       pluralize: 8.0.0
-      simple-git: 3.21.0
+      simple-git: 3.36.0
       source-map: 0.7.6
       termi-link: 1.1.0
       uuid: 9.0.1
@@ -15812,10 +15824,12 @@ snapshots:
       once: 1.4.0
       simple-concat: 1.0.1
 
-  simple-git@3.21.0:
+  simple-git@3.36.0:
     dependencies:
       '@kwsites/file-exists': 1.1.1
       '@kwsites/promise-deferred': 1.1.1
+      '@simple-git/args-pathspec': 1.0.3
+      '@simple-git/argv-parser': 1.1.1
       debug: 4.4.3
     transitivePeerDependencies:
       - supports-color