From 74c4ddc2bd714c44a65624277d767b8746d0689e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 6 May 2026 02:44:15 +0000
Subject: [PATCH] chore(deps): bump commander from 10.0.1 to 14.0.3

Bumps [commander](https://github.com/tj/commander.js) from 10.0.1 to 14.0.3.
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tj/commander.js/compare/v10.0.1...v14.0.3)

---
updated-dependencies:
- dependency-name: commander
  dependency-version: 14.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json                | 19 ++++++++++---------
 packages/sbom-tools/package.json |  2 +-
 2 files changed, 11 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 5b1c42ea..3ee8410f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -30296,7 +30296,7 @@
       "dependencies": {
         "@octokit/rest": "^20.1.1",
         "@pkgjs/nv": "^0.3.0",
-        "commander": "^10.0.1",
+        "commander": "^14.0.3",
         "error-stack-parser": "^2.1.4",
         "find-up": "^4.1.0",
         "lodash": "^4.17.21",
@@ -30369,11 +30369,12 @@
       }
     },
     "packages/sbom-tools/node_modules/commander": {
-      "version": "10.0.1",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-10.0.1.tgz",
-      "integrity": "sha512-y4Mg2tXshplEbSGzx7amzPwKKOCGuoSRP/CjEdwwk0FOGlUbq6lKuoyDZTNZkmxHdJtp54hdfY/JUrdL7Xfdug==",
+      "version": "14.0.3",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.3.tgz",
+      "integrity": "sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw==",
+      "license": "MIT",
       "engines": {
-        "node": ">=14"
+        "node": ">=20"
       }
     },
     "packages/sbom-tools/node_modules/find-up": {
@@ -36945,7 +36946,7 @@
         "@types/sinon-chai": "^4.0.0",
         "@types/spdx-satisfies": "^0.1.0",
         "chai": "^4.5.0",
-        "commander": "^10.0.1",
+        "commander": "^14.0.3",
         "depcheck": "^1.4.7",
         "error-stack-parser": "^2.1.4",
         "eslint": "^7.25.0 || ^8.0.0",
@@ -36992,9 +36993,9 @@
           }
         },
         "commander": {
-          "version": "10.0.1",
-          "resolved": "https://registry.npmjs.org/commander/-/commander-10.0.1.tgz",
-          "integrity": "sha512-y4Mg2tXshplEbSGzx7amzPwKKOCGuoSRP/CjEdwwk0FOGlUbq6lKuoyDZTNZkmxHdJtp54hdfY/JUrdL7Xfdug=="
+          "version": "14.0.3",
+          "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.3.tgz",
+          "integrity": "sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw=="
         },
         "find-up": {
           "version": "4.1.0",
diff --git a/packages/sbom-tools/package.json b/packages/sbom-tools/package.json
index 01093724..e60b96a9 100644
--- a/packages/sbom-tools/package.json
+++ b/packages/sbom-tools/package.json
@@ -82,7 +82,7 @@
   "dependencies": {
     "@octokit/rest": "^20.1.1",
     "@pkgjs/nv": "^0.3.0",
-    "commander": "^10.0.1",
+    "commander": "^14.0.3",
     "error-stack-parser": "^2.1.4",
     "find-up": "^4.1.0",
     "lodash": "^4.17.21",