diff --git a/package-lock.json b/package-lock.json
index 3f103533..704caa97 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "version": "5.0.0-beta.1",
       "license": "BSD-3-Clause",
       "dependencies": {
-        "commander": "~13.1.0",
+        "commander": "~14.0.0",
         "http-proxy-3": "~1.20.3",
         "prom-client": "~15.1.3",
         "winston": "~3.17.0"
@@ -575,12 +575,12 @@
       }
     },
     "node_modules/commander": {
-      "version": "13.1.0",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-13.1.0.tgz",
-      "integrity": "sha512-/rFeCpNJQbhSZjGVwO9RFV3xPqbnERS8MmIQzCtD/zl6gpJuV/bMLuN92oG3F7d8oDEHHRrujSXNUr8fpjntKw==",
+      "version": "14.0.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.0.tgz",
+      "integrity": "sha512-2uM9rYjPvyq39NwLRqaiLtWHyDC1FvryJDa2ATTVims5YAS4PupsEQsDvP14FqhFr0P49CYDugi59xaxJlTXRA==",
       "license": "MIT",
       "engines": {
-        "node": ">=18"
+        "node": ">=20"
       }
     },
     "node_modules/cross-spawn": {
diff --git a/package.json b/package.json
index 5c17b054..237f2973 100644
--- a/package.json
+++ b/package.json
@@ -9,7 +9,7 @@
     "url": "https://github.com/jupyterhub/configurable-http-proxy.git"
   },
   "dependencies": {
-    "commander": "~13.1.0",
+    "commander": "~14.0.0",
     "http-proxy-3": "~1.20.3",
     "prom-client": "~15.1.3",
     "winston": "~3.17.0"