diff --git a/hermetic_build/common/requirements.in b/hermetic_build/common/requirements.in
index 395bee76c6..5a50ea67fc 100644
--- a/hermetic_build/common/requirements.in
+++ b/hermetic_build/common/requirements.in
@@ -1,4 +1,4 @@
 black==26.3.1
-GitPython==3.1.43
+GitPython==3.1.49
 parameterized==0.9.0
 PyYAML==6.0.2
\ No newline at end of file
diff --git a/hermetic_build/common/requirements.txt b/hermetic_build/common/requirements.txt
index 6e779a0314..b6420a169a 100644
--- a/hermetic_build/common/requirements.txt
+++ b/hermetic_build/common/requirements.txt
@@ -41,9 +41,9 @@ gitdb==4.0.11 \
     --hash=sha256:81a3407ddd2ee8df444cbacea00e2d038e40150acfa3001696fe0dcf1d3adfa4 \
     --hash=sha256:bf5421126136d6d0af55bc1e7c1af1c397a34f5b7bd79e776cd3e89785c2b04b
     # via gitpython
-gitpython==3.1.43 \
-    --hash=sha256:35f314a9f878467f5453cc1fee295c3e18e52f1b99f10f6cf5b1682e968a9e7c \
-    --hash=sha256:eec7ec56b92aad751f9912a73404bc02ba212a23adb2c7098ee668417051a1ff
+gitpython==3.1.49 \
+    --hash=sha256:024b0422d7f84d15cd794844e029ffebd4c5d42a7eb9b936b458697ef550a02c \
+    --hash=sha256:42f9399c9eb33fc581014bedd76049dfbaf6375aa2a5754575966387280315e1
     # via -r requirements.in
 mypy-extensions==1.0.0 \
     --hash=sha256:4392f6c0eb8a5668a69e23d168ffa70f0be9ccfd32b5cc2d26a34ae5b844552d \