diff --git a/package-lock.json b/package-lock.json
index 13a0c646..1527131d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11,7 +11,7 @@
       "dependencies": {
         "@octokit/rest": "^22.0.1",
         "aigle": "^1.14.1",
-        "basic-auth": "^2.0.1",
+        "basic-auth": "^3.0.0",
         "body-parser": "^2.3.0",
         "bunyan": "^1.8.1",
         "codeowners-utils": "^1.0.2",
@@ -838,15 +838,12 @@
       }
     },
     "node_modules/basic-auth": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/basic-auth/-/basic-auth-2.0.1.tgz",
-      "integrity": "sha512-NF+epuEdnUYVlGuhaxbbq+dvJttwLnGY+YixlXlME5KpQ5W3CnXA5cVTneY3SPbPDRkcjMbifrwmFYcClgOZeg==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/basic-auth/-/basic-auth-3.0.0.tgz",
+      "integrity": "sha512-B63UKsSJ2atgiSuCJvzAjpfAdFY6mYT3C0vZFlLV/81Rw2/VCs6Tp29UzkpKETB3qA2cHwuU1LjBnhUQ0WkPKw==",
       "license": "MIT",
-      "dependencies": {
-        "safe-buffer": "5.1.2"
-      },
       "engines": {
-        "node": ">= 0.8"
+        "node": ">=22"
       }
     },
     "node_modules/before-after-hook": {
@@ -4960,12 +4957,6 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/safe-buffer": {
-      "version": "5.1.2",
-      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
-      "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==",
-      "license": "MIT"
-    },
     "node_modules/safe-json-stringify": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/safe-json-stringify/-/safe-json-stringify-1.2.0.tgz",
diff --git a/package.json b/package.json
index b894f540..dc84d399 100644
--- a/package.json
+++ b/package.json
@@ -16,7 +16,7 @@
   "dependencies": {
     "@octokit/rest": "^22.0.1",
     "aigle": "^1.14.1",
-    "basic-auth": "^2.0.1",
+    "basic-auth": "^3.0.0",
     "body-parser": "^2.3.0",
     "bunyan": "^1.8.1",
     "codeowners-utils": "^1.0.2",