diff --git a/scripts/release/pyproject.toml b/scripts/release/pyproject.toml
index 68f570f..88acad1 100644
--- a/scripts/release/pyproject.toml
+++ b/scripts/release/pyproject.toml
@@ -5,7 +5,7 @@ release = [
     "uv==0.12.5",
     "hatchling==1.31.0",
     "python-semantic-release==10.6.2",
-    "GitPython==3.1.59",
+    "GitPython==3.1.61",
     "click==8.1.8",
 ]
 
diff --git a/scripts/release/uv.lock b/scripts/release/uv.lock
index f4b74d6..b27acc5 100644
--- a/scripts/release/uv.lock
+++ b/scripts/release/uv.lock
@@ -7,7 +7,7 @@ requires-python = ">=3.12"
 [manifest.dependency-groups]
 release = [
     { name = "click", specifier = "==8.1.8" },
-    { name = "gitpython", specifier = "==3.1.59" },
+    { name = "gitpython", specifier = "==3.1.61" },
     { name = "hatchling", specifier = "==1.31.0" },
     { name = "python-semantic-release", specifier = "==10.6.2" },
     { name = "uv", specifier = "==0.12.5" },
@@ -230,14 +230,14 @@ wheels = [
 
 [[package]]
 name = "gitpython"
-version = "3.1.59"
+version = "3.1.61"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "gitdb" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/ca/dc/126b28e76b24a9268ba931ad3e012f71ebdadf62fd9f17758f7074bb0b20/gitpython-3.1.59.tar.gz", hash = "sha256:0a1475cfdc38a5bfba1a3e9a4a9da52a39749ecec322b772915c019f94e5b7e4", size = 230445, upload-time = "2026-08-10T12:03:20.271Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/6f/61/3285044215fb596bf093e39ccb96ece0a1076a8ca57a61e069a6a33cdb1b/gitpython-3.1.61.tar.gz", hash = "sha256:f51c24d8c0f733a195447385f5774a5dfe8767f5acfd7994a33755644c6ecc95", size = 231680, upload-time = "2026-08-28T11:01:13.761Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ef/ed/ae57eb7d344f43f87b74b3a281ead6ec7d6394eef72a7b1dcb28dd089550/gitpython-3.1.59-py3-none-any.whl", hash = "sha256:67a82f537384578643624c8b2c531938a9b82be431663e575dcf638526631d4c", size = 220996, upload-time = "2026-08-10T12:03:18.804Z" },
+    { url = "https://files.pythonhosted.org/packages/6f/5e/49cc172da4d0578644ba37cec5cb365b1fefc603b26edea9bcac1c7f830a/gitpython-3.1.61-py3-none-any.whl", hash = "sha256:8ab28c9da863cdd9e7d7694ec46cf3e6c9a12d8a30a1acd3447aec11975d530c", size = 222118, upload-time = "2026-08-28T11:01:12.262Z" },
 ]
 
 [[package]]
diff --git a/scripts/run_semantic_release.py b/scripts/run_semantic_release.py
index 111f0f4..2c8b961 100755
--- a/scripts/run_semantic_release.py
+++ b/scripts/run_semantic_release.py
@@ -12,7 +12,7 @@
 
 REQUIRED_RUNTIME = {
     "python-semantic-release": "10.6.2",
-    "GitPython": "3.1.59",
+    "GitPython": "3.1.61",
     "click": "8.1.8",
 }
 REQUIRED_ENVIRONMENT = ("GH_TOKEN", "GITHUB_OUTPUT")
diff --git a/tests/test_release_contract.py b/tests/test_release_contract.py
index 959b4a1..127776c 100644
--- a/tests/test_release_contract.py
+++ b/tests/test_release_contract.py
@@ -157,7 +157,7 @@ def test_release_uses_the_reviewed_locked_psr_runtime() -> None:
     assert "python scripts/run_semantic_release.py" in workflow
     assert "GH_TOKEN: ${{ secrets.ADMIN_TOKEN }}" in workflow
     assert '"python-semantic-release==10.6.2"' in tools
-    assert '"GitPython==3.1.59"' in tools
+    assert '"GitPython==3.1.61"' in tools
     assert tools.count('"hatchling==1.31.0"') == 1
     assert pyproject.count('"hatchling==1.31.0"') == 1
     assert '"click==8.1.8"' in tools
@@ -166,7 +166,7 @@ def test_release_uses_the_reviewed_locked_psr_runtime() -> None:
     assert re.search(
         r'(?ms)^name = "python-semantic-release"\nversion = "10\.6\.2"$', lock
     )
-    assert re.search(r'(?ms)^name = "gitpython"\nversion = "3\.1\.59"$', lock)
+    assert re.search(r'(?ms)^name = "gitpython"\nversion = "3\.1\.61"$', lock)
     assert re.search(r'(?ms)^name = "hatchling"\nversion = "1\.31\.0"$', lock)