diff --git a/ng-dev/package.json b/ng-dev/package.json
index 24167cdf6..d171e961f 100644
--- a/ng-dev/package.json
+++ b/ng-dev/package.json
@@ -65,7 +65,7 @@
     "tsx": "4.21.0",
     "typescript": "6.0.3",
     "utf-8-validate": "6.0.6",
-    "which": "6.0.1",
+    "which": "7.0.0",
     "yaml": "2.8.4",
     "yargs": "18.0.0",
     "zod": "^4.3.6"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e9952a368..3219f1411 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -666,8 +666,8 @@ importers:
         specifier: 6.0.6
         version: 6.0.6
       which:
-        specifier: 6.0.1
-        version: 6.0.1
+        specifier: 7.0.0
+        version: 7.0.0
       yaml:
         specifier: 2.8.4
         version: 2.8.4
@@ -5979,6 +5979,11 @@ packages:
     engines: {node: ^20.17.0 || >=22.9.0}
     hasBin: true
 
+  which@7.0.0:
+    resolution: {integrity: sha512-RancgH2dmbLdHl6LRhEqvklWMgl/Hdnun0Y90KhBOLkMefg8Qa7/Zel8Sm+8HEcP6DEjzsWzpkuBQEZok58isA==}
+    engines: {node: ^22.22.2 || ^24.15.0 || >=26.0.0}
+    hasBin: true
+
   widest-line@3.1.0:
     resolution: {integrity: sha512-NsmoXalsWVDMGupxZ5R08ka9flZjjiLvHVAWYOKtiKM8ujtZWr9cRffak+uSE48+Ob8ObalXpwyeUiyDD6QFgg==}
     engines: {node: '>=8'}
@@ -12163,6 +12168,11 @@ snapshots:
   which@6.0.1:
     dependencies:
       isexe: 4.0.0
+    optional: true
+
+  which@7.0.0:
+    dependencies:
+      isexe: 4.0.0
 
   widest-line@3.1.0:
     dependencies: