From 1696788dd7cbf24b97d0ee6b9f3bd799518d1200 Mon Sep 17 00:00:00 2001
From: "aikido-autofix[bot]"
 <119856028+aikido-autofix[bot]@users.noreply.github.com>
Date: Thu, 5 Feb 2026 23:35:35 +0000
Subject: [PATCH] fix(security): update dependencies

---
 package-lock.json |  5 +++--
 package.json      | 10 ++++++----
 2 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index f033e14d97..668e8cb73c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -24,7 +24,7 @@
 				"@grpc/grpc-js": "^1.9.15",
 				"@grpc/reflection": "^1.0.4",
 				"@mistralai/mistralai": "^1.5.0",
-				"@modelcontextprotocol/sdk": "^1.25.1",
+				"@modelcontextprotocol/sdk": "^1.26.0",
 				"@opentelemetry/api": "^1.9.0",
 				"@opentelemetry/core": "^2.1.0",
 				"@opentelemetry/exporter-logs-otlp-grpc": "^0.56.0",
@@ -61,7 +61,7 @@
 				"chrome-launcher": "^1.1.2",
 				"clone-deep": "^4.0.1",
 				"default-shell": "^2.2.0",
-				"diff": "^5.2.0",
+				"diff": "^5.2.2",
 				"exceljs": "^4.4.0",
 				"execa": "^9.5.2",
 				"fast-deep-equal": "^3.1.3",
@@ -1575,6 +1575,7 @@
 			"integrity": "sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==",
 			"dev": true,
 			"license": "MIT",
+			"peer": true,
 			"dependencies": {
 				"@babel/code-frame": "^7.29.0",
 				"@babel/generator": "^7.29.0",
diff --git a/package.json b/package.json
index 6431449db1..1b82dd2a96 100644
--- a/package.json
+++ b/package.json
@@ -512,7 +512,7 @@
 		"@grpc/grpc-js": "^1.9.15",
 		"@grpc/reflection": "^1.0.4",
 		"@mistralai/mistralai": "^1.5.0",
-		"@modelcontextprotocol/sdk": "^1.25.1",
+		"@modelcontextprotocol/sdk": "^1.26.0",
 		"@opentelemetry/api": "^1.9.0",
 		"@opentelemetry/core": "^2.1.0",
 		"@opentelemetry/exporter-logs-otlp-grpc": "^0.56.0",
@@ -549,7 +549,7 @@
 		"chrome-launcher": "^1.1.2",
 		"clone-deep": "^4.0.1",
 		"default-shell": "^2.2.0",
-		"diff": "^5.2.0",
+		"diff": "^5.2.2",
 		"exceljs": "^4.4.0",
 		"execa": "^9.5.2",
 		"fast-deep-equal": "^3.1.3",
@@ -598,9 +598,11 @@
 	},
 	"overrides": {
 		"tar-fs": ">=3.1.1",
-		"tar": "^7.5.2",
 		"vite": "^7.1.11",
-		"js-yaml": "^4.1.1"
+		"js-yaml": "^4.1.1",
+		"tar": "7.5.7",
+		"fast-xml-parser@<=5.3.4": "5.3.4",
+		"hono@<=4.11.7": "4.11.7"
 	},
 	"c8": {
 		"reporter": [