fix(security): update dependencies

package-lock.json

@@ -24,7 +24,7 @@
 				"@grpc/grpc-js": "^1.9.15",
 				"@grpc/reflection": "^1.0.4",
 				"@mistralai/mistralai": "^1.5.0",
-				"@modelcontextprotocol/sdk": "^1.25.1",
+				"@modelcontextprotocol/sdk": "^1.26.0",
 				"@opentelemetry/api": "^1.9.0",
 				"@opentelemetry/core": "^2.1.0",
 				"@opentelemetry/exporter-logs-otlp-grpc": "^0.56.0",
@@ -61,7 +61,7 @@
 				"chrome-launcher": "^1.1.2",
 				"clone-deep": "^4.0.1",
 				"default-shell": "^2.2.0",
-				"diff": "^5.2.0",
+				"diff": "^5.2.2",
 				"exceljs": "^4.4.0",
 				"execa": "^9.5.2",
 				"fast-deep-equal": "^3.1.3",
@@ -1575,6 +1575,7 @@
 			"integrity": "sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==",
 			"dev": true,
 			"license": "MIT",
+			"peer": true,
 			"dependencies": {
 				"@babel/code-frame": "^7.29.0",
 				"@babel/generator": "^7.29.0",

package.json

@@ -512,7 +512,7 @@
 		"@grpc/grpc-js": "^1.9.15",
 		"@grpc/reflection": "^1.0.4",
 		"@mistralai/mistralai": "^1.5.0",
-		"@modelcontextprotocol/sdk": "^1.25.1",
+		"@modelcontextprotocol/sdk": "^1.26.0",
 		"@opentelemetry/api": "^1.9.0",
 		"@opentelemetry/core": "^2.1.0",
 		"@opentelemetry/exporter-logs-otlp-grpc": "^0.56.0",
@@ -549,7 +549,7 @@
 		"chrome-launcher": "^1.1.2",
 		"clone-deep": "^4.0.1",
 		"default-shell": "^2.2.0",
-		"diff": "^5.2.0",
+		"diff": "^5.2.2",
 		"exceljs": "^4.4.0",
 		"execa": "^9.5.2",
 		"fast-deep-equal": "^3.1.3",
@@ -598,9 +598,11 @@
 	},
 	"overrides": {
 		"tar-fs": ">=3.1.1",
-		"tar": "^7.5.2",
 		"vite": "^7.1.11",
-		"js-yaml": "^4.1.1"
+		"js-yaml": "^4.1.1",
+		"tar": "7.5.7",
+		"fast-xml-parser@<=5.3.4": "5.3.4",
+		"hono@<=4.11.7": "4.11.7"
 	},
 	"c8": {
 		"reporter": [