fix(deps): resolve Dependabot alerts (#3130)

Author: jeanduplessis

apps/storybook/package.json

@@ -17,7 +17,7 @@
     "@tanstack/react-query": "^5.90.21",
     "clsx": "^2.1.1",
     "lucide-react": "^0.552.0",
-    "next": "^16.1.6",
+    "next": "^16.2.6",
     "next-auth": "^4.24.13",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",

apps/web/package.json

@@ -32,7 +32,7 @@
     "@ai-sdk/mistral": "^3.0.24",
     "@ai-sdk/openai": "^3.0.41",
     "@ai-sdk/openai-compatible": "^2.0.35",
-    "@anthropic-ai/sdk": "^0.90.0",
+    "@anthropic-ai/sdk": "^0.95.1",
     "@aws-sdk/client-s3": "^3.1009.0",
     "@aws-sdk/s3-request-presigner": "^3.1009.0",
     "@chat-adapter/github": "4.27.0",
@@ -58,9 +58,9 @@
     "@mdxeditor/editor": "^3.55.0",
     "@mistralai/mistralai": "^1.15.1",
     "@monaco-editor/react": "^4.7.0",
-    "@next/bundle-analyzer": "^16.1.6",
-    "@next/mdx": "^16.1.6",
-    "@next/third-parties": "^16.1.6",
+    "@next/bundle-analyzer": "^16.2.6",
+    "@next/mdx": "^16.2.6",
+    "@next/third-parties": "^16.2.6",
     "@octokit/auth-app": "catalog:",
     "@octokit/oauth-methods": "^6.0.2",
     "@octokit/rest": "^22.0.1",
@@ -135,7 +135,7 @@
     "mailgun.js": "^12.7.1",
     "monaco-editor": "^0.55.1",
     "motion": "^12.36.0",
-    "next": "^16.1.6",
+    "next": "^16.2.6",
     "next-auth": "^4.24.13",
     "openai": "^6.29.0",
     "p-limit": "catalog:",
@@ -156,7 +156,7 @@
     "tailwind-merge": "^3.5.0",
     "tldts": "^7.0.28",
     "ulid": "3.0.1",
-    "uuid": "11.1.0",
+    "uuid": "^11.1.1",
     "vaul": "^1.1.2",
     "zod": "catalog:"
   },

package.json

@@ -50,20 +50,35 @@
       "@sentry/cli": "^3.3.4",
       "mdast-util-to-hast": "^13.2.1",
       "storybook": "^9.1.17",
-      "next": "^16.1.6",
+      "next": "^16.2.6",
       "preact": "10.28.3",
       "glob": ">=13.0.1",
       "esbuild": ">=0.25.0",
       "lodash": ">=4.18.1",
       "diff": ">=8.0.3",
-      "fast-xml-parser": ">=5.3.4",
-      "vite": ">=6.4.1",
+      "fast-xml-parser": ">=5.7.3",
+      "vite": ">=8.0.5 <8.0.11",
+      "dompurify": "^3.4.2",
+      "handlebars": "^4.7.9",
+      "brace-expansion": "^5.0.5",
+      "node-forge": "^1.4.0",
+      "postcss": ">=8.5.10 <8.5.14",
+      "picomatch@^2": "^2.3.2",
+      "picomatch@^4": "^4.0.4",
+      "yaml": "^2.8.4",
+      "undici@^7": "^7.25.0",
+      "path-to-regexp": "^8.4.0",
+      "ip-address": "^10.2.0",
+      "drizzle-orm": "^0.45.2",
+      "lodash-es": ">=4.18.1",
+      "@xmldom/xmldom": "^0.8.13",
       "qs": ">=6.14.1",
       "serialize-javascript": ">=7.0.3",
-      "hono": "^4.12.7",
+      "hono": "^4.12.18",
+      "@hono/node-server": "^1.19.14",
       "undici@^6": "^6.24.1",
       "lightningcss": "1.30.1",
-      "axios": ">=1.15.0 <2",
+      "axios": "^1.16.0",
       "protobufjs": "^8.0.3"
     },
     "patchedDependencies": {

pnpm-lock.yaml

@@ -21,8 +21,8 @@ catalog:
   '@workos-inc/node': ^8.9.0
   aws4fetch: ^1.0.20
   drizzle-kit: ^0.31.9
-  drizzle-orm: ^0.45.1
-  hono: ^4.12.7
+  drizzle-orm: ^0.45.2
+  hono: ^4.12.18
   jose: ^6.2.1
   jsonwebtoken: ^9.0.3
   p-limit: ^7.3.0
@@ -53,6 +53,11 @@ minimumReleaseAgeExclude:
   - 'react-native'
   - 'react-native-*'
   - '@anthropic-ai/sdk'
+  - 'fast-xml-parser'
+  - 'next'
+  - '@next/*'
+  - 'hono'
+  - '@hono/*'
 
 onlyBuiltDependencies:
   - '@swc/core'

pnpm-workspace.yaml

@@ -13,7 +13,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",
     "aws4fetch": "catalog:",
-    "fast-xml-parser": "^5.5.5",
+    "fast-xml-parser": "^5.7.3",
     "fetch-to-node": "^2.1.0",
     "jsonwebtoken": "catalog:",
     "zod": "catalog:"

services/images-mcp/package.json

@@ -3,7 +3,7 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "hono": "4.12.2",
+    "hono": "^4.12.18",
     "zod": "4.3.6"
   },
   "devDependencies": {