More security stuff (#1641)

* bump eslint

Removes hono dependency which has security alerts attached

* pin @modelcontextprotocol/sdk to at least 1.29.0 (fix honoe vulnability warning)

* remove wierd cli dependency

* bump node-forge further

* bump tar

* changeset

* versions

Author: josephjclark

package.json

@@ -37,7 +37,7 @@
     "@types/chai": "^5.2.2",
     "@types/mocha": "^10.0.10",
     "chokidar-cli": "^3.0.0",
-    "eslint": "9.26.0",
+    "eslint": "10.2.0",
     "globals": "^17.2.0",
     "lodash": "^4.18.1",
     "mocha": "^10.7.3",

packages/ibipimo/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @openfn/language-ibipimo
 
+## 1.0.5
+
+### Patch Changes
+
+- cf6a24d: Security updates
+
 ## 1.0.4 - 07 April 2026
 
 ### Patch Changes

packages/ibipimo/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openfn/language-ibipimo",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "OpenFn ibipimo adaptor",
   "type": "module",
   "exports": {
@@ -32,7 +32,6 @@
     "@openfn/language-common": "workspace:*"
   },
   "devDependencies": {
-    "@openfn/cli": "^1.0.0",
     "assertion-error": "2.0.0",
     "chai": "4.3.6",
     "deep-eql": "4.1.1",

packages/primero/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @openfn/language-primero
 
+## 4.0.12
+
+### Patch Changes
+
+- cf6a24d: Security updates
+
 ## 4.0.11 - 07 April 2026
 
 ### Patch Changes

packages/primero/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@openfn/language-primero",
   "label": "Primero",
-  "version": "4.0.11",
+  "version": "4.0.12",
   "description": "A UNICEF Primero language package for use with Open Function",
   "exports": {
     ".": {
@@ -43,7 +43,7 @@
     "assertion-error": "2.0.0",
     "chai": "4.3.6",
     "deep-eql": "4.1.1",
-    "eslint": "9.26.0",
+    "eslint": "10.2.0",
     "eslint-config-prettier": "8.5.0",
     "eslint-plugin-prettier": "4.2.1",
     "nock": "12.0.3",

packages/sftp/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @openfn/language-sftp
 
+## 3.0.12
+
+### Patch Changes
+
+- cf6a24d: Security updates
+
 ## 3.0.11 - 07 April 2026
 
 ### Patch Changes

packages/sftp/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@openfn/language-sftp",
   "label": "SFTP",
-  "version": "3.0.11",
+  "version": "3.0.12",
   "description": "OpenFn adaptor for SFTP",
   "homepage": "https://docs.openfn.org",
   "repository": {
@@ -42,7 +42,7 @@
     "assertion-error": "2.0.0",
     "chai": "4.3.6",
     "deep-eql": "4.1.1",
-    "eslint": "9.26.0",
+    "eslint": "10.2.0",
     "eslint-config-airbnb-base": "15.0.0",
     "eslint-plugin-import": "2.26.0",
     "nock": "12.0.3",