fix(deps): resolve 13 Dependabot security alerts (#1284)

## Summary

- Bump `next` 16.2.2 → 16.2.3 — fixes DoS via Server Components (alert
#173)
- Bump `aiohttp` ≥3.13.3 → ≥3.13.4 — fixes 9 CVEs: header injection,
SSRF, DoS, credential leak, CRLF injection (alerts #149–158)
- Bump `cryptography` 46.0.5 → 46.0.7 (transitive) — fixes buffer
overflow (alert #172)
- Bump `lupa` 2.6 → 2.7 (transitive) — fixes sandbox escape / RCE (alert
#168)

### Remaining alerts (3)

Alerts #144, #145, #146 (`fastmcp` 2.14.3 → 3.2.0) are **blocked on
upstream**: `mcp-atlassian` 0.21.1 pins `fastmcp<2.15.0,>=2.13.0`. The
CVEs affect fastmcp's OpenAPI provider and OAuth proxy — not in our code
path, but the alerts will stay open until `mcp-atlassian` releases a
version compatible with fastmcp 3.x.

## Test plan

- [x] Frontend: 614 tests pass (`npx vitest run`)
- [x] Runner: 543 tests pass (`uv run pytest tests/`)
- [ ] CI passes

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Chores**
* Bumped frontend and runtime dependency minimums to newer patch
releases.

* **Refactor**
* Code formatting and parameter/layout reflows across several modules
for readability.

* **Tests**
* Cleaned up and reformatted unit tests, removing unused imports and
improving fixture readability.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: Ambient Code Bot <bot@ambient-code.local>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: 3 people

components/frontend/package-lock.json

@@ -44,7 +44,7 @@
     "highlight.js": "^11.11.1",
     "lucide-react": "^0.542.0",
     "marked": "^17.0.4",
-    "next": "16.2.2",
+    "next": "16.2.3",
     "next-themes": "^0.4.6",
     "python-struct": "^1.1.3",
     "radix-ui": "^1.4.3",

components/frontend/package.json

@@ -63,7 +63,9 @@ async def switch_model(request: Request):
         return await _perform_model_switch(bridge, context, new_model, previous_model)
 
 
-async def _perform_model_switch(bridge, context, new_model: str, previous_model: str) -> dict:
+async def _perform_model_switch(
+    bridge, context, new_model: str, previous_model: str
+) -> dict:
     """Execute the model switch: update env, rebuild adapter, emit event."""
     logger.info(f"Switching model from '{previous_model}' to '{new_model}'")
 

components/runners/ambient-runner/ambient_runner/endpoints/model.py

@@ -61,7 +61,9 @@ def initialize(
 
         try:
             mlflow.set_tracking_uri(tracking_uri)
-            exp_name = os.getenv("MLFLOW_EXPERIMENT_NAME", "ambient-code-sessions").strip()
+            exp_name = os.getenv(
+                "MLFLOW_EXPERIMENT_NAME", "ambient-code-sessions"
+            ).strip()
             if not exp_name:
                 exp_name = "ambient-code-sessions"
             mlflow.set_experiment(exp_name)
@@ -92,7 +94,13 @@ def initialize(
             self.session_id,
             exp_name,
         )
-        _ = (prompt, model, workflow_url, workflow_branch, workflow_path)  # reserved for tags
+        _ = (
+            prompt,
+            model,
+            workflow_url,
+            workflow_branch,
+            workflow_path,
+        )  # reserved for tags
         return True
 
     def _apply_mask(self, value: Any) -> Any:

components/runners/ambient-runner/ambient_runner/mlflow_observability.py

@@ -55,15 +55,16 @@
     resolve_message_mask_fn,
 )
 
-# Alias for tests and legacy imports
-_privacy_masking_function = privacy_mask_message_data
 from ambient_runner.platform.security_utils import (
     sanitize_exception_message,
     sanitize_model_name,
     validate_and_sanitize_for_logging,
     with_sync_timeout,
 )
 
+# Alias for tests and legacy imports
+_privacy_masking_function = privacy_mask_message_data
+
 # Canonical token key names used across usage dicts from the Claude Agent SDK.
 _TOKEN_KEYS = (
     "input_tokens",

components/runners/ambient-runner/ambient_runner/observability.py

@@ -13,7 +13,7 @@ dependencies = [
   "uvicorn[standard]>=0.41.0",
   "ag-ui-protocol>=0.1.13",
   "pydantic>=2.12.5",
-  "aiohttp>=3.13.3",
+  "aiohttp>=3.13.4",
   "requests>=2.32.5",
   "pyjwt>=2.11.0",
 ]

components/runners/ambient-runner/pyproject.toml

@@ -1,12 +1,8 @@
 """Tests for MCP config loading with custom/project/disabled server merging."""
 
 import json
-import os
-import tempfile
 from pathlib import Path
-from unittest.mock import patch
 
-import pytest
 
 from ambient_runner.platform.config import load_mcp_config
 from ambient_runner.platform.context import RunnerContext
@@ -31,7 +27,10 @@ def test_loads_from_default_file(self, tmp_path: Path):
             json.dumps(
                 {
                     "mcpServers": {
-                        "context7": {"type": "http", "url": "https://mcp.context7.com/mcp"},
+                        "context7": {
+                            "type": "http",
+                            "url": "https://mcp.context7.com/mcp",
+                        },
                         "webfetch": {"command": "uvx", "args": ["mcp-server-fetch"]},
                     }
                 }
@@ -51,7 +50,10 @@ def test_merges_custom_session_servers(self, tmp_path: Path):
             json.dumps(
                 {
                     "mcpServers": {
-                        "context7": {"type": "http", "url": "https://mcp.context7.com/mcp"},
+                        "context7": {
+                            "type": "http",
+                            "url": "https://mcp.context7.com/mcp",
+                        },
                     }
                 }
             )
@@ -76,7 +78,15 @@ def test_merges_custom_session_servers(self, tmp_path: Path):
     def test_merges_project_level_servers(self, tmp_path: Path):
         """Project-level custom servers should be merged with defaults."""
         mcp_file = tmp_path / ".mcp.json"
-        mcp_file.write_text(json.dumps({"mcpServers": {"default-server": {"type": "http", "url": "https://default.com"}}}))
+        mcp_file.write_text(
+            json.dumps(
+                {
+                    "mcpServers": {
+                        "default-server": {"type": "http", "url": "https://default.com"}
+                    }
+                }
+            )
+        )
 
         project_mcp = {
             "custom": {
@@ -127,8 +137,14 @@ def test_disables_default_servers(self, tmp_path: Path):
             json.dumps(
                 {
                     "mcpServers": {
-                        "context7": {"type": "http", "url": "https://mcp.context7.com/mcp"},
-                        "deepwiki": {"type": "http", "url": "https://mcp.deepwiki.com/mcp"},
+                        "context7": {
+                            "type": "http",
+                            "url": "https://mcp.context7.com/mcp",
+                        },
+                        "deepwiki": {
+                            "type": "http",
+                            "url": "https://mcp.deepwiki.com/mcp",
+                        },
                         "webfetch": {"command": "uvx", "args": ["mcp-server-fetch"]},
                     }
                 }
@@ -180,7 +196,13 @@ def test_returns_none_when_all_disabled(self, tmp_path: Path):
         """Should return None when all servers are disabled."""
         mcp_file = tmp_path / ".mcp.json"
         mcp_file.write_text(
-            json.dumps({"mcpServers": {"only-server": {"type": "http", "url": "https://only.com"}}})
+            json.dumps(
+                {
+                    "mcpServers": {
+                        "only-server": {"type": "http", "url": "https://only.com"}
+                    }
+                }
+            )
         )
         custom = {"disabled": ["only-server"]}
         ctx = _make_context(
@@ -195,7 +217,11 @@ def test_returns_none_when_all_disabled(self, tmp_path: Path):
     def test_handles_invalid_custom_json(self, tmp_path: Path):
         """Should handle invalid JSON in CUSTOM_MCP_SERVERS gracefully."""
         mcp_file = tmp_path / ".mcp.json"
-        mcp_file.write_text(json.dumps({"mcpServers": {"s1": {"type": "http", "url": "https://s1.com"}}}))
+        mcp_file.write_text(
+            json.dumps(
+                {"mcpServers": {"s1": {"type": "http", "url": "https://s1.com"}}}
+            )
+        )
         ctx = _make_context(
             {
                 "MCP_CONFIG_FILE": str(mcp_file),