fix(security): update dependencies

package.json

@@ -95,7 +95,6 @@
       "@n8n/typeorm>@sentry/node": "catalog:",
       "@types/node": "^20.17.50",
       "chokidar": "4.0.3",
-      "esbuild": "^0.25.0",
       "expr-eval@2.0.2": "npm:expr-eval-fork@3.0.0",
       "prebuild-install": "7.1.3",
       "pug": "^3.0.3",
@@ -110,10 +109,8 @@
       "date-fns": "2.30.0",
       "date-fns-tz": "2.0.0",
       "flatted": "3.4.2",
-      "form-data": "4.0.4",
       "nodemailer": "7.0.11",
       "validator": "13.15.26",
-      "js-yaml": "4.1.1",
       "lodash": "4.18.0",
       "body-parser": "2.2.1",
       "ajv@6": "6.14.0",
@@ -132,7 +129,6 @@
       "@smithy/config-resolver": ">=4.4.0",
       "word-wrap@<=1.2.4": "1.2.4",
       "minimatch@<=5.1.8": "5.1.8",
-      "multer": "2.1.1",
       "express-rate-limit@<=8.2.2": "8.2.2",
       "@microsoft/api-extractor@<=7.58.1": "7.58.1",
       "lodash-es": "4.18.1",
@@ -151,7 +147,6 @@
       "openai": "6.21.0",
       "uuid@<=11.1.1": "11.1.1",
       "langsmith@<=0.6.0": "0.6.0",
-      "protobufjs@<=7.5.8": "7.5.8",
       "brace-expansion@<=2.1.0": "2.1.0",
       "tmp": "0.2.6",
       "qs@<=6.15.2": "6.15.2",
@@ -160,7 +155,12 @@
       "tar": "7.5.16",
       "@tootallnate/once@<=2.0.1": "2.0.1",
       "hono@<=4.12.25": "4.12.25",
-      "vue-i18n@<=11.4.4": "11.4.4"
+      "protobufjs@<=7.6.3": "7.6.3",
+      "multer": "2.2.0",
+      "js-yaml": "4.2.0",
+      "vue-i18n@<=11.4.4": "11.4.4",
+      "esbuild": "0.28.1",
+      "form-data": "4.0.6"
     },
     "patchedDependencies": {
       "bull@4.16.4": "patches/bull@4.16.4.patch",

packages/@n8n/scan-community-package/package.json

@@ -13,6 +13,6 @@
     "eslint": "catalog:",
     "fast-glob": "catalog:",
     "semver": "^7.5.4",
-    "tmp": "0.2.6"
+    "tmp": "0.2.7"
   }
 }

packages/@n8n/task-runner/package.json

@@ -46,7 +46,7 @@
     "n8n-core": "workspace:*",
     "n8n-workflow": "workspace:*",
     "nanoid": "catalog:",
-    "ws": "8.20.1"
+    "ws": "8.21.0"
   },
   "devDependencies": {
     "@n8n/typescript-config": "workspace:*",

packages/cli/package.json

@@ -141,7 +141,7 @@
     "formidable": "3.5.4",
     "handlebars": "4.7.9",
     "helmet": "8.1.0",
-    "http-proxy-middleware": "^3.0.5",
+    "http-proxy-middleware": "^3.0.7",
     "infisical-node": "1.3.0",
     "ioredis": "5.3.2",
     "isbot": "3.6.13",

pnpm-workspace.yaml

@@ -21,7 +21,7 @@ catalog:
   '@types/uuid': ^10.0.0
   '@types/xml2js': ^0.4.14
   '@vitest/coverage-v8': 3.2.4
-  axios: 1.16.1
+  axios: 1.18.0
   basic-auth: 2.0.1
   callsites: 3.1.0
   chokidar: 4.0.3