chore: update vulnerable dependencies

Author: elkaix

apps/pythinker-code/dist-web/.web-bundle-manifest.json

@@ -1,4 +1,4 @@
 {
-  "sourceHash": "9930975e53f81fd5bfabfd82f552eea8bcf47a69cdd20d37b5e2b976f77d295f",
+  "sourceHash": "26e94e9307e7288ff254f25ed8c697dd2db0cccd34ccc557b38ef3819be6dc14",
   "sourceFileCount": 421
 }

packages/agent-gateway/package.json

@@ -33,7 +33,7 @@
     "@pymodel/pythinker-code-oauth": "workspace:^",
     "@pymodel/transcript": "workspace:^",
     "bcryptjs": "^2.4.3",
-    "fastify": "^5.1.0",
+    "fastify": "^5.12.1",
     "pino": "^9.5.0",
     "semver": "^7.7.4",
     "smol-toml": "^1.6.1",

pnpm-lock.yaml

@@ -13,6 +13,7 @@ catalog:
 overrides:
   "@babel/core@<7.29.6": "^7.29.6"
   "@protobufjs/utf8@<1.1.2": "1.1.2"
+  "@xmldom/xmldom@>=0.8 <0.8.15": "0.8.15"
   "body-parser@>=2 <2.3.0": "2.3.0"
   "brace-expansion@<1.1.18": "1.1.18"
   "browserslist@<4.28.7": "4.28.8"
@@ -21,7 +22,7 @@ overrides:
   "diff@>=6.0.0 <8.0.3": "^8.0.3"
   "dompurify@<3.4.14": "3.4.14"
   "esbuild@<=0.24.2": "0.25.12"
-  "fast-uri@>=3 <3.1.5": "3.1.5"
+  "fast-uri@>=3 <3.1.6": "3.1.6"
   "find-my-way@>=9 <9.9.0": "9.9.0"
   "ip-address@>=10 <10.5.0": "10.5.0"
   "js-yaml@>=3 <3.15.1": "3.15.1"
@@ -33,7 +34,7 @@ overrides:
   "protobufjs@>=7 <7.6.5": "7.6.5"
   "pythinker-code>@tailwindcss/vite": "4.1.18"
   "pythinker-code>tailwindcss": "4.1.18"
-  "qs@>=6 <6.15.3": "6.15.3"
+  "qs@>=6 <6.16.0": "6.16.0"
   "react-router@>=7 <7.18.2": "7.18.2"
   "serialize-javascript@<7.0.5": "^7.0.5"
   "ssh2@1.17.0>cpu-features": "-"