chore(deps): update build and runtime dependencies

CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to `@tangle-network/agent-eval` and its sibling `agent-eval-
 
 ---
 
+## [0.126.7] - 2026-07-24 - dependency security refresh
+
+### Changed
+
+- Updated Ax, Hono, Zod, OpenAPI, Biome, Node types, lint-staged, and Vitest to their current compatible releases.
+- Pinned patched Vite, esbuild, PostCSS, and WebSocket transitive versions; the npm dependency audit now reports zero known vulnerabilities.
+
 ## [0.126.6] - 2026-07-24 - optimizer model provenance
 
 ### Added

clients/python/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agent-eval-rpc"
-version = "0.126.6"
+version = "0.126.7"
 description = "Python RPC client, official optimizer bridge, and DSPy metric adapter for @tangle-network/agent-eval."
 readme = "README.md"
 requires-python = ">=3.10"

clients/python/src/agent_eval_rpc/__init__.py

@@ -53,7 +53,7 @@
 try:
     __version__ = version("agent-eval-rpc")
 except PackageNotFoundError:
-    __version__ = "0.126.6"
+    __version__ = "0.126.7"
 
 __all__ = [
     "Client",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-eval",
-  "version": "0.126.6",
+  "version": "0.126.7",
   "description": "Evaluate and improve AI agents from runs, traces, judges, and feedback. Compare candidates, cluster failures, measure lift, and gate releases.",
   "homepage": "https://github.com/tangle-network/agent-eval#readme",
   "repository": {
@@ -160,30 +160,36 @@
     "verify:package": "pnpm run check:skill && node scripts/verify-package-exports.mjs"
   },
   "dependencies": {
-    "@asteasolutions/zod-to-openapi": "^8.5.0",
-    "@ax-llm/ax": "^23.0.1",
-    "@hono/node-server": "^2.0.0",
+    "@asteasolutions/zod-to-openapi": "^9.1.0",
+    "@ax-llm/ax": "^23.0.5",
+    "@hono/node-server": "^2.0.11",
     "@tangle-network/agent-core": "^0.4.20",
     "@tangle-network/agent-interface": "^0.32.0",
     "@tangle-network/tcloud": "^0.4.14",
-    "hono": "^4.12.30",
-    "zod": "^4.3.6"
+    "hono": "^4.12.32",
+    "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@biomejs/biome": "^2.4.15",
-    "@types/node": "^25.6.0",
+    "@biomejs/biome": "^2.5.5",
+    "@types/node": "^26.1.1",
     "husky": "^9.1.7",
-    "lint-staged": "^17.0.5",
-    "openapi3-ts": "^4.5.0",
+    "lint-staged": "^17.2.0",
+    "openapi3-ts": "^4.6.0",
     "tsup": "^8.0.0",
-    "typescript": "^5.7.0",
-    "vitest": "^3.0.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.10",
     "yaml": "2.9.0"
   },
   "pnpm": {
     "minimumReleaseAge": 4320,
+    "minimumReleaseAgeExclude": [
+      "esbuild",
+      "vite"
+    ],
     "overrides": {
-      "postcss@<8.5.10": "^8.5.10",
+      "esbuild@>=0.27.3 <0.28.1": "^0.28.1",
+      "postcss@<8.5.18": "^8.5.18",
+      "vite@>=7.0.0 <=7.3.4": "^7.3.5",
       "ws@>=8.0.0 <8.21.0": "^8.21.0"
     }
   },