diff --git a/apps/client/package.json b/apps/client/package.json
index feba0ef1b..bd6585f1f 100644
--- a/apps/client/package.json
+++ b/apps/client/package.json
@@ -43,7 +43,7 @@
     "i18next-http-backend": "3.0.6",
     "jotai": "2.18.1",
     "jotai-optics": "0.4.0",
-    "js-cookie": "3.0.5",
+    "js-cookie": "3.0.7",
     "jwt-decode": "4.0.0",
     "katex": "0.16.40",
     "lowlight": "3.3.0",
diff --git a/package.json b/package.json
index 54a9d3518..02216ab65 100644
--- a/package.json
+++ b/package.json
@@ -103,7 +103,7 @@
       "glob": "13.0.6",
       "ws": "8.20.1",
       "dompurify": "3.4.1",
-      "tmp": "0.2.5",
+      "tmp": "0.2.6",
       "hono": "4.12.18",
       "mermaid": "11.15.0",
       "nanoid@^3": "3.3.8",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 355154171..05c629436 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -10,7 +10,7 @@ overrides:
   glob: 13.0.6
   ws: 8.20.1
   dompurify: 3.4.1
-  tmp: 0.2.5
+  tmp: 0.2.6
   hono: 4.12.18
   mermaid: 11.15.0
   nanoid@^3: 3.3.8
@@ -342,8 +342,8 @@ importers:
         specifier: 0.4.0
         version: 0.4.0(jotai@2.18.1(@babel/core@7.28.5)(@babel/template@7.27.2)(@types/react@18.3.12)(react@18.3.1))(optics-ts@2.4.1)
       js-cookie:
-        specifier: 3.0.5
-        version: 3.0.5
+        specifier: 3.0.7
+        version: 3.0.7
       jwt-decode:
         specifier: 4.0.0
         version: 4.0.0
@@ -7544,9 +7544,9 @@ packages:
     resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==}
     engines: {node: '>=10'}
 
-  js-cookie@3.0.5:
-    resolution: {integrity: sha512-cEiJEAEoIbWfCZYKWhVwFuvPX1gETRYPw6LlaTKoxD3s2AkXzkCjnp6h0V77ozyqj0jakteJ4YqDJT830+lVGw==}
-    engines: {node: '>=14'}
+  js-cookie@3.0.7:
+    resolution: {integrity: sha512-z/wZZgDrkNV1eA0ULjM/F9/50Ya8fbzgKneSpoPsXSGd0KnpdtHfOZWK+GcwLk+EZbS4F9RBhU+K2RgzuDaItw==}
+    engines: {node: '>=20'}
 
   js-tiktoken@1.0.21:
     resolution: {integrity: sha512-biOj/6M5qdgx5TKjDnFT1ymSpM5tbd3ylwDtrQvFQSu0Z7bBYko2dF+W/aUkXUPuk6IVpRxk/3Q2sHOzGlS36g==}
@@ -9657,8 +9657,8 @@ packages:
   tmp-promise@3.0.3:
     resolution: {integrity: sha512-RwM7MoPojPxsOBYnyd2hy0bxtIlVrihNs9pj5SUvY8Zz1sQcQG2tG1hSr8PDxfgEB8RNKDhqbIlroIarSNDNsQ==}
 
-  tmp@0.2.5:
-    resolution: {integrity: sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==}
+  tmp@0.2.6:
+    resolution: {integrity: sha512-5sJPdPjfI5Kx+qbrDesxkglRBxW//g7hCsqspEjwkewGvBMGIKMOTKzLt1hFVJzyadba3lDUN20O9qhvbQUSTA==}
     engines: {node: '>=14.14'}
 
   tmpl@1.0.5:
@@ -18286,7 +18286,7 @@ snapshots:
 
   joycon@3.1.1: {}
 
-  js-cookie@3.0.5: {}
+  js-cookie@3.0.7: {}
 
   js-tiktoken@1.0.21:
     dependencies:
@@ -18992,7 +18992,7 @@ snapshots:
       semver: 7.7.4
       string-width: 4.2.3
       tar-stream: 2.2.0
-      tmp: 0.2.5
+      tmp: 0.2.6
       tree-kill: 1.2.2
       tsconfig-paths: 4.2.0
       tslib: 2.8.1
@@ -20615,9 +20615,9 @@ snapshots:
 
   tmp-promise@3.0.3:
     dependencies:
-      tmp: 0.2.5
+      tmp: 0.2.6
 
-  tmp@0.2.5: {}
+  tmp@0.2.6: {}
 
   tmpl@1.0.5: {}