chore(deps): audit and update dependencies, raise security override f…

…loors, collapse duplicate versions (#9226) * chore(deps): audit and update dependencies, raise security override floors, collapse duplicate versions * chore(deps): revert bumps with behavior changes found in regression review * chore(deps): hold desktop electron/playwright and clack at staging versions
waleedlatif1 · Oct 20, 2026 · Oct 19, 2026 · Oct 19, 2026 · Oct 19, 2026 · Oct 19, 2026
commit 324e400fd28d1ab8d68926b970cbb591138e1c66
diff --git a/AGENTS.md b/AGENTS.md
diff --git a/AGENTS.md b/AGENTS.md
@@ -42,7 +42,7 @@
     "@xterm/headless": "6.0.0",
     "electron-updater": "6.8.9",
     "micromatch": "4.0.8",
-    "safe-regex2": "5.1.0",
+    "safe-regex2": "5.1.2",
     "pdf-lib": "1.17.1"
   },
   "devDependencies": {
@@ -51,19 +51,19 @@
     "@sim/emcn": "workspace:*",
     "@sim/tsconfig": "workspace:*",
     "@types/micromatch": "4.0.10",
-    "@types/node": "24.2.1",
+    "@types/node": "24.19.2",
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "electron": "43.5.0",
     "electron-builder": "26.15.3",
-    "esbuild": "0.28.1",
+    "esbuild": "0.28.2",
     "jsdom": "^26.0.0",
-    "postcss": "^8",
+    "postcss": "^8.5.30",
     "postcss-load-config": "6.0.1",
     "postgres": "^3.4.5",
     "react": "19.2.4",
     "react-dom": "19.2.4",
     "typescript": "^7.0.2",
-    "vitest": "^5.0.1"
+    "vitest": "^5.0.4"
   }
 }
@@ -27,9 +27,9 @@
     "@sim/logger": "workspace:*",
     "@sim/utils": "workspace:*",
     "@sim/workflow-renderer": "workspace:*",
-    "@xyflow/react": "12.11.3",
+    "@xyflow/react": "12.12.0",
     "class-variance-authority": "^0.7.1",
-    "drizzle-orm": "^0.45.2",
+    "drizzle-orm": "^0.45.4",
     "fumadocs-core": "16.8.5",
     "fumadocs-mdx": "14.3.2",
     "fumadocs-openapi": "10.8.1",
@@ -39,21 +39,22 @@
     "react": "19.2.4",
     "react-dom": "19.2.4",
     "remark-breaks": "^4.0.0",
-    "shiki": "4.3.1",
+    "remark-gfm": "4.0.1",
+    "shiki": "4.5.0",
+    "streamdown": "2.5.0",
     "framer-motion": "^12.5.0",
     "zod": "4.3.6"
   },
   "devDependencies": {
     "@sim/tsconfig": "workspace:*",
-    "@tailwindcss/postcss": "^4.0.12",
-    "@types/node": "24.2.1",
-    "@types/react": "^19.1.2",
-    "@types/react-dom": "^19.0.4",
-    "gray-matter": "^4.0.3",
-    "jsdom": "^26.0.0",
-    "postcss": "^8.5.3",
-    "tailwindcss": "^4.0.12",
+    "@tailwindcss/postcss": "^4.3.3",
+    "@types/node": "24.19.2",
+    "@types/react": "^19",
+    "@types/react-dom": "^19",
+    "gray-matter": "4.0.3",
+    "postcss": "^8.5.30",
+    "tailwindcss": "^4.3.3",
     "typescript": "^7.0.2",
-    "vitest": "^5.0.1"
+    "vitest": "^5.0.4"
   }
 }
@@ -32,21 +32,21 @@
     "@sim/workflow-persistence": "workspace:*",
     "@sim/workflow-types": "workspace:*",
     "@socket.io/redis-adapter": "8.3.0",
-    "drizzle-orm": "^0.45.2",
-    "lib0": "0.2.117",
+    "drizzle-orm": "^0.45.4",
+    "lib0": "0.2.119",
     "postgres": "^3.4.5",
     "redis": "5.10.0",
-    "socket.io": "^4.8.1",
+    "socket.io": "^4.8.4",
     "y-protocols": "1.0.7",
-    "yjs": "13.6.31",
+    "yjs": "13.6.33",
     "zod": "4.3.6"
   },
   "devDependencies": {
     "@sim/testing": "workspace:*",
     "@sim/tsconfig": "workspace:*",
-    "@types/node": "24.2.1",
-    "socket.io-client": "4.8.1",
+    "@types/node": "24.19.2",
+    "socket.io-client": "4.8.4",
     "typescript": "^7.0.2",
-    "vitest": "^5.0.1"
+    "vitest": "^5.0.4"
   }
 }
diff --git a/apps/sim/lib/mcp/tool-validation.ts b/apps/sim/lib/mcp/tool-validation.ts
@@ -1,4 +1,5 @@
-import { isEqual, omit } from 'es-toolkit'
+import { omit } from '@sim/utils/object'
+import { isEqual } from 'es-toolkit'
 import type { McpToolSchema, StoredMcpToolReference } from '@/lib/mcp/types'
 
 export type McpToolIssueType =