deps: Security dependency updates (#17198)

* update deps

* update security deps

12 files changed, 81 insertions, 81 deletions

diff --git a/packages/backend/package.json b/packages/backend/package.json
index 873c03cef3..f5270ea554 100644
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -71,8 +71,8 @@
 		"utf-8-validate": "6.0.6"
 	},
 	"dependencies": {
-		"@aws-sdk/client-s3": "3.990.0",
-		"@aws-sdk/lib-storage": "3.990.0",
+		"@aws-sdk/client-s3": "3.995.0",
+		"@aws-sdk/lib-storage": "3.995.0",
 		"@discordapp/twemoji": "16.0.1",
 		"@fastify/accepts": "5.0.4",
 		"@fastify/cors": "11.2.0",
@@ -80,16 +80,16 @@
 		"@fastify/http-proxy": "11.4.1",
 		"@fastify/multipart": "9.4.0",
 		"@fastify/static": "9.0.0",
-		"@kitajs/html": "4.2.12",
+		"@kitajs/html": "4.2.13",
 		"@misskey-dev/sharp-read-bmp": "1.2.0",
 		"@misskey-dev/summaly": "5.2.5",
-		"@napi-rs/canvas": "0.1.92",
-		"@nestjs/common": "11.1.13",
-		"@nestjs/core": "11.1.13",
-		"@nestjs/testing": "11.1.13",
+		"@napi-rs/canvas": "0.1.94",
+		"@nestjs/common": "11.1.14",
+		"@nestjs/core": "11.1.14",
+		"@nestjs/testing": "11.1.14",
 		"@peertube/http-signature": "1.7.0",
-		"@sentry/node": "10.38.0",
-		"@sentry/profiling-node": "10.38.0",
+		"@sentry/node": "10.39.0",
+		"@sentry/profiling-node": "10.39.0",
 		"@simplewebauthn/server": "13.2.2",
 		"@sinonjs/fake-timers": "15.1.0",
 		"@smithy/node-http-handler": "4.4.10",
@@ -103,7 +103,7 @@
 		"bcryptjs": "3.0.3",
 		"blurhash": "2.0.5",
 		"body-parser": "2.2.2",
-		"bullmq": "5.69.2",
+		"bullmq": "5.69.4",
 		"cacheable-lookup": "7.0.0",
 		"chalk": "5.6.2",
 		"chalk-template": "1.1.2",
@@ -157,14 +157,14 @@
 		"rename": "1.0.4",
 		"rss-parser": "3.13.0",
 		"rxjs": "7.8.2",
-		"sanitize-html": "2.17.0",
+		"sanitize-html": "2.17.1",
 		"secure-json-parse": "4.1.0",
 		"semver": "7.7.4",
 		"sharp": "0.33.5",
 		"slacc": "0.0.10",
 		"strict-event-emitter-types": "2.0.0",
 		"stringz": "2.1.0",
-		"systeminformation": "5.31.0",
+		"systeminformation": "5.31.1",
 		"tinycolor2": "1.6.0",
 		"tmp": "0.2.5",
 		"tsc-alias": "1.8.16",
@@ -178,8 +178,8 @@
 	"devDependencies": {
 		"@jest/globals": "29.7.0",
 		"@kitajs/ts-html-plugin": "4.1.4",
-		"@nestjs/platform-express": "11.1.13",
-		"@sentry/vue": "10.38.0",
+		"@nestjs/platform-express": "11.1.14",
+		"@sentry/vue": "10.39.0",
 		"@simplewebauthn/types": "12.0.0",
 		"@swc/jest": "0.2.39",
 		"@types/accepts": "1.3.7",
@@ -194,7 +194,7 @@
 		"@types/mime-types": "3.0.1",
 		"@types/ms": "2.1.0",
 		"@types/node": "24.10.13",
-		"@types/nodemailer": "7.0.9",
+		"@types/nodemailer": "7.0.11",
 		"@types/oauth2orize": "1.11.5",
 		"@types/oauth2orize-pkce": "0.1.2",
 		"@types/pg": "8.16.0",
@@ -212,8 +212,8 @@
 		"@types/vary": "1.1.3",
 		"@types/web-push": "3.6.4",
 		"@types/ws": "8.18.1",
-		"@typescript-eslint/eslint-plugin": "8.55.0",
-		"@typescript-eslint/parser": "8.55.0",
+		"@typescript-eslint/eslint-plugin": "8.56.0",
+		"@typescript-eslint/parser": "8.56.0",
 		"aws-sdk-client-mock": "4.1.0",
 		"cbor": "10.0.11",
 		"cross-env": "10.1.0",
@@ -224,7 +224,7 @@
 		"jest": "29.7.0",
 		"jest-mock": "29.7.0",
 		"js-yaml": "4.1.1",
-		"nodemon": "3.1.11",
+		"nodemon": "3.1.14",
 		"pid-port": "2.0.1",
 		"simple-oauth2": "5.1.0",
 		"supertest": "7.2.2",
diff --git a/packages/frontend-builder/package.json b/packages/frontend-builder/package.json
index e68efc9663..622f4f40be 100644
--- a/packages/frontend-builder/package.json
+++ b/packages/frontend-builder/package.json
@@ -12,9 +12,9 @@
 	"devDependencies": {
 		"@types/estree": "1.0.8",
 		"@types/node": "24.10.13",
-		"@typescript-eslint/eslint-plugin": "8.55.0",
-		"@typescript-eslint/parser": "8.55.0",
-		"rollup": "4.57.1"
+		"@typescript-eslint/eslint-plugin": "8.56.0",
+		"@typescript-eslint/parser": "8.56.0",
+		"rollup": "4.59.0"
 	},
 	"dependencies": {
 		"i18n": "workspace:*",
diff --git a/packages/frontend-embed/package.json b/packages/frontend-embed/package.json
index e3c411d081..14a3f27601 100644
--- a/packages/frontend-embed/package.json
+++ b/packages/frontend-embed/package.json
@@ -25,7 +25,7 @@
 		"mfm-js": "0.25.0",
 		"misskey-js": "workspace:*",
 		"punycode.js": "2.3.1",
-		"rollup": "4.57.1",
+		"rollup": "4.59.0",
 		"sass": "1.97.3",
 		"shiki": "3.22.0",
 		"tinycolor2": "1.6.0",
@@ -43,19 +43,19 @@
 		"@types/punycode.js": "npm:@types/punycode@2.1.4",
 		"@types/tinycolor2": "1.4.6",
 		"@types/ws": "8.18.1",
-		"@typescript-eslint/eslint-plugin": "8.55.0",
-		"@typescript-eslint/parser": "8.55.0",
+		"@typescript-eslint/eslint-plugin": "8.56.0",
+		"@typescript-eslint/parser": "8.56.0",
 		"@vitest/coverage-v8": "4.0.18",
 		"@vue/runtime-core": "3.5.28",
-		"acorn": "8.15.0",
+		"acorn": "8.16.0",
 		"cross-env": "10.1.0",
 		"eslint-plugin-import": "2.32.0",
 		"eslint-plugin-vue": "10.8.0",
-		"happy-dom": "20.6.1",
+		"happy-dom": "20.7.0",
 		"intersection-observer": "0.12.2",
 		"micromatch": "4.0.8",
 		"msw": "2.12.10",
-		"nodemon": "3.1.11",
+		"nodemon": "3.1.14",
 		"prettier": "3.8.1",
 		"start-server-and-test": "2.1.3",
 		"tsx": "4.21.0",
diff --git a/packages/frontend-shared/package.json b/packages/frontend-shared/package.json
index c4e37d3953..abcdea9244 100644
--- a/packages/frontend-shared/package.json
+++ b/packages/frontend-shared/package.json
@@ -22,11 +22,11 @@
 	},
 	"devDependencies": {
 		"@types/node": "24.10.13",
-		"@typescript-eslint/eslint-plugin": "8.55.0",
-		"@typescript-eslint/parser": "8.55.0",
+		"@typescript-eslint/eslint-plugin": "8.56.0",
+		"@typescript-eslint/parser": "8.56.0",
 		"esbuild": "0.27.3",
 		"eslint-plugin-vue": "10.8.0",
-		"nodemon": "3.1.11",
+		"nodemon": "3.1.14",
 		"vue-eslint-parser": "10.4.0"
 	},
 	"files": [
diff --git a/packages/frontend/package.json b/packages/frontend/package.json
index 5d04ffef7c..b3244d0737 100644
--- a/packages/frontend/package.json
+++ b/packages/frontend/package.json
@@ -24,7 +24,7 @@
 		"@rollup/plugin-json": "6.1.0",
 		"@rollup/plugin-replace": "6.0.3",
 		"@rollup/pluginutils": "5.3.0",
-		"@sentry/vue": "10.38.0",
+		"@sentry/vue": "10.39.0",
 		"@syuilo/aiscript": "1.2.1",
 		"@syuilo/aiscript-0-19-0": "npm:@syuilo/aiscript@^0.19.0",
 		"@twemoji/parser": "16.0.0",
@@ -39,13 +39,13 @@
 		"chartjs-chart-matrix": "3.0.0",
 		"chartjs-plugin-gradient": "0.6.1",
 		"chartjs-plugin-zoom": "2.2.0",
-		"chromatic": "15.1.0",
+		"chromatic": "15.1.1",
 		"compare-versions": "6.1.1",
 		"cropperjs": "2.1.0",
 		"date-fns": "4.1.0",
 		"eventemitter3": "5.0.4",
 		"execa": "9.6.1",
-		"exifreader": "4.36.1",
+		"exifreader": "4.36.2",
 		"frontend-shared": "workspace:*",
 		"i18n": "workspace:*",
 		"icons-subsetter": "workspace:*",
@@ -55,7 +55,7 @@
 		"is-file-animated": "1.0.2",
 		"json5": "2.2.3",
 		"matter-js": "0.20.0",
-		"mediabunny": "1.34.2",
+		"mediabunny": "1.34.4",
 		"mfm-js": "0.25.0",
 		"misskey-bubble-game": "workspace:*",
 		"misskey-js": "workspace:*",
@@ -64,12 +64,12 @@
 		"punycode.js": "2.3.1",
 		"qr-code-styling": "1.9.2",
 		"qr-scanner": "1.4.2",
-		"rollup": "4.57.1",
-		"sanitize-html": "2.17.0",
+		"rollup": "4.59.0",
+		"sanitize-html": "2.17.1",
 		"sass": "1.97.3",
 		"shiki": "3.22.0",
 		"textarea-caret": "3.1.0",
-		"three": "0.182.0",
+		"three": "0.183.1",
 		"throttle-debounce": "5.0.2",
 		"tinycolor2": "1.6.0",
 		"v-code-diff": "1.13.1",
@@ -79,23 +79,23 @@
 	},
 	"devDependencies": {
 		"@misskey-dev/summaly": "5.2.5",
-		"@storybook/addon-essentials": "8.6.15",
-		"@storybook/addon-interactions": "8.6.15",
-		"@storybook/addon-links": "10.2.8",
-		"@storybook/addon-mdx-gfm": "8.6.15",
-		"@storybook/addon-storysource": "8.6.15",
-		"@storybook/blocks": "8.6.15",
-		"@storybook/components": "8.6.15",
-		"@storybook/core-events": "8.6.15",
-		"@storybook/manager-api": "8.6.15",
-		"@storybook/preview-api": "8.6.15",
-		"@storybook/react": "10.2.8",
-		"@storybook/react-vite": "10.2.8",
-		"@storybook/test": "8.6.15",
-		"@storybook/theming": "8.6.15",
-		"@storybook/types": "8.6.15",
-		"@storybook/vue3": "10.2.8",
-		"@storybook/vue3-vite": "10.2.8",
+		"@storybook/addon-essentials": "8.6.17",
+		"@storybook/addon-interactions": "8.6.17",
+		"@storybook/addon-links": "10.2.10",
+		"@storybook/addon-mdx-gfm": "8.6.17",
+		"@storybook/addon-storysource": "8.6.17",
+		"@storybook/blocks": "8.6.17",
+		"@storybook/components": "8.6.17",
+		"@storybook/core-events": "8.6.17",
+		"@storybook/manager-api": "8.6.17",
+		"@storybook/preview-api": "8.6.17",
+		"@storybook/react": "10.2.10",
+		"@storybook/react-vite": "10.2.10",
+		"@storybook/test": "8.6.17",
+		"@storybook/theming": "8.6.17",
+		"@storybook/types": "8.6.17",
+		"@storybook/vue3": "10.2.10",
+		"@storybook/vue3-vite": "10.2.10",
 		"@tabler/icons-webfont": "3.35.0",
 		"@testing-library/vue": "8.1.0",
 		"@types/canvas-confetti": "1.9.0",
@@ -110,31 +110,31 @@
 		"@types/textarea-caret": "3.0.4",
 		"@types/throttle-debounce": "5.0.2",
 		"@types/tinycolor2": "1.4.6",
-		"@typescript-eslint/eslint-plugin": "8.55.0",
-		"@typescript-eslint/parser": "8.55.0",
+		"@typescript-eslint/eslint-plugin": "8.56.0",
+		"@typescript-eslint/parser": "8.56.0",
 		"@vitest/coverage-v8": "4.0.18",
 		"@vue/compiler-core": "3.5.28",
-		"acorn": "8.15.0",
+		"acorn": "8.16.0",
 		"astring": "1.9.0",
 		"cross-env": "10.1.0",
 		"cypress": "15.10.0",
 		"eslint-plugin-import": "2.32.0",
 		"eslint-plugin-vue": "10.8.0",
 		"estree-walker": "3.0.3",
-		"happy-dom": "20.6.1",
+		"happy-dom": "20.7.0",
 		"intersection-observer": "0.12.2",
 		"magic-string": "0.30.21",
 		"micromatch": "4.0.8",
-		"minimatch": "10.2.2",
+		"minimatch": "10.2.4",
 		"msw": "2.12.10",
 		"msw-storybook-addon": "2.0.6",
-		"nodemon": "3.1.11",
+		"nodemon": "3.1.14",
 		"prettier": "3.8.1",
 		"react": "19.2.4",
 		"react-dom": "19.2.4",
 		"seedrandom": "3.0.5",
 		"start-server-and-test": "2.1.3",
-		"storybook": "10.2.8",
+		"storybook": "10.2.10",
 		"storybook-addon-misskey-theme": "github:misskey-dev/storybook-addon-misskey-theme",
 		"tsx": "4.21.0",
 		"vite-plugin-glsl": "1.5.5",
diff --git a/packages/i18n/package.json b/packages/i18n/package.json
index 730cbc43ff..20abb21cbc 100644
--- a/packages/i18n/package.json
+++ b/packages/i18n/package.json
@@ -30,12 +30,12 @@
 	"devDependencies": {
 		"@types/js-yaml": "4.0.9",
 		"@types/node": "24.10.13",
-		"@typescript-eslint/eslint-plugin": "8.55.0",
-		"@typescript-eslint/parser": "8.55.0",
+		"@typescript-eslint/eslint-plugin": "8.56.0",
+		"@typescript-eslint/parser": "8.56.0",
 		"chokidar": "5.0.0",
 		"esbuild": "0.27.3",
 		"execa": "9.6.1",
-		"nodemon": "3.1.11",
+		"nodemon": "3.1.14",
 		"tsx": "4.21.0"
 	},
 	"dependencies": {
diff --git a/packages/icons-subsetter/package.json b/packages/icons-subsetter/package.json
index 59bcd44291..cbad48c26e 100644
--- a/packages/icons-subsetter/package.json
+++ b/packages/icons-subsetter/package.json
@@ -13,8 +13,8 @@
 	"devDependencies": {
 		"@types/node": "24.10.13",
 		"@types/wawoff2": "1.0.2",
-		"@typescript-eslint/eslint-plugin": "8.55.0",
-		"@typescript-eslint/parser": "8.55.0"
+		"@typescript-eslint/eslint-plugin": "8.56.0",
+		"@typescript-eslint/parser": "8.56.0"
 	},
 	"dependencies": {
 		"@tabler/icons-webfont": "3.35.0",
diff --git a/packages/misskey-bubble-game/package.json b/packages/misskey-bubble-game/package.json
index 76a07bc0dc..f707beaee8 100644
--- a/packages/misskey-bubble-game/package.json
+++ b/packages/misskey-bubble-game/package.json
@@ -27,11 +27,11 @@
 		"@types/matter-js": "0.20.2",
 		"@types/node": "24.10.13",
 		"@types/seedrandom": "3.0.8",
-		"@typescript-eslint/eslint-plugin": "8.55.0",
-		"@typescript-eslint/parser": "8.55.0",
+		"@typescript-eslint/eslint-plugin": "8.56.0",
+		"@typescript-eslint/parser": "8.56.0",
 		"esbuild": "0.27.3",
 		"execa": "9.6.1",
-		"nodemon": "3.1.11"
+		"nodemon": "3.1.14"
 	},
 	"files": [
 		"built"
diff --git a/packages/misskey-js/generator/package.json b/packages/misskey-js/generator/package.json
index 0d97dc18ab..bdce22942f 100644
--- a/packages/misskey-js/generator/package.json
+++ b/packages/misskey-js/generator/package.json
@@ -9,13 +9,13 @@
 	"devDependencies": {
 		"@readme/openapi-parser": "5.5.0",
 		"@types/node": "24.10.13",
-		"@typescript-eslint/eslint-plugin": "8.55.0",
-		"@typescript-eslint/parser": "8.55.0",
+		"@typescript-eslint/eslint-plugin": "8.56.0",
+		"@typescript-eslint/parser": "8.56.0",
 		"openapi-types": "12.1.3",
 		"openapi-typescript": "7.13.0",
 		"ts-case-convert": "2.1.0",
 		"tsx": "4.21.0",
-		"eslint": "9.39.2"
+		"eslint": "9.39.3"
 	},
 	"files": [
 		"built"
diff --git a/packages/misskey-js/package.json b/packages/misskey-js/package.json
index b5aab79fc9..10c697205e 100644
--- a/packages/misskey-js/package.json
+++ b/packages/misskey-js/package.json
@@ -37,15 +37,15 @@
 		"directory": "packages/misskey-js"
 	},
 	"devDependencies": {
-		"@microsoft/api-extractor": "7.56.3",
+		"@microsoft/api-extractor": "7.57.2",
 		"@types/node": "24.10.13",
-		"@typescript-eslint/eslint-plugin": "8.55.0",
-		"@typescript-eslint/parser": "8.55.0",
+		"@typescript-eslint/eslint-plugin": "8.56.0",
+		"@typescript-eslint/parser": "8.56.0",
 		"@vitest/coverage-v8": "4.0.18",
 		"esbuild": "0.27.3",
 		"execa": "9.6.1",
 		"ncp": "2.0.0",
-		"nodemon": "3.1.11",
+		"nodemon": "3.1.14",
 		"tsd": "0.33.0",
 		"vitest": "4.0.18",
 		"vitest-websocket-mock": "0.5.0"
diff --git a/packages/misskey-reversi/package.json b/packages/misskey-reversi/package.json
index 9edc289d91..d1913bc9dc 100644
--- a/packages/misskey-reversi/package.json
+++ b/packages/misskey-reversi/package.json
@@ -25,11 +25,11 @@
 	},
 	"devDependencies": {
 		"@types/node": "24.10.13",
-		"@typescript-eslint/eslint-plugin": "8.55.0",
-		"@typescript-eslint/parser": "8.55.0",
+		"@typescript-eslint/eslint-plugin": "8.56.0",
+		"@typescript-eslint/parser": "8.56.0",
 		"esbuild": "0.27.3",
 		"execa": "9.6.1",
-		"nodemon": "3.1.11"
+		"nodemon": "3.1.14"
 	},
 	"files": [
 		"built"
diff --git a/packages/sw/package.json b/packages/sw/package.json
index 3a06fd454e..28d7c30f7b 100644
--- a/packages/sw/package.json
+++ b/packages/sw/package.json
@@ -15,10 +15,10 @@
 		"misskey-js": "workspace:*"
 	},
 	"devDependencies": {
-		"@typescript-eslint/parser": "8.55.0",
+		"@typescript-eslint/parser": "8.56.0",
 		"@typescript/lib-webworker": "npm:@types/serviceworker@0.0.74",
 		"eslint-plugin-import": "2.32.0",
-		"nodemon": "3.1.11"
+		"nodemon": "3.1.14"
 	},
 	"type": "module"
 }