fix(deps): pin patched versions for Dependabot security alerts (#2462)

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: topher-lo

frontend/package.json

@@ -179,8 +179,8 @@
       "prismjs": "1.30.0",
       "glob": "13.0.6",
       "immutable": "5.1.5",
-      "lodash": "4.17.23",
-      "lodash-es": "4.17.23",
+      "lodash": "4.18.1",
+      "lodash-es": "4.18.1",
       "minimatch": "10.2.3",
       "dompurify": "3.3.2",
       "markdown-it": "14.1.1",

frontend/pnpm-lock.yaml

@@ -22,7 +22,7 @@ classifiers = [
 ]
 dependencies = [
     "aiocache==0.12.3",
-    "aiohttp==3.13.3",
+    "aiohttp==3.13.5",
     "alembic-postgresql-enum==1.7.0",
     "alembic==1.13.2",
     "async-lru==2.0.4",
@@ -32,15 +32,16 @@ dependencies = [
     "cloudpickle==3.1.1",
     "cramjam==2.11.0",
     "croniter==6.0.0",
-    "cryptography==46.0.5",
+    "cryptography==46.0.6",
     "dateparser==1.2.2",
     "defusedxml==0.7.1",
     "email-validator==2.2.0",
     "fastapi-users[sqlalchemy,oauth]==15.0.2",
     "fastapi[standard]==0.120.3",
-    "fastmcp==3.0.0",
+    "fastmcp==3.2.0",
     "google-auth==2.48.0",
     "greenlet==3.0.3",
+    "griffe==2.0.2",
     "httpx==0.28.1",
     "jsonpath_ng==1.7.0",
     "lark==1.1.9",
@@ -102,6 +103,7 @@ override-dependencies = [
     "PyJWT==2.12.1",
     "chardet<7",
     "fickling==0.1.10",
+    "anthropic==0.87.0",
 ]
 
 [dependency-groups]

pyproject.toml

@@ -13,7 +13,7 @@
 import yaml
 from fastmcp.exceptions import ToolError
 from fastmcp.server.middleware.middleware import MiddlewareContext
-from fastmcp.tools.tool import ToolResult
+from fastmcp.tools import ToolResult
 from mcp.types import CallToolRequestParams
 from tracecat_registry import RegistrySecret
 

tests/unit/test_mcp_server.py

@@ -12,7 +12,7 @@
 from fastmcp.exceptions import ToolError
 from fastmcp.server.dependencies import get_access_token, get_http_request
 from fastmcp.server.middleware.middleware import CallNext, Middleware, MiddlewareContext
-from fastmcp.tools.tool import ToolResult
+from fastmcp.tools import ToolResult
 
 from tracecat.logger import logger
 from tracecat.mcp.auth import MCPTokenIdentity, get_email_claim, get_token_identity