[goanpeca]

Summary

Closes out the three remaining Dependabot alerts and folds in the open Dependabot version PRs, as one reviewed batch.

Security alerts

• node-forge (chore(deps): Bump the aws-sdk group across 1 directory with 3 updates #34, chore(deps): Bump opossum from 9.0.0 to 10.0.0 #36, GHSA-86w9-cpqp-85rv): a >=1.4.1 <2 override resolves 1.4.1, which was published after the earlier advisory work, in the root and deploy/customer-hosted lockfiles. The audit exception for it is removed.
• qs (Align Node.js runtime and CI matrix #86, GHSA-6pq8-jhm2-2vcw): the override moves to >=6.16.1 in the root and tools/mutation workspaces, and the mutation lockfile resolves 6.16.1.
• The stale braces audit exception no longer matched any finding and is removed.
• The dev-only zod 3.x exception stays: there is no patched 3.x release and the copies come from mcpb and vercel only. It expires 2026-11-05.

Dependabot updates included

• @aws-sdk/client-s3 and @aws-sdk/s3-request-presigner 3.1144.0 to 3.1156.0, with the package-budget pins and integrity updated.
• pino 10.3.1 to 10.4.0. It no longer needs a duplicate real-require, so that approved-duplicate budget entry is removed, and @smithy/core and @smithy/node-http-handler are re-resolved to a single version.
• Dev tooling: @modelcontextprotocol/inspector 2.12.0, @toon-format/toon 4.4.0, typescript-eslint 8.72.0, wrangler 4.152.0 with the direct miniflare pin moved to 5.20261019.2-beta to stay on Wrangler's workerd release, and eslint-plugin-jsdoc 65.1.0.
• GitHub Actions group: the setup-node, upload-artifact, download-artifact and codeql-action SHAs from the Dependabot PR, with the matching pins in ci-workflow-policy.contract.test.ts.

Deliberately not taken

• eslint 10.13.0: its tree pulls the quarantined @cacheable/* packages and supply-chain-denylist.json fails on it.
• @biomejs/biome 2.6.3: 2.6 formats Markdown and YAML by default and wants to rewrite 27 docs plus a config migration, which belongs in its own change.
• @types/node 22.20.5: runtime-policy.json pins it to the Node engine floor, 22.20.4.

Companion changes

• Version literals updated for the inspector smoke script, its contract test, and docs/TESTING.md, and the TOON decoder pin in result-serializer.unit.test.ts.
• deploy/customer-hosted lockfile and workspace re-mirrored from the root; tools/mutation re-locked.
• CHANGELOG entries under Unreleased; cpqp added to the spelling dictionary.

Verification

Full local CI matrix on this branch, macOS, Node 24.21.0, pnpm 11.20.0: 18 of 18 steps pass (runtime policy, verify, smoke, strict TypeDoc, unit coverage, reliability, contract, protocol, observability, package, production gate, Vercel and Cloudflare bundle budgets, supply-chain audit, slow, cross-platform, mcpb build, Vercel build-output scan). Not run locally: the container-image and zizmor jobs, the Node 22 and 26 legs, and the other OS legs.

Refs #524. Supersedes the open Dependabot PRs #518, #500, #503, #504 and #526, which can be closed once this merges.

[Copilot]

🟢 Approval recommended

No active review issues block the dependency security and CI action updates.

No open issues 🎉

3 files not reviewed

• deploy/customer-hosted/pnpm-lock.yaml: Generated file
• pnpm-lock.yaml: Generated file
• tools/mutation/pnpm-lock.yaml: Generated file

What changed in this PR

Updates B2 MCP’s dependencies and CI actions to address the remaining security alerts tracked by #524 and consolidate selected Dependabot updates.

Changes:

• Raises node-forge and qs security overrides and removes obsolete audit exceptions, retaining the time-limited development-only Zod 3 exception.
• Upgrades AWS SDK, Pino, and selected development tools, synchronizing package-budget metadata, smoke checks, tests, and documentation.
• Updates GitHub Actions SHA pins and matching workflow contract expectations.

File	Description
tools/​mutation/​pnpm-workspace.yaml	Raises the mutation workspace’s qs override.
tools/​mutation/​pnpm-lock.yaml	Locks patched qs 6.16.1.
tests/​unit/​result-serializer.unit.test.ts	Updates the expected TOON decoder version.
tests/​contract/​smoke-script-policy.contract.test.ts	Aligns Inspector version expectations.
tests/​contract/​ci-workflow-policy.contract.test.ts	Aligns artifact and CodeQL action pins.
scripts/​mcp-inspector-smoke.mjs	Updates the Inspector smoke version.
pnpm-workspace.yaml	Adds patched dependency overrides and a release-age exception.
pnpm-lock.yaml	Resolves upgraded runtime and development dependencies.
package.json	Updates direct dependency versions.
package-budget.json	Refreshes runtime pins and removes a duplicate-package allowance.
docs/​TESTING.md	Updates Inspector and TOON testing references.
deploy/​customer-hosted/​pnpm-workspace.yaml	Mirrors root workspace security overrides.
CHANGELOG.md	Records dependency upgrades and advisory remediation.
audit-policy.json	Removes braces and node-forge exceptions.
.github/​workflows/​test.yml	Updates Node setup, artifact, and CodeQL actions.
.github/​workflows/​smoke.yml	Updates the Node setup action.
.github/​workflows/​release-tag.yml	Updates artifact upload for release requests.
.github/​workflows/​publish.yml	Updates Node setup and release artifact actions.
.github/​workflows/​mutation.yml	Updates Node setup and report upload actions.
.github/​workflows/​evals.yml	Updates Node setup and evaluation report uploads.
.github/​workflows/​docs.yml	Updates the Node setup action.
.github/​workflows/​contract.yml	Updates Node setup and live-test artifact actions.
.github/​workflows/​codeql.yml	Updates CodeQL initialization and analysis actions.
.cspell/​project-words.txt	Adds an advisory identifier fragment to the dictionary.

_{Review effort: Balanced}