📦 chore: npm audit fix (#13828)

* 🔧 chore: Update `@librechat/agents` to v3.2.38 and bump related dependencies in package-lock.json and package.json files

* 🔧 chore: Upgrade `multer` dependency to version 2.2.0 in package-lock.json and package.json

* 🔧 chore: Upgrade `nodemailer` dependency to version 9.0.1 in package-lock.json and package.json

* 🔧 chore: Upgrade `@aws-sdk/client-bedrock-agent-runtime` and `@aws-sdk/client-bedrock-runtime` to versions 3.1071.0, update related dependencies in package-lock.json and package.json

* 🔧 chore: Upgrade `form-data` to version 4.0.6 and `hono` to version 4.12.25, update related dependencies in package-lock.json and package.json

* 🔧 chore: npm audit fix

* 🔧 chore: Remove unused Babel dependencies from package-lock.json and package.json

* 🔧 chore: Add '@mistralai/mistralai' to esModules in Jest configuration files

api/jest.config.js

@@ -5,6 +5,7 @@ const esModules = [
   '@langchain/langgraph',
   '@langchain/langgraph-checkpoint',
   '@langchain/langgraph-sdk',
+  '@mistralai/mistralai',
   'uuid',
 ].join('|');
 

api/package.json

@@ -46,7 +46,7 @@
     "@azure/storage-blob": "^12.30.0",
     "@google/genai": "^2.8.0",
     "@keyv/redis": "^4.3.3",
-    "@librechat/agents": "^3.2.37",
+    "@librechat/agents": "^3.2.38",
     "@librechat/api": "*",
     "@librechat/data-schemas": "*",
     "@microsoft/microsoft-graph-client": "^3.0.7",
@@ -86,7 +86,7 @@
     "handlebars": "^4.7.9",
     "https-proxy-agent": "^7.0.6",
     "ioredis": "^5.3.2",
-    "js-yaml": "^4.1.1",
+    "js-yaml": "^4.2.0",
     "jsonwebtoken": "^9.0.0",
     "jszip": "^3.10.1",
     "jwks-rsa": "^3.2.0",
@@ -103,10 +103,10 @@
     "module-alias": "^2.2.3",
     "mongodb": "^6.14.2",
     "mongoose": "^8.23.1",
-    "multer": "^2.1.1",
+    "multer": "^2.2.0",
     "nanoid": "^3.3.7",
     "node-fetch": "^2.7.0",
-    "nodemailer": "^8.0.5",
+    "nodemailer": "^9.0.1",
     "ollama": "^0.5.0",
     "openai": "5.8.2",
     "openid-client": "^6.5.0",

package.json

@@ -153,7 +153,7 @@
   "overrides": {
     "@xmldom/xmldom": "^0.8.13",
     "elliptic": "^6.6.1",
-    "form-data": "^4.0.4",
+    "form-data": "^4.0.6",
     "langsmith": "^0.6.0",
     "postcss": "^8.5.13",
     "tslib": "^2.8.1",
@@ -180,12 +180,14 @@
       "ajv": "6.14.0"
     },
     "underscore": "1.13.8",
-    "hono": "^4.12.18",
+    "hono": "^4.12.25",
     "@hono/node-server": "^1.19.10",
     "monaco-editor": {
       "dompurify": "3.4.0"
     },
-    "svgo": "^2.8.2"
+    "svgo": "^2.8.2",
+    "js-yaml": "^4.2.0",
+    "ws": "^8.21.0"
   },
   "nodemonConfig": {
     "ignore": [

packages/api/jest.config.mjs

@@ -2,6 +2,7 @@ const esModules = [
   '@langchain/langgraph',
   '@langchain/langgraph-checkpoint',
   '@langchain/langgraph-sdk',
+  '@mistralai/mistralai',
   'uuid',
 ].join('|');
 

packages/api/package.json

@@ -113,7 +113,7 @@
     "@azure/storage-blob": "^12.30.0",
     "@google/genai": "^2.8.0",
     "@keyv/redis": "^4.3.3",
-    "@librechat/agents": "^3.2.37",
+    "@librechat/agents": "^3.2.38",
     "@librechat/data-schemas": "*",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opentelemetry/api": "^1.9.0",
@@ -140,7 +140,7 @@
     "google-auth-library": "^9.15.1",
     "https-proxy-agent": "^7.0.6",
     "ioredis": "^5.3.2",
-    "js-yaml": "^4.1.1",
+    "js-yaml": "^4.2.0",
     "jsonwebtoken": "^9.0.0",
     "jszip": "^3.10.1",
     "jwks-rsa": "^3.2.0",

packages/data-provider/package.json

@@ -45,7 +45,7 @@
   "dependencies": {
     "axios": "^1.16.0",
     "dayjs": "^1.11.13",
-    "js-yaml": "^4.1.1",
+    "js-yaml": "^4.2.0",
     "zod": "^3.22.4"
   },
   "devDependencies": {