From 7f512cc08a586df1349f4b3d722df818e71cdc59 Mon Sep 17 00:00:00 2001
From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com>
Date: Tue, 30 Dec 2025 23:30:05 +0000
Subject: [PATCH] fix: packages/components/package.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-QS-14724253
---
 packages/components/package.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages/components/package.json b/packages/components/package.json
index 4fe93d1b9ea..b5add30d4a8 100644
--- a/packages/components/package.json
+++ b/packages/components/package.json
@@ -29,7 +29,7 @@
         "@e2b/code-interpreter": "^0.0.5",
         "@elastic/elasticsearch": "^8.9.0",
         "@flowiseai/nodevm": "^3.9.25",
-        "@getzep/zep-cloud": "~1.0.7",
+        "@getzep/zep-cloud": "~2.3.0",
         "@getzep/zep-js": "^0.9.0",
         "@gomomento/sdk": "^1.51.1",
         "@gomomento/sdk-core": "^1.51.1",
@@ -81,7 +81,7 @@
         "axios": "1.7.9",
         "cheerio": "^1.0.0-rc.12",
         "chromadb": "^1.10.0",
-        "cohere-ai": "^7.7.5",
+        "cohere-ai": "^7.18.0",
         "composio-core": "^0.4.7",
         "couchbase": "4.4.1",
         "crypto-js": "^4.1.1",
@@ -90,7 +90,7 @@
         "dotenv": "^16.0.0",
         "epub2": "^3.0.2",
         "exa-js": "^1.0.12",
-        "express": "^4.17.3",
+        "express": "^5.0.0",
         "faiss-node": "^0.5.1",
         "fast-json-patch": "^3.1.1",
         "form-data": "^4.0.0",