diff --git a/evals/package-lock.json b/evals/package-lock.json
index 0533a87..55e9771 100644
--- a/evals/package-lock.json
+++ b/evals/package-lock.json
@@ -9,7 +9,7 @@
         "@anthropic-ai/claude-agent-sdk": "^0.3.144"
       },
       "devDependencies": {
-        "js-yaml": "^4.3.1",
+        "js-yaml": "^4.3.2",
         "promptfoo": "^0.124.0",
         "zod": "^3.22.4"
       }
@@ -4720,9 +4720,9 @@
       "optional": true
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
-      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -6706,9 +6706,9 @@
       "license": "ISC"
     },
     "node_modules/ip-address": {
-      "version": "10.5.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.5.0.tgz",
-      "integrity": "sha512-R5SnVLJmgYYvf2F2ZgwSBnelz5G4q5AxIC277GDfUaNbrZKNANcBC7RHqYYePlszf4kBolVkJauG0ZjHHFh55g==",
+      "version": "10.7.4",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.4.tgz",
+      "integrity": "sha512-DWBMKyeM25D70nrIiTkgQth59/G+naKOTep6huF9j+GmeK3DMD60Zvxg5d5qQnz+38AHgou6ean2LECX+lrKDg==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -6931,9 +6931,9 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "4.3.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
-      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz",
+      "integrity": "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==",
       "dev": true,
       "funding": [
         {
diff --git a/evals/package.json b/evals/package.json
index 2680675..c8e48b1 100644
--- a/evals/package.json
+++ b/evals/package.json
@@ -38,7 +38,7 @@
     "eval:matrix": "node scripts/run-models.js --models=haiku,sonnet,opus"
   },
   "devDependencies": {
-    "js-yaml": "^4.3.1",
+    "js-yaml": "^4.3.2",
     "promptfoo": "^0.124.0",
     "zod": "^3.22.4"
   },
@@ -46,15 +46,21 @@
     "@anthropic-ai/claude-agent-sdk": "^0.3.144"
   },
   "overrides": {
-    "adm-zip": "^0.6.0",
-    "brace-expansion": "^5.0.9",
-    "fast-uri": "^3.1.5",
-    "ip-address": "^10.3.1",
+    "adm-zip": "^0.6.1",
+    "axios": "^1.20.0",
+    "brace-expansion": "^5.0.12",
+    "csv-parse": "^7.0.2",
+    "fast-uri": "^3.1.6",
+    "hono": "^4.13.5",
+    "ip-address": "^10.7.1",
+    "js-yaml@5": "^5.4.1",
     "mongoose": "^9.7.2",
     "protobufjs@7": "^7.6.5",
     "protobufjs@8": "^8.7.2",
-    "sharp": "^0.35.3",
+    "proxy-addr": "^2.0.8",
+    "sharp": "^0.35.4",
     "socket.io-parser": "^4.2.7",
+    "undici@7": "^7.29.1",
     "ws": "^8.21.3"
   }
 }
diff --git a/tests/package-lock.json b/tests/package-lock.json
index 0a40532..7e7b4c3 100644
--- a/tests/package-lock.json
+++ b/tests/package-lock.json
@@ -5567,9 +5567,9 @@
       "optional": true
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
-      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -7403,9 +7403,9 @@
       "license": "ISC"
     },
     "node_modules/ip-address": {
-      "version": "10.5.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.5.0.tgz",
-      "integrity": "sha512-R5SnVLJmgYYvf2F2ZgwSBnelz5G4q5AxIC277GDfUaNbrZKNANcBC7RHqYYePlszf4kBolVkJauG0ZjHHFh55g==",
+      "version": "10.7.4",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.4.tgz",
+      "integrity": "sha512-DWBMKyeM25D70nrIiTkgQth59/G+naKOTep6huF9j+GmeK3DMD60Zvxg5d5qQnz+38AHgou6ean2LECX+lrKDg==",
       "dev": true,
       "license": "MIT",
       "engines": {
diff --git a/tests/package.json b/tests/package.json
index 8e6a4f3..6f45c5a 100644
--- a/tests/package.json
+++ b/tests/package.json
@@ -18,13 +18,20 @@
   },
   "overrides": {
     "@ai-sdk/provider-utils@4": "4.0.46",
-    "adm-zip": "^0.6.0",
-    "brace-expansion": "^5.0.9",
-    "js-yaml@4": "^4.3.1",
+    "adm-zip": "^0.6.1",
+    "axios": "^1.20.0",
+    "brace-expansion": "^5.0.12",
+    "fast-uri": "^3.1.6",
+    "hono": "^4.13.5",
+    "ip-address": "^10.7.1",
+    "js-yaml@4": "^4.3.2",
+    "js-yaml@5": "^5.4.1",
     "mongoose": "^9.7.2",
-    "sharp": "^0.35.3",
+    "proxy-addr": "^2.0.8",
+    "sharp": "^0.35.4",
     "simple-git": "^4.0.2",
     "socket.io-parser": "^4.2.7",
+    "undici@7": "^7.29.1",
     "uuid@13": "^13.0.1"
   }
 }