diff --git a/server/package-lock.json b/server/package-lock.json
index 337580d..3ffe540 100644
--- a/server/package-lock.json
+++ b/server/package-lock.json
@@ -10,9 +10,9 @@
       "license": "MIT",
       "dependencies": {
         "@fastify/cors": "^11.2.0",
-        "@fastify/helmet": "^13.0.2",
+        "@fastify/helmet": "^13.1.1",
         "@fastify/rate-limit": "^11.2.0",
-        "@fastify/static": "^10.1.2",
+        "@fastify/static": "^10.1.3",
         "better-sqlite3": "^12.10.0",
         "bonjour-service": "^1.3.0",
         "dmx-ts": "0.4.0",
@@ -23,17 +23,17 @@
         "@types/better-sqlite3": "^7.6.13",
         "@types/node": "^24.13.3",
         "@types/pngjs": "^6.0.5",
-        "@types/semver": "^7.7.1",
+        "@types/semver": "^7.8.0",
         "@vitest/coverage-v8": "^4.1.11",
         "fast-check": "^4.8.0",
         "pixelmatch": "^7.1.0",
         "pngjs": "^7.0.0",
         "puppeteer": "^25.10.0",
         "semver": "^7.8.5",
-        "tsx": "^4.21.0",
+        "tsx": "^4.23.13",
         "typescript": "^6.0.2",
         "vitest": "^4.1.11",
-        "zod": "^4.4.3"
+        "zod": "^4.5.4"
       },
       "engines": {
         "node": ">=24 <25"
@@ -670,9 +670,9 @@
       "license": "MIT"
     },
     "node_modules/@fastify/helmet": {
-      "version": "13.1.0",
-      "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-13.1.0.tgz",
-      "integrity": "sha512-SvVOU0IrzYJW1BvSkfq9G1WUdW3dnaRUvg6m0BtgGMBmML62No0VmSu087jecH58SFbicbREgZTPJ89mAguupA==",
+      "version": "13.1.1",
+      "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-13.1.1.tgz",
+      "integrity": "sha512-bSat5DTq8geASv8G6P0KW1UbltZ+xGD/zyd9S72pT7ogAHehcsWL85GdjMRCjDsExJvaEvgEZ52qU/2HXirVCw==",
       "funding": [
         {
           "type": "github",
@@ -774,9 +774,9 @@
       }
     },
     "node_modules/@fastify/static": {
-      "version": "10.1.2",
-      "resolved": "https://registry.npmjs.org/@fastify/static/-/static-10.1.2.tgz",
-      "integrity": "sha512-G/g18cG9tLutT/OVyN1AIsHIl9L1UwmJ+S3dkyhVpplIx0nEMicd7RGQ+uJLyhKKF4a3tTcQydccn3Mop1fX+Q==",
+      "version": "10.1.3",
+      "resolved": "https://registry.npmjs.org/@fastify/static/-/static-10.1.3.tgz",
+      "integrity": "sha512-W6jqajYS974XjPjB5hQWoxPM8NKM4+p8YmQT6G5IbCa4uhdWSVadZUv75siy1wEA/3ty8RYdpBydfWeu9AqAqQ==",
       "funding": [
         {
           "type": "github",
@@ -1520,9 +1520,9 @@
       }
     },
     "node_modules/@types/semver": {
-      "version": "7.7.1",
-      "resolved": "https://registry.npmjs.org/@types/semver/-/semver-7.7.1.tgz",
-      "integrity": "sha512-FmgJfu+MOcQ370SD0ev7EI8TlCAfKYU+B4m5T3yXc1CiRN94g/SZPtsCkk506aUDtlMnFZvasDwHHUcZUEaYuA==",
+      "version": "7.8.0",
+      "resolved": "https://registry.npmjs.org/@types/semver/-/semver-7.8.0.tgz",
+      "integrity": "sha512-1mAINjtQCXXeLkJ9ehXkwOcBpqtLxiVtKhpUf83DdRNdQKV0iXZpaHYqRr7nj+wvxuJzoAmAwXI+sCNMv1CzLQ==",
       "dev": true,
       "license": "MIT"
     },
@@ -4359,9 +4359,9 @@
       }
     },
     "node_modules/tsx": {
-      "version": "4.23.1",
-      "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.23.1.tgz",
-      "integrity": "sha512-GQHnkIfxyx1wYCOS/wonik5MVRZU9hi1TEZmzGZSCJB1y9YgoZ8H6itNE/u4suE+yLmOzuE4E5S4TZ/ZX2wcWQ==",
+      "version": "4.23.13",
+      "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.23.13.tgz",
+      "integrity": "sha512-BL5MGkRln6aDYhb0xbQlEAGw743BaZYWdbWtdJOBriYJboKgUUYCadFp2/FpBBZquBC/ezNBn7wMMPx7FDZUDw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -4791,9 +4791,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "4.4.3",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
-      "integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
+      "version": "4.5.4",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.5.4.tgz",
+      "integrity": "sha512-sC95tT5iHHH9gtpj6A81kh+NEaRAUFN+qlUPDUbRfOMvNf5QCBqsb3WgvnpVtK5Y+4UfA6KqufotuTvMGiTlsA==",
       "dev": true,
       "license": "MIT",
       "funding": {
diff --git a/server/package.json b/server/package.json
index 6b86f7c..736304c 100644
--- a/server/package.json
+++ b/server/package.json
@@ -22,9 +22,9 @@
   },
   "dependencies": {
     "@fastify/cors": "^11.2.0",
-    "@fastify/helmet": "^13.0.2",
+    "@fastify/helmet": "^13.1.1",
     "@fastify/rate-limit": "^11.2.0",
-    "@fastify/static": "^10.1.2",
+    "@fastify/static": "^10.1.3",
     "better-sqlite3": "^12.10.0",
     "bonjour-service": "^1.3.0",
     "dmx-ts": "0.4.0",
@@ -35,17 +35,17 @@
     "@types/better-sqlite3": "^7.6.13",
     "@types/node": "^24.13.3",
     "@types/pngjs": "^6.0.5",
-    "@types/semver": "^7.7.1",
+    "@types/semver": "^7.8.0",
     "@vitest/coverage-v8": "^4.1.11",
     "fast-check": "^4.8.0",
     "pixelmatch": "^7.1.0",
     "pngjs": "^7.0.0",
     "puppeteer": "^25.10.0",
     "semver": "^7.8.5",
-    "tsx": "^4.21.0",
+    "tsx": "^4.23.13",
     "typescript": "^6.0.2",
     "vitest": "^4.1.11",
-    "zod": "^4.4.3"
+    "zod": "^4.5.4"
   },
   "engines": {
     "node": ">=24 <25"