diff --git a/gui/package-lock.json b/gui/package-lock.json
index d96ea3b2577..30b59b3ba89 100644
--- a/gui/package-lock.json
+++ b/gui/package-lock.json
@@ -35,7 +35,7 @@
         "clsx": "^2.1.1",
         "core": "file:../core",
         "diff": "^8.0.2",
-        "dompurify": "^3.0.6",
+        "dompurify": "^3.4.0",
         "downshift": "^7.6.0",
         "escape-carriage": "^1.3.1",
         "handlebars": "^4.7.8",
@@ -176,13 +176,12 @@
         "puppeteer-chromium-resolver": "^23.0.0",
         "quick-lru": "^7.0.0",
         "replicate": "^0.26.0",
-        "request": "^2.88.2",
         "shell-quote": "^1.8.3",
         "socket.io-client": "^4.7.3",
         "sqlite": "^5.1.1",
         "sqlite3": "^5.1.7",
         "system-ca": "^1.0.3",
-        "tar": "^7.5.10",
+        "tar": "^7.5.13",
         "tree-sitter-wasms": "^0.1.11",
         "untildify": "^6.0.0",
         "uuid": "^9.0.1",
@@ -221,7 +220,7 @@
         "@typescript-eslint/eslint-plugin": "^8.40.0",
         "@typescript-eslint/parser": "^8.40.0",
         "cross-env": "^7.0.3",
-        "esbuild": "0.17.19",
+        "esbuild": "^0.25.0",
         "eslint": "^8",
         "jest": "^29.7.0",
         "jest-environment-jsdom": "^29.7.0",
@@ -6347,24 +6346,6 @@
         "chevrotain": "^11.0.0"
       }
     },
-    "node_modules/chokidar": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-5.0.0.tgz",
-      "integrity": "sha512-TQMmc3w+5AxjpL8iIiwebF73dRDF4fBIieAqGn9RGCWaEVwQ6Fb2cGe31Yns0RRIzii5goJ1Y7xbMwo1TxMplw==",
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "peer": true,
-      "dependencies": {
-        "readdirp": "^5.0.0"
-      },
-      "engines": {
-        "node": ">= 20.19.0"
-      },
-      "funding": {
-        "url": "https://paulmillr.com/funding/"
-      }
-    },
     "node_modules/classnames": {
       "version": "2.5.1",
       "resolved": "https://registry.npmjs.org/classnames/-/classnames-2.5.1.tgz",
@@ -7421,9 +7402,9 @@
       "dev": true
     },
     "node_modules/dompurify": {
-      "version": "3.3.3",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.3.tgz",
-      "integrity": "sha512-Oj6pzI2+RqBfFG+qOaOLbFXLQ90ARpcGG6UePL82bJLtdsa6CYJD7nmiU8MW9nQNOtCHV3lZ/Bzq1X0QYbBZCA==",
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.0.tgz",
+      "integrity": "sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
@@ -13472,22 +13453,6 @@
         "pify": "^2.3.0"
       }
     },
-    "node_modules/readdirp": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-5.0.0.tgz",
-      "integrity": "sha512-9u/XQ1pvrQtYyMpZe7DXKv2p5CNvyVwzUB6uhLAnQwHMSgKMBR62lc7AHljaeteeHXn11XTAaLLUVZYVZyuRBQ==",
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "peer": true,
-      "engines": {
-        "node": ">= 20.19.0"
-      },
-      "funding": {
-        "type": "individual",
-        "url": "https://paulmillr.com/funding/"
-      }
-    },
     "node_modules/redent": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/redent/-/redent-3.0.0.tgz",
diff --git a/gui/package.json b/gui/package.json
index b5f58f91d39..f6ede0a354b 100644
--- a/gui/package.json
+++ b/gui/package.json
@@ -44,7 +44,7 @@
     "clsx": "^2.1.1",
     "core": "file:../core",
     "diff": "^8.0.2",
-    "dompurify": "^3.0.6",
+    "dompurify": "^3.4.0",
     "downshift": "^7.6.0",
     "escape-carriage": "^1.3.1",
     "handlebars": "^4.7.8",