chore(ui): update npm dependencies to fix security vulnerabilities (#10052)

ui/CHANGELOG.md

@@ -9,6 +9,10 @@ All notable changes to the **Prowler UI** are documented in this file.
 - Attack Paths: Query list now shows their name and short description, when one is selected it also shows a longer description and an attribution if it has it [(#9983)](https://github.com/prowler-cloud/prowler/pull/9983)
 - CSA CCM detailed view and small fix related with `Top Failed Sections` width [(#10018)](https://github.com/prowler-cloud/prowler/pull/10018)
 
+### 🔐 Security
+
+- npm dependencies updated to resolve 11 Dependabot alerts (4 HIGH, 7 MEDIUM): fast-xml-parser, @modelcontextprotocol/sdk, tar, @isaacs/brace-expansion, hono, lodash, lodash-es [(#10052)](https://github.com/prowler-cloud/prowler/pull/10052)
+
 ---
 
 ## [1.18.2] (Prowler UNRELEASED)

ui/dependency-log.json

@@ -10,10 +10,10 @@
   {
     "section": "dependencies",
     "name": "@aws-sdk/client-bedrock-runtime",
-    "from": "3.943.0",
-    "to": "3.948.0",
+    "from": "3.948.0",
+    "to": "3.988.0",
     "strategy": "installed",
-    "generatedAt": "2025-12-15T08:24:46.195Z"
+    "generatedAt": "2026-02-12T11:04:39.164Z"
   },
   {
     "section": "dependencies",
@@ -67,9 +67,9 @@
     "section": "dependencies",
     "name": "@langchain/mcp-adapters",
     "from": "1.0.3",
-    "to": "1.0.3",
+    "to": "1.1.3",
     "strategy": "installed",
-    "generatedAt": "2025-12-12T10:01:54.132Z"
+    "generatedAt": "2026-02-12T11:04:39.164Z"
   },
   {
     "section": "dependencies",
@@ -283,9 +283,9 @@
     "section": "dependencies",
     "name": "@tailwindcss/postcss",
     "from": "4.1.13",
-    "to": "4.1.13",
+    "to": "4.1.18",
     "strategy": "installed",
-    "generatedAt": "2025-10-22T12:36:37.962Z"
+    "generatedAt": "2026-02-12T11:04:39.164Z"
   },
   {
     "section": "dependencies",
@@ -947,9 +947,9 @@
     "section": "devDependencies",
     "name": "shadcn",
     "from": "3.4.1",
-    "to": "3.4.1",
+    "to": "3.8.4",
     "strategy": "installed",
-    "generatedAt": "2025-10-22T15:52:15.849Z"
+    "generatedAt": "2026-02-12T11:04:39.164Z"
   },
   {
     "section": "devDependencies",
@@ -963,9 +963,9 @@
     "section": "devDependencies",
     "name": "tailwindcss",
     "from": "4.1.13",
-    "to": "4.1.13",
+    "to": "4.1.18",
     "strategy": "installed",
-    "generatedAt": "2025-10-22T12:36:37.962Z"
+    "generatedAt": "2026-02-12T11:04:39.164Z"
   },
   {
     "section": "devDependencies",

ui/package.json

@@ -25,14 +25,14 @@
   },
   "dependencies": {
     "@ai-sdk/react": "2.0.111",
-    "@aws-sdk/client-bedrock-runtime": "3.948.0",
+    "@aws-sdk/client-bedrock-runtime": "3.988.0",
     "@extractus/feed-extractor": "7.1.7",
     "@heroui/react": "2.8.4",
     "@hookform/resolvers": "5.2.2",
     "@internationalized/date": "3.10.0",
     "@langchain/aws": "1.1.0",
     "@langchain/core": "1.1.15",
-    "@langchain/mcp-adapters": "1.0.3",
+    "@langchain/mcp-adapters": "1.1.3",
     "@langchain/openai": "1.1.3",
     "@next/third-parties": "16.1.6",
     "@radix-ui/react-alert-dialog": "1.1.14",
@@ -59,7 +59,7 @@
     "@react-types/datepicker": "3.13.2",
     "@react-types/shared": "3.26.0",
     "@sentry/nextjs": "10.27.0",
-    "@tailwindcss/postcss": "4.1.13",
+    "@tailwindcss/postcss": "4.1.18",
     "@tailwindcss/typography": "0.5.16",
     "@tanstack/react-table": "8.21.3",
     "@types/dagre": "0.7.53",
@@ -144,9 +144,9 @@
     "postcss": "8.4.38",
     "prettier": "3.6.2",
     "prettier-plugin-tailwindcss": "0.6.14",
-    "shadcn": "3.4.1",
+    "shadcn": "3.8.4",
     "tailwind-variants": "0.1.20",
-    "tailwindcss": "4.1.13",
+    "tailwindcss": "4.1.18",
     "typescript": "5.5.4"
   },
   "pnpm": {
@@ -158,7 +158,12 @@
       "@react-aria/ssr>react": "19.2.4",
       "@react-aria/ssr>react-dom": "19.2.4",
       "@react-aria/visually-hidden>react": "19.2.4",
-      "@react-aria/interactions>react": "19.2.4"
+      "@react-aria/interactions>react": "19.2.4",
+      "lodash": "4.17.23",
+      "lodash-es": "4.17.23",
+      "hono": "4.11.7",
+      "@isaacs/brace-expansion": "5.0.1",
+      "fast-xml-parser": "5.3.4"
     }
   },
   "version": "0.0.1",