diff --git a/package-lock.json b/package-lock.json
index a6112490..be27b17e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7984,9 +7984,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.11.7",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.11.7.tgz",
-      "integrity": "sha512-l7qMiNee7t82bH3SeyUCt9UF15EVmaBvsppY2zQtrbIhl/yzBTny+YUxsVjSjQ6gaqaeVtZmGocom8TzBlA4Yw==",
+      "version": "4.11.10",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.11.10.tgz",
+      "integrity": "sha512-kyWP5PAiMooEvGrA9jcD3IXF7ATu8+o7B3KCbPXid5se52NPqnOpM/r9qeW2heMnOekF4kqR1fXJqCYeCLKrZg==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
@@ -16019,7 +16019,7 @@
         "@hono/mcp": "^0.2.3",
         "@hono/node-server": "^1.19.7",
         "@modelcontextprotocol/sdk": "^1.26.0",
-        "hono": "^4.11.7",
+        "hono": "^4.11.10",
         "zod": "^3.25.76"
       },
       "devDependencies": {
@@ -16087,7 +16087,13 @@
     },
     "plugins/auth-oauth2": {
       "name": "@yaak/auth-oauth2",
-      "version": "0.1.0"
+      "version": "0.1.0",
+      "dependencies": {
+        "jsonwebtoken": "^9.0.2"
+      },
+      "devDependencies": {
+        "@types/jsonwebtoken": "^9.0.7"
+      }
     },
     "plugins/filter-jsonpath": {
       "name": "@yaak/filter-jsonpath",
diff --git a/plugins-external/mcp-server/package.json b/plugins-external/mcp-server/package.json
index 39cb666d..6d7e6581 100644
--- a/plugins-external/mcp-server/package.json
+++ b/plugins-external/mcp-server/package.json
@@ -18,7 +18,7 @@
     "@hono/mcp": "^0.2.3",
     "@hono/node-server": "^1.19.7",
     "@modelcontextprotocol/sdk": "^1.26.0",
-    "hono": "^4.11.7",
+    "hono": "^4.11.10",
     "zod": "^3.25.76"
   },
   "devDependencies": {