security: dependabot alert triage

Author: nicktrn

package.json

@@ -90,7 +90,8 @@
       "form-data@^4": "4.0.4",
       "axios@1.9.0": ">=1.12.0",
       "js-yaml@>=3.0.0 <3.14.2": "3.14.2",
-      "js-yaml@>=4.0.0 <4.1.1": "4.1.1"
+      "js-yaml@>=4.0.0 <4.1.1": "4.1.1",
+      "jws@<3.2.3": "3.2.3"
     },
     "onlyBuiltDependencies": [
       "@depot/cli",

packages/cli-v3/package.json

@@ -83,7 +83,7 @@
   "dependencies": {
     "@clack/prompts": "0.11.0",
     "@depot/cli": "0.0.1-cli.2.80.0",
-    "@modelcontextprotocol/sdk": "^1.17.0",
+    "@modelcontextprotocol/sdk": "^1.24.0",
     "@opentelemetry/api": "1.9.0",
     "@opentelemetry/api-logs": "0.203.0",
     "@opentelemetry/exporter-trace-otlp-http": "0.203.0",