diff --git a/packages/cli/package-lock.json b/packages/cli/package-lock.json
index caef706..8772f8c 100644
--- a/packages/cli/package-lock.json
+++ b/packages/cli/package-lock.json
@@ -251,17 +251,17 @@
       }
     },
     "node_modules/@x402/express": {
-      "version": "2.28.0",
-      "resolved": "https://registry.npmjs.org/@x402/express/-/express-2.28.0.tgz",
-      "integrity": "sha512-/94ZT89ce9Y92TgAxMuBQiS32BbvZOh0ZziMxTR8js2dbroEZ8po5guayy8zHOG79/x0p5GHJ/yoUUC4faMnvA==",
+      "version": "2.29.0",
+      "resolved": "https://registry.npmjs.org/@x402/express/-/express-2.29.0.tgz",
+      "integrity": "sha512-0Ka1740ye02ZjSN3VeiEt3Gt7iINvTCl9nlP6ttGKSsySLMeMuDXJOzSOuzUnkJxy4LBxpG4Z+w3F46mhn6AUA==",
       "license": "Apache-2.0",
       "dependencies": {
-        "@x402/core": "~2.28.0",
-        "@x402/extensions": "~2.28.0"
+        "@x402/core": "~2.29.0",
+        "@x402/extensions": "~2.29.0"
       },
       "peerDependencies": {
-        "@x402/paywall": "^2.28.0",
-        "express": "^4.0.0 || ^5.0.0"
+        "@x402/paywall": "^2.29.0",
+        "express": "^4.22.3 || ^5.3.0"
       },
       "peerDependenciesMeta": {
         "@x402/paywall": {
@@ -269,30 +269,39 @@
         }
       }
     },
+    "node_modules/@x402/express/node_modules/@x402/core": {
+      "version": "2.29.0",
+      "resolved": "https://registry.npmjs.org/@x402/core/-/core-2.29.0.tgz",
+      "integrity": "sha512-fkS0JqVwHgczteDlwItLRipOlIzm28U9HWLvYnYpnNbfmepoBT/4ux7LjrR0xGD51JHoC8/r+Qo7uCfoAQYeuw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "zod": "^4.6.6"
+      }
+    },
     "node_modules/@x402/extensions": {
-      "version": "2.28.0",
-      "resolved": "https://registry.npmjs.org/@x402/extensions/-/extensions-2.28.0.tgz",
-      "integrity": "sha512-M3SVxO8DJnx7gpok/ODQp803jr21s1XrCMholNw0hSgOVvSPRksfTZ+CUNfJwteNaHmaAxGjPelXWBhTCMD9oQ==",
+      "version": "2.29.0",
+      "resolved": "https://registry.npmjs.org/@x402/extensions/-/extensions-2.29.0.tgz",
+      "integrity": "sha512-FCpjZ6QR6ZtHTRZBV7VHMt7tc66LnTrpKDERiL3atXlLu4PlmgiulHt9PWE+Ktm5iUbXr3dAYZu2e7XrVd/XgA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/curves": "^1.9.0",
         "@scure/base": "^1.2.6",
         "@signinwithethereum/siwe": "^4.1.0",
-        "@x402/core": "~2.28.0",
-        "ajv": "^8.17.1",
+        "@x402/core": "~2.29.0",
+        "ajv": "^8.18.0",
         "jose": "^5.9.6",
         "tweetnacl": "^1.0.3",
         "viem": "^2.48.11",
-        "zod": "^3.24.2"
+        "zod": "^4.6.6"
       }
     },
-    "node_modules/@x402/extensions/node_modules/zod": {
-      "version": "3.25.76",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
-      "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
-      "license": "MIT",
-      "funding": {
-        "url": "https://github.com/sponsors/colinhacks"
+    "node_modules/@x402/extensions/node_modules/@x402/core": {
+      "version": "2.29.0",
+      "resolved": "https://registry.npmjs.org/@x402/core/-/core-2.29.0.tgz",
+      "integrity": "sha512-fkS0JqVwHgczteDlwItLRipOlIzm28U9HWLvYnYpnNbfmepoBT/4ux7LjrR0xGD51JHoC8/r+Qo7uCfoAQYeuw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "zod": "^4.6.6"
       }
     },
     "node_modules/@x402/fetch": {
@@ -380,7 +389,9 @@
       "license": "MIT"
     },
     "node_modules/axios": {
-      "version": "1.20.0",
+      "version": "1.21.0",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.21.0.tgz",
+      "integrity": "sha512-YCzXMB53Q9PZBsh7yN7wtapit4WepwcHS2fP8QhGsBxSz5YtgYobV7GGlWlAJi+RxfU77GQTQi2DSLUma42EYA==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.16.0",