From 798f2a46acce6d89ee166a0bfbd64c1e56e07003 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Nov 2026 01:37:09 +0000
Subject: [PATCH] chore(deps): bump the minor-and-patch group across 1
 directory with 2 updates

Bumps the minor-and-patch group with 2 updates in the /packages/cli directory: [axios](https://github.com/axios/axios) and [@x402/express](https://github.com/x402-foundation/x402).


Updates `axios` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.20.0...v1.21.0)

Updates `@x402/express` from 2.28.0 to 2.29.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/express@v2.28.0...npm-@x402/express@v2.29.0)

---
updated-dependencies:
- dependency-name: "@x402/express"
  dependency-version: 2.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: axios
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packages/cli/package-lock.json | 53 ++++++++++++++++++++--------------
 1 file changed, 32 insertions(+), 21 deletions(-)

diff --git a/packages/cli/package-lock.json b/packages/cli/package-lock.json
index caef706..8772f8c 100644
--- a/packages/cli/package-lock.json
+++ b/packages/cli/package-lock.json
@@ -251,17 +251,17 @@
       }
     },
     "node_modules/@x402/express": {
-      "version": "2.28.0",
-      "resolved": "https://registry.npmjs.org/@x402/express/-/express-2.28.0.tgz",
-      "integrity": "sha512-/94ZT89ce9Y92TgAxMuBQiS32BbvZOh0ZziMxTR8js2dbroEZ8po5guayy8zHOG79/x0p5GHJ/yoUUC4faMnvA==",
+      "version": "2.29.0",
+      "resolved": "https://registry.npmjs.org/@x402/express/-/express-2.29.0.tgz",
+      "integrity": "sha512-0Ka1740ye02ZjSN3VeiEt3Gt7iINvTCl9nlP6ttGKSsySLMeMuDXJOzSOuzUnkJxy4LBxpG4Z+w3F46mhn6AUA==",
       "license": "Apache-2.0",
       "dependencies": {
-        "@x402/core": "~2.28.0",
-        "@x402/extensions": "~2.28.0"
+        "@x402/core": "~2.29.0",
+        "@x402/extensions": "~2.29.0"
       },
       "peerDependencies": {
-        "@x402/paywall": "^2.28.0",
-        "express": "^4.0.0 || ^5.0.0"
+        "@x402/paywall": "^2.29.0",
+        "express": "^4.22.3 || ^5.3.0"
       },
       "peerDependenciesMeta": {
         "@x402/paywall": {
@@ -269,30 +269,39 @@
         }
       }
     },
+    "node_modules/@x402/express/node_modules/@x402/core": {
+      "version": "2.29.0",
+      "resolved": "https://registry.npmjs.org/@x402/core/-/core-2.29.0.tgz",
+      "integrity": "sha512-fkS0JqVwHgczteDlwItLRipOlIzm28U9HWLvYnYpnNbfmepoBT/4ux7LjrR0xGD51JHoC8/r+Qo7uCfoAQYeuw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "zod": "^4.6.6"
+      }
+    },
     "node_modules/@x402/extensions": {
-      "version": "2.28.0",
-      "resolved": "https://registry.npmjs.org/@x402/extensions/-/extensions-2.28.0.tgz",
-      "integrity": "sha512-M3SVxO8DJnx7gpok/ODQp803jr21s1XrCMholNw0hSgOVvSPRksfTZ+CUNfJwteNaHmaAxGjPelXWBhTCMD9oQ==",
+      "version": "2.29.0",
+      "resolved": "https://registry.npmjs.org/@x402/extensions/-/extensions-2.29.0.tgz",
+      "integrity": "sha512-FCpjZ6QR6ZtHTRZBV7VHMt7tc66LnTrpKDERiL3atXlLu4PlmgiulHt9PWE+Ktm5iUbXr3dAYZu2e7XrVd/XgA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/curves": "^1.9.0",
         "@scure/base": "^1.2.6",
         "@signinwithethereum/siwe": "^4.1.0",
-        "@x402/core": "~2.28.0",
-        "ajv": "^8.17.1",
+        "@x402/core": "~2.29.0",
+        "ajv": "^8.18.0",
         "jose": "^5.9.6",
         "tweetnacl": "^1.0.3",
         "viem": "^2.48.11",
-        "zod": "^3.24.2"
+        "zod": "^4.6.6"
       }
     },
-    "node_modules/@x402/extensions/node_modules/zod": {
-      "version": "3.25.76",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
-      "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
-      "license": "MIT",
-      "funding": {
-        "url": "https://github.com/sponsors/colinhacks"
+    "node_modules/@x402/extensions/node_modules/@x402/core": {
+      "version": "2.29.0",
+      "resolved": "https://registry.npmjs.org/@x402/core/-/core-2.29.0.tgz",
+      "integrity": "sha512-fkS0JqVwHgczteDlwItLRipOlIzm28U9HWLvYnYpnNbfmepoBT/4ux7LjrR0xGD51JHoC8/r+Qo7uCfoAQYeuw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "zod": "^4.6.6"
       }
     },
     "node_modules/@x402/fetch": {
@@ -380,7 +389,9 @@
       "license": "MIT"
     },
     "node_modules/axios": {
-      "version": "1.20.0",
+      "version": "1.21.0",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.21.0.tgz",
+      "integrity": "sha512-YCzXMB53Q9PZBsh7yN7wtapit4WepwcHS2fP8QhGsBxSz5YtgYobV7GGlWlAJi+RxfU77GQTQi2DSLUma42EYA==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.16.0",