diff --git a/examples/basic/package.json b/examples/basic/package.json
index 28f7c3f..0b07459 100644
--- a/examples/basic/package.json
+++ b/examples/basic/package.json
@@ -11,8 +11,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@norbix.ai/react-redux": "^0.1.0",
-    "@norbix.ai/ts": "^1.3.0",
+    "@norbix.ai/react-redux": "^1.8.2",
+    "@norbix.ai/ts": "^4.11.0",
     "@reduxjs/toolkit": "^2.12.0",
     "react": "^19.2.5",
     "react-dom": "^19.2.5",
diff --git a/osv-scanner.toml b/osv-scanner.toml
index 69dfd76..be5bf4d 100644
--- a/osv-scanner.toml
+++ b/osv-scanner.toml
@@ -63,3 +63,8 @@ reason = "dev-only: bundled inside the npm CLI that @semantic-release/npm runs a
 id = "GHSA-rfgv-xxqx-mfg5"  # undici 6.28.0 (npm bundle)
 ignoreUntil = 2026-11-03
 reason = "dev-only: bundled inside the npm CLI that @semantic-release/npm runs at release time; the latest npm 11 (11.21.0, the range semantic-release accepts) still bundles this version and overrides cannot change bundled packages. Not part of the published package."
+
+[[IgnoredVulns]]
+id = "GHSA-rj75-hqrm-r3gf"  # postcss-selector-parser 7.1.4 (npm bundle)
+ignoreUntil = 2026-11-03
+reason = "dev-only: bundled inside the npm CLI that @semantic-release/npm runs at release time; the latest npm 11 (11.21.0) still bundles 7.1.4 and overrides cannot change bundled packages. Not part of the published package."
diff --git a/package-lock.json b/package-lock.json
index aaaefad..5ce970c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10312,9 +10312,9 @@
       }
     },
     "node_modules/source-map-js": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
-      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
       "dev": true,
       "license": "BSD-3-Clause",
       "engines": {