diff --git a/Directory.Packages.props b/Directory.Packages.props
index e869e92..da8625c 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -23,14 +23,14 @@
 
   <!-- ASP.NET Core / hosting / auth -->
   <ItemGroup>
-    <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.AspNetCore.Authentication.Negotiate" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.AspNetCore.SignalR.Client" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.Extensions.Hosting" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.Extensions.Hosting.WindowsServices" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore" Version="10.0.10" />
-    <PackageVersion Include="System.DirectoryServices.Protocols" Version="10.0.10" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.Negotiate" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.AspNetCore.SignalR.Client" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Hosting" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Hosting.WindowsServices" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore" Version="10.0.11" />
+    <PackageVersion Include="System.DirectoryServices.Protocols" Version="10.0.11" />
     <PackageVersion Include="System.Diagnostics.EventLog" Version="10.0.10" />
     <PackageVersion Include="BCrypt.Net-Next" Version="4.2.0" />
   </ItemGroup>
@@ -39,28 +39,28 @@
   <ItemGroup>
     <!-- Keep every Microsoft.Extensions.* entry on the SAME servicing patch: Http 10.0.10
          transitively floors DependencyInjection at >= 10.0.10, and a mixed set trips NU1605. -->
-    <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.Extensions.Http" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.Extensions.Options.ConfigurationExtensions" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.Extensions.Configuration" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.Extensions.Configuration.Abstractions" Version="10.0.10" />
+    <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Http" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Options.ConfigurationExtensions" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Configuration" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Configuration.Abstractions" Version="10.0.11" />
     <!-- GetValue<T>() lives in the Binder package; WinRmSessionPool needs it to compile. -->
-    <PackageVersion Include="Microsoft.Extensions.Configuration.Binder" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.Extensions.Configuration.Json" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.Extensions.Configuration.CommandLine" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="10.0.10" />
+    <PackageVersion Include="Microsoft.Extensions.Configuration.Binder" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Configuration.Json" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Configuration.CommandLine" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="10.0.11" />
   </ItemGroup>
 
   <!-- Entity Framework Core / database drivers -->
   <ItemGroup>
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.10" />
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.10" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.11" />
     <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.3" />
     <PackageVersion Include="Npgsql" Version="10.0.3" />
     <PackageVersion Include="Microsoft.Data.SqlClient" Version="7.0.2" />
-    <PackageVersion Include="Microsoft.Data.Sqlite" Version="10.0.10" />
+    <PackageVersion Include="Microsoft.Data.Sqlite" Version="10.0.11" />
     <!-- Direct pin: Microsoft.Data.Sqlite 10.x still floors SQLitePCLRaw at 2.1.11, whose
          lib.e_sqlite3 bundles SQLite < 3.50.2 (GHSA-2m69-gcr7-jv3q / CVE-2025-6965, HIGH).
          The 3.x line ships SQLite 3.50.4+ (via SourceGear.sqlite3) and closes the CVE —
@@ -129,7 +129,7 @@
          2.9.0 is still 2.x so Swashbuckle's Models namespace stays compatible — do NOT take
          Microsoft.OpenApi 3.x while Swashbuckle 10.x asks for the 2.x surface.
          Also forced in Api.Tests over WireMock.Net.OpenApiParser's 2.4.1. -->
-    <PackageVersion Include="Microsoft.OpenApi" Version="2.11.0" />
+    <PackageVersion Include="Microsoft.OpenApi" Version="2.12.0" />
   </ItemGroup>
 
   <!-- Security-pinned floors over vulnerable transitives -->
@@ -139,7 +139,7 @@
          (GHSA-cvvh-rhrc-wg4q / -g8r8-53c2-pm3f / -23rf-6693-g89p / -8q5v-6pqq-x66h) is only
          cleared in 10.0.10. Force it. -->
     <PackageVersion Include="System.Security.Cryptography.Xml" Version="10.0.10" />
-    <PackageVersion Include="System.Security.Cryptography.ProtectedData" Version="10.0.10" />
+    <PackageVersion Include="System.Security.Cryptography.ProtectedData" Version="10.0.11" />
   </ItemGroup>
 
   <!-- CLI / MCP / misc -->
@@ -156,7 +156,7 @@
     <!-- CommandAppTester left Spectre.Console.Testing when the CLI split into its own
          package; the test harness needs this alongside the plain console test helpers. -->
     <PackageVersion Include="Spectre.Console.Cli.Testing" Version="0.55.0" />
-    <PackageVersion Include="ModelContextProtocol" Version="2.1.0" />
+    <PackageVersion Include="ModelContextProtocol" Version="2.2.0" />
     <PackageVersion Include="Newtonsoft.Json" Version="13.0.4" />
   </ItemGroup>
 
@@ -174,7 +174,7 @@
     <PackageVersion Include="coverlet.collector" Version="10.*" />
     <PackageVersion Include="Moq" Version="4.*" />
     <PackageVersion Include="FluentAssertions" Version="8.*" />
-    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.10" />
+    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.11" />
     <!-- 2.x asks for Scriban.Signed 7.2.5 itself, so the forced floor that used to sit here
          for GHSA-24c8-4792-22hx is gone — keeping it would only cap a future Scriban bump
          that WireMock wants. The Microsoft.OpenApi floor above is still load-bearing. -->
diff --git a/src/NodePilot.Ai/NodePilot.Ai.csproj b/src/NodePilot.Ai/NodePilot.Ai.csproj
index b756c7e..70ef0df 100644
--- a/src/NodePilot.Ai/NodePilot.Ai.csproj
+++ b/src/NodePilot.Ai/NodePilot.Ai.csproj
@@ -1,5 +1,6 @@
 <Project Sdk="Microsoft.NET.Sdk">
   <ItemGroup>
+    <PackageReference Include="Microsoft.Extensions.Configuration" />
     <PackageReference Include="Microsoft.Extensions.Http" />
     <PackageReference Include="Microsoft.Extensions.Options.ConfigurationExtensions" />
     <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" />
diff --git a/tests/NodePilot.TestCommons/NodePilot.TestCommons.csproj b/tests/NodePilot.TestCommons/NodePilot.TestCommons.csproj
index 66b8693..d5bef5a 100644
--- a/tests/NodePilot.TestCommons/NodePilot.TestCommons.csproj
+++ b/tests/NodePilot.TestCommons/NodePilot.TestCommons.csproj
@@ -7,6 +7,7 @@
   <ItemGroup>
     <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" />
     <!-- CVE-2025-6965: fixed SQLitePCLRaw 3.x native build (see Directory.Packages.props). -->
+    <PackageReference Include="Microsoft.Extensions.Configuration" />
     <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" />
   </ItemGroup>