Lower dependency cooldown to 4 days and update packages

CONTRIBUTING.md

@@ -63,8 +63,8 @@ pnpm link --global
 mcpc --help
 ```
 
-As a supply-chain hardening measure, `pnpm-workspace.yaml` sets `minimumReleaseAge: 10080`, so newly
-published third-party packages aren't installed until they're at least 7 days old. If a fresh
+As a supply-chain hardening measure, `pnpm-workspace.yaml` sets `minimumReleaseAge: 5760`, so newly
+published third-party packages aren't installed until they're at least 4 days old. If a fresh
 dependency bump seems "stuck," that's why — wait it out, or add a targeted exclusion in
 `minimumReleaseAgeExclude` if you have a justified reason.
 

package.json

@@ -61,13 +61,13 @@
     "@modelcontextprotocol/client": "2.3.1",
     "@modelcontextprotocol/core": "2.3.1",
     "@modelcontextprotocol/sdk": "^1.32.1",
-    "@napi-rs/keyring": "2.1.1",
+    "@napi-rs/keyring": "2.1.2",
     "chalk": "^6.0.1",
     "commander": "^15.0.0",
     "ora": "^9.4.1",
     "proper-lockfile": "^4.1.2",
     "qrcode-terminal": "^0.12.0",
-    "undici": "^7.30.0"
+    "undici": "^7.30.1"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
@@ -77,22 +77,22 @@
     "@types/node": "^26.6.5",
     "@types/proper-lockfile": "^4.1.4",
     "@types/qrcode-terminal": "^0.12.2",
-    "@vitest/coverage-v8": "5.0.4",
+    "@vitest/coverage-v8": "5.0.5",
     "c8": "^12.0.0",
     "doctoc": "^2.5.0",
     "esbuild": "^0.28.2",
-    "eslint": "^10.12.0",
+    "eslint": "^10.13.0",
     "globals": "^17.13.0",
     "markdown-link-check": "^3.15.0",
     "nyc": "^18.0.0",
     "prettier": "^3.9.10",
     "proxy-chain": "^3.0.1",
     "tsx": "^4.23.15",
     "typescript": "^6.0.3",
-    "typescript-eslint": "^8.71.2",
-    "viem": "^2.57.5",
-    "vite": "^8.3.4",
-    "vitest": "5.0.4"
+    "typescript-eslint": "^8.72.0",
+    "viem": "^2.57.10",
+    "vite": "^8.3.5",
+    "vitest": "5.0.5"
   },
   "packageManager": "pnpm@10.33.4",
   "devEngines": {