diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index 48ab81483f..fbfc2a5162 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -26,4 +26,4 @@ jobs:
           path-to-signatures: 'signatures/version1/cla.json'
           path-to-document: 'https://github.com/latitude-dev/latitude-llm/blob/main/cla.md'
           branch: 'signatures'
-          allowlist: geclos,cesr,csansoon,andresgutgon,neoxelox,claude
+          allowlist: geclos,cesr,csansoon,andresgutgon,neoxelox,claude,dependabot
diff --git a/apps/web/package.json b/apps/web/package.json
index 1fa5a2b653..0f92d0ffc6 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -57,8 +57,8 @@
     "lodash-es": "4.17.21",
     "lucia": "3.2.0",
     "monaco-editor": "0.50.0",
-    "nanoid": "5.0.9",
     "next": "15.5.4",
+    "nanoid": "5.1.5",
     "next-themes": "0.3.0",
     "nextjs-toploader": "1.6.12",
     "nprogress": "0.2.0",
diff --git a/packages/core/package.json b/packages/core/package.json
index ebed433328..eb074e2efe 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -189,7 +189,7 @@
     "lodash-es": "4.17.21",
     "loops": "3.3.0",
     "mustache": "4.2.0",
-    "nanoid": "5.0.9",
+    "nanoid": "5.1.5",
     "nodemailer": "6.9.14",
     "nodemailer-html-to-text": "3.2.0",
     "nodemailer-mailgun-transport": "2.1.5",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 02c1b6af2c..14c119c417 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -221,7 +221,7 @@ importers:
         version: link:../../packages/env
       '@latitude-data/sdk':
         specifier: 5.1.0
-        version: link:../../packages/sdks/typescript
+        version: 5.1.0(typescript@5.8.3)(ws@8.18.3(bufferutil@4.0.9)(utf-8-validate@6.0.5))
       '@latitude-data/socket.io-react-hook':
         specifier: 2.4.5
         version: 2.4.5(bufferutil@4.0.9)(react@19.0.0-rc-5d19e1c8-20240923)(utf-8-validate@6.0.5)
@@ -322,8 +322,8 @@ importers:
         specifier: 0.50.0
         version: 0.50.0
       nanoid:
-        specifier: 5.0.9
-        version: 5.0.9
+        specifier: 5.1.5
+        version: 5.1.5
       next:
         specifier: 15.5.4
         version: 15.5.4(@opentelemetry/api@1.8.0)(react-dom@19.0.0-rc-5d19e1c8-20240923(react@19.0.0-rc-5d19e1c8-20240923))(react@19.0.0-rc-5d19e1c8-20240923)
@@ -597,7 +597,7 @@ importers:
     dependencies:
       '@latitude-data/sdk':
         specifier: ^5.1.0
-        version: link:../sdks/typescript
+        version: 5.1.0(typescript@5.8.3)(ws@8.18.3(bufferutil@4.0.9)(utf-8-validate@6.0.5))
       chalk:
         specifier: ^5.4.1
         version: 5.4.1
@@ -911,8 +911,8 @@ importers:
         specifier: 4.2.0
         version: 4.2.0
       nanoid:
-        specifier: 5.0.9
-        version: 5.0.9
+        specifier: 5.1.5
+        version: 5.1.5
       nodemailer:
         specifier: 6.9.14
         version: 6.9.14
@@ -3587,6 +3587,11 @@ packages:
     peerDependencies:
       '@langchain/core': '>=0.2.21 <0.4.0'
 
+  '@latitude-data/sdk@5.1.0':
+    resolution: {integrity: sha512-AIV8ilhXY46Rz8uAnNtxoMIYWbcPIPkjskVJvgQDDsnTD1BJ9QXZevJMgO2tms55JJZb3sB6Lciw1zoEtPkKUw==}
+    peerDependencies:
+      typescript: ^5.5.4
+
   '@latitude-data/socket.io-react-hook@2.4.5':
     resolution: {integrity: sha512-otajd00jgJw6+wHM7LRjUuE+wg6vb0U8aQxyDdEFBTCf7BXIxvv94piXGZW2YivR0b41Gmh4qWgjodI/8TcE9g==}
     peerDependencies:
@@ -11161,8 +11166,8 @@ packages:
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
     hasBin: true
 
-  nanoid@5.0.9:
-    resolution: {integrity: sha512-Aooyr6MXU6HpvvWXKoVoXwKMs/KyVakWwg7xQfv5/S/RIgJMy0Ifa45H9qqYy7pTCszrHzP21Uk4PZq2HpEM8Q==}
+  nanoid@5.1.5:
+    resolution: {integrity: sha512-Ir/+ZpE9fDsNH0hQ3C68uyThDXzYcim2EqcZ8zn8Chtt1iylPT9xXJB0kPCnqzgcEGikO9RxSrh63MsmVCU7Fw==}
     engines: {node: ^18 || >=20}
     hasBin: true
 
@@ -12062,6 +12067,9 @@ packages:
     resolution: {integrity: sha512-7PiHtLll5LdnKIMw100I+8xJXR5gW2QwWYkT6iJva0bXitZKa/XMrSbdmg3r2Xnaidz9Qumd0VPaMrZlF9V9sA==}
     engines: {node: '>=0.4.0'}
 
+  promptl-ai@0.7.5:
+    resolution: {integrity: sha512-qDJggAR34qqxc5/X6xqagMCVNVQK8U3ycohtKJNG1/1Ap5VJ/UzF4ERphWAmLrspl4KYcT2ITKQhq28TAcw3Qg==}
+
   promptl-ai@0.7.6:
     resolution: {integrity: sha512-pBSP296CCB25hGZ+BfectGoF8hsVbdkYITi58JJzklZzcEemIcnMLjrcofXX+9Yv0EpfB7W6ORPX/pNLmQAayQ==}
 
@@ -17159,6 +17167,17 @@ snapshots:
       '@langchain/core': 0.3.57(openai@4.104.0(ws@8.18.3(bufferutil@4.0.9)(utf-8-validate@6.0.5))(zod@3.24.2))
       js-tiktoken: 1.0.20
 
+  '@latitude-data/sdk@5.1.0(typescript@5.8.3)(ws@8.18.3(bufferutil@4.0.9)(utf-8-validate@6.0.5))':
+    dependencies:
+      eventsource-parser: 2.0.1
+      node-fetch: 2.7.0
+      promptl-ai: 0.7.5(ws@8.18.3(bufferutil@4.0.9)(utf-8-validate@6.0.5))
+      typescript: 5.8.3
+      zod: 3.24.2
+    transitivePeerDependencies:
+      - encoding
+      - ws
+
   '@latitude-data/socket.io-react-hook@2.4.5(bufferutil@4.0.9)(react@19.0.0-rc-5d19e1c8-20240923)(utf-8-validate@6.0.5)':
     dependencies:
       parseuri: 0.0.6
@@ -26564,7 +26583,7 @@ snapshots:
 
   nanoid@3.3.11: {}
 
-  nanoid@5.0.9: {}
+  nanoid@5.1.5: {}
 
   napi-build-utils@2.0.0: {}
 
@@ -27607,6 +27626,19 @@ snapshots:
 
   progress@2.0.3: {}
 
+  promptl-ai@0.7.5(ws@8.18.3(bufferutil@4.0.9)(utf-8-validate@6.0.5)):
+    dependencies:
+      acorn: 8.15.0
+      code-red: 1.0.4
+      fast-sha256: 1.3.0
+      locate-character: 3.0.0
+      openai: 4.104.0(ws@8.18.3(bufferutil@4.0.9)(utf-8-validate@6.0.5))(zod@3.25.76)
+      yaml: 2.4.5
+      zod: 3.25.76
+    transitivePeerDependencies:
+      - encoding
+      - ws
+
   promptl-ai@0.7.6(ws@8.18.2(bufferutil@4.0.9)(utf-8-validate@6.0.5)):
     dependencies:
       acorn: 8.15.0