chore: update 6 vulnerable packages in trmlabs/agent-vault

[trm-security-agent]

Security Update — Bundled Fix

This PR bundles security updates for 6 packages
across this repository. Each package was updated in its own commit so the
bundle can be reviewed commit-by-commit.

📦 Packages

Package	Current → New	CVE	Severity	Status
shell-quote	1.8.3 → 1.8.4	CVE-2026-9277	Critical (CVSS 9.2)	UPDATED
golang.org/x/net	0.54.0 → 0.55.0	CVE-2026-39821	N/A	UPDATED
axios	1.15.2 → 1.16.1	N/A (security update)	N/A	UPDATED
ws	8.20.0 → 8.21.0	CVE-2026-48779	High (CVSS 7.5)	UPDATED
protobufjs	7.5.5 → 7.5.6	N/A (security update)	N/A	UPDATED
go.opentelemetry.io/otel	1.39.0 → 1.41.0	CVE-2026-29181	High (CVSS 7.5)	UPDATED

🛡️ Per-Package Detail

CVE-2026-9277 — shell-quote (1.8.3 → 1.8.4)

• Severity: Critical — CVSS v4 9.2 / CVSS v3 8.1
• Vulnerability: The quote() function fails to escape newline characters in object .op values. POSIX shells treat literal \n as a command separator, enabling shell command injection (CWE-77, CWE-78).
• Version rationale: 1.8.4 is the latest patch in the 1.8.x line and the exact fix version.
• Sources:
  • https://osv.dev/vulnerability/CVE-2026-9277
  • https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md

CVE-2026-39821 — golang.org/x/net (0.54.0 → 0.55.0)

• Severity: Not yet scored by NVD
• Vulnerability: Improper validation in idna.ToASCII and idna.ToUnicode — these functions incorrectly accept Punycode-encoded labels that decode to ASCII-only labels (e.g. xn--example-.com → example.com), enabling hostname security check bypasses.
• Version rationale: v0.55.0 is the exact fix version.
• Sources:
  • https://osv.dev/vulnerability/CVE-2026-39821
  • https://pkg.go.dev/vuln/GO-2026-5026

Security update — axios (1.15.2 → 1.16.1)

• Severity: No CVE assigned; security-adjacent hardening
• Vulnerability: The fetch adapter ignored maxBodyLength/maxContentLength settings; proxy header handling could overwrite custom Host headers; URL credential decoding and protocol parsing improvements.
• Version rationale: 1.16.1 is the latest patch in the 1.16.x line.
• Sources:
  • https://github.com/axios/axios/releases

CVE-2026-48779 — ws (8.20.0 → 8.21.0)

• Severity: High — CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
• Vulnerability: Denial-of-service via tiny data fragments sent at high volume — structural wrappers consume far more memory than the documented maxPayload limit, causing OOM crashes.
• Version rationale: 8.21.0 is the exact fix version for the 8.x line.
• Sources:
  • https://osv.dev/vulnerability/CVE-2026-48779

Security update — protobufjs (7.5.5 → 7.5.6)

• Severity: No CVE assigned
• Vulnerability: Security update per upstream advisory.
• Version rationale: 7.5.6 is the minimum fixed version; selected as exact patch.
• Sources:
  • https://www.npmjs.com/package/protobufjs

CVE-2026-29181 — go.opentelemetry.io/otel (1.39.0 → 1.41.0)

• Severity: High — CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
• Vulnerability: Multi-value baggage: header extraction parses each header field-value independently, allowing CPU/memory amplification via many baggage: header lines. Leads to remote denial of service.
• Version rationale: v1.41.0 is the exact fix version. Also updated otel/metric and otel/trace to matching v1.41.0.
• Sources:
  • https://osv.dev/vulnerability/CVE-2026-29181

✅ Validation

• Each package version updated in its manifest
• Lock file regenerated with minimal diff
• Commits map 1:1 to package updates
• CI green

📋 Reviewer Checklist

• All listed CVEs are addressed by the chosen versions
• No MAJOR version jumps introduced
• Lock file diff is minimal (no unrelated package churn)
• Breaking changes from changelogs flagged below if present

🤖 Automation Note

This PR was generated by TRM Security Agent (PATCH skill, bundled mode).