diff --git a/op/console/package.json b/op/console/package.json
index 23bcc29d..47f3af62 100644
--- a/op/console/package.json
+++ b/op/console/package.json
@@ -7,7 +7,7 @@
     "dompurify": "^3.4.12"
   },
   "devDependencies": {
-    "@cyclonedx/cdxgen": "^12.7.1",
+    "@cyclonedx/cdxgen": "^12.8.0",
     "esbuild": "^0.28.1",
     "vite": "^8.1.5"
   },
diff --git a/op/console/pnpm-lock.yaml b/op/console/pnpm-lock.yaml
index 6dd414e3..04d96b94 100644
--- a/op/console/pnpm-lock.yaml
+++ b/op/console/pnpm-lock.yaml
@@ -25,8 +25,8 @@ importers:
         version: 3.4.12
     devDependencies:
       '@cyclonedx/cdxgen':
-        specifier: ^12.7.1
-        version: 12.7.1
+        specifier: ^12.8.0
+        version: 12.8.0
       esbuild:
         specifier: ^0.28.1
         version: 0.28.1
@@ -181,9 +181,9 @@ packages:
     engines: {node: '>=20.0.0'}
     hasBin: true
 
-  '@cyclonedx/cdxgen@12.7.1':
-    resolution: {integrity: sha512-TQv1jYgT/bEL2Mv3wOmZ9JBUEk+wM1pmUqz2yFbMWWQ0YOr/OH1edaZy/IRLrZcIXeFNkgOlmR/+3EkiXBGJeA==}
-    engines: {node: ^20 || ^22 || ^24 || ^25, pnpm: '>=10'}
+  '@cyclonedx/cdxgen@12.8.0':
+    resolution: {integrity: sha512-l8QYX3bfYxfKCkwMwp4F8MM0IpuOMV+tmzJiCa6ffIhiSVmTuTqQzrGIaJ6Tt7HJioIP88iiq3RW5Ax6yZZjAw==}
+    engines: {node: ^20 || ^22 || ^24 || ^25 || ^26, pnpm: '>=10'}
     hasBin: true
 
   '@emnapi/core@1.11.1':
@@ -813,8 +813,8 @@ packages:
     resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
     engines: {node: '>= 0.4'}
 
-  edn-data@1.1.2:
-    resolution: {integrity: sha512-RI1i17URvOrBtSNEccbsXkuUZdc67QUBMqXGF62KPek85EdFGS2UKw76hNhOBl5kK4h7V4d32Ut15b/XVwKEXA==}
+  edn-data@1.2.0:
+    resolution: {integrity: sha512-LcP4Z+6AwKgxanOT6iTpl2Mww9PELY57CkWnGsmYvG627psQ1W2TyFKZ0s/xys5BsQGRIDZX37WICpTeVixiPQ==}
     engines: {node: '>=12.0.0'}
 
   ee-first@1.1.1:
@@ -1316,8 +1316,8 @@ packages:
     resolution: {integrity: sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==}
     engines: {node: '>=12'}
 
-  tar@7.5.17:
-    resolution: {integrity: sha512-wPEBwzapC+2PaTYPH6e2L+cNOEE227S47wUYFqlegcs8zlLLmeb9Fcff1HVZY4Fwku/1Eyv38n7GYwB2aaS71g==}
+  tar@7.5.20:
+    resolution: {integrity: sha512-9FcyK4PA6+WbzlTM9WhQm6vB5W7cP7dUiPsv1g7YDwEQnQ1CGpK3MGlKk/ITVWMk05kHZuBhmVhiv8LZoy/PFQ==}
     engines: {node: '>=18'}
 
   tinyglobby@0.2.17:
@@ -1712,7 +1712,7 @@ snapshots:
       '@cdxgen/safer-exec-linux-arm64': 0.15.0
     optional: true
 
-  '@cyclonedx/cdxgen@12.7.1':
+  '@cyclonedx/cdxgen@12.8.0':
     dependencies:
       '@babel/parser': 7.29.7
       '@babel/traverse': 7.29.7
@@ -1726,7 +1726,7 @@ snapshots:
       ajv-formats: 3.0.1(ajv@8.20.0)
       cheerio: 1.2.0
       common-ancestor-path: 1.0.1
-      edn-data: 1.1.2
+      edn-data: 1.2.0
       glob: 13.0.6
       json-stringify-nice: 1.1.4
       node-stream-zip: 1.15.0
@@ -1736,7 +1736,7 @@ snapshots:
       read-package-json-fast: 5.0.0
       semver: 7.8.5
       ssri: 13.0.1
-      tar: 7.5.17
+      tar: 7.5.20
       treeverse: 3.0.0
       undici: 7.28.0
       walk-up-path: 4.0.0
@@ -2308,7 +2308,7 @@ snapshots:
       gopd: 1.2.0
     optional: true
 
-  edn-data@1.1.2: {}
+  edn-data@1.2.0: {}
 
   ee-first@1.1.1:
     optional: true
@@ -2827,7 +2827,7 @@ snapshots:
     dependencies:
       ansi-regex: 6.2.2
 
-  tar@7.5.17:
+  tar@7.5.20:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0