diff --git a/package-lock.json b/package-lock.json
index e488a49d..026e9b69 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -379,6 +379,16 @@
         "node": ">=0.1.90"
       }
     },
+    "node_modules/@cto.af/wtf8": {
+      "version": "0.0.5",
+      "resolved": "https://registry.npmjs.org/@cto.af/wtf8/-/wtf8-0.0.5.tgz",
+      "integrity": "sha512-LfUFi+Vv4eDzj+XAtR89e3wwjXA/NZjUSwU5NhwbBrLecxPaBYFy3exCuc1j+D4UZeOVdqlsl8G7LmOt18V0tg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20"
+      }
+    },
     "node_modules/@gar/promise-retry": {
       "version": "1.0.3",
       "resolved": "https://registry.npmjs.org/@gar/promise-retry/-/promise-retry-1.0.3.tgz",
@@ -2206,9 +2216,9 @@
       "license": "MIT"
     },
     "node_modules/ava": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/ava/-/ava-8.0.0.tgz",
-      "integrity": "sha512-KMUyT3LcnZ/5ipDAqnTGn6PQUvr1Jk4dex3v7ieQrGaMlAblfIpMLwK56HfPcObvJEzyhCWXfZjbM98FeAy0oQ==",
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/ava/-/ava-8.0.1.tgz",
+      "integrity": "sha512-YlwwL5HX2EJRE75e2LR8nio8lKAJ702sFbv0QYnhzngAjyo9wB+Xg4JZh5f432khlWfVD5OQ93rrRopEXJptpg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2219,7 +2229,7 @@
         "arrgv": "^1.0.2",
         "arrify": "^3.0.0",
         "callsites": "^4.2.0",
-        "cbor": "^10.0.12",
+        "cbor2": "^2.3.0",
         "chalk": "^5.6.2",
         "chunkd": "^2.0.1",
         "ci-info": "^4.4.0",
@@ -2257,7 +2267,7 @@
         "ava": "entrypoints/cli.js"
       },
       "engines": {
-        "node": "^22.20 || ^24.12 || >=25"
+        "node": "^22.20 || ^24.12 || >=26"
       },
       "peerDependencies": {
         "@ava/typescript": "*"
@@ -2907,14 +2917,14 @@
       ],
       "license": "CC-BY-4.0"
     },
-    "node_modules/cbor": {
-      "version": "10.0.12",
-      "resolved": "https://registry.npmjs.org/cbor/-/cbor-10.0.12.tgz",
-      "integrity": "sha512-exQDevYd7ZQLP4moMQcZkKCVZsXLAtUSflObr3xTh4xzFIv/xBCdvCd6L259kQOUP2kcTC0jvC6PpZIf/WmRXA==",
+    "node_modules/cbor2": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/cbor2/-/cbor2-2.3.0.tgz",
+      "integrity": "sha512-76WB3hq8BoaGkMkBVJ27fW5LJU+qqDLEpgRNCG/SYKhODWXpVPOTD4UcUto3IEzYLA52nsvbhb0wabhHDn3qXg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "nofilter": "^3.0.2"
+        "@cto.af/wtf8": "0.0.5"
       },
       "engines": {
         "node": ">=20"
@@ -7814,16 +7824,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/nofilter": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/nofilter/-/nofilter-3.1.0.tgz",
-      "integrity": "sha512-l2NNj07e9afPnhAhvgVrCD/oy2Ai1yfLpuo3EpiO1jFTsB4sFz6oIfAfSZyQzVpkZQ9xS8ZS5g1jCBgq4Hwo0g==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=12.19"
-      }
-    },
     "node_modules/noise-curve-ed": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/noise-curve-ed/-/noise-curve-ed-2.1.0.tgz",