diff --git a/.github/workflows/create-pr.yml b/.github/workflows/create-pr.yml
index 5c0614e..82c9369 100644
--- a/.github/workflows/create-pr.yml
+++ b/.github/workflows/create-pr.yml
@@ -31,6 +31,10 @@ on:
         type: boolean
         default: true
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   create-pr:
     runs-on: ubuntu-latest # Use GitHub-hosted runners for memory-intensive git/Claude operations
diff --git a/package-lock.json b/package-lock.json
index 0b59b37..20d1459 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,12 +9,12 @@
       "version": "0.3.19",
       "license": "Apache-2.0",
       "dependencies": {
-        "@aws-sdk/client-sns": "^3.893.0",
+        "@aws-sdk/client-sns": "^3.1000.0",
         "@robosystems/client": "^0.2.32",
         "flowbite": "^3.1",
         "flowbite-react": "^0.12.5",
         "intuit-oauth": "^4.1.0",
-        "lru-cache": "^11.2.4",
+        "lru-cache": "^11.2.6",
         "next": "^16.1.6",
         "plaid": "^36",
         "react": "^19",
@@ -33,7 +33,7 @@
         "sync-subtree": "bin/sync-subtree.sh"
       },
       "devDependencies": {
-        "@next/eslint-plugin-next": "^15.5.6",
+        "@next/eslint-plugin-next": "^16.2.1",
         "@tailwindcss/postcss": "^4.1.11",
         "@tailwindcss/typography": "^0.5",
         "@testing-library/jest-dom": "^6",
@@ -2670,9 +2670,9 @@
       "license": "MIT"
     },
     "node_modules/@next/eslint-plugin-next": {
-      "version": "15.5.14",
-      "resolved": "https://registry.npmjs.org/@next/eslint-plugin-next/-/eslint-plugin-next-15.5.14.tgz",
-      "integrity": "sha512-ogBjgsFrPPz19abP3VwcYSahbkUOMMvJjxCOYWYndw+PydeMuLuB4XrvNkNutFrTjC9St2KFULRdKID8Sd/CMQ==",
+      "version": "16.2.1",
+      "resolved": "https://registry.npmjs.org/@next/eslint-plugin-next/-/eslint-plugin-next-16.2.1.tgz",
+      "integrity": "sha512-r0epZGo24eT4g08jJlg2OEryBphXqO8aL18oajoTKLzHJ6jVr6P6FI58DLMug04MwD3j8Fj0YK0slyzneKVyzA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -7126,16 +7126,6 @@
         }
       }
     },
-    "node_modules/eslint-config-next/node_modules/@next/eslint-plugin-next": {
-      "version": "16.2.1",
-      "resolved": "https://registry.npmjs.org/@next/eslint-plugin-next/-/eslint-plugin-next-16.2.1.tgz",
-      "integrity": "sha512-r0epZGo24eT4g08jJlg2OEryBphXqO8aL18oajoTKLzHJ6jVr6P6FI58DLMug04MwD3j8Fj0YK0slyzneKVyzA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "fast-glob": "3.3.1"
-      }
-    },
     "node_modules/eslint-config-next/node_modules/eslint-plugin-react-hooks": {
       "version": "7.0.1",
       "resolved": "https://registry.npmjs.org/eslint-plugin-react-hooks/-/eslint-plugin-react-hooks-7.0.1.tgz",
diff --git a/package.json b/package.json
index a2578be..c7733ce 100644
--- a/package.json
+++ b/package.json
@@ -42,12 +42,12 @@
     "setup:bootstrap": "./bin/bootstrap.sh"
   },
   "dependencies": {
-    "@aws-sdk/client-sns": "^3.893.0",
+    "@aws-sdk/client-sns": "^3.1000.0",
     "@robosystems/client": "^0.2.32",
     "flowbite": "^3.1",
     "flowbite-react": "^0.12.5",
     "intuit-oauth": "^4.1.0",
-    "lru-cache": "^11.2.4",
+    "lru-cache": "^11.2.6",
     "next": "^16.1.6",
     "plaid": "^36",
     "react": "^19",
@@ -57,11 +57,8 @@
     "react-plaid-link": "^4",
     "tailwind-merge": "^3"
   },
-  "overrides": {
-    "fast-xml-parser": "^5.3.4"
-  },
   "devDependencies": {
-    "@next/eslint-plugin-next": "^15.5.6",
+    "@next/eslint-plugin-next": "^16.2.1",
     "@tailwindcss/postcss": "^4.1.11",
     "@tailwindcss/typography": "^0.5",
     "@testing-library/jest-dom": "^6",