diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9dbf8290ef..0e4363e651 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -29,12 +29,12 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.4
+        uses: github/codeql-action/init@v4.37.6
         with:
           languages: ${{ matrix.language }}
           build-mode: none
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.37.4
+        uses: github/codeql-action/analyze@v4.37.6
         with:
           category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/docs-code-ci.yml b/.github/workflows/docs-code-ci.yml
index f2098e60b9..558ab3f40d 100644
--- a/.github/workflows/docs-code-ci.yml
+++ b/.github/workflows/docs-code-ci.yml
@@ -56,7 +56,7 @@ jobs:
         run: npm test
 
       - name: Validate Worker bundle
-        run: npx wrangler@4.118.0 deploy --dry-run --config wrangler.toml
+        run: npx wrangler@4.119.0 deploy --dry-run --config wrangler.toml
 
       - name: Build shell artifact
         run: npm run docs:build:r2:shell
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 0828a62746..36a784c800 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -53,7 +53,7 @@ jobs:
         run: npm ci
 
       - name: Validate Worker bundle
-        run: npx wrangler@4.118.0 deploy --dry-run --config wrangler.toml
+        run: npx wrangler@4.119.0 deploy --dry-run --config wrangler.toml
 
       - name: Deploy to Cloudflare
         if: github.event_name == 'workflow_dispatch' && inputs.deploy_worker == true
@@ -61,7 +61,7 @@ jobs:
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
         run: |
-          npx wrangler@4.118.0 deploy --config wrangler.toml \
+          npx wrangler@4.119.0 deploy --config wrangler.toml \
             --tag "${GITHUB_SHA::12}" \
             --message "openclaw/docs ${GITHUB_SHA}"
 
diff --git a/.github/workflows/r2-pages.yml b/.github/workflows/r2-pages.yml
index 55bf688c05..a8416cfc68 100644
--- a/.github/workflows/r2-pages.yml
+++ b/.github/workflows/r2-pages.yml
@@ -357,7 +357,7 @@ jobs:
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
         run: |
-          npx wrangler@4.118.0 deploy --config wrangler.toml \
+          npx wrangler@4.119.0 deploy --config wrangler.toml \
             --tag "${GITHUB_SHA::12}" \
             --message "openclaw/docs ${GITHUB_SHA}"
 
diff --git a/.github/workflows/translate-locale-reusable.yml b/.github/workflows/translate-locale-reusable.yml
index b7ba98b087..281e4d2d76 100644
--- a/.github/workflows/translate-locale-reusable.yml
+++ b/.github/workflows/translate-locale-reusable.yml
@@ -142,7 +142,7 @@ jobs:
 
       - name: Install Codex CLI
         if: steps.stale.outputs.skip != 'true'
-        run: npm install -g @openai/codex@0.146.0
+        run: npm install -g @openai/codex@0.146.1
 
       - name: Prune stale locale pages
         if: steps.stale.outputs.skip != 'true'
diff --git a/package-lock.json b/package-lock.json
index ecfe02371c..c05ac98d94 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15,7 +15,7 @@
         "lucide": "1.28.0",
         "markdown-it": "15.0.0",
         "markdown-it-anchor": "9.2.1",
-        "mermaid": "11.16.0",
+        "mermaid": "11.16.1",
         "pagefind": "1.5.2",
         "playwright": "^1.62.1",
         "yaml": "2.9.0"
@@ -2363,9 +2363,9 @@
       "license": "MIT"
     },
     "node_modules/mermaid": {
-      "version": "11.16.0",
-      "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-11.16.0.tgz",
-      "integrity": "sha512-Zvm3kbstgdpvIJPPItlL7fppIZ3kibvc1oZIGxdvk9t6UFz6flv+Jw7FtRGKwfcI8OckmH04LqG6LlS6X4B1pA==",
+      "version": "11.16.1",
+      "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-11.16.1.tgz",
+      "integrity": "sha512-TQsq6u22fAn3rek5VOubrhKPo1g5hwC3FXUN9hiyupTckcYiGuuKGkNQrKYwGJkXUxZdojwRG46gsSCFZMDp4g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index e5217fcae0..a07e0a90cb 100644
--- a/package.json
+++ b/package.json
@@ -16,7 +16,7 @@
     "docs:smoke:shell": "DOCS_SITE_ARTIFACT_MODE=shell node scripts/docs-site/smoke.mjs",
     "docs:visual": "node scripts/docs-site/visual-smoke.mjs",
     "docs:check": "npm run docs:build && npm run docs:smoke && npm run docs:visual && node --check scripts/docs-site/llms-full.mjs",
-    "skills:install": "npx --yes skills@1.5.21 add openclaw/carapace --skill openclaw-design openclaw-brand openclaw-carapace openclaw-design-system openclaw-marketing-pages openclaw-design-audit --agent codex --copy --yes",
+    "skills:install": "npx --yes skills@1.5.22 add openclaw/carapace --skill openclaw-design openclaw-brand openclaw-carapace openclaw-design-system openclaw-marketing-pages openclaw-design-audit --agent codex --copy --yes",
     "test": "node --test scripts/docs-site/*.test.mjs"
   },
   "devDependencies": {
@@ -26,7 +26,7 @@
     "lucide": "1.28.0",
     "markdown-it": "15.0.0",
     "markdown-it-anchor": "9.2.1",
-    "mermaid": "11.16.0",
+    "mermaid": "11.16.1",
     "pagefind": "1.5.2",
     "playwright": "^1.62.1",
     "yaml": "2.9.0"