diff --git a/apps/vis/server/package.json b/apps/vis/server/package.json
index ae0902599..3b07e5200 100644
--- a/apps/vis/server/package.json
+++ b/apps/vis/server/package.json
@@ -28,7 +28,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@hono/node-server": "^1.13.7",
+    "@hono/node-server": "^1.19.15",
     "@pymodel/agent-core": "workspace:^",
     "@pymodel/kosong": "workspace:^",
     "hono": "^4.7.7",
diff --git a/flake.nix b/flake.nix
index e0cb4b0db..097b06751 100644
--- a/flake.nix
+++ b/flake.nix
@@ -160,7 +160,7 @@
               inherit (finalAttrs) pname version src pnpmWorkspaces;
               inherit pnpm;
               fetcherVersion = 3;
-             hash = "sha256-EPePwye7D1uRuOPjwgjTMRW46OwzRV1snYxzCbIKMl8=";
+             hash = "sha256-lnrnI7eBQ1UCVxjFgkY7Rdxobd7t4zFxzWjPAdZd5ao=";
             };
 
             nativeBuildInputs = [
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d3e64bd17..ca1a43dab 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -330,8 +330,8 @@ importers:
   apps/vis/server:
     dependencies:
       '@hono/node-server':
-        specifier: ^1.13.7
-        version: 1.19.14(hono@4.13.3)
+        specifier: ^1.19.15
+        version: 1.19.17(hono@4.13.3)
       '@pymodel/agent-core':
         specifier: workspace:^
         version: link:../../../packages/agent-core
@@ -2169,8 +2169,8 @@ packages:
       '@modelcontextprotocol/sdk':
         optional: true
 
-  '@hono/node-server@1.19.14':
-    resolution: {integrity: sha512-GwtvgtXxnWsucXvbQXkRgqksiH2Qed37H9xHZocE5sA3N8O8O8/8FA3uclQXxXVzc9XBZuEOMK7+r02FmSpHtw==}
+  '@hono/node-server@1.19.17':
+    resolution: {integrity: sha512-dSneS5qhiauZWGDCeK4o695Xd9nUNjviSZCMQrj10eetr8Uln1ucn6bbphOM6UynAMMtNIzZNSpL9vnASJwrPQ==}
     engines: {node: '>=18.14.1'}
     peerDependencies:
       hono: ^4
@@ -11642,7 +11642,7 @@ snapshots:
       - supports-color
       - utf-8-validate
 
-  '@hono/node-server@1.19.14(hono@4.13.3)':
+  '@hono/node-server@1.19.17(hono@4.13.3)':
     dependencies:
       hono: 4.13.3
 
@@ -12134,7 +12134,7 @@ snapshots:
 
   '@modelcontextprotocol/sdk@1.29.0(zod@3.25.76)':
     dependencies:
-      '@hono/node-server': 1.19.14(hono@4.13.3)
+      '@hono/node-server': 1.19.17(hono@4.13.3)
       ajv: 8.20.0
       ajv-formats: 3.0.1(ajv@8.20.0)
       content-type: 1.0.5
@@ -12156,7 +12156,7 @@ snapshots:
 
   '@modelcontextprotocol/sdk@1.29.0(zod@4.4.3)':
     dependencies:
-      '@hono/node-server': 1.19.14(hono@4.13.3)
+      '@hono/node-server': 1.19.17(hono@4.13.3)
       ajv: 8.20.0
       ajv-formats: 3.0.1(ajv@8.20.0)
       content-type: 1.0.5