diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d3e3b6eadab..d43375c78de 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -412,7 +412,7 @@ importers:
         version: 0.5.13
       whistle:
         specifier: ^2.7.18
-        version: 2.9.86
+        version: 2.9.87
     devDependencies:
       '@modern-js/core':
         specifier: workspace:*
@@ -15116,10 +15116,6 @@ packages:
     resolution: {integrity: sha512-pLdae7I6QqShF5PnNTCVn4hI91Dx0Grkn2+IAsMTgMIKuQVte2dN9PeGSSAME2FR8anOhVA62QDIUaWVfEXVLw==}
     engines: {node: '>= 0.10.0'}
 
-  express@4.21.0:
-    resolution: {integrity: sha512-VqcNGcj/Id5ZT1LZ/cfihi3ttTn+NJmkli2eZADigjq29qTlWi/hAQ43t/VLPq8+UX06FCEx3ByOYet6ZFblng==}
-    engines: {node: '>= 0.10.0'}
-
   express@4.21.1:
     resolution: {integrity: sha512-YSFlK1Ee0/GC8QaO91tHcDxJiE/X4FbpAyQWkxAvG6AXCuR65YzK8ua6D9hvi/TzUfZMpc+BwuM1IPw8fmQBiQ==}
     engines: {node: '>= 0.10.0'}
@@ -15862,8 +15858,8 @@ packages:
     resolution: {integrity: sha512-kyCuEOWjJqZuDbRHzL8V93NzQhwIB71oFWSyzVo+KPZI+pnQPPxucdkrOZvkLRnrf5URsQM+IJ09Dw29cRALIA==}
     engines: {node: '>=10'}
 
-  hparser@0.4.0:
-    resolution: {integrity: sha512-g8+qy7NhA+2CkiqQ7LqzRDPiiBJT2TqC7heFioA0Vi2W/WFDYvvtarD2g9QbRYhunkef1fOqb+sBikSL8BAvsg==}
+  hparser@0.5.0:
+    resolution: {integrity: sha512-8s54Cqc7KFS9jigRPy2EDc+WWFyc1JSKsN2HgFbGe/NGj7rchtER957bxp8rbjypo68IYLoLb6CuYNHQCYjh5g==}
     engines: {node: '>= 0.10.0'}
 
   hsl-regex@1.0.0:
@@ -17051,15 +17047,11 @@ packages:
   lowlight@1.20.0:
     resolution: {integrity: sha512-8Ktj+prEb1RoCPkEOrPMYUN/nCggB7qAWe3a7OpMjWQkh3l2RD5wKRQ+o8Q8YuI9RG/xs95waaI/E6ym/7NsTw==}
 
-  lru-cache@10.0.1:
-    resolution: {integrity: sha512-IJ4uwUTi2qCccrioU6g9g/5rvvVl13bsdczUUcqbciD9iLr095yj8DQKdObriEvuNSx325N1rV1O0sJFszx75g==}
-    engines: {node: 14 || >=16.14}
-
   lru-cache@10.4.3:
     resolution: {integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==}
 
-  lru-cache@11.0.1:
-    resolution: {integrity: sha512-CgeuL5uom6j/ZVrg7G/+1IXqRY8JXX4Hghfy5YE0EhoYQWvndP1kufu58cmZLNIDKnRhZrXfdS9urVWx98AipQ==}
+  lru-cache@11.0.2:
+    resolution: {integrity: sha512-123qHRfJBmo2jXDbo/a5YOQrJoHF/GNQTLzQ5+IdK5pWpceK17yRc6ozlWd25FxvGKQbIUs91fDFkXmDHTKcyA==}
     engines: {node: 20 || >=22}
 
   lru-cache@4.1.5:
@@ -21423,8 +21415,8 @@ packages:
     engines: {node: '>= 8'}
     hasBin: true
 
-  whistle@2.9.86:
-    resolution: {integrity: sha512-5uXx9F8oDKn02Ca5z73DF9Q+DlgkYeqH9NNC/+7uMTovi4HJOXeJirm9fbsLAYbzsAwvP9d+ZlwU1ha9rNI0/w==}
+  whistle@2.9.87:
+    resolution: {integrity: sha512-V0nyRyk4FGiEFbuHhXvRpBD4Z341vVPG+/547QkatVtw0VMb9itm+oVLFqxgSLo2vn7PZAm08wop9K33dGrO8w==}
     engines: {node: '>= 8'}
     hasBin: true
 
@@ -27283,7 +27275,7 @@ snapshots:
       ejs: 3.1.10
       esbuild: 0.18.20
       esbuild-plugin-alias: 0.2.1
-      express: 4.21.0
+      express: 4.21.1
       find-cache-dir: 3.3.2
       fs-extra: 11.2.0
       process: 0.11.10
@@ -27324,7 +27316,7 @@ snapshots:
       detect-indent: 6.1.0
       envinfo: 7.14.0
       execa: 5.1.1
-      express: 4.21.0
+      express: 4.21.1
       find-up: 5.0.0
       fs-extra: 11.2.0
       get-npm-tarball-url: 2.1.0
@@ -27454,7 +27446,7 @@ snapshots:
       cli-table3: 0.6.5
       compression: 1.7.4
       detect-port: 1.6.1
-      express: 4.21.0
+      express: 4.21.1
       fs-extra: 11.2.0
       globby: 11.1.0
       lodash: 4.17.21
@@ -31315,42 +31307,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  express@4.21.0:
-    dependencies:
-      accepts: 1.3.8
-      array-flatten: 1.1.1
-      body-parser: 1.20.3
-      content-disposition: 0.5.4
-      content-type: 1.0.5
-      cookie: 0.6.0
-      cookie-signature: 1.0.6
-      debug: 2.6.9
-      depd: 2.0.0
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      etag: 1.8.1
-      finalhandler: 1.3.1
-      fresh: 0.5.2
-      http-errors: 2.0.0
-      merge-descriptors: 1.0.3
-      methods: 1.1.2
-      on-finished: 2.4.1
-      parseurl: 1.3.3
-      path-to-regexp: 0.1.10
-      proxy-addr: 2.0.7
-      qs: 6.13.0
-      range-parser: 1.2.1
-      safe-buffer: 5.2.1
-      send: 0.19.0
-      serve-static: 1.16.2
-      setprototypeof: 1.2.0
-      statuses: 2.0.1
-      type-is: 1.6.18
-      utils-merge: 1.0.1
-      vary: 1.1.2
-    transitivePeerDependencies:
-      - supports-color
-
   express@4.21.1:
     dependencies:
       accepts: 1.3.8
@@ -31418,7 +31374,7 @@ snapshots:
 
   extract-zip@2.0.1:
     dependencies:
-      debug: 4.3.7(supports-color@9.3.1)
+      debug: 4.3.4
       get-stream: 5.2.0
       yauzl: 2.10.0
     optionalDependencies:
@@ -32351,9 +32307,7 @@ snapshots:
     dependencies:
       lru-cache: 6.0.0
 
-  hparser@0.4.0:
-    dependencies:
-      mime: 1.6.0
+  hparser@0.5.0: {}
 
   hsl-regex@1.0.0: {}
 
@@ -34297,11 +34251,9 @@ snapshots:
       fault: 1.0.4
       highlight.js: 10.7.3
 
-  lru-cache@10.0.1: {}
-
   lru-cache@10.4.3: {}
 
-  lru-cache@11.0.1: {}
+  lru-cache@11.0.2: {}
 
   lru-cache@4.1.5:
     dependencies:
@@ -35489,7 +35441,7 @@ snapshots:
 
   path-scurry@1.10.1:
     dependencies:
-      lru-cache: 10.0.1
+      lru-cache: 10.4.3
       minipass: 7.0.4
 
   path-scurry@1.11.1:
@@ -35499,7 +35451,7 @@ snapshots:
 
   path-scurry@2.0.0:
     dependencies:
-      lru-cache: 11.0.1
+      lru-cache: 11.0.2
       minipass: 7.1.2
 
   path-to-regexp@0.1.10: {}
@@ -39819,7 +39771,7 @@ snapshots:
     dependencies:
       isexe: 2.0.0
 
-  whistle@2.9.86:
+  whistle@2.9.87:
     dependencies:
       adm-zip: 0.5.10
       async-limiter: 2.0.0
@@ -39829,7 +39781,7 @@ snapshots:
       extend: 3.0.2
       fs-extra2: 1.0.1
       hagent: 0.9.2
-      hparser: 0.4.0
+      hparser: 0.5.0
       iconv-lite: 0.4.24
       json5: 2.2.3
       lru-cache: 4.1.5