diff --git a/package-lock.json b/package-lock.json
index 3585f091..ab78f309 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2501,7 +2501,9 @@
       }
     },
     "node_modules/@nestjs/core": {
-      "version": "11.1.27",
+      "version": "11.1.28",
+      "resolved": "https://registry.npmjs.org/@nestjs/core/-/core-11.1.28.tgz",
+      "integrity": "sha512-06m63xIRj8+l8uOeh/8LnYupGubkyu4f+bPKIadaSui6vK9KpXgoz7HveT1yOVLcEt0M0oCOEW5EuEXZkEmBBQ==",
       "license": "MIT",
       "dependencies": {
         "fast-safe-stringify": "2.1.1",
@@ -16168,7 +16170,7 @@
         "@beyondnet/evolith-agent-runtime": "*",
         "@nestjs/common": "11.1.27",
         "@nestjs/config": "4.0.4",
-        "@nestjs/core": "11.1.27",
+        "@nestjs/core": "^11.1.28",
         "@nestjs/platform-express": "11.1.28",
         "@opentelemetry/api": "^1.9.1",
         "@opentelemetry/auto-instrumentations-node": "^0.78.0",
@@ -16196,7 +16198,7 @@
         "@nestjs/cache-manager": "3.1.3",
         "@nestjs/common": "11.1.27",
         "@nestjs/config": "4.0.4",
-        "@nestjs/core": "11.1.27",
+        "@nestjs/core": "^11.1.28",
         "@nestjs/platform-express": "11.1.28",
         "@nestjs/swagger": "11.4.6",
         "@nestjs/terminus": "11.1.1",
@@ -16619,7 +16621,7 @@
         "@modelcontextprotocol/sdk": "1.29.0",
         "@nestjs/cache-manager": "3.1.3",
         "@nestjs/common": "11.1.27",
-        "@nestjs/core": "11.1.27",
+        "@nestjs/core": "^11.1.28",
         "@nestjs/platform-express": "11.1.28",
         "@open-policy-agent/opa-wasm": "1.10.0",
         "@opentelemetry/api": "1.9.1",
@@ -16924,7 +16926,7 @@
         "@hono/node-server": "1.19.14",
         "@modelcontextprotocol/sdk": "1.29.0",
         "@nestjs/common": "11.1.27",
-        "@nestjs/core": "11.1.27",
+        "@nestjs/core": "^11.1.28",
         "@nestjs/platform-express": "11.1.28",
         "@open-policy-agent/opa-wasm": "1.10.0",
         "@opentelemetry/api": "1.9.1",
diff --git a/src/apps/agent-runtime-api/package.json b/src/apps/agent-runtime-api/package.json
index e08874d7..39bbd014 100644
--- a/src/apps/agent-runtime-api/package.json
+++ b/src/apps/agent-runtime-api/package.json
@@ -16,7 +16,7 @@
     "@beyondnet/evolith-agent-runtime": "*",
     "@nestjs/common": "11.1.27",
     "@nestjs/config": "4.0.4",
-    "@nestjs/core": "11.1.27",
+    "@nestjs/core": "11.1.28",
     "@nestjs/platform-express": "11.1.28",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/auto-instrumentations-node": "^0.78.0",
diff --git a/src/apps/core-api/package.json b/src/apps/core-api/package.json
index ac914223..8e2ee649 100644
--- a/src/apps/core-api/package.json
+++ b/src/apps/core-api/package.json
@@ -27,7 +27,7 @@
     "@nestjs/cache-manager": "3.1.3",
     "@nestjs/common": "11.1.27",
     "@nestjs/config": "4.0.4",
-    "@nestjs/core": "11.1.27",
+    "@nestjs/core": "11.1.28",
     "@nestjs/platform-express": "11.1.28",
     "@nestjs/swagger": "11.4.6",
     "@nestjs/terminus": "11.1.1",
diff --git a/src/packages/mcp-server/package.json b/src/packages/mcp-server/package.json
index 100f89a2..25fc2f5a 100644
--- a/src/packages/mcp-server/package.json
+++ b/src/packages/mcp-server/package.json
@@ -45,7 +45,7 @@
     "@modelcontextprotocol/sdk": "1.29.0",
     "@nestjs/cache-manager": "3.1.3",
     "@nestjs/common": "11.1.27",
-    "@nestjs/core": "11.1.27",
+    "@nestjs/core": "11.1.28",
     "@nestjs/platform-express": "11.1.28",
     "@open-policy-agent/opa-wasm": "1.10.0",
     "@opentelemetry/api": "1.9.1",
diff --git a/src/sdk/cli/package.json b/src/sdk/cli/package.json
index 6bc901df..97dfef93 100644
--- a/src/sdk/cli/package.json
+++ b/src/sdk/cli/package.json
@@ -77,7 +77,7 @@
     "@hono/node-server": "1.19.14",
     "@modelcontextprotocol/sdk": "1.29.0",
     "@nestjs/common": "11.1.27",
-    "@nestjs/core": "11.1.27",
+    "@nestjs/core": "11.1.28",
     "@nestjs/platform-express": "11.1.28",
     "@open-policy-agent/opa-wasm": "1.10.0",
     "@opentelemetry/api": "1.9.1",