diff --git a/package.json b/package.json
index f6f90065..ebbda85d 100644
--- a/package.json
+++ b/package.json
@@ -429,6 +429,7 @@
       "smol-toml": "1.6.1",
       "srvx": "0.11.13",
       "tar": "7.5.11",
+      "tmp": "0.2.6",
       "undici@7": "7.24.0",
       "unhead": "2.1.13",
       "uuid": "^11.1.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 403e7eda..a635693b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -40,6 +40,7 @@ overrides:
   smol-toml: 1.6.1
   srvx: 0.11.13
   tar: 7.5.11
+  tmp: 0.2.6
   undici@7: 7.24.0
   unhead: 2.1.13
   uuid: ^11.1.1
@@ -10541,8 +10542,8 @@ packages:
   tmp-promise@3.0.3:
     resolution: {integrity: sha512-RwM7MoPojPxsOBYnyd2hy0bxtIlVrihNs9pj5SUvY8Zz1sQcQG2tG1hSr8PDxfgEB8RNKDhqbIlroIarSNDNsQ==}
 
-  tmp@0.2.5:
-    resolution: {integrity: sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==}
+  tmp@0.2.6:
+    resolution: {integrity: sha512-5sJPdPjfI5Kx+qbrDesxkglRBxW//g7hCsqspEjwkewGvBMGIKMOTKzLt1hFVJzyadba3lDUN20O9qhvbQUSTA==}
     engines: {node: '>=14.14'}
 
   to-regex-range@5.0.1:
@@ -23116,9 +23117,9 @@ snapshots:
 
   tmp-promise@3.0.3:
     dependencies:
-      tmp: 0.2.5
+      tmp: 0.2.6
 
-  tmp@0.2.5: {}
+  tmp@0.2.6: {}
 
   to-regex-range@5.0.1:
     dependencies:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index ea70d35d..2dea1987 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -4,6 +4,8 @@ packages:
   - landing
   - packages/agent-graph
 minimumReleaseAge: 4320
+minimumReleaseAgeExclude:
+  - tmp@0.2.6
 strictPeerDependencies: true
 peerDependencyRules:
   allowedVersions: