SECURITY: Dependency update in lock file for low-severity TROVE-2026-001