diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 277ac103..2501aa4f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,6 +5,10 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
+    # MCP 2 changes the server API; migrate and qualify it separately.
+    ignore:
+      - dependency-name: "mcp"
+        update-types: ["version-update:semver-major"]
     labels:
       - "dependencies"
   - package-ecosystem: "npm"
diff --git a/integrations/pi/npm-shrinkwrap.json b/integrations/pi/npm-shrinkwrap.json
index 8268d41c..02a3687e 100644
--- a/integrations/pi/npm-shrinkwrap.json
+++ b/integrations/pi/npm-shrinkwrap.json
@@ -3121,9 +3121,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.13.0",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.0.tgz",
-      "integrity": "sha512-jhunvfHWxd7J5EFfSgH4xsYJzSe/lfqbUCxiyyeaQasUsXeEHXtzVid+7EOGByc5JnFa23SSFL3Y2RV/z1T+eQ==",
+      "version": "4.13.7",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.7.tgz",
+      "integrity": "sha512-c8/gF9ac8Y78/agExVocyLevgR+JlpNB444Py0FSX8pJoPdYUfUzRcXtYEYGwt6l19qIlVZPN5Mfsw9jFShmQQ==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
diff --git a/integrations/pi/package.json b/integrations/pi/package.json
index 20c3dfac..e7ab1166 100644
--- a/integrations/pi/package.json
+++ b/integrations/pi/package.json
@@ -49,7 +49,7 @@
     "@modelcontextprotocol/sdk": "1.30.0"
   },
   "overrides": {
-    "hono": "^4.12.34"
+    "hono": "^4.13.5"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "*",