diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9ab7a115..4dd498d0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,10 @@ For public Changelog covering all changes done to Pipedrive’s API, webhooks an
 
 ## [Unreleased]
 
+### Security
+- Synced `package-lock.json` to match `package.json` `axios` specifier (`^1.16.0`), fixing stale lockfile metadata that referenced `^1.13.6`
+- Removed redundant `flatted` override — parent `flat-cache@3.0.4` (`^3.1.0`) already resolves to `3.4.2`
+
 ## [33.1.0] - 2026-05-22
 
 ## [33.0.1] - 2026-05-13
diff --git a/package-lock.json b/package-lock.json
index 353189c4..5612128e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "version": "33.1.0",
       "license": "MIT",
       "dependencies": {
-        "axios": "^1.13.6",
+        "axios": "^1.16.0",
         "qs": "^6.14.2"
       },
       "devDependencies": {
diff --git a/package.json b/package.json
index 3b678b70..fba18fc8 100644
--- a/package.json
+++ b/package.json
@@ -88,8 +88,7 @@
     "typescript-eslint": "^8.56.1"
   },
   "overrides": {
-    "serialize-javascript": "^7.0.4",
-    "flatted": "^3.4.0"
+    "serialize-javascript": "^7.0.4"
   },
   "lint-staged": {
     "*.{ts,js}": [