diff --git a/hugegraph-dist/release-docs/licenses/fe-licenses/inventory.json b/hugegraph-dist/release-docs/licenses/fe-licenses/inventory.json
index 239103c93..72ffb5637 100644
--- a/hugegraph-dist/release-docs/licenses/fe-licenses/inventory.json
+++ b/hugegraph-dist/release-docs/licenses/fe-licenses/inventory.json
@@ -2,7 +2,7 @@
   "schema": 1,
   "scope": "pnpm list --prod --depth Infinity; conservative production dependency closure, including modules pruned by bundling",
   "lockfile": "hugegraph-hubble/hubble-fe/pnpm-lock.yaml",
-  "lockfileSha256": "e6ef3fc877f6dd284bf21a460ed42cea0f9323a41e7d6bd3b0f3b9a0ec33801f",
+  "lockfileSha256": "43ecf032d2ed2b0a7d9ff5fc0107df23e6fdb988e4949fa2c5e9fb2c728f0c68",
   "packageManager": "pnpm@12.14.0",
   "packageCount": 257,
   "localPatches": [
diff --git a/hugegraph-hubble/hubble-fe/pnpm-lock.yaml b/hugegraph-hubble/hubble-fe/pnpm-lock.yaml
index bcdd60df1..88b1b1ed2 100644
--- a/hugegraph-hubble/hubble-fe/pnpm-lock.yaml
+++ b/hugegraph-hubble/hubble-fe/pnpm-lock.yaml
@@ -162,7 +162,7 @@ settings:
   autoInstallPeers: true
   excludeLinksFromLockfile: false
 
-packageExtensionsChecksum: sha256-n8wn9Ol1zspxuMVFwXmVVKvkxPwBpXOMNTcJ5KFflDs=
+packageExtensionsChecksum: sha256-cGYbIenTMLY4m0GpdBorLMuHrYjANDQ0lvI30uDdkuQ=
 
 patchedDependencies:
   '@antv/g6@5.1.1': a36f126c9a2046a104399de4a1e9a37338a8414fcc594d46d93600c5873352a3
@@ -3954,6 +3954,7 @@ snapshots:
       '@antv/scale': 0.4.16
       '@antv/util': 3.3.11
       svg-path-parser: 1.1.0
+      tslib: 2.8.1
 
   '@antv/event-emitter@0.1.3': {}
 
diff --git a/hugegraph-hubble/hubble-fe/pnpm-workspace.yaml b/hugegraph-hubble/hubble-fe/pnpm-workspace.yaml
index 77b022304..9da46dc50 100644
--- a/hugegraph-hubble/hubble-fe/pnpm-workspace.yaml
+++ b/hugegraph-hubble/hubble-fe/pnpm-workspace.yaml
@@ -23,8 +23,11 @@ saveExact: true
 minimumReleaseAgeExclude:
   - i18next@26.5.2
   - react-i18next@17.1.0
-# X6 3.1.8 imports tslib at runtime but declares it only as a devDependency.
+# These packages import tslib at runtime without declaring it as a dependency.
 packageExtensions:
+  '@antv/component@2.1.12':
+    dependencies:
+      tslib: '2.8.1'
   '@antv/x6@3.1.8':
     dependencies:
       tslib: '2.8.1'