From 1fac141149571be6551884df071ded766690f9a1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 11 Jul 2026 05:31:05 +0000
Subject: [PATCH] Bump the npm_and_yarn group across 1 directory with 3 updates

Bumps the npm_and_yarn group with 3 updates in the / directory: [multer](https://github.com/expressjs/multer), [nodemailer](https://github.com/nodemailer/nodemailer) and [undici](https://github.com/nodejs/undici).


Updates `multer` from 2.1.1 to 2.2.0
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expressjs/multer/compare/v2.1.1...v2.2.0)

Updates `nodemailer` from 8.0.11 to 9.0.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodemailer/nodemailer/compare/v8.0.11...v9.0.1)

Updates `undici` from 7.27.2 to 7.28.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.27.2...v7.28.0)

---
updated-dependencies:
- dependency-name: multer
  dependency-version: 2.2.0
  dependency-type: direct:production
- dependency-name: nodemailer
  dependency-version: 9.0.1
  dependency-type: direct:production
- dependency-name: undici
  dependency-version: 7.28.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | Bin 302435 -> 302432 bytes
 package.json      |   4 ++--
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 627f267fb64dcf5aa47641780677423fe1257bfc..c73291ebfe44f53373fee6ec7cd1f6f9d7b656b4 100644
GIT binary patch
delta 400
zcmV;B0dM}}x)R{J60j@=mok3?7qdeKXbAy1m!b0m6NA7Hhrka3x4;hqWc-&<%L6)>
zUJL^gmr=C>D^)gfWO+tsGHXn7O=vkvWo0)nLQPP0Ryk}%L1Z^<Ojj~lRd7Z*FIjj}
zH*RWqZ&i19Q7~FiXfsq{Nm(^8Q+GCYY<Wa7NLMp=M^9^1Q#4RFIe2oH(Z2&zw?hpB
zFEf{yr~y2euRsGBm*J=ZEmcQ%b~sZ}Wp`9IF*aIFFI7@*Fi15tVmMG&Z!cGMZ8vRX
zGeuW2VOM!EY)>*bD_2@WSSwh0VQVu=D^6@}NL6Y?Xf;hmD|KaaN>xNsVp20%WjI2Y
z5kvwZhigFtw`)NJs~`b5lM&H5mr!B^69G7r!MG|_V^UgKa#TcjS9)%2Zc=GbYG-Fb
zM|fITVQzGJHcdEERxxH~I9F{nOjlS!a5pbWM>uvhL~c)QH#9_aRYGt%Pft#8OE)!H
uY*21VYEf}mFl0hRbe93S16Y@@q5&3@zz-sq@L>c7myKQoCAXeq1jRYvQHP}f

delta 405
zcmV;G0c!r>x)S5M60j@=m!;JL7qdeKXbAy0mriU1HiO|0hv5$ax8V;0Lj0GIt^zuj
zT?_*fm*lPjD^+c8D^XN>OKf;JQa434d2CZycvpHyZ&+_yVo!5YO>lW>bYp0AI6`?c
zOGtK2VrDaRYIkpQS}#p?FIZVsHdS>>Ggew|Pee&_VQV#7a!_edc|taq(H#R*w?YjA
zFEf+R@CBC@DFZx{7V#OA0Xr#GZgNjAa6~~>OKdB5SXe7;cri9~L`-6CZ7^n6Hgiia
zcsOlmZ)jmdaAzw+WJ5)4G&nM1L^O0mbwOHdGDLZ7X>xUGPE<)+cv3@eS8GIZN=0r#
zX_w)S0wITJK?ApFK?JKH0XLViUIaf5FD);1Ze(d=X)QM{GB=kI#{(-=T60TIb$U^F
zL`_v$Hcc~dNlkWnHFS1tM{RU*I9N(DZ%jdJW>QN>PIW6WR#8Doc1(FPcu7`AH9=Hb
zY&Ca8SZptJWMo2lL03a*dQxIfZDlJ|m*I{AF_WN0Czr0G0Tz=`IwH4lV+8OywQP-i

diff --git a/package.json b/package.json
index cfaf821d7..58c28b752 100644
--- a/package.json
+++ b/package.json
@@ -108,7 +108,7 @@
         "module-alias": "^2.3.4",
         "morgan": "^1.11.0",
         "ms": "^2.1.3",
-        "multer": "^2.1.1",
+        "multer": "^2.2.0",
         "murmurhash-js": "^1.0.0",
         "node-2fa": "^2.0.3",
         "node-unix-socket": "^0.2.7",
@@ -141,7 +141,7 @@
         "jimp": "^1.6.1",
         "mailgun.js": "^13.2.0",
         "node-mailjet": "^6.0.11",
-        "nodemailer": "^8.0.11"
+        "nodemailer": "^9.0.1"
     },
     "overrides": {
         "typeorm": {