From 8483d1dd7659a55b9d44b1b659239d7b9ff10a2b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Jun 2026 04:39:25 +0000
Subject: [PATCH] Bump the npm_and_yarn group across 1 directory with 3 updates

Bumps the npm_and_yarn group with 3 updates in the / directory: [multer](https://github.com/expressjs/multer), [nodemailer](https://github.com/nodemailer/nodemailer) and [undici](https://github.com/nodejs/undici).


Updates `multer` from 2.1.1 to 2.2.0
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expressjs/multer/compare/v2.1.1...v2.2.0)

Updates `nodemailer` from 8.0.11 to 9.0.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodemailer/nodemailer/compare/v8.0.11...v9.0.1)

Updates `undici` from 7.27.2 to 7.28.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.27.2...v7.28.0)

---
updated-dependencies:
- dependency-name: multer
  dependency-version: 2.2.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: nodemailer
  dependency-version: 9.0.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 7.28.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | Bin 297031 -> 297028 bytes
 package.json      |   4 ++--
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 64c4ebc7ce1f3184d4e0be23170f88c6ff384f57..1adf4ec9a9dfeffaaabb78d0791fd71928de9f81 100644
GIT binary patch
delta 397
zcmWN{J8#oK003ZJZAC%?MG7Dm1Vvp6j%3HLvm=(cm*znnKa%U&-csTwO>8%WB#v1b
zx>m|?BXmPzX@#svj0lObzoGx2-5KDUzdskH-xsB;a)F9BOo`q-V+%h}L4N>rdix7J
z-h7q!KIg^rya={=ai{i|{#-FtDm?su_wpSMtMg%YI1;CwxjEL`VF-D{w3kPERId$T
z)FGmeXNNlPuU(i-vNN2fju6;msXu7>iqK2dRg@vINu;!4P5V9BhWdI=!E>g!efo&0
zy`ZPxz+1ZenqevBm?uErT%s~=q${oGglS)`sDa62HxZhOe5~2zj3>(&#zU!2!~w}F
zktITo1P31HWrL~I=DJbb#1k}D%sRIWKejP)k6p<RHG^I{%&T*&%xtYP`+XN^^d7TS
zs+epEXdCCt8~ol4{COXx<WmwQ?x{T)jcSc`;0=;Rrka|2R5>}(NGx}VXUrhqYG^A3
nB~}b&w7|wpx2*2$9aQ|tPFfS^gC`6Pw4m2H@U}0z?0)qh+-88M

delta 409
zcmX>yLFo7dp$$50)61_iiEnmhv*Kj6&@<38Y;NRlZ{%m(-pJ2X@@IOi9<$YSeI90^
z=^I}%YKP|LYX^o@dFNDE1ev><R^|jpRD@T#=SSp6CHWTz`4&`WmLzACSU6Q0d3%)k
zCZ!pdWR>R^N9p^P>PJL|nuV5n8HYvX`MY=)C1#sO6$NAlR63bWF5DQrU4)m}QI64K
z`o`ysHq$3+GfO~RGubgpGbFFbU%$Y`G1NOpyF4O7JEy|Xti;79DKFO`E!?cwTff30
zH$6Wi(YYX9+d0MAHOIulD9Od7#JSWlD%;4VGAFaBG}AA{GpZuUIX^txrO?YY&vCkA
zHIsb1rw;RWPaT$Z3XJB{3u_oHr=Rm=VViF5%ficOKABNPE2K24*xRqPDzL)EH#E}B
z*SNsbx2)2%q%6lhx1`V_!pkV%$1yuC$lKkoRNF8t(9yHZr_!jxGtAx8F(fL-wA>{k
zN53Q`#i`OU+&Qx<D9JxJReL(4KBLI=10R@Nr#CEO6q~$2U1@rTCyVy>dOwz<mH<EB
BhxY&g

diff --git a/package.json b/package.json
index 25b642ab7..2f1095e7f 100644
--- a/package.json
+++ b/package.json
@@ -108,7 +108,7 @@
         "module-alias": "^2.3.4",
         "morgan": "^1.11.0",
         "ms": "^2.1.3",
-        "multer": "^2.1.1",
+        "multer": "^2.2.0",
         "murmurhash-js": "^1.0.0",
         "node-2fa": "^2.0.3",
         "pg": "^8.21.0",
@@ -139,7 +139,7 @@
         "jimp": "^1.6.1",
         "mailgun.js": "^13.2.0",
         "node-mailjet": "^6.0.11",
-        "nodemailer": "^8.0.11"
+        "nodemailer": "^9.0.1"
     },
     "overrides": {
         "typeorm": {