From 14ea5aaee57008f44e55d7950b2d946b5992f65f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Nov 2026 13:35:57 +0000
Subject: [PATCH] Bump glob and @fastify/static in /engine

Bumps [glob](https://github.com/isaacs/node-glob) to 14.0.3 and updates ancestor dependency [@fastify/static](https://github.com/fastify/fastify-static). These dependencies need to be updated together.


Updates `glob` from 13.0.6 to 14.0.3
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/node-glob/compare/v13.0.6...v14.0.3)

Updates `@fastify/static` from 10.1.7 to 10.1.9
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](https://github.com/fastify/fastify-static/compare/v10.1.7...v10.1.9)

---
updated-dependencies:
- dependency-name: "@fastify/static"
  dependency-version: 10.1.9
  dependency-type: direct:production
- dependency-name: glob
  dependency-version: 14.0.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 engine/package-lock.json | 45 +++++++++++++++++++++++-----------------
 engine/package.json      |  2 +-
 2 files changed, 27 insertions(+), 20 deletions(-)

diff --git a/engine/package-lock.json b/engine/package-lock.json
index adb0fa0..5894cd6 100644
--- a/engine/package-lock.json
+++ b/engine/package-lock.json
@@ -9,7 +9,7 @@
       "version": "0.2.0",
       "dependencies": {
         "@fastify/compress": "^9.2.2",
-        "@fastify/static": "^10.1.7",
+        "@fastify/static": "^10.1.9",
         "commander": "^15.0.0",
         "diff": "^9.0.0",
         "fastify": "^5.12.7",
@@ -643,9 +643,9 @@
       }
     },
     "node_modules/@fastify/static": {
-      "version": "10.1.7",
-      "resolved": "https://registry.npmjs.org/@fastify/static/-/static-10.1.7.tgz",
-      "integrity": "sha512-7+lUiPRraENCiULgjhcqZyWSW6qnwIT87Is0u3c2Z3iGEEEGB45wJhYxzrSdzu12gHM4qcviEYcPEiCe4J6MCQ==",
+      "version": "10.1.9",
+      "resolved": "https://registry.npmjs.org/@fastify/static/-/static-10.1.9.tgz",
+      "integrity": "sha512-MXvQFsFzrrdIS8K+XYk/wpgHm6rcD0wx8RHSNfO2MAW0J3YFiDM5V2PeeosVQHCOokiLKsc52vv2VmhDhswm3A==",
       "funding": [
         {
           "type": "github",
@@ -660,13 +660,19 @@
       "dependencies": {
         "@fastify/accept-negotiator": "^2.0.0",
         "@fastify/error": "^4.0.0",
-        "@fastify/send": "^4.0.0",
+        "@fastify/send": "^4.2.0",
         "content-disposition": "^3.0.0",
         "fastify-plugin": "^6.0.0",
         "fastq": "^1.17.1",
-        "glob": "^13.0.0"
+        "glob": "^14.0.0"
       }
     },
+    "node_modules/@isaacs/nonrecursive-glob-match": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@isaacs/nonrecursive-glob-match/-/nonrecursive-glob-match-1.0.3.tgz",
+      "integrity": "sha512-SI7kyKHq4XXDRozw+r9GlRZkia1ZkFrpLW98r2IC2Bpr8YkFGE3fvjzmxCG0x78A++69HmDNrDvSMYBZmHGpKA==",
+      "license": "BlueOak-1.0.0"
+    },
     "node_modules/@jridgewell/resolve-uri": {
       "version": "3.1.2",
       "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
@@ -2184,14 +2190,14 @@
       }
     },
     "node_modules/glob": {
-      "version": "13.0.6",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-13.0.6.tgz",
-      "integrity": "sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==",
+      "version": "14.0.3",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-14.0.3.tgz",
+      "integrity": "sha512-A1vjIwC3qpdCso45Iw127gnp7sPhqgY8lUQhDrArIs+GbmfaaVPFuoyy7WyLT9EPZCRZ7j7aLdwUhQmHWesEow==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
-        "minimatch": "^10.2.2",
+        "minimatch": "^11.0.2",
         "minipass": "^7.1.3",
-        "path-scurry": "^2.0.2"
+        "path-scurry": "^3.0.0"
       },
       "engines": {
         "node": "18 || 20 || >=22"
@@ -2590,15 +2596,16 @@
       }
     },
     "node_modules/minimatch": {
-      "version": "10.2.6",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
-      "integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==",
+      "version": "11.0.4",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-11.0.4.tgz",
+      "integrity": "sha512-/UJ1dEoVQTjPNDh6SGlUo+ueLMmoHTas4q+8yaAR/5t6nLAIiBDJtoYUh20IYleix7ehiQkgczb84PE3uzHkxg==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
-        "brace-expansion": "^5.0.8"
+        "@isaacs/nonrecursive-glob-match": "^1.0.3",
+        "brace-expansion": "^5.0.12"
       },
       "engines": {
-        "node": "18 || 20 || >=22"
+        "node": "20 || >=22"
       },
       "funding": {
         "url": "https://github.com/sponsors/isaacs"
@@ -2662,9 +2669,9 @@
       }
     },
     "node_modules/path-scurry": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-2.0.2.tgz",
-      "integrity": "sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-3.0.0.tgz",
+      "integrity": "sha512-1pTbQqH1wIwMi/eleQ5leFTTCkzFsPcgXNjwOA8YGGW/W4/kHT3dssE7Z6NH+zuqNLOzOB0uaD61yl7cAcVhgg==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "lru-cache": "^11.0.0",
diff --git a/engine/package.json b/engine/package.json
index 5be04f8..805ef69 100644
--- a/engine/package.json
+++ b/engine/package.json
@@ -24,7 +24,7 @@
   },
   "dependencies": {
     "@fastify/compress": "^9.2.2",
-    "@fastify/static": "^10.1.7",
+    "@fastify/static": "^10.1.9",
     "commander": "^15.0.0",
     "diff": "^9.0.0",
     "fastify": "^5.12.7",