From 8483d1dd7659a55b9d44b1b659239d7b9ff10a2b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Jun 2026 04:39:25 +0000
Subject: [PATCH 1/2] Bump the npm_and_yarn group across 1 directory with 3
 updates

Bumps the npm_and_yarn group with 3 updates in the / directory: [multer](https://github.com/expressjs/multer), [nodemailer](https://github.com/nodemailer/nodemailer) and [undici](https://github.com/nodejs/undici).


Updates `multer` from 2.1.1 to 2.2.0
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expressjs/multer/compare/v2.1.1...v2.2.0)

Updates `nodemailer` from 8.0.11 to 9.0.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodemailer/nodemailer/compare/v8.0.11...v9.0.1)

Updates `undici` from 7.27.2 to 7.28.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.27.2...v7.28.0)

---
updated-dependencies:
- dependency-name: multer
  dependency-version: 2.2.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: nodemailer
  dependency-version: 9.0.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 7.28.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 22 +++++++++++-----------
 package.json      |  4 ++--
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 64c4ebc7ce..1adf4ec9a9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -40,7 +40,7 @@
                 "module-alias": "^2.3.4",
                 "morgan": "^1.11.0",
                 "ms": "^2.1.3",
-                "multer": "^2.1.1",
+                "multer": "^2.2.0",
                 "murmurhash-js": "^1.0.0",
                 "node-2fa": "^2.0.3",
                 "pg": "^8.21.0",
@@ -95,7 +95,7 @@
                 "jimp": "^1.6.1",
                 "mailgun.js": "^13.2.0",
                 "node-mailjet": "^6.0.11",
-                "nodemailer": "^8.0.11"
+                "nodemailer": "^9.0.1"
             }
         },
         "node_modules/@borewit/text-codec": {
@@ -4680,9 +4680,9 @@
             "license": "MIT"
         },
         "node_modules/multer": {
-            "version": "2.1.1",
-            "resolved": "https://registry.npmjs.org/multer/-/multer-2.1.1.tgz",
-            "integrity": "sha512-mo+QTzKlx8R7E5ylSXxWzGoXoZbOsRMpyitcht8By2KHvMbf3tjwosZ/Mu/XYU6UuJ3VZnODIrak5ZrPiPyB6A==",
+            "version": "2.2.0",
+            "resolved": "https://registry.npmjs.org/multer/-/multer-2.2.0.tgz",
+            "integrity": "sha512-6rdyFg2kLrMh9Jee7/BMPuV9lEAd7lLW2YUpF9/YxR7njyoUwwQ0ZPh3TaIY50Sw6vlyD2HW3wGOkTS4P79xrQ==",
             "license": "MIT",
             "dependencies": {
                 "append-field": "^1.0.0",
@@ -4865,9 +4865,9 @@
             }
         },
         "node_modules/nodemailer": {
-            "version": "8.0.11",
-            "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-8.0.11.tgz",
-            "integrity": "sha512-nrO/pDAUKl+wXX+lx16tDLbnm0fW6sK/x8mgohaCpg+CdCEl482bD4tCuAZk2DyliruiNTIZxRCoWkDqJEnAiA==",
+            "version": "9.0.1",
+            "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-9.0.1.tgz",
+            "integrity": "sha512-Gwv8SQewT616ZM/URn0H54b8PWo/Wum7md3EW2aWy1lO27+WZCX+Xyak3J+NlmHUjDh5ME+uesJUDRbR3Ye8Bw==",
             "license": "MIT-0",
             "optional": true,
             "engines": {
@@ -6651,9 +6651,9 @@
             }
         },
         "node_modules/undici": {
-            "version": "7.27.2",
-            "resolved": "https://registry.npmjs.org/undici/-/undici-7.27.2.tgz",
-            "integrity": "sha512-uZsKNuzQxDMUY6M3pIMvy5tvlGmtq8XJ2oLAkfRKGNu+1VQAIvLy2xIVG5ATZl5wDXl/tddByAWCizRbOme+TA==",
+            "version": "7.28.0",
+            "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz",
+            "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==",
             "license": "MIT",
             "engines": {
                 "node": ">=20.18.1"
diff --git a/package.json b/package.json
index 25b642ab74..2f1095e7ff 100644
--- a/package.json
+++ b/package.json
@@ -108,7 +108,7 @@
         "module-alias": "^2.3.4",
         "morgan": "^1.11.0",
         "ms": "^2.1.3",
-        "multer": "^2.1.1",
+        "multer": "^2.2.0",
         "murmurhash-js": "^1.0.0",
         "node-2fa": "^2.0.3",
         "pg": "^8.21.0",
@@ -139,7 +139,7 @@
         "jimp": "^1.6.1",
         "mailgun.js": "^13.2.0",
         "node-mailjet": "^6.0.11",
-        "nodemailer": "^8.0.11"
+        "nodemailer": "^9.0.1"
     },
     "overrides": {
         "typeorm": {

From 9e9a2d1956d0f53740da9bde2c8423bab1ea34a9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Jun 2026 04:40:03 +0000
Subject: [PATCH 2/2] build(deps): update npm dependencies hash [dependabot
 skip]

---
 flake.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/flake.lock b/flake.lock
index 2eeddbe0bb..b56945b5f8 100644
--- a/flake.lock
+++ b/flake.lock
@@ -20,11 +20,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1778979197,
-        "narHash": "sha256-d83oRDbsJ+XrYqxqe/z5CIGRrY2B5xYC308UsQXdmus=",
+        "lastModified": 1781841495,
+        "narHash": "sha256-ZeIeNws0Y2zb4jULQ22dzr2zh+sn1W0WUjiiwm2u9i0=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "233ebfd96819ab13eff099ded59063c8bfb80d63",
+        "rev": "10994fe41deafa0b6a955a36b1e92723e289d864",
         "type": "github"
       },
       "original": {