From ad891313b77dd7e077cacf587f8b8745711dcadb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 09:25:34 +0000 Subject: [PATCH] chore(deps/backend): bump multer and @types/multer in /backend Bumps [multer](https://github.com/expressjs/multer) and [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer). These dependencies needed to be updated together. Updates `multer` from 1.4.5-lts.2 to 2.2.0 - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](https://github.com/expressjs/multer/compare/v1.4.5-lts.2...v2.2.0) Updates `@types/multer` from 1.4.12 to 2.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer) --- updated-dependencies: - dependency-name: multer dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: "@types/multer" dependency-version: 2.2.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- backend/package-lock.json | 111 ++++++++++++++++++++++++++++++++------ backend/package.json | 4 +- 2 files changed, 96 insertions(+), 19 deletions(-) diff --git a/backend/package-lock.json b/backend/package-lock.json index 6324386c..740ffd47 100644 --- a/backend/package-lock.json +++ b/backend/package-lock.json @@ -7,7 +7,7 @@ "": { "name": "backend", "version": "0.0.1", - "license": "UNLICENSED", + "license": "MIT", "dependencies": { "@nestjs-modules/ioredis": "^2.0.2", "@nestjs/common": "^11.1.3", @@ -32,10 +32,11 @@ "class-transformer": "^0.5.1", "class-validator": "^0.14.2", "dotenv": "^16.4.7", + "helmet": "^8.0.0", "ioredis": "^5.6.1", "ip2location-nodejs": "^9.6.3", "joi": "^17.0.0", - "multer": "^1.4.5-lts.2", + "multer": "^2.2.0", "nest-commander": "^3.12.2", "nodemailer": "^6.10.0", "passport": "^0.7.0", @@ -47,7 +48,8 @@ "stripe": "^8.0.0", "swagger-ui-express": "^5.0.1", "typeorm": "^0.3.25", - "uuid": "^11.1.0" + "uuid": "^11.1.0", + "zod": "^4.4.3" }, "devDependencies": { "@nestjs/cli": "^10.0.0", @@ -58,7 +60,7 @@ "@types/express": "^5.0.2", "@types/ioredis": "^4.28.10", "@types/jest": "^29.5.14", - "@types/multer": "^1.4.12", + "@types/multer": "^2.2.0", "@types/node": "^20.17.57", "@types/passport-jwt": "^4.0.1", "@types/supertest": "^6.0.0", @@ -68,6 +70,7 @@ "eslint": "^8.0.0", "eslint-config-prettier": "^9.0.0", "eslint-plugin-prettier": "^5.0.0", + "fast-check": "^3.23.2", "jest": "^29.5.0", "prettier": "^3.0.0", "source-map-support": "^0.5.21", @@ -2872,9 +2875,9 @@ "license": "MIT" }, "node_modules/@types/multer": { - "version": "1.4.12", - "resolved": "https://registry.npmjs.org/@types/multer/-/multer-1.4.12.tgz", - "integrity": "sha512-pQ2hoqvXiJt2FP9WQVLPRO+AmiIm/ZYkavPlIQnx282u4ZrVdztx0pkh3jjpQt0Kz+YI0YhSG264y08UJKoUQg==", + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/@types/multer/-/multer-2.2.0.tgz", + "integrity": "sha512-3U1troeqGV8Ntp7Q3klwf4zr23VEoqYVocYXaswm9+8z3O9UHDYAqLxjJ/h550iRADTjKdOdhhasXw6gD6kYtg==", "dev": true, "license": "MIT", "dependencies": { @@ -6000,6 +6003,29 @@ "node": ">=0.10.0" } }, + "node_modules/fast-check": { + "version": "3.23.2", + "resolved": "https://registry.npmjs.org/fast-check/-/fast-check-3.23.2.tgz", + "integrity": "sha512-h5+1OzzfCC3Ef7VbtKdcv7zsstUQwUDlYpUTvjeUsJAssPgLn7QzbboPtL5ro04Mq0rPOsMzl7q5hIbRs2wD1A==", + "dev": true, + "funding": [ + { + "type": "individual", + "url": "https://github.com/sponsors/dubzzz" + }, + { + "type": "opencollective", + "url": "https://opencollective.com/fast-check" + } + ], + "license": "MIT", + "dependencies": { + "pure-rand": "^6.1.0" + }, + "engines": { + "node": ">=8.0.0" + } + }, "node_modules/fast-deep-equal": { "version": "3.1.3", "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", @@ -6753,6 +6779,18 @@ "node": ">= 0.4" } }, + "node_modules/helmet": { + "version": "8.3.0", + "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.3.0.tgz", + "integrity": "sha512-Qgpiaws3Sm30Av8Eah6sjMCZZwjlBu+E68rhpCWBshY1lb09HtLwj5GviX0OyQIn+ulUS0iX0AxN5n3tLZzz1w==", + "license": "MIT", + "engines": { + "node": ">=18.0.0" + }, + "funding": { + "url": "https://github.com/sponsors/EvanHahn" + } + }, "node_modules/hexoid": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/hexoid/-/hexoid-2.0.0.tgz", @@ -9001,21 +9039,37 @@ "license": "MIT" }, "node_modules/multer": { - "version": "1.4.5-lts.2", - "resolved": "https://registry.npmjs.org/multer/-/multer-1.4.5-lts.2.tgz", - "integrity": "sha512-VzGiVigcG9zUAoCNU+xShztrlr1auZOlurXynNvO9GiWD1/mTBbUljOKY+qMeazBqXgRnjzeEgJI/wyjJUHg9A==", + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/multer/-/multer-2.2.0.tgz", + "integrity": "sha512-6rdyFg2kLrMh9Jee7/BMPuV9lEAd7lLW2YUpF9/YxR7njyoUwwQ0ZPh3TaIY50Sw6vlyD2HW3wGOkTS4P79xrQ==", "license": "MIT", "dependencies": { "append-field": "^1.0.0", - "busboy": "^1.0.0", - "concat-stream": "^1.5.2", - "mkdirp": "^0.5.4", - "object-assign": "^4.1.1", - "type-is": "^1.6.4", - "xtend": "^4.0.0" + "busboy": "^1.6.0", + "concat-stream": "^2.0.0", + "type-is": "^1.6.18" }, "engines": { - "node": ">= 6.0.0" + "node": ">= 10.16.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/express" + } + }, + "node_modules/multer/node_modules/concat-stream": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/concat-stream/-/concat-stream-2.0.0.tgz", + "integrity": "sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==", + "engines": [ + "node >= 6.0" + ], + "license": "MIT", + "dependencies": { + "buffer-from": "^1.0.0", + "inherits": "^2.0.3", + "readable-stream": "^3.0.2", + "typedarray": "^0.0.6" } }, "node_modules/multer/node_modules/media-typer": { @@ -9048,6 +9102,20 @@ "node": ">= 0.6" } }, + "node_modules/multer/node_modules/readable-stream": { + "version": "3.6.2", + "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==", + "license": "MIT", + "dependencies": { + "inherits": "^2.0.3", + "string_decoder": "^1.1.1", + "util-deprecate": "^1.0.1" + }, + "engines": { + "node": ">= 6" + } + }, "node_modules/multer/node_modules/type-is": { "version": "1.6.18", "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz", @@ -12892,6 +12960,15 @@ "funding": { "url": "https://github.com/sponsors/sindresorhus" } + }, + "node_modules/zod": { + "version": "4.4.3", + "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz", + "integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==", + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/colinhacks" + } } } } diff --git a/backend/package.json b/backend/package.json index 359acc00..2f9b6579 100644 --- a/backend/package.json +++ b/backend/package.json @@ -50,7 +50,7 @@ "helmet": "^8.0.0", "ip2location-nodejs": "^9.6.3", "joi": "^17.0.0", - "multer": "^1.4.5-lts.2", + "multer": "^2.2.0", "nest-commander": "^3.12.2", "nodemailer": "^6.10.0", "passport": "^0.7.0", @@ -74,7 +74,7 @@ "@types/express": "^5.0.2", "@types/ioredis": "^4.28.10", "@types/jest": "^29.5.14", - "@types/multer": "^1.4.12", + "@types/multer": "^2.2.0", "@types/node": "^20.17.57", "@types/passport-jwt": "^4.0.1", "@types/supertest": "^6.0.0",