Merge branch 'main' into dependabot/npm_and_yarn/multi-b251156d90

ts-ron · web-flow · commit 4fc4a29357d1 · 2026-03-08T10:07:58.000+02:00
diff --git a/hosted-idv/package.json b/hosted-idv/package.json
@@ -7,11 +7,11 @@
   },
   "dependencies": {
     "@ciam-expressjs-vanilla-samples/shared": "1.0.0",
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
     "morgan": "~1.10.1",
     "node-fetch": "^3.3.2",
-    "express-rate-limit": "^8.2.1"
+    "express-rate-limit": "^8.2.2"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",
diff --git a/hosted-webauthn-for-logged-out-users/package.json b/hosted-webauthn-for-logged-out-users/package.json
@@ -6,7 +6,7 @@
     "start": "vite --debug --host"
   },
   "dependencies": {
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
     "express-session": "^1.17.3",
     "morgan": "~1.10.1",
diff --git a/login-with-email/package.json b/login-with-email/package.json
@@ -6,12 +6,12 @@
     "start": "vite --debug --host"
   },
   "dependencies": {
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
     "morgan": "~1.10.1",
     "node-fetch": "^3.3.2",
     "@ciam-expressjs-vanilla-samples/shared": "1.0.0",
-    "express-rate-limit": "8.2.1"
+    "express-rate-limit": "8.2.2"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",
diff --git a/login-with-google/package.json b/login-with-google/package.json
@@ -6,9 +6,9 @@
     "start": "vite --debug --host"
   },
   "dependencies": {
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
-    "express-rate-limit": "8.2.1",
+    "express-rate-limit": "8.2.2",
     "@ciam-expressjs-vanilla-samples/shared": "1.0.0",
     "node-fetch": "^3.3.2"
   },
diff --git a/login-with-magiclink/package.json b/login-with-magiclink/package.json
@@ -6,12 +6,12 @@
     "start": "vite --debug --host"
   },
   "dependencies": {
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
     "morgan": "~1.10.1",
     "node-fetch": "^3.3.2",
     "@ciam-expressjs-vanilla-samples/shared": "1.0.0",
-    "express-rate-limit": "^8.2.1"
+    "express-rate-limit": "^8.2.2"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",
diff --git a/login-with-mfa/package.json b/login-with-mfa/package.json
@@ -8,13 +8,13 @@
   },
   "dependencies": {
     "@types/express-session": "^1.17.6",
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
     "express-session": "^1.17.3",
     "morgan": "~1.10.1",
     "node-fetch": "^3.3.2",
     "@ciam-expressjs-vanilla-samples/shared": "1.0.0",
-    "express-rate-limit": "^8.2.1"
+    "express-rate-limit": "^8.2.2"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",
diff --git a/login-with-sms/package.json b/login-with-sms/package.json
@@ -6,12 +6,12 @@
     "start": "vite --debug --host"
   },
   "dependencies": {
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
     "morgan": "~1.10.1",
     "node-fetch": "^3.3.2",
     "@ciam-expressjs-vanilla-samples/shared": "1.0.0",
-    "express-rate-limit": "~8.2.1"
+    "express-rate-limit": "~8.2.2"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",
diff --git a/passkey-authentication/package.json b/passkey-authentication/package.json
@@ -6,13 +6,13 @@
     "start": "vite --debug --host"
   },
   "dependencies": {
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
     "express-session": "^1.17.3",
     "morgan": "~1.10.1",
     "node-fetch": "^3.3.2",
     "@ciam-expressjs-vanilla-samples/shared": "1.0.0",
-    "express-rate-limit": "~8.2.1"
+    "express-rate-limit": "~8.2.2"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",
diff --git a/password-authentication-drs/package.json b/password-authentication-drs/package.json
@@ -8,13 +8,13 @@
   },
   "dependencies": {
     "@types/express-session": "^1.17.6",
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
     "express-session": "^1.17.3",
     "morgan": "~1.10.1",
     "node-fetch": "^3.3.2",
     "@ciam-expressjs-vanilla-samples/shared": "1.0.0",
-    "express-rate-limit": "8.2.1"
+    "express-rate-limit": "8.2.2"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",
diff --git a/password-authentication/package.json b/password-authentication/package.json
@@ -8,13 +8,13 @@
   },
   "dependencies": {
     "@types/express-session": "^1.17.6",
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
     "express-session": "^1.17.3",
     "morgan": "~1.10.1",
     "node-fetch": "^3.3.2",
     "@ciam-expressjs-vanilla-samples/shared": "1.0.0",
-    "express-rate-limit": "8.2.1"
+    "express-rate-limit": "8.2.2"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",
diff --git a/saml-idp/package.json b/saml-idp/package.json
@@ -6,12 +6,12 @@
     "start": "vite --debug --host --port 8080"
   },
   "dependencies": {
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
     "morgan": "~1.10.1",
     "node-fetch": "^3.3.2",
     "@ciam-expressjs-vanilla-samples/shared": "1.0.0",
-    "express-rate-limit": "8.2.1"
+    "express-rate-limit": "8.2.2"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",
diff --git a/webauthn-cross-device/package.json b/webauthn-cross-device/package.json
@@ -7,12 +7,12 @@
     "start": "vite --debug --host"
   },
   "dependencies": {
-    "dotenv": "16.0.3",
+    "dotenv": "17.3.1",
     "express": "~5.2.1",
     "morgan": "~1.10.1",
     "node-fetch": "^3.3.2",
     "@ciam-expressjs-vanilla-samples/shared": "1.0.0",
-    "express-rate-limit": "8.2.1"
+    "express-rate-limit": "8.2.2"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",
diff --git a/yarn.lock b/yarn.lock
@@ -598,9 +598,9 @@ bindings@^1.4.0:
     file-uri-to-path "1.0.0"
 
 bn.js@^4.0.0, bn.js@^4.11.9:
-  version "4.12.0"
-  resolved "https://registry.npmjs.org/bn.js/-/bn.js-4.12.0.tgz"
-  integrity sha512-c98Bf3tPniI+scsdk237ku1Dc3ujXQTSgyiPUDEOe7tRkhrqridvh8klBv0HCEso1OLOYcHuCv/cS6DNxKH+ZA==
+  version "4.12.3"
+  resolved "https://registry.yarnpkg.com/bn.js/-/bn.js-4.12.3.tgz#2cc2c679188eb35b006f2d0d4710bed8437a769e"
+  integrity sha512-fGTi3gxV/23FTYdAoUtLYp6qySe2KE3teyZitipKNRuVYcBkoP/bB3guXN/XVKUe9mxCHXnc9C4ocyz8OmgN0g==
 
 body-parser@^2.2.1:
   version "2.2.2"
@@ -922,10 +922,10 @@ domutils@^3.2.2:
     domelementtype "^2.3.0"
     domhandler "^5.0.3"
 
-dotenv@16.0.3:
-  version "16.0.3"
-  resolved "https://registry.npmjs.org/dotenv/-/dotenv-16.0.3.tgz"
-  integrity sha512-7GO6HghkA5fYG9TYnNxi14/7K9f5occMlp3zXAuSxn7CKCxt9xbNWG7yF8hTCSUchlfWSe3uLmlPfigevRItzQ==
+dotenv@17.3.1:
+  version "17.3.1"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-17.3.1.tgz#2706f5b0165e45a1503348187b8468f87fe6aae2"
+  integrity sha512-IO8C/dzEb6O3F9/twg6ZLXz164a2fhTnEWb95H23Dm4OuN+92NmEAlTrupP9VW6Jm3sO26tQlqyvyi4CsnY9GA==
 
 dunder-proto@^1.0.0, dunder-proto@^1.0.1:
   version "1.0.1"
@@ -1274,12 +1274,19 @@ etag@^1.8.1:
   resolved "https://registry.yarnpkg.com/etag/-/etag-1.8.1.tgz#41ae2eeb65efa62268aebfea83ac7d79299b0887"
   integrity sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==
 
-express-rate-limit@8.2.1, express-rate-limit@^8.2.1, express-rate-limit@~8.2.1:
-  version "8.2.1"
-  resolved "https://registry.yarnpkg.com/express-rate-limit/-/express-rate-limit-8.2.1.tgz#ec75fdfe280ecddd762b8da8784c61bae47d7f7f"
-  integrity sha512-PCZEIEIxqwhzw4KF0n7QF4QqruVTcF73O5kFKUnGOyjbCCgizBBiFaYpd/fnBLUMPw/BWw9OsiN7GgrNYr7j6g==
+express-rate-limit@8.2.2, express-rate-limit@~8.2.2:
+  version "8.2.2"
+  resolved "https://registry.yarnpkg.com/express-rate-limit/-/express-rate-limit-8.2.2.tgz#dc1fc33482ab63cc8f6bcf473f2c93ad9b46e261"
+  integrity sha512-Ybv7bqtOgA914MLwaHWVFXMpMYeR1MQu/D+z2MaLYteqBsTIp9sY3AU7mGNLMJv8eLg8uQMpE20I+L2Lv49nSg==
   dependencies:
-    ip-address "10.0.1"
+    ip-address "10.1.0"
+
+express-rate-limit@^8.2.2:
+  version "8.3.0"
+  resolved "https://registry.yarnpkg.com/express-rate-limit/-/express-rate-limit-8.3.0.tgz#0ed00d3af24bcf74930d884a78595a96b0a9838c"
+  integrity sha512-KJzBawY6fB9FiZGdE/0aftepZ91YlaGIrV8vgblRM3J8X+dHx/aiowJWwkx6LIGyuqGiANsjSwwrbb8mifOJ4Q==
+  dependencies:
+    ip-address "10.1.0"
 
 express-session@^1.17.3:
   version "1.17.3"
@@ -1740,9 +1747,9 @@ ignore@^5.2.0:
   integrity sha512-MAb38BcSbH0eHNBxn7ql2NH/kX33OkB3lZ1BNdh7ENeRChHTYsTvWrMubiIAMNS2llXEEgZ1MUOBtXChP3kaFQ==
 
 immutable@^5.0.2:
-  version "5.1.4"
-  resolved "https://registry.yarnpkg.com/immutable/-/immutable-5.1.4.tgz#e3f8c1fe7b567d56cf26698f31918c241dae8c1f"
-  integrity sha512-p6u1bG3YSnINT5RQmx/yRZBpenIl30kVxkTLDyHLIMk0gict704Q9n+thfDI7lTRm9vXdDYutVzXhzcThxTnXA==
+  version "5.1.5"
+  resolved "https://registry.yarnpkg.com/immutable/-/immutable-5.1.5.tgz#93ee4db5c2a9ab42a4a783069f3c5d8847d40165"
+  integrity sha512-t7xcm2siw+hlUM68I+UEOK+z84RzmN59as9DZ7P1l0994DKUWV7UXBMQZVxaoMSRQ+PBZbHCOoBt7a2wxOMt+A==
 
 import-fresh@^3.2.1:
   version "3.3.0"
@@ -1784,10 +1791,10 @@ internal-slot@^1.1.0:
     hasown "^2.0.2"
     side-channel "^1.1.0"
 
-ip-address@10.0.1:
-  version "10.0.1"
-  resolved "https://registry.yarnpkg.com/ip-address/-/ip-address-10.0.1.tgz#a8180b783ce7788777d796286d61bce4276818ed"
-  integrity sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA==
+ip-address@10.1.0:
+  version "10.1.0"
+  resolved "https://registry.yarnpkg.com/ip-address/-/ip-address-10.1.0.tgz#d8dcffb34d0e02eb241427444a6e23f5b0595aa4"
+  integrity sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==
 
 ipaddr.js@1.9.1:
   version "1.9.1"
@@ -2154,9 +2161,9 @@ minimalistic-crypto-utils@^1.0.1:
   integrity sha512-JIYlbt6g8i5jKfJ3xz7rF0LXmv2TkDxBLUkiBeZ7bAx4GnnNMr8xFpGnOxn6GhTEHx3SjRrZEoU+j04prX1ktg==
 
 minimatch@^3.0.4, minimatch@^3.0.5, minimatch@^3.1.1, minimatch@^3.1.2:
-  version "3.1.2"
-  resolved "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz"
-  integrity sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==
+  version "3.1.5"
+  resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.1.5.tgz#580c88f8d5445f2bd6aa8f3cadefa0de79fbd69e"
+  integrity sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==
   dependencies:
     brace-expansion "^1.1.7"
 
@@ -2687,9 +2694,9 @@ rollup-pluginutils@^2.8.2:
     estree-walker "^0.6.1"
 
 rollup@^3.27.1:
-  version "3.29.4"
-  resolved "https://registry.yarnpkg.com/rollup/-/rollup-3.29.4.tgz#4d70c0f9834146df8705bfb69a9a19c9e1109981"
-  integrity sha512-oWzmBZwvYrU0iJHtDmhsm662rC15FRXmcjCk1xD771dFDx5jJ02ufAQQTn0etB2emNk4J9EZg/yWKpsn9BWGRw==
+  version "3.30.0"
+  resolved "https://registry.yarnpkg.com/rollup/-/rollup-3.30.0.tgz#3fa506fee2c5ba9d540a38da87067376cd55966d"
+  integrity sha512-kQvGasUgN+AlWGliFn2POSajRQEsULVYFGTvOZmK06d7vCD+YhZztt70kGk3qaeAXeWYL5eO7zx+rAubBc55eA==
   optionalDependencies:
     fsevents "~2.3.2"
 
