From 42b149bbc47051b1c897d36980af2169874d9624 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Jul 2026 01:24:42 +0000
Subject: [PATCH 1/2] chore(deps): bump multer from 2.1.1 to 2.2.0

Bumps [multer](https://github.com/expressjs/multer) from 2.1.1 to 2.2.0.
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expressjs/multer/compare/v2.1.1...v2.2.0)

---
updated-dependencies:
- dependency-name: multer
  dependency-version: 2.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index b0af2265165..c2ea79de86c 100644
--- a/package.json
+++ b/package.json
@@ -308,7 +308,7 @@
     "form-data": "^4.0.4",
     "gobbledygook": "https://github.com/mozilla-fxa/gobbledygook.git#354042684056e57ca77f036989e907707a36cff2",
     "minimist": "^1.2.6",
-    "multer": "^2.1.1",
+    "multer": "^2.2.0",
     "nest-typed-config/class-validator": "0.14.1",
     "plist": "^3.0.6",
     "sha.js": "^2.4.12",

From 4676d2e3607a2caab9f6861638b816c4f4d4b2d1 Mon Sep 17 00:00:00 2001
From: Vijay Budhram <vbudhram@gmail.com>
Date: Tue, 7 Jul 2026 22:04:06 -0400
Subject: [PATCH 2/2] fix(deps): regenerate yarn.lock for multer 2.2.0

Dependabot rebase left yarn.lock stale vs package.json, failing the frozen
install in CI Init (YN0028). Re-resolve to sync.
---
 yarn.lock | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/yarn.lock b/yarn.lock
index af26f0f6918..be48eac31d8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -40688,15 +40688,15 @@ __metadata:
   languageName: node
   linkType: hard
 
-"multer@npm:^2.1.1":
-  version: 2.1.1
-  resolution: "multer@npm:2.1.1"
+"multer@npm:^2.2.0":
+  version: 2.2.0
+  resolution: "multer@npm:2.2.0"
   dependencies:
     append-field: "npm:^1.0.0"
     busboy: "npm:^1.6.0"
     concat-stream: "npm:^2.0.0"
     type-is: "npm:^1.6.18"
-  checksum: 10c0/2ec4e02833b20f403cfb879d4b64d2a9070d902b9deae7aef18a6faadb707d7665385456cf540aa8a6dadfe3d4c5fc8e0e7b0675b94e1077048b1125426deee6
+  checksum: 10c0/7aa366d89042427347b6ab8e4a203405d7fe942e4a3095648a14526fcf3691d98ffc2da62abf85d8aca0a341f828168eb197b33cfdcfcce29d6ef593a5625591
   languageName: node
   linkType: hard