From 6ed89a925011bdb9ae9f6458ea572d876d668cf0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 20 Jun 2026 04:34:10 +0000
Subject: [PATCH] Bump multer from 2.0.2 to 2.2.0 in /packages/api

Bumps [multer](https://github.com/expressjs/multer) from 2.0.2 to 2.2.0.
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expressjs/multer/compare/v2.0.2...v2.2.0)

---
updated-dependencies:
- dependency-name: multer
  dependency-version: 2.2.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packages/api/package-lock.json | 27 ++++++++-------------------
 packages/api/package.json      |  2 +-
 2 files changed, 9 insertions(+), 20 deletions(-)

diff --git a/packages/api/package-lock.json b/packages/api/package-lock.json
index c6910d1331..72ba6bb251 100644
--- a/packages/api/package-lock.json
+++ b/packages/api/package-lock.json
@@ -46,7 +46,7 @@
         "knex": "^3.1.0",
         "lodash": "^4.17.20",
         "lodash.groupby": "^4.6.0",
-        "multer": "^2.0.2",
+        "multer": "^2.2.0",
         "node-cron": "^3.0.3",
         "objection": "^3.0.1",
         "objection-soft-delete": "^1.0.7",
@@ -15329,33 +15329,22 @@
       "license": "MIT"
     },
     "node_modules/multer": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/multer/-/multer-2.0.2.tgz",
-      "integrity": "sha512-u7f2xaZ/UG8oLXHvtF/oWTRvT44p9ecwBBqTwgJVq0+4BW1g8OW01TyMEGWBHbyMOYVHXslaut7qEQ1meATXgw==",
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-2.2.0.tgz",
+      "integrity": "sha512-6rdyFg2kLrMh9Jee7/BMPuV9lEAd7lLW2YUpF9/YxR7njyoUwwQ0ZPh3TaIY50Sw6vlyD2HW3wGOkTS4P79xrQ==",
       "license": "MIT",
       "dependencies": {
         "append-field": "^1.0.0",
         "busboy": "^1.6.0",
         "concat-stream": "^2.0.0",
-        "mkdirp": "^0.5.6",
-        "object-assign": "^4.1.1",
-        "type-is": "^1.6.18",
-        "xtend": "^4.0.2"
+        "type-is": "^1.6.18"
       },
       "engines": {
         "node": ">= 10.16.0"
-      }
-    },
-    "node_modules/multer/node_modules/mkdirp": {
-      "version": "0.5.6",
-      "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz",
-      "integrity": "sha512-FP+p8RB8OWpF3YZBCrP5gtADmtXApB5AMLn+vdyA+PyxCjrCs00mjyUozssO33cwDeT3wNGdLxJ5M//YqtHAJw==",
-      "license": "MIT",
-      "dependencies": {
-        "minimist": "^1.2.6"
       },
-      "bin": {
-        "mkdirp": "bin/cmd.js"
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/multimatch": {
diff --git a/packages/api/package.json b/packages/api/package.json
index fd8bac4a7f..a8a20985ad 100644
--- a/packages/api/package.json
+++ b/packages/api/package.json
@@ -95,7 +95,7 @@
     "knex": "^3.1.0",
     "lodash": "^4.17.20",
     "lodash.groupby": "^4.6.0",
-    "multer": "^2.0.2",
+    "multer": "^2.2.0",
     "node-cron": "^3.0.3",
     "objection": "^3.0.1",
     "objection-soft-delete": "^1.0.7",