From 238463d33bba2eb4f9fd44b71220c90190c7a1bd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Nov 2026 22:34:48 +0000
Subject: [PATCH] Bump the production-minor-patch group with 2 updates

Bumps the production-minor-patch group with 2 updates: [@fastify/cookie](https://github.com/fastify/fastify-cookie) and [@fastify/jwt](https://github.com/fastify/fastify-jwt).


Updates `@fastify/cookie` from 11.1.3 to 11.1.5
- [Release notes](https://github.com/fastify/fastify-cookie/releases)
- [Commits](https://github.com/fastify/fastify-cookie/compare/v11.1.3...v11.1.5)

Updates `@fastify/jwt` from 10.2.5 to 10.2.6
- [Release notes](https://github.com/fastify/fastify-jwt/releases)
- [Commits](https://github.com/fastify/fastify-jwt/compare/v10.2.5...v10.2.6)

---
updated-dependencies:
- dependency-name: "@fastify/cookie"
  dependency-version: 11.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@fastify/jwt"
  dependency-version: 10.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 apps/api/package.json |  4 ++--
 package-lock.json     | 16 ++++++++--------
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/apps/api/package.json b/apps/api/package.json
index e083ccd..72be7ac 100644
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -15,9 +15,9 @@
     "lint": "eslint src"
   },
   "dependencies": {
-    "@fastify/cookie": "^11.1.3",
+    "@fastify/cookie": "^11.1.5",
     "@fastify/cors": "^11.3.1",
-    "@fastify/jwt": "^10.2.5",
+    "@fastify/jwt": "^10.2.6",
     "@fastify/multipart": "^9.4.0",
     "@fastify/rate-limit": "^11.2.1",
     "@prisma/adapter-pg": "^7.10.1",
diff --git a/package-lock.json b/package-lock.json
index 05288a3..502eca6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,9 +19,9 @@
       "name": "@stash/api",
       "version": "0.8.1",
       "dependencies": {
-        "@fastify/cookie": "^11.1.3",
+        "@fastify/cookie": "^11.1.5",
         "@fastify/cors": "^11.3.1",
-        "@fastify/jwt": "^10.2.5",
+        "@fastify/jwt": "^10.2.6",
         "@fastify/multipart": "^9.4.0",
         "@fastify/rate-limit": "^11.2.1",
         "@prisma/adapter-pg": "^7.10.1",
@@ -1321,9 +1321,9 @@
       "license": "MIT"
     },
     "node_modules/@fastify/cookie": {
-      "version": "11.1.3",
-      "resolved": "https://registry.npmjs.org/@fastify/cookie/-/cookie-11.1.3.tgz",
-      "integrity": "sha512-RBhlMNsmSG6C5KGiTkhSXBF75xIrUMSytDDBcpnVewhJ8XVYnJTu+SV6FYKXClIRsBuRjOfKbBSULvnPD3X/mg==",
+      "version": "11.1.5",
+      "resolved": "https://registry.npmjs.org/@fastify/cookie/-/cookie-11.1.5.tgz",
+      "integrity": "sha512-hs7e0otf7n/lJMpt63EFdQb5/u8kO6DeexEtLPVTybSdItC6SwJ1O0vtTyWvKNR70LZcHLlsUr/y3jFpqtyWRA==",
       "funding": [
         {
           "type": "github",
@@ -1428,9 +1428,9 @@
       "license": "MIT"
     },
     "node_modules/@fastify/jwt": {
-      "version": "10.2.5",
-      "resolved": "https://registry.npmjs.org/@fastify/jwt/-/jwt-10.2.5.tgz",
-      "integrity": "sha512-pObTiMwxYNYdTZ2E/aoU3REIQAMCFXtXMBcUTP1r60nbPqxQEDbN9zh/SQUEefL7gn+KBOaXcoU/Qmza4NxANA==",
+      "version": "10.2.6",
+      "resolved": "https://registry.npmjs.org/@fastify/jwt/-/jwt-10.2.6.tgz",
+      "integrity": "sha512-tnhl0U6foEHz9v/eGh8zh+tMiJlX867h+yv0sCpWAvWcXYCdjt2Ji/szfD1gDWLy/EQKwYt4OZCKCKIjvenwXw==",
       "funding": [
         {
           "type": "github",