From aad71991ecbe3a7faca8807c8efb5fe15dc5f599 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Nov 2025 00:02:41 +0000
Subject: [PATCH] chore(deps): bump express-rate-limit from 6.2.0 to 8.2.1

Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 6.2.0 to 8.2.1.
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](https://github.com/express-rate-limit/express-rate-limit/compare/v6.2.0...v8.2.1)

---
updated-dependencies:
- dependency-name: express-rate-limit
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 41 +++++++++++++++++++++++++++++++----------
 package.json      |  2 +-
 2 files changed, 32 insertions(+), 11 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index ae43174a88b..726175efba3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,7 +23,7 @@
         "ejs": "^3.1.6",
         "emoji-name-map": "^1.2.9",
         "express": "^4.17.2",
-        "express-rate-limit": "^6.2.0",
+        "express-rate-limit": "^8.2.1",
         "jimp": "^0.16.1",
         "js-yaml": "^4.1.0",
         "linguist-js": "^2.2.0",
@@ -4253,14 +4253,20 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "6.2.0",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-6.2.0.tgz",
-      "integrity": "sha512-q9xfttbPX79HiBsHA4LT3PZEeJR96CJ5/2jloAKSEECMx8XlOOOpjxx6iK/kBw3hFJ8uhx6Q9lCfSGp70yV0tQ==",
+      "version": "8.2.1",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.2.1.tgz",
+      "integrity": "sha512-PCZEIEIxqwhzw4KF0n7QF4QqruVTcF73O5kFKUnGOyjbCCgizBBiFaYpd/fnBLUMPw/BWw9OsiN7GgrNYr7j6g==",
+      "dependencies": {
+        "ip-address": "10.0.1"
+      },
       "engines": {
-        "node": ">= 14.5.0"
+        "node": ">= 16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/express-rate-limit"
       },
       "peerDependencies": {
-        "express": "^4"
+        "express": ">= 4.11"
       }
     },
     "node_modules/express/node_modules/safe-buffer": {
@@ -5181,6 +5187,14 @@
         "node": ">=10"
       }
     },
+    "node_modules/ip-address": {
+      "version": "10.0.1",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.0.1.tgz",
+      "integrity": "sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA==",
+      "engines": {
+        "node": ">= 12"
+      }
+    },
     "node_modules/ipaddr.js": {
       "version": "1.9.1",
       "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
@@ -13301,10 +13315,12 @@
       }
     },
     "express-rate-limit": {
-      "version": "6.2.0",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-6.2.0.tgz",
-      "integrity": "sha512-q9xfttbPX79HiBsHA4LT3PZEeJR96CJ5/2jloAKSEECMx8XlOOOpjxx6iK/kBw3hFJ8uhx6Q9lCfSGp70yV0tQ==",
-      "requires": {}
+      "version": "8.2.1",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.2.1.tgz",
+      "integrity": "sha512-PCZEIEIxqwhzw4KF0n7QF4QqruVTcF73O5kFKUnGOyjbCCgizBBiFaYpd/fnBLUMPw/BWw9OsiN7GgrNYr7j6g==",
+      "requires": {
+        "ip-address": "10.0.1"
+      }
     },
     "extend": {
       "version": "3.0.2",
@@ -13970,6 +13986,11 @@
       "integrity": "sha512-7PnF4oN3CvZF23ADhA5wRaYEQpJ8qygSkbtTXWBeXWXmEVRXK+1ITciHWwHhsjv1TmW0MgacIv6hEi5pX5NQdA==",
       "dev": true
     },
+    "ip-address": {
+      "version": "10.0.1",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.0.1.tgz",
+      "integrity": "sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA=="
+    },
     "ipaddr.js": {
       "version": "1.9.1",
       "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
diff --git a/package.json b/package.json
index 1907d982074..e48e32f2cee 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
     "ejs": "^3.1.6",
     "emoji-name-map": "^1.2.9",
     "express": "^4.17.2",
-    "express-rate-limit": "^6.2.0",
+    "express-rate-limit": "^8.2.1",
     "jimp": "^0.16.1",
     "js-yaml": "^4.1.0",
     "linguist-js": "^2.2.0",