From f8c4d112adefef928bb10863a51980b18e47adc2 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 27 Mar 2026 13:45:08 +0000
Subject: [PATCH] fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-APOLLOSERVER-15790568
- https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-15789763
- https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-15789765
---
 package.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index 82f8dd2e57..f4127575d7 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,7 @@
   ],
   "license": "Apache-2.0",
   "dependencies": {
-    "@apollo/server": "5.4.0",
+    "@apollo/server": "5.5.0",
     "@as-integrations/express5": "1.1.2",
     "@graphql-tools/merge": "9.0.24",
     "@graphql-tools/schema": "10.0.23",
@@ -48,7 +48,7 @@
     "mustache": "4.2.0",
     "otpauth": "9.4.0",
     "parse": "8.5.0",
-    "path-to-regexp": "8.3.0",
+    "path-to-regexp": "8.4.0",
     "pg-monitor": "3.1.0",
     "pg-promise": "12.6.0",
     "pluralize": "8.0.0",