From 635297f9335baa0f356bb7ce5f25848c1d4e7cad Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 6 Mar 2026 09:09:30 +0000
Subject: [PATCH] chore: update dependency multer to ^2.1.0 [security]

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 examples/file-transfer/package.json |  2 +-
 package-lock.json                   | 30 ++++++++++-------------------
 packages/rest/package.json          |  2 +-
 3 files changed, 12 insertions(+), 22 deletions(-)

diff --git a/examples/file-transfer/package.json b/examples/file-transfer/package.json
index ef026cff1b12..24e28f3032c7 100644
--- a/examples/file-transfer/package.json
+++ b/examples/file-transfer/package.json
@@ -50,7 +50,7 @@
     "@loopback/core": "^7.0.9",
     "@loopback/rest": "^15.0.10",
     "@loopback/rest-explorer": "^8.0.10",
-    "multer": "^2.0.2",
+    "multer": "^2.1.0",
     "tslib": "^2.8.1"
   },
   "devDependencies": {
diff --git a/package-lock.json b/package-lock.json
index b3f15c0d554e..40d628a3cdd5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -455,7 +455,7 @@
         "@loopback/core": "^7.0.9",
         "@loopback/rest": "^15.0.10",
         "@loopback/rest-explorer": "^8.0.10",
-        "multer": "^2.0.2",
+        "multer": "^2.1.0",
         "tslib": "^2.8.1"
       },
       "devDependencies": {
@@ -27254,33 +27254,22 @@
       }
     },
     "node_modules/multer": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/multer/-/multer-2.0.2.tgz",
-      "integrity": "sha512-u7f2xaZ/UG8oLXHvtF/oWTRvT44p9ecwBBqTwgJVq0+4BW1g8OW01TyMEGWBHbyMOYVHXslaut7qEQ1meATXgw==",
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-2.1.1.tgz",
+      "integrity": "sha512-mo+QTzKlx8R7E5ylSXxWzGoXoZbOsRMpyitcht8By2KHvMbf3tjwosZ/Mu/XYU6UuJ3VZnODIrak5ZrPiPyB6A==",
       "license": "MIT",
       "dependencies": {
         "append-field": "^1.0.0",
         "busboy": "^1.6.0",
         "concat-stream": "^2.0.0",
-        "mkdirp": "^0.5.6",
-        "object-assign": "^4.1.1",
-        "type-is": "^1.6.18",
-        "xtend": "^4.0.2"
+        "type-is": "^1.6.18"
       },
       "engines": {
         "node": ">= 10.16.0"
-      }
-    },
-    "node_modules/multer/node_modules/mkdirp": {
-      "version": "0.5.6",
-      "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz",
-      "integrity": "sha512-FP+p8RB8OWpF3YZBCrP5gtADmtXApB5AMLn+vdyA+PyxCjrCs00mjyUozssO33cwDeT3wNGdLxJ5M//YqtHAJw==",
-      "license": "MIT",
-      "dependencies": {
-        "minimist": "^1.2.6"
       },
-      "bin": {
-        "mkdirp": "bin/cmd.js"
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/multimatch": {
@@ -38198,6 +38187,7 @@
       "version": "4.0.2",
       "resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
       "integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==",
+      "devOptional": true,
       "engines": {
         "node": ">=0.4"
       }
@@ -41623,7 +41613,7 @@
         "@types/node": "^16.18.126",
         "@types/on-finished": "^2.3.5",
         "@types/qs": "^6.14.0",
-        "multer": "^2.0.2"
+        "multer": "^2.1.0"
       },
       "engines": {
         "node": "20 || 22 || 24"
diff --git a/packages/rest/package.json b/packages/rest/package.json
index 951ce95a4814..091759713d41 100644
--- a/packages/rest/package.json
+++ b/packages/rest/package.json
@@ -85,6 +85,6 @@
     "@types/node": "^16.18.126",
     "@types/on-finished": "^2.3.5",
     "@types/qs": "^6.14.0",
-    "multer": "^2.0.2"
+    "multer": "^2.1.0"
   }
 }