From c5acb0331e2324dd131e4eddb71235b692c72fff Mon Sep 17 00:00:00 2001
From: Hector Hernandez <39923391+hectorhdzg@users.noreply.github.com>
Date: Fri, 23 Jan 2026 14:42:46 -0800
Subject: [PATCH 1/3] Fix vulnerable dependencies

---
 package.json | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/package.json b/package.json
index 70bab56..85e8f99 100644
--- a/package.json
+++ b/package.json
@@ -42,6 +42,10 @@
     "url": "https://github.com/microsoft/DynamicProto-JS/issues"
   },
   "homepage": "https://github.com/microsoft/DynamicProto-JS#readme",
+  "overrides": {
+    "form-data": "^2.5.4",
+    "tar": "^7.5.3"
+  },
   "dependencies": {
     "@nevware21/ts-utils": ">= 0.11.6 < 2.x"
   },

From f323afe4e913daa1d6c9bd0cff2c7dbe8046d134 Mon Sep 17 00:00:00 2001
From: Hector Hernandez <39923391+hectorhdzg@users.noreply.github.com>
Date: Mon, 26 Jan 2026 12:21:16 -0800
Subject: [PATCH 2/3] Update

---
 .github/workflows/ci.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d991a05..1da6121 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,12 +16,12 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [ 14.x, 16.x, 18.x ]
+        node-version: [ 18.x, 20.x ]
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v1
+      uses: actions/setup-node@v4
       with:
         node-version: ${{ matrix.node-version }}
     - name: Update rush shrinkwrap dependencies (for different node versions)

From 5376d0702139fe05964d478fe74291ae520bd6ac Mon Sep 17 00:00:00 2001
From: Hector Hernandez <39923391+hectorhdzg@users.noreply.github.com>
Date: Mon, 26 Jan 2026 13:32:43 -0800
Subject: [PATCH 3/3] Update

---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 85e8f99..6f0c12b 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
   },
   "homepage": "https://github.com/microsoft/DynamicProto-JS#readme",
   "overrides": {
-    "form-data": "^2.5.4",
+    "form-data": "^2.5.5",
     "tar": "^7.5.3"
   },
   "dependencies": {