From ada8e2bf412be6b0816ebe1a928f9fa18309da99 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 1 Apr 2026 12:48:12 +0000
Subject: [PATCH] chore: bump env-paths from 2.2.1 to 4.0.0

Bumps [env-paths](https://github.com/sindresorhus/env-paths) from 2.2.1 to 4.0.0.
- [Release notes](https://github.com/sindresorhus/env-paths/releases)
- [Commits](https://github.com/sindresorhus/env-paths/compare/v2.2.1...v4.0.0)

---
updated-dependencies:
- dependency-name: env-paths
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 28 +++++++++++++++++++++++-----
 package.json      |  2 +-
 2 files changed, 24 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index ecc56f1cc..cfdde5fdb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
         "argon2": "^0.44.0",
         "compression": "^1.7.4",
         "cookie-parser": "^1.4.6",
-        "env-paths": "^2.2.1",
+        "env-paths": "^4.0.0",
         "express": "^5.0.1",
         "http-proxy": "^1.18.1",
         "httpolyglot": "^0.1.2",
@@ -2316,12 +2316,18 @@
       }
     },
     "node_modules/env-paths": {
-      "version": "2.2.1",
-      "resolved": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz",
-      "integrity": "sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==",
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/env-paths/-/env-paths-4.0.0.tgz",
+      "integrity": "sha512-pxP8eL2SwwaTRi/KHYwLYXinDs7gL3jxFcBYmEdYfZmZXbaVDvdppd0XBU8qVz03rDfKZMXg1omHCbsJjZrMsw==",
       "license": "MIT",
+      "dependencies": {
+        "is-safe-filename": "^0.1.0"
+      },
       "engines": {
-        "node": ">=6"
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
     "node_modules/es-abstract": {
@@ -3990,6 +3996,18 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/is-safe-filename": {
+      "version": "0.1.1",
+      "resolved": "https://registry.npmjs.org/is-safe-filename/-/is-safe-filename-0.1.1.tgz",
+      "integrity": "sha512-4SrR7AdnY11LHfDKTZY1u6Ga3RuxZdl3YKWWShO5iyuG5h8QS4GD2tOb04peBJ5I7pXbR+CGBNEhTcwK+FzN3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/is-set": {
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/is-set/-/is-set-2.0.3.tgz",
diff --git a/package.json b/package.json
index 4f01a218b..96824ae01 100644
--- a/package.json
+++ b/package.json
@@ -71,7 +71,7 @@
     "argon2": "^0.44.0",
     "compression": "^1.7.4",
     "cookie-parser": "^1.4.6",
-    "env-paths": "^2.2.1",
+    "env-paths": "^4.0.0",
     "express": "^5.0.1",
     "http-proxy": "^1.18.1",
     "httpolyglot": "^0.1.2",