From 84368f8d0207d811229f7e095c515ca2c54d7bbb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 8 Sep 2026 13:26:41 -0400
Subject: [PATCH] chore(deps): bump otpauth from 9.5.1 to 9.5.2 (#3820)

Bumps [otpauth](https://github.com/hectorm/otpauth) from 9.5.1 to 9.5.2.
- [Release notes](https://github.com/hectorm/otpauth/releases)
- [Commits](https://github.com/hectorm/otpauth/compare/v9.5.1...v9.5.2)

---
updated-dependencies:
- dependency-name: otpauth
  dependency-version: 9.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 package-lock.json        | 16 ++++++++--------
 src/backend/package.json |  2 +-
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index d36f1c565..b7a0e696f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3726,9 +3726,9 @@
       }
     },
     "node_modules/@noble/hashes": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz",
-      "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==",
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.4.0.tgz",
+      "integrity": "sha512-X5XaVWZIBCT7HHZGm5I7ZQXDwLG+bGXuSrMQAW+7Zvl87h1kmc1ZB1VSRJcpUfoUrGQp4Fkoxm5kZ+Ms+aW+eA==",
       "license": "MIT",
       "engines": {
         "node": ">= 20.19.0"
@@ -13732,12 +13732,12 @@
       }
     },
     "node_modules/otpauth": {
-      "version": "9.5.1",
-      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.5.1.tgz",
-      "integrity": "sha512-fJmDAHc8wImfqqqOXIlBvT1dEKrZK0Cmb2VEgScpNTolCz0PHh6ExUZGv4sLtOsWNaHCQlD+rRqaPgnoxFoZjQ==",
+      "version": "9.5.2",
+      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.5.2.tgz",
+      "integrity": "sha512-GQ5emWR/x1tcExT62IBT0UfO95wZzJZyxYOJOGVeQF47SYEN9vmh0vISvDZaNMuFJRG+IaWCKtfm+t9Bfoal6w==",
       "license": "MIT",
       "dependencies": {
-        "@noble/hashes": "2.2.0"
+        "@noble/hashes": "2.4.0"
       },
       "funding": {
         "url": "https://github.com/hectorm/otpauth?sponsor=1"
@@ -18172,7 +18172,7 @@
         "mysql2": "^3.22.6",
         "nodemailer": "^9.0.6",
         "openai": "^6.34.0",
-        "otpauth": "^9.2.4",
+        "otpauth": "^9.5.2",
         "pg": "^8.21.0",
         "replicate": "^1.0.0",
         "sharp": "^0.35.4",
diff --git a/src/backend/package.json b/src/backend/package.json
index 964a79899..20165139b 100644
--- a/src/backend/package.json
+++ b/src/backend/package.json
@@ -55,7 +55,7 @@
     "mysql2": "^3.22.6",
     "nodemailer": "^9.0.6",
     "openai": "^6.34.0",
-    "otpauth": "^9.2.4",
+    "otpauth": "^9.5.2",
     "pg": "^8.21.0",
     "replicate": "^1.0.0",
     "sharp": "^0.35.4",