From 102ecb7d3a76500c7794bfde7555d4a29cf58d05 Mon Sep 17 00:00:00 2001
From: Michael Gasperini <michael@mikesoft.it>
Date: Fri, 6 Nov 2026 21:38:35 +0100
Subject: [PATCH] chore(deps): bump the npm CLI override to a patched release

npm 12.2.1 bundles undici 6.29.0, which is affected by four advisories fixed in 6.29.1. npm 12.2.2 bundles undici 6.29.1.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
---
 package-lock.json | 30 +++++++++++++++---------------
 package.json      |  2 +-
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 6851a21..07dc42f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5058,9 +5058,9 @@
       }
     },
     "node_modules/npm": {
-      "version": "12.2.1",
-      "resolved": "https://registry.npmjs.org/npm/-/npm-12.2.1.tgz",
-      "integrity": "sha512-bKCmFRVT/BB+YPEYbZwQ1XUI3N5t4xKSpU1MxOjo7z3iWzKBJ0ZXRC1xFdEN+TC7N5TdywaBzf2dMXGJq/e2PQ==",
+      "version": "12.2.2",
+      "resolved": "https://registry.npmjs.org/npm/-/npm-12.2.2.tgz",
+      "integrity": "sha512-KglgbZyacf7jH+FHuNRqVuCzQi8VhI2a7J87Ix43FsPTuZoGWmIXXGdZtBUOA79vwL+IJREqURVzupA7PsQTcA==",
       "bundleDependencies": [
         "@isaacs/string-locale-compare",
         "@npmcli/arborist",
@@ -5149,13 +5149,13 @@
         "@npmcli/map-workspaces": "^6.0.0",
         "@npmcli/metavuln-calculator": "^10.0.0",
         "@npmcli/package-json": "^8.0.0",
-        "@npmcli/promise-spawn": "^10.0.0",
+        "@npmcli/promise-spawn": "^10.0.1",
         "@npmcli/redact": "^5.0.0",
         "@npmcli/run-script": "^11.0.0",
         "@sigstore/tuf": "^5.0.0",
         "abbrev": "^5.0.0",
         "archy": "~1.0.0",
-        "bin-links": "^7.0.0",
+        "bin-links": "^7.0.1",
         "cacache": "^21.0.1",
         "chalk": "^5.6.2",
         "ci-info": "^4.4.0",
@@ -5171,7 +5171,7 @@
         "json-parse-even-better-errors": "^6.0.0",
         "libnpmaccess": "^11.0.0",
         "libnpmdiff": "^9.0.4",
-        "libnpmexec": "^11.0.4",
+        "libnpmexec": "^11.0.5",
         "libnpmfund": "^8.0.4",
         "libnpmorg": "^9.0.0",
         "libnpmpack": "^10.0.4",
@@ -5194,12 +5194,12 @@
         "npm-registry-fetch": "^20.0.1",
         "npm-user-validate": "^5.0.0",
         "p-map": "^7.0.4",
-        "pacote": "^22.0.0",
+        "pacote": "^22.0.1",
         "parse-conflict-json": "^6.0.0",
         "proc-log": "^7.0.0",
         "qrcode-terminal": "^0.12.0",
         "read": "^6.0.0",
-        "semver": "^7.8.5",
+        "semver": "^7.8.6",
         "spdx-expression-parse": "^4.0.0",
         "ssri": "^14.0.0",
         "supports-color": "^10.2.2",
@@ -5533,7 +5533,7 @@
       }
     },
     "node_modules/npm/node_modules/@npmcli/promise-spawn": {
-      "version": "10.0.0",
+      "version": "10.0.1",
       "dev": true,
       "inBundle": true,
       "license": "ISC",
@@ -5708,7 +5708,7 @@
       }
     },
     "node_modules/npm/node_modules/bin-links": {
-      "version": "7.0.0",
+      "version": "7.0.1",
       "dev": true,
       "inBundle": true,
       "license": "ISC",
@@ -6008,7 +6008,7 @@
       }
     },
     "node_modules/npm/node_modules/ip-address": {
-      "version": "10.7.2",
+      "version": "10.7.5",
       "dev": true,
       "inBundle": true,
       "license": "MIT",
@@ -6109,7 +6109,7 @@
       }
     },
     "node_modules/npm/node_modules/libnpmexec": {
-      "version": "11.0.4",
+      "version": "11.0.5",
       "dev": true,
       "inBundle": true,
       "license": "ISC",
@@ -6585,7 +6585,7 @@
       }
     },
     "node_modules/npm/node_modules/pacote": {
-      "version": "22.0.0",
+      "version": "22.0.1",
       "dev": true,
       "inBundle": true,
       "license": "ISC",
@@ -6751,7 +6751,7 @@
       "optional": true
     },
     "node_modules/npm/node_modules/semver": {
-      "version": "7.8.5",
+      "version": "7.8.6",
       "dev": true,
       "inBundle": true,
       "license": "ISC",
@@ -6981,7 +6981,7 @@
       }
     },
     "node_modules/npm/node_modules/undici": {
-      "version": "6.29.0",
+      "version": "6.29.1",
       "dev": true,
       "inBundle": true,
       "license": "MIT",
diff --git a/package.json b/package.json
index 1b8c19b..f6cc9ba 100644
--- a/package.json
+++ b/package.json
@@ -69,6 +69,6 @@
   },
   "overrides": {
     "undici": "8.12.2",
-    "npm": "12.2.1"
+    "npm": "12.2.2"
   }
 }