From 7ea34248dba71d9b62d7524441909dd209eeabda Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 26 Aug 2026 12:20:01 +0000
Subject: [PATCH] chore(deps): update dependency @koa/cors to v5 [security]

---
 package-lock.json | 6 +++---
 package.json      | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 4cdd9b2a..8e3ee06c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -140,9 +140,9 @@
 			}
 		},
 		"@koa/cors": {
-			"version": "3.1.0",
-			"resolved": "https://registry.npmjs.org/@koa/cors/-/cors-3.1.0.tgz",
-			"integrity": "sha512-7ulRC1da/rBa6kj6P4g2aJfnET3z8Uf3SWu60cjbtxTA5g8lxRdX/Bd2P92EagGwwAhANeNw8T8if99rJliR6Q==",
+			"version": "5.0.0",
+			"resolved": "https://registry.npmjs.org/@koa/cors/-/cors-5.0.0.tgz",
+			"integrity": "sha512-x/iUDjcS90W69PryLDIMgFyV21YLTnG9zOpPXS7Bkt2b8AsY3zZsIpOLBkYr9fBcF3HbkKaER5hOBZLfpLgYNw==",
 			"requires": {
 				"vary": "^1.1.2"
 			}
diff --git a/package.json b/package.json
index 743b1c1b..0d85b414 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
 	},
 	"mod-project-name": "vpdb",
 	"dependencies": {
-		"@koa/cors": "3.1.0",
+		"@koa/cors": "5.0.0",
 		"@slack/client": "5.0.2",
 		"acl": "0.4.11",
 		"adm-zip": "0.4.16",