From de26bc5438fd0b1b84c825d0cf3f43a33d05580e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 21 Oct 2026 07:07:26 +0000
Subject: [PATCH] build(deps): Bump helmet from 7.2.0 to 8.3.0

Bumps [helmet](https://github.com/helmetjs/helmet) from 7.2.0 to 8.3.0.
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](https://github.com/helmetjs/helmet/compare/v7.2.0...v8.3.0)

---
updated-dependencies:
- dependency-name: helmet
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 apps/web/package.json |  2 +-
 package-lock.json     | 13 ++++++++-----
 2 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/apps/web/package.json b/apps/web/package.json
index 803a435..30860eb 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -33,7 +33,7 @@
     "ejs": "^3.1.9",
     "express": "^4.18.2",
     "fluent-ffmpeg": "^2.1.2",
-    "helmet": "^7.1.0",
+    "helmet": "^8.3.0",
     "mysql2": "^3.24.6",
     "scripture-guide": "^1.0.98"
   },
diff --git a/package-lock.json b/package-lock.json
index 0866ccc..fe8b42d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -47,7 +47,7 @@
         "ejs": "^3.1.9",
         "express": "^4.18.2",
         "fluent-ffmpeg": "^2.1.2",
-        "helmet": "^7.1.0",
+        "helmet": "^8.3.0",
         "mysql2": "^3.24.6",
         "scripture-guide": "^1.0.98"
       },
@@ -8141,12 +8141,15 @@
       }
     },
     "node_modules/helmet": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/helmet/-/helmet-7.2.0.tgz",
-      "integrity": "sha512-ZRiwvN089JfMXokizgqEPXsl2Guk094yExfoDXR0cBYWxtBbaSww/w+vT4WEJsBW2iTUi1GgZ6swmoug3Oy4Xw==",
+      "version": "8.3.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.3.0.tgz",
+      "integrity": "sha512-Qgpiaws3Sm30Av8Eah6sjMCZZwjlBu+E68rhpCWBshY1lb09HtLwj5GviX0OyQIn+ulUS0iX0AxN5n3tLZzz1w==",
       "license": "MIT",
       "engines": {
-        "node": ">=16.0.0"
+        "node": ">=18.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/EvanHahn"
       }
     },
     "node_modules/html-encoding-sniffer": {