From e32c45de3bb150e829727b64fb09c8f3faffebcb Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 13 Jul 2026 03:32:50 +0000
Subject: [PATCH] fix: package.json & package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ADMZIP-17954277
---
 package-lock.json | 24 ++++++++++++++----------
 package.json      |  2 +-
 2 files changed, 15 insertions(+), 11 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 7dbb26d..45b21e0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,16 +1,16 @@
 {
   "name": "@formio/deploy",
-  "version": "1.25.0",
+  "version": "1.26.0",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "@formio/deploy",
-      "version": "1.25.0",
+      "version": "1.26.0",
       "license": "MIT",
       "dependencies": {
         "@travist/async-shell": "^1.5.0",
-        "adm-zip": "^0.5.9",
+        "adm-zip": "^0.5.18",
         "archiver": "^5.3.1",
         "commander": "^9.4.0",
         "dotenv": "^16.0.1",
@@ -22,6 +22,9 @@
       },
       "bin": {
         "formio-deploy": "bin/formio-deploy"
+      },
+      "engines": {
+        "node": ">=16.0.0"
       }
     },
     "node_modules/@travist/async-shell": {
@@ -30,11 +33,12 @@
       "integrity": "sha512-TYMxNVlMiR4cZdoX2cUg9JmE+K4BNXWTPDBLTD00ixkoHEQPrXSB2sfD9KYCXZo8SLJsrQ7Rp6YiljXNJhCHnQ=="
     },
     "node_modules/adm-zip": {
-      "version": "0.5.9",
-      "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.5.9.tgz",
-      "integrity": "sha512-s+3fXLkeeLjZ2kLjCBwQufpI5fuN+kIGBxu6530nVQZGVol0d7Y/M88/xw9HGGUcJjKf8LutN3VPRUBq6N7Ajg==",
+      "version": "0.5.18",
+      "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.5.18.tgz",
+      "integrity": "sha512-ufJnssQGbxzLNS1Ho9bCtX4rQKCCvoVuDLHoJyc3F9dOGDB4BkWs2Ci0kv53lqocAEQ/Cbi+I2XCsNYGqVYqng==",
+      "license": "MIT",
       "engines": {
-        "node": ">=6.0"
+        "node": ">=12.0"
       }
     },
     "node_modules/archiver": {
@@ -623,9 +627,9 @@
       "integrity": "sha512-TYMxNVlMiR4cZdoX2cUg9JmE+K4BNXWTPDBLTD00ixkoHEQPrXSB2sfD9KYCXZo8SLJsrQ7Rp6YiljXNJhCHnQ=="
     },
     "adm-zip": {
-      "version": "0.5.9",
-      "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.5.9.tgz",
-      "integrity": "sha512-s+3fXLkeeLjZ2kLjCBwQufpI5fuN+kIGBxu6530nVQZGVol0d7Y/M88/xw9HGGUcJjKf8LutN3VPRUBq6N7Ajg=="
+      "version": "0.5.18",
+      "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.5.18.tgz",
+      "integrity": "sha512-ufJnssQGbxzLNS1Ho9bCtX4rQKCCvoVuDLHoJyc3F9dOGDB4BkWs2Ci0kv53lqocAEQ/Cbi+I2XCsNYGqVYqng=="
     },
     "archiver": {
       "version": "5.3.1",
diff --git a/package.json b/package.json
index ab71516..eff08ae 100644
--- a/package.json
+++ b/package.json
@@ -26,7 +26,7 @@
   },
   "dependencies": {
     "@travist/async-shell": "^1.5.0",
-    "adm-zip": "^0.5.9",
+    "adm-zip": "^0.5.18",
     "archiver": "^5.3.1",
     "commander": "^9.4.0",
     "dotenv": "^16.0.1",