From 3b9c2cfaed4e83ad5be4f2e1299bccdf379f06ef Mon Sep 17 00:00:00 2001
From: "depfu[bot]" <23717796+depfu[bot]@users.noreply.github.com>
Date: Fri, 23 Jan 2026 15:55:11 +0000
Subject: [PATCH] Update cors to version 2.8.6

---
 package-lock.json | 6 +++---
 package.json      | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index e729cb6..49b20c3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1702,9 +1702,9 @@
       "integrity": "sha1-tf1UIgqivFq1eqtxQMlAdUUDwac="
     },
     "cors": {
-      "version": "2.8.5",
-      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz",
-      "integrity": "sha512-KIHbLJqu73RGr/hnbrO9uBeixNGuvSQjul/jdFvS/KFSIH1hWVd1ng7zOHx+YrEfInLG7q4n6GHQ9cDtxv/P6g==",
+      "version": "2.8.6",
+      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
+      "integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
       "requires": {
         "object-assign": "^4",
         "vary": "^1"
diff --git a/package.json b/package.json
index 5c24b23..54a10af 100644
--- a/package.json
+++ b/package.json
@@ -8,7 +8,7 @@
     "@google-cloud/storage": "^3.2.1",
     "Base64": "^1.1.0",
     "buffer": "^5.4.2",
-    "cors": "^2.8.5",
+    "cors": "^2.8.6",
     "express": "^4.17.1",
     "firebase-admin": "^8.5.0",
     "gzip": "^0.1.0",