From 64c6f28b9e9420afbd81428f2b6a30d52f14c821 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Sep 2025 10:08:02 +0000
Subject: [PATCH] Bump helmet from 4.6.0 to 8.1.0 in /webapp

Bumps [helmet](https://github.com/helmetjs/helmet) from 4.6.0 to 8.1.0.
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](https://github.com/helmetjs/helmet/compare/v4.6.0...v8.1.0)

---
updated-dependencies:
- dependency-name: helmet
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 webapp/package-lock.json | 10 +++++-----
 webapp/package.json      |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/webapp/package-lock.json b/webapp/package-lock.json
index 4ff0b527..3bebeac0 100644
--- a/webapp/package-lock.json
+++ b/webapp/package-lock.json
@@ -44,7 +44,7 @@
         "file-loader": "^6.1.0",
         "glightbox": "^3.0.7",
         "govuk-frontend": "^4.10.0",
-        "helmet": "^4.4.1",
+        "helmet": "^8.1.0",
         "lodash.clonedeep": "^4.5.0",
         "lodash.inrange": "^3.3.6",
         "lusca": "^1.7.0",
@@ -8896,12 +8896,12 @@
       }
     },
     "node_modules/helmet": {
-      "version": "4.6.0",
-      "resolved": "https://registry.npmjs.org/helmet/-/helmet-4.6.0.tgz",
-      "integrity": "sha512-HVqALKZlR95ROkrnesdhbbZJFi/rIVSoNq6f3jA/9u6MIbTsPh3xZwihjeI5+DO/2sOV6HMHooXcEOuwskHpTg==",
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.1.0.tgz",
+      "integrity": "sha512-jOiHyAZsmnr8LqoPGmCjYAaiuWwjAPLgY8ZX2XrmHawt99/u1y6RgrZMTeoPfpUbV96HOalYgz1qzkRbw54Pmg==",
       "license": "MIT",
       "engines": {
-        "node": ">=10.0.0"
+        "node": ">=18.0.0"
       }
     },
     "node_modules/hosted-git-info": {
diff --git a/webapp/package.json b/webapp/package.json
index 99f508c0..b3476022 100644
--- a/webapp/package.json
+++ b/webapp/package.json
@@ -61,7 +61,7 @@
     "file-loader": "^6.1.0",
     "glightbox": "^3.0.7",
     "govuk-frontend": "^4.10.0",
-    "helmet": "^4.4.1",
+    "helmet": "^8.1.0",
     "lodash.clonedeep": "^4.5.0",
     "lodash.inrange": "^3.3.6",
     "lusca": "^1.7.0",