From 8b6a0003bd6748810ba0073b9e814dc32f248127 Mon Sep 17 00:00:00 2001
From: "dev-mend-for-github-com[bot]"
 <51963704+dev-mend-for-github-com[bot]@users.noreply.github.com>
Date: Sat, 15 Nov 2025 16:27:57 +0000
Subject: [PATCH] Update dependency async to v3

---
 package.json | 2 +-
 yarn.lock    | 7 ++++++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index 165a0ac13441..b33499433868 100644
--- a/package.json
+++ b/package.json
@@ -18,7 +18,7 @@
     "@verdaccio/file-locking": "^1.0.0",
     "JSONStream": "^1.1.1",
     "apache-md5": "^1.1.2",
-    "async": "^2.0.1",
+    "async": "^3.0.0",
     "body-parser": "^1.19.2",
     "bunyan": "^1.8.13",
     "chalk": "^2.0.1",
diff --git a/yarn.lock b/yarn.lock
index 549cfdbb704a..8caaec689959 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -616,12 +616,17 @@ async@^1.4.0, async@^1.5.2:
   version "1.5.2"
   resolved "https://registry.npmjs.org/async/-/async-1.5.2.tgz#ec6a61ae56480c0c3cb241c95618e20892f9672a"
 
-async@^2.0.1, async@^2.1.2, async@^2.1.5, async@^2.4.1:
+async@^2.1.2, async@^2.1.5, async@^2.4.1:
   version "2.5.0"
   resolved "https://registry.npmjs.org/async/-/async-2.5.0.tgz#843190fd6b7357a0b9e1c956edddd5ec8462b54d"
   dependencies:
     lodash "^4.14.0"
 
+async@^3.0.0:
+  version "3.2.6"
+  resolved "https://registry.yarnpkg.com/async/-/async-3.2.6.tgz#1b0728e14929d51b85b449b7f06e27c1145e38ce"
+  integrity sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==
+
 async@^3.2.0:
   version "3.2.0"
   resolved "https://registry.yarnpkg.com/async/-/async-3.2.0.tgz#b3a2685c5ebb641d3de02d161002c60fc9f85720"