From a860b85c995948ad3f7dba34983f183aeb6cab03 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sat, 29 Nov 2025 05:02:00 +0000
Subject: [PATCH] fix: upgrade node-fetch from 2.6.7 to 2.7.0

Snyk has created this PR to upgrade node-fetch from 2.6.7 to 2.7.0.

See this package in npm:
node-fetch

See this project in Snyk:
https://app.snyk.io/org/travist-ulg/project/9f0b036c-e742-4a1c-a20d-95b046ab7fc9?utm_source=github&utm_medium=referral&page=upgrade-pr
---
 package-lock.json | 22 +++++++++++++---------
 package.json      |  2 +-
 2 files changed, 14 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 7dbb26d..928f4a5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@formio/deploy",
-  "version": "1.25.0",
+  "version": "1.26.0",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "@formio/deploy",
-      "version": "1.25.0",
+      "version": "1.26.0",
       "license": "MIT",
       "dependencies": {
         "@travist/async-shell": "^1.5.0",
@@ -16,12 +16,15 @@
         "dotenv": "^16.0.1",
         "fs-extra": "^10.1.0",
         "lodash": "^4.17.21",
-        "node-fetch": "2.6.7",
+        "node-fetch": "^2.7.0",
         "semver": "^7.3.7",
         "zip-local": "^0.3.5"
       },
       "bin": {
         "formio-deploy": "bin/formio-deploy"
+      },
+      "engines": {
+        "node": ">=16.0.0"
       }
     },
     "node_modules/@travist/async-shell": {
@@ -420,9 +423,10 @@
       }
     },
     "node_modules/node-fetch": {
-      "version": "2.6.7",
-      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz",
-      "integrity": "sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==",
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz",
+      "integrity": "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==",
+      "license": "MIT",
       "dependencies": {
         "whatwg-url": "^5.0.0"
       },
@@ -925,9 +929,9 @@
       }
     },
     "node-fetch": {
-      "version": "2.6.7",
-      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz",
-      "integrity": "sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==",
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz",
+      "integrity": "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==",
       "requires": {
         "whatwg-url": "^5.0.0"
       }
diff --git a/package.json b/package.json
index ab71516..60c6975 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "dotenv": "^16.0.1",
     "fs-extra": "^10.1.0",
     "lodash": "^4.17.21",
-    "node-fetch": "2.6.7",
+    "node-fetch": "2.7.0",
     "semver": "^7.3.7",
     "zip-local": "^0.3.5"
   },