From 772dee96dccb193b63c3505daf53e70abb59dfab Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 18 May 2026 17:56:38 +0000
Subject: [PATCH] chore(deps): bump the dependencies group across 1 directory
 with 4 updates

Bumps the dependencies group with 4 updates in the / directory: [hyperid](https://github.com/mcollina/hyperid), [ipaddr.js](https://github.com/whitequark/ipaddr.js), [ssri](https://github.com/npm/ssri) and [@npmcli/arborist](https://github.com/npm/cli/tree/HEAD/workspaces/arborist).


Updates `hyperid` from 3.3.0 to 4.0.0
- [Release notes](https://github.com/mcollina/hyperid/releases)
- [Commits](https://github.com/mcollina/hyperid/compare/v3.3.0...v4.0.0)

Updates `ipaddr.js` from 2.3.0 to 2.4.0
- [Changelog](https://github.com/whitequark/ipaddr.js/blob/main/Changes.md)
- [Commits](https://github.com/whitequark/ipaddr.js/compare/v2.3.0...v2.4.0)

Updates `ssri` from 13.0.1 to 14.0.0
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/ssri/compare/v13.0.1...v14.0.0)

Updates `@npmcli/arborist` from 9.4.2 to 9.5.0
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/v9.5.0/CHANGELOG.md)
- [Commits](https://github.com/npm/cli/commits/v9.5.0/workspaces/arborist)

---
updated-dependencies:
- dependency-name: hyperid
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ipaddr.js
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ssri
  dependency-version: 14.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: "@npmcli/arborist"
  dependency-version: 9.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 workspaces/mama/package.json        | 2 +-
 workspaces/tarball/package.json     | 4 ++--
 workspaces/tree-walker/package.json | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/workspaces/mama/package.json b/workspaces/mama/package.json
index 4298dda7..720ea7df 100644
--- a/workspaces/mama/package.json
+++ b/workspaces/mama/package.json
@@ -41,7 +41,7 @@
     "@nodesecure/npm-types": "^1.4.0",
     "@nodesecure/utils": "^2.3.0",
     "object-hash": "^3.0.0",
-    "ssri": "13.0.1"
+    "ssri": "14.0.0"
   },
   "devDependencies": {
     "@types/object-hash": "^3.0.6"
diff --git a/workspaces/tarball/package.json b/workspaces/tarball/package.json
index 9bbc8e19..52019813 100644
--- a/workspaces/tarball/package.json
+++ b/workspaces/tarball/package.json
@@ -52,8 +52,8 @@
     "@nodesecure/npm-types": "^1.2.0",
     "@nodesecure/utils": "^2.3.0",
     "@openally/result": "2.0.0",
-    "hyperid": "3.3.0",
-    "ipaddr.js": "2.3.0",
+    "hyperid": "4.0.0",
+    "ipaddr.js": "2.4.0",
     "pacote": "^21.0.0"
   },
   "devDependencies": {
diff --git a/workspaces/tree-walker/package.json b/workspaces/tree-walker/package.json
index 670270a8..2dc68802 100644
--- a/workspaces/tree-walker/package.json
+++ b/workspaces/tree-walker/package.json
@@ -41,7 +41,7 @@
     "@nodesecure/mama": "2.3.1",
     "@nodesecure/npm-registry-sdk": "4.5.2",
     "@nodesecure/npm-types": "^1.4.0",
-    "@npmcli/arborist": "9.4.2",
+    "@npmcli/arborist": "9.5.0",
     "combine-async-iterators": "^3.0.0",
     "itertools": "^2.3.1",
     "npm-pick-manifest": "^11.0.1",