From d132fd4d65a6663aed999cc10731b5c7087b6595 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Aug 2026 04:20:34 +0000
Subject: [PATCH] chore(deps,middleware)(deps): bump the runtime-patches group

Bumps the runtime-patches group in /middleware with 2 updates: [ws](https://github.com/websockets/ws) and [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse).


Updates `ws` from 8.21.1 to 8.21.2
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/8.21.1...8.21.2)

Updates `csv-parse` from 7.0.1 to 7.0.2
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@7.0.2/packages/csv-parse)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 8.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-patches
- dependency-name: csv-parse
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-patches
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 middleware/package-lock.json                   | 18 +++++++++---------
 middleware/package.json                        |  2 +-
 middleware/packages/canvas-core/package.json   |  2 +-
 .../packages/harness-orchestrator/package.json |  2 +-
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/middleware/package-lock.json b/middleware/package-lock.json
index 86d88b916..c9d13110a 100644
--- a/middleware/package-lock.json
+++ b/middleware/package-lock.json
@@ -42,7 +42,7 @@
         "sharp": "^0.35.3",
         "typescript-eslint": "^8.60.1",
         "undici": "^8.5.0",
-        "ws": "^8.21.1",
+        "ws": "^8.21.2",
         "yaml": "^2.6.1",
         "yauzl": "^3.3.2",
         "yazl": "^3.3.1",
@@ -4420,9 +4420,9 @@
       "license": "MIT"
     },
     "node_modules/csv-parse": {
-      "version": "7.0.1",
-      "resolved": "https://registry.npmjs.org/csv-parse/-/csv-parse-7.0.1.tgz",
-      "integrity": "sha512-+2z7Ar0APQ7Uu6fX4cn+pitRmxjZ1WPBcGmZFKmA74FCyi7Et/XZx8cjNQ5CjbZ4HCOxXCOpRBYvYH08Qa003A==",
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/csv-parse/-/csv-parse-7.0.2.tgz",
+      "integrity": "sha512-uKZghv9UmPkMVLYy//KZ9HFAIJsl7wkhoEdIL0+rhuSY9pZQlhaeGEDPIe+/w7eh81MOql8Q/9+inAGWG6ZHYA==",
       "license": "MIT"
     },
     "node_modules/dayjs": {
@@ -8965,9 +8965,9 @@
       "license": "ISC"
     },
     "node_modules/ws": {
-      "version": "8.21.1",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.1.tgz",
-      "integrity": "sha512-+0NTnW77fFN/DjQi6k/Sq/Yvk4Sgajw7urW8V+asjXnRgDs9gyGkdb7EzgfhA4goXsRIZKE28fzIXBHEzhuiWw==",
+      "version": "8.21.2",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.2.tgz",
+      "integrity": "sha512-54dMVAo4WIe6SKy3vBgN+9bJZqqQ8IMRevAkOLQALhi49qkkQDQfWdAZ8KQlXiEabw88ARXXdUrlvtbKQX+aKw==",
       "license": "MIT",
       "engines": {
         "node": ">=10.0.0"
@@ -9192,7 +9192,7 @@
         "tsx": "^4.23.1",
         "typescript": "^5.9.0",
         "vitest": "^4.1.10",
-        "ws": "^8.21.1"
+        "ws": "^8.21.2"
       }
     },
     "packages/canvas-core/node_modules/@types/node": {
@@ -9442,7 +9442,7 @@
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.30.0",
-        "csv-parse": "^7.0.1",
+        "csv-parse": "^7.0.2",
         "mammoth": "^1.8.0",
         "pdf-parse": "^2.4.5"
       },
diff --git a/middleware/package.json b/middleware/package.json
index d4a7c23ce..380bdeb78 100644
--- a/middleware/package.json
+++ b/middleware/package.json
@@ -75,7 +75,7 @@
     "sharp": "^0.35.3",
     "typescript-eslint": "^8.60.1",
     "undici": "^8.5.0",
-    "ws": "^8.21.1",
+    "ws": "^8.21.2",
     "yaml": "^2.6.1",
     "yauzl": "^3.3.2",
     "yazl": "^3.3.1",
diff --git a/middleware/packages/canvas-core/package.json b/middleware/packages/canvas-core/package.json
index 4c0e9c797..7707c858d 100644
--- a/middleware/packages/canvas-core/package.json
+++ b/middleware/packages/canvas-core/package.json
@@ -36,7 +36,7 @@
     "tsx": "^4.23.1",
     "typescript": "^5.9.0",
     "vitest": "^4.1.10",
-    "ws": "^8.21.1",
+    "ws": "^8.21.2",
     "@omadia/plugin-api": "*"
   }
 }
diff --git a/middleware/packages/harness-orchestrator/package.json b/middleware/packages/harness-orchestrator/package.json
index 0aa56913b..c5562553f 100644
--- a/middleware/packages/harness-orchestrator/package.json
+++ b/middleware/packages/harness-orchestrator/package.json
@@ -29,7 +29,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "csv-parse": "^7.0.1",
+    "csv-parse": "^7.0.2",
     "mammoth": "^1.8.0",
     "pdf-parse": "^2.4.5"
   },