From af8a6397eb78f595ed85bd7e6682da3c55919f3c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 1 Apr 2026 02:48:08 +0000
Subject: [PATCH] chore(deps): bump the npm_and_yarn group across 2 directories
 with 3 updates

Bumps the npm_and_yarn group with 2 updates in the /apps/api directory: [fastify](https://github.com/fastify/fastify) and [@xmldom/xmldom](https://github.com/xmldom/xmldom).
Bumps the npm_and_yarn group with 1 update in the /vantademo directory: [picomatch](https://github.com/micromatch/picomatch).


Updates `fastify` from 5.8.1 to 5.8.3
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](https://github.com/fastify/fastify/compare/v5.8.1...v5.8.3)

Removes `@xmldom/xmldom`

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: fastify
  dependency-version: 5.8.3
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@xmldom/xmldom"
  dependency-version:
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 apps/api/package-lock.json  | 37 +++++++++++--------------------------
 apps/api/package.json       |  2 +-
 vantademo/package-lock.json |  6 +++---
 3 files changed, 15 insertions(+), 30 deletions(-)

diff --git a/apps/api/package-lock.json b/apps/api/package-lock.json
index a51c4af..4caf385 100644
--- a/apps/api/package-lock.json
+++ b/apps/api/package-lock.json
@@ -14,9 +14,9 @@
         "@fastify/rate-limit": "^10.3.0",
         "@prisma/client": "^5.17.0",
         "ethers": "^6.12.0",
-        "fastify": "^5.8.1",
+        "fastify": "^5.8.3",
         "openai": "^6.17.0",
-        "pdf2json": "^3.1.4",
+        "pdf2json": "^3.2.2",
         "pdfkit": "^0.15.0",
         "prom-client": "^15.1.3",
         "zod": "^3.23.8"
@@ -31,11 +31,11 @@
     },
     "../../packages/core": {
       "name": "@deed-shield/core",
-      "version": "0.1.0",
+      "version": "0.2.0",
       "dependencies": {
         "ethers": "^6.12.0",
         "jose": "^5.2.4",
-        "json-canonicalize": "^1.0.6",
+        "json-canonicalize": "^2.0.0",
         "zod": "^3.23.8"
       }
     },
@@ -1326,9 +1326,9 @@
       "license": "BSD-3-Clause"
     },
     "node_modules/fastify": {
-      "version": "5.8.1",
-      "resolved": "https://registry.npmjs.org/fastify/-/fastify-5.8.1.tgz",
-      "integrity": "sha512-y0kicFvvn7CYWoPOVLOcvn4YyKQz03DIY7UxmyOy21/J8eXm09R+tmb+tVDBW5h+pja30cHI5dqUcSlvY86V2A==",
+      "version": "5.8.3",
+      "resolved": "https://registry.npmjs.org/fastify/-/fastify-5.8.3.tgz",
+      "integrity": "sha512-XJXpRQ41+rsJ/GLeP9vyDC+fBXilcTlEXokMSexkdEkla4uf7ZQNaI5xl3el+kW5TZQulqYxLr659ey/KX7XmQ==",
       "funding": [
         {
           "type": "github",
@@ -2030,30 +2030,15 @@
       "license": "MIT"
     },
     "node_modules/pdf2json": {
-      "version": "3.1.4",
-      "resolved": "https://registry.npmjs.org/pdf2json/-/pdf2json-3.1.4.tgz",
-      "integrity": "sha512-rS+VapXpXZr+5lUpHmRh3ugXdFXp24p1RyG24yP1DMpqP4t0mrYNGpLtpSbWD42PnQ59GIXofxF+yWb7M+3THg==",
-      "bundleDependencies": [
-        "@xmldom/xmldom"
-      ],
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/pdf2json/-/pdf2json-3.2.2.tgz",
+      "integrity": "sha512-DgtH8GId1/+oj8n9yYEmhTq1QkxOZZzqHJhHEa1bmtV3t3/u2YsE3LSvRUNpVRWVXRcCdn+3Tu6+mD2YXKL7lA==",
       "license": "Apache-2.0",
-      "dependencies": {
-        "@xmldom/xmldom": "^0.8.10"
-      },
       "bin": {
         "pdf2json": "bin/pdf2json.js"
       },
       "engines": {
-        "node": ">=18.12.1",
-        "npm": ">=8.19.2"
-      }
-    },
-    "node_modules/pdf2json/node_modules/@xmldom/xmldom": {
-      "version": "0.8.10",
-      "inBundle": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=10.0.0"
+        "node": ">=20.18.0"
       }
     },
     "node_modules/pdfkit": {
diff --git a/apps/api/package.json b/apps/api/package.json
index d71f31e..eb82514 100644
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -22,7 +22,7 @@
     "ethers": "^6.12.0",
     "fastify": "^5.8.3",
     "openai": "^6.17.0",
-    "pdf2json": "^3.1.4",
+    "pdf2json": "^3.2.2",
     "pdfkit": "^0.15.0",
     "prom-client": "^15.1.3",
     "zod": "^3.23.8"
diff --git a/vantademo/package-lock.json b/vantademo/package-lock.json
index 08b0040..91271d3 100644
--- a/vantademo/package-lock.json
+++ b/vantademo/package-lock.json
@@ -4369,9 +4369,9 @@
       "license": "ISC"
     },
     "node_modules/picomatch": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
-      "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz",
+      "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==",
       "dev": true,
       "license": "MIT",
       "engines": {