From 3e4d4c49117f3b51c5d646c3e12bdb4a72ad1e72 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 11 Jul 2026 18:33:46 +0000
Subject: [PATCH] Update dependency content-disposition to v2

---
 package-lock.json | 39 +++++++++++++++++++++++++++++++++------
 package.json      |  4 ++--
 2 files changed, 35 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index e0bc5e9..f8e7ffc 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@digicatapult/sqnc-attachment-api",
-  "version": "3.3.101",
+  "version": "3.3.102",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@digicatapult/sqnc-attachment-api",
-      "version": "3.3.101",
+      "version": "3.3.102",
       "license": "Apache-2.0",
       "dependencies": {
         "@digicatapult/tsoa-oauth-express": "^2.0.65",
@@ -17,7 +17,7 @@
         "@tweedegolf/sab-adapter-s3": "^3.0.3",
         "@tweedegolf/storage-abstraction": "^3.0.3",
         "blockstore-core": "^6.1.3",
-        "content-disposition": "^1.1.0",
+        "content-disposition": "^2.0.1",
         "cors": "^2.8.6",
         "dotenv": "^17.4.2",
         "envalid": "^8.1.1",
@@ -6956,6 +6956,20 @@
         "node": ">=20"
       }
     },
+    "node_modules/@xhmikosr/downloader/node_modules/content-disposition": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz",
+      "integrity": "sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/@xhmikosr/os-filter-obj": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/@xhmikosr/os-filter-obj/-/os-filter-obj-4.0.0.tgz",
@@ -7976,9 +7990,9 @@
       }
     },
     "node_modules/content-disposition": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz",
-      "integrity": "sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==",
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-2.0.1.tgz",
+      "integrity": "sha512-e+H0ZXHSWYrENhQzw1LPuP4oF5MzVKmDU6d3hxlvaPEYLLg62MxtQNPRx4SYSuYJSBUgnQIG4HIN2tEtNv7Dog==",
       "license": "MIT",
       "engines": {
         "node": ">=18"
@@ -9055,6 +9069,19 @@
         "prom-client": ">=15.0.0"
       }
     },
+    "node_modules/express/node_modules/content-disposition": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz",
+      "integrity": "sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/ext-list": {
       "version": "2.2.2",
       "resolved": "https://registry.npmjs.org/ext-list/-/ext-list-2.2.2.tgz",
diff --git a/package.json b/package.json
index 7d0bac4..63cf3cb 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@digicatapult/sqnc-attachment-api",
-  "version": "3.3.101",
+  "version": "3.3.102",
   "description": "An OpenAPI Matchmaking API service for SQNC",
   "main": "src/index.ts",
   "type": "module",
@@ -78,7 +78,7 @@
     "@tweedegolf/sab-adapter-azure-blob": "^3.0.1",
     "@tweedegolf/storage-abstraction": "^3.0.3",
     "blockstore-core": "^6.1.3",
-    "content-disposition": "^1.1.0",
+    "content-disposition": "^2.0.1",
     "cors": "^2.8.6",
     "dotenv": "^17.4.2",
     "envalid": "^8.1.1",