From 3ca64fd3ed4ac61a6482e867a15531dd6f1a29cb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 4 Apr 2026 13:25:37 +0000
Subject: [PATCH] chore(deps): bump cors from 2.8.5 to 2.8.6

Bumps [cors](https://github.com/expressjs/cors) from 2.8.5 to 2.8.6.
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/cors/compare/v2.8.5...v2.8.6)

---
updated-dependencies:
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packages/apps/faucet/server/package.json |  2 +-
 yarn.lock                                | 14 ++++++++++++--
 2 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/packages/apps/faucet/server/package.json b/packages/apps/faucet/server/package.json
index a8a2abc7e2..8a96c203e1 100644
--- a/packages/apps/faucet/server/package.json
+++ b/packages/apps/faucet/server/package.json
@@ -18,7 +18,7 @@
     "@human-protocol/sdk": "workspace:*",
     "axios": "^1.3.4",
     "body-parser": "^1.20.0",
-    "cors": "^2.8.5",
+    "cors": "^2.8.6",
     "express": "^5.2.1",
     "express-rate-limit": "^7.3.0",
     "node-cache": "^5.1.2",
diff --git a/yarn.lock b/yarn.lock
index 6963416d4e..a3888c341d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -252,7 +252,7 @@ __metadata:
     axios: "npm:^1.3.4"
     body-parser: "npm:^1.20.0"
     concurrently: "npm:^9.1.2"
-    cors: "npm:^2.8.5"
+    cors: "npm:^2.8.6"
     eslint: "npm:^10.1.0"
     eslint-config-prettier: "npm:^10.1.8"
     eslint-plugin-prettier: "npm:^5.5.5"
@@ -16832,7 +16832,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"cors@npm:2.8.5, cors@npm:^2.8.5":
+"cors@npm:2.8.5":
   version: 2.8.5
   resolution: "cors@npm:2.8.5"
   dependencies:
@@ -16842,6 +16842,16 @@ __metadata:
   languageName: node
   linkType: hard
 
+"cors@npm:^2.8.6":
+  version: 2.8.6
+  resolution: "cors@npm:2.8.6"
+  dependencies:
+    object-assign: "npm:^4"
+    vary: "npm:^1"
+  checksum: 10c0/ab2bc57b8af8ef8476682a59647f7c55c1a7d406b559ac06119aa1c5f70b96d35036864d197b24cf86e228e4547231088f1f94ca05061dbb14d89cc0bc9d4cab
+  languageName: node
+  linkType: hard
+
 "cosmiconfig@npm:7.0.1":
   version: 7.0.1
   resolution: "cosmiconfig@npm:7.0.1"