From e5db5d4533c227fcd9254bfddfdceea4a8c121cd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 29 Apr 2026 07:34:07 +0000
Subject: [PATCH] chore(deps-dev): Bump eslint-plugin-security from 1.7.1 to
 4.0.0

Bumps [eslint-plugin-security](https://github.com/eslint-community/eslint-plugin-security) from 1.7.1 to 4.0.0.
- [Release notes](https://github.com/eslint-community/eslint-plugin-security/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-security/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-community/eslint-plugin-security/compare/v1.7.1...eslint-plugin-security-v4.0.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-security
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json                        |  2 +-
 packages/ado-extension/package.json |  2 +-
 packages/shared/package.json        |  2 +-
 yarn.lock                           | 14 +++++++-------
 4 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/package.json b/package.json
index 04b63c69f..4c83fff3d 100644
--- a/package.json
+++ b/package.json
@@ -51,7 +51,7 @@
         "case-sensitive-paths-webpack-plugin": "^2.4.0",
         "codecov": "^3.8.3",
         "eslint": "^8.57.0",
-        "eslint-plugin-security": "^1.7.1",
+        "eslint-plugin-security": "^4.0.0",
         "fork-ts-checker-webpack-plugin": "^9.0.2",
         "jest": "^29.7.0",
         "jest-extended": "^4.0.2",
diff --git a/packages/ado-extension/package.json b/packages/ado-extension/package.json
index 606490a85..017b319b6 100644
--- a/packages/ado-extension/package.json
+++ b/packages/ado-extension/package.json
@@ -40,7 +40,7 @@
         "@typescript-eslint/parser": "^6.18.1",
         "case-sensitive-paths-webpack-plugin": "^2.4.0",
         "eslint": "^8.57.0",
-        "eslint-plugin-security": "^1.7.1",
+        "eslint-plugin-security": "^4.0.0",
         "fork-ts-checker-webpack-plugin": "^9.0.2",
         "jest": "^29.7.0",
         "jest-extended": "^4.0.2",
diff --git a/packages/shared/package.json b/packages/shared/package.json
index a5716066c..dd499117c 100644
--- a/packages/shared/package.json
+++ b/packages/shared/package.json
@@ -57,7 +57,7 @@
         "@typescript-eslint/eslint-plugin": "^6.18.1",
         "@typescript-eslint/parser": "^6.18.1",
         "eslint": "^8.57.0",
-        "eslint-plugin-security": "^1.7.1",
+        "eslint-plugin-security": "^4.0.0",
         "fork-ts-checker-webpack-plugin": "^9.0.2",
         "jest": "^29.7.0",
         "jest-extended": "^4.0.2",
diff --git a/yarn.lock b/yarn.lock
index 8e7ac48b8..7359a031f 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -23,7 +23,7 @@ __metadata:
     azure-pipelines-task-lib: ^5.2.1
     case-sensitive-paths-webpack-plugin: ^2.4.0
     eslint: ^8.57.0
-    eslint-plugin-security: ^1.7.1
+    eslint-plugin-security: ^4.0.0
     fork-ts-checker-webpack-plugin: ^9.0.2
     jest: ^29.7.0
     jest-extended: ^4.0.2
@@ -65,7 +65,7 @@ __metadata:
     accessibility-insights-scan: ^3.2.0
     axe-core: ^4.10.2
     eslint: ^8.57.0
-    eslint-plugin-security: ^1.7.1
+    eslint-plugin-security: ^4.0.0
     express: ^5.1.0
     filenamify-url: ^3.1.0
     fork-ts-checker-webpack-plugin: ^9.0.2
@@ -7163,7 +7163,7 @@ __metadata:
     case-sensitive-paths-webpack-plugin: ^2.4.0
     codecov: ^3.8.3
     eslint: ^8.57.0
-    eslint-plugin-security: ^1.7.1
+    eslint-plugin-security: ^4.0.0
     fork-ts-checker-webpack-plugin: ^9.0.2
     jest: ^29.7.0
     jest-extended: ^4.0.2
@@ -11455,12 +11455,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"eslint-plugin-security@npm:^1.7.1":
-  version: 1.7.1
-  resolution: "eslint-plugin-security@npm:1.7.1"
+"eslint-plugin-security@npm:^4.0.0":
+  version: 4.0.0
+  resolution: "eslint-plugin-security@npm:4.0.0"
   dependencies:
     safe-regex: ^2.1.1
-  checksum: 3a650e2482e108bb4b9c3b9ac64adefcf1dfda069cd43f89a7d3b84822da2417c9d1b764ec5e1acf4c193b48edc630c7ef2d0a5279a478a8672f9030bc78a8c0
+  checksum: ce4103231b2d10bcf0c03fb4ad8cee95ff503034afb69a985745a9c65095d7aa5210dacdf09b0ab8ae536e840bc1be613aa90598695d33deb54283aed6cc959f
   languageName: node
   linkType: hard