From c7ba4df6c6933a5eb277c57071bf8bad2142ec11 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 30 Mar 2026 13:44:27 +0000
Subject: [PATCH] Bump the runtime group with 3 updates

Bumps the runtime group with 3 updates: [ioredis](https://github.com/luin/ioredis), [marked](https://github.com/markedjs/marked) and [yaml](https://github.com/eemeli/yaml).


Updates `ioredis` from 5.10.0 to 5.10.1
- [Release notes](https://github.com/luin/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](https://github.com/luin/ioredis/compare/v5.10.0...v5.10.1)

Updates `marked` from 15.0.12 to 17.0.5
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](https://github.com/markedjs/marked/compare/v15.0.12...v17.0.5)

Updates `yaml` from 2.8.2 to 2.8.3
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.8.2...v2.8.3)

---
updated-dependencies:
- dependency-name: ioredis
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime
- dependency-name: marked
  dependency-version: 17.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: runtime
- dependency-name: yaml
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 38 +++++++++++++++++++++++++-------------
 package.json      |  6 +++---
 2 files changed, 28 insertions(+), 16 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index f7b1cd487..be2b8b674 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -47,11 +47,11 @@
         "highlight.js": "^11.11.1",
         "http-status-codes": "^2.3.0",
         "humanize-duration": "^3.33.1",
-        "ioredis": "^5.8.2",
+        "ioredis": "^5.10.1",
         "joi": "^17.13.3",
         "liquidjs": "^10.24.0",
         "lodash": "^4.17.21",
-        "marked": "^15.0.12",
+        "marked": "^17.0.5",
         "nunjucks": "^3.2.4",
         "obscenity": "^0.4.5",
         "outdent": "^0.8.0",
@@ -59,7 +59,7 @@
         "pino-pretty": "^13.1.2",
         "proxy-agent": "^6.5.0",
         "resolve": "^1.22.11",
-        "yaml": "^2.8.1"
+        "yaml": "^2.8.3"
       },
       "devDependencies": {
         "@babel/cli": "^7.28.3",
@@ -3542,6 +3542,18 @@
         "joi": "^17.0.0"
       }
     },
+    "node_modules/@defra/forms-model/node_modules/marked": {
+      "version": "15.0.12",
+      "resolved": "https://registry.npmjs.org/marked/-/marked-15.0.12.tgz",
+      "integrity": "sha512-8dD6FusOQSrpv9Z1rdNMdlSgQOIP880DHqnohobOmYLElGEqAL/JvxvuxZO16r4HtjTlfPRDC1hbvxC9dPN2nA==",
+      "license": "MIT",
+      "bin": {
+        "marked": "bin/marked.js"
+      },
+      "engines": {
+        "node": ">= 18"
+      }
+    },
     "node_modules/@defra/hapi-tracing": {
       "version": "1.30.0",
       "resolved": "https://registry.npmjs.org/@defra/hapi-tracing/-/hapi-tracing-1.30.0.tgz",
@@ -20025,9 +20037,9 @@
       }
     },
     "node_modules/ioredis": {
-      "version": "5.10.0",
-      "resolved": "https://registry.npmjs.org/ioredis/-/ioredis-5.10.0.tgz",
-      "integrity": "sha512-HVBe9OFuqs+Z6n64q09PQvP1/R4Bm+30PAyyD4wIEqssh3v9L21QjCVk4kRLucMBcDokJTcLjsGeVRlq/nH6DA==",
+      "version": "5.10.1",
+      "resolved": "https://registry.npmjs.org/ioredis/-/ioredis-5.10.1.tgz",
+      "integrity": "sha512-HuEDBTI70aYdx1v6U97SbNx9F1+svQKBDo30o0b9fw055LMepzpOOd0Ccg9Q6tbqmBSJaMuY0fB7yw9/vjBYCA==",
       "license": "MIT",
       "dependencies": {
         "@ioredis/commands": "1.5.1",
@@ -23217,15 +23229,15 @@
       }
     },
     "node_modules/marked": {
-      "version": "15.0.12",
-      "resolved": "https://registry.npmjs.org/marked/-/marked-15.0.12.tgz",
-      "integrity": "sha512-8dD6FusOQSrpv9Z1rdNMdlSgQOIP880DHqnohobOmYLElGEqAL/JvxvuxZO16r4HtjTlfPRDC1hbvxC9dPN2nA==",
+      "version": "17.0.5",
+      "resolved": "https://registry.npmjs.org/marked/-/marked-17.0.5.tgz",
+      "integrity": "sha512-6hLvc0/JEbRjRgzI6wnT2P1XuM1/RrrDEX0kPt0N7jGm1133g6X7DlxFasUIx+72aKAr904GTxhSLDrd5DIlZg==",
       "license": "MIT",
       "bin": {
         "marked": "bin/marked.js"
       },
       "engines": {
-        "node": ">= 18"
+        "node": ">= 20"
       }
     },
     "node_modules/math-intrinsics": {
@@ -34718,9 +34730,9 @@
       "license": "ISC"
     },
     "node_modules/yaml": {
-      "version": "2.8.2",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz",
-      "integrity": "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==",
+      "version": "2.8.3",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
       "license": "ISC",
       "bin": {
         "yaml": "bin.mjs"
diff --git a/package.json b/package.json
index 141eba31a..04e334874 100644
--- a/package.json
+++ b/package.json
@@ -120,11 +120,11 @@
     "highlight.js": "^11.11.1",
     "http-status-codes": "^2.3.0",
     "humanize-duration": "^3.33.1",
-    "ioredis": "^5.8.2",
+    "ioredis": "^5.10.1",
     "joi": "^17.13.3",
     "liquidjs": "^10.24.0",
     "lodash": "^4.17.21",
-    "marked": "^15.0.12",
+    "marked": "^17.0.5",
     "nunjucks": "^3.2.4",
     "obscenity": "^0.4.5",
     "outdent": "^0.8.0",
@@ -132,7 +132,7 @@
     "pino-pretty": "^13.1.2",
     "proxy-agent": "^6.5.0",
     "resolve": "^1.22.11",
-    "yaml": "^2.8.1"
+    "yaml": "^2.8.3"
   },
   "devDependencies": {
     "@babel/cli": "^7.28.3",