From ebfe00200a59a4b91c3aa69e570b057a211097f7 Mon Sep 17 00:00:00 2001
From: Felix Stubner <felix.stubner@gmail.com>
Date: Fri, 2 Oct 2026 22:55:03 +0100
Subject: [PATCH] deps(landing): devalue 5.9.4, clearing six advisories
 published today

GHSA-j22f-vq7h-c4qm, GHSA-hx4r-w6wj-j8fg, GHSA-mcm9-63f2-9j32, GHSA-wf3x-273g-mvxv,
GHSA-x5rw-q4pp-hg5g and GHSA-4q55-j62x-fr9h affect devalue <=5.9.2, a build-time
dependency of the landing site. They fail the checks job's landing audit on every PR.
5.9.4 is in range and was published 2026-09-18.
---
 landing/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/landing/package-lock.json b/landing/package-lock.json
index b58324a7..fca858ad 100644
--- a/landing/package-lock.json
+++ b/landing/package-lock.json
@@ -2846,9 +2846,9 @@
       }
     },
     "node_modules/devalue": {
-      "version": "5.9.1",
-      "resolved": "https://registry.npmjs.org/devalue/-/devalue-5.9.1.tgz",
-      "integrity": "sha512-+17vil3EVQRzvtDJSFuTWEb8XJRvXqAiV3qZyQWD398QeXUa6CxsUyMdD1fxzEhUrd4FojitFz7lhIHBTlV4fw==",
+      "version": "5.9.4",
+      "resolved": "https://registry.npmjs.org/devalue/-/devalue-5.9.4.tgz",
+      "integrity": "sha512-sPAT4pztbu6586/hrhOnMKS17IJrvg12mXiSPSS3W5qDeN2RGgvZ0diZCm31dBbnevfVmujNO3IM2wrS4Y2Rhg==",
       "dev": true,
       "license": "MIT"
     },