From 9d9605cdf822241ce3273001f29fd83de2dbb5fb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 21 Apr 2026 08:53:46 +0000
Subject: [PATCH] :arrow_up: Bump strip-bom-stream from 4.0.0 to 5.0.0

Bumps [strip-bom-stream](https://github.com/sindresorhus/strip-bom-stream) from 4.0.0 to 5.0.0.
- [Release notes](https://github.com/sindresorhus/strip-bom-stream/releases)
- [Commits](https://github.com/sindresorhus/strip-bom-stream/compare/v4.0.0...v5.0.0)

---
updated-dependencies:
- dependency-name: strip-bom-stream
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 40 +++++++++++++++++++++++++++++-----------
 package.json      |  2 +-
 2 files changed, 30 insertions(+), 12 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 2113fe41..2918a936 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
         "common-tags": "1.8.2",
         "first-chunk-stream": "3.0.0",
         "jsonwebtoken": "^9.0.3",
-        "strip-bom-stream": "4.0.0",
+        "strip-bom-stream": "5.0.0",
         "upath": "3.0.7",
         "yauzl": "3.3.0"
       },
@@ -10976,28 +10976,46 @@
       }
     },
     "node_modules/strip-bom-buf": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/strip-bom-buf/-/strip-bom-buf-2.0.0.tgz",
-      "integrity": "sha512-gLFNHucd6gzb8jMsl5QmZ3QgnUJmp7qn4uUSHNwEXumAp7YizoGYw19ZUVfuq4aBOQUtyn2k8X/CwzWB73W2lQ==",
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/strip-bom-buf/-/strip-bom-buf-3.0.1.tgz",
+      "integrity": "sha512-iJaWw2WroigLHzQysdc5WWeUc99p7ea7AEgB6JkY8CMyiO1yTVAA1gIlJJgORElUIR+lcZJkNl1OGChMhvc2Cw==",
       "license": "MIT",
       "dependencies": {
         "is-utf8": "^0.2.1"
       },
       "engines": {
-        "node": ">=8"
+        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
     "node_modules/strip-bom-stream": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/strip-bom-stream/-/strip-bom-stream-4.0.0.tgz",
-      "integrity": "sha512-0ApK3iAkHv6WbgLICw/J4nhwHeDZsBxIIsOD+gHgZICL6SeJ0S9f/WZqemka9cjkTyMN5geId6e8U5WGFAn3cQ==",
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/strip-bom-stream/-/strip-bom-stream-5.0.0.tgz",
+      "integrity": "sha512-Yo472mU+3smhzqeKlIxClre4s4pwtYZEvDNQvY/sJpnChdaxmKuwU28UVx/v1ORKNMxkmj1GBuvxJQyBk6wYMQ==",
       "license": "MIT",
       "dependencies": {
-        "first-chunk-stream": "^3.0.0",
-        "strip-bom-buf": "^2.0.0"
+        "first-chunk-stream": "^5.0.0",
+        "strip-bom-buf": "^3.0.0"
       },
       "engines": {
-        "node": ">=8"
+        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/strip-bom-stream/node_modules/first-chunk-stream": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-5.0.0.tgz",
+      "integrity": "sha512-WdHo4ejd2cG2Dl+sLkW79SctU7mUQDfr4s1i26ffOZRs5mgv+BRttIM9gwcq0rDbemo0KlpVPaa3LBVLqPXzcQ==",
+      "license": "MIT",
+      "engines": {
+        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
     "node_modules/strip-final-newline": {
diff --git a/package.json b/package.json
index 56093812..90540066 100644
--- a/package.json
+++ b/package.json
@@ -39,7 +39,7 @@
     "common-tags": "1.8.2",
     "first-chunk-stream": "3.0.0",
     "jsonwebtoken": "^9.0.3",
-    "strip-bom-stream": "4.0.0",
+    "strip-bom-stream": "5.0.0",
     "upath": "3.0.7",
     "yauzl": "3.3.0"
   },