From 03afdff30c6ad9d80046a7aa6d02f6d93d18e93f Mon Sep 17 00:00:00 2001
From: "Michael B. Gale" <mbg@github.com>
Date: Wed, 8 Jul 2026 12:57:36 +0100
Subject: [PATCH] Bump `yauzl` to `3.4.0`

---
 extensions/ql-vscode/package-lock.json | 10 +++++-----
 extensions/ql-vscode/package.json      |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/extensions/ql-vscode/package-lock.json b/extensions/ql-vscode/package-lock.json
index ecb6aeb4d5a..8798b46231d 100644
--- a/extensions/ql-vscode/package-lock.json
+++ b/extensions/ql-vscode/package-lock.json
@@ -43,7 +43,7 @@
         "vscode-extension-telemetry": "^0.1.6",
         "vscode-jsonrpc": "^8.2.1",
         "vscode-languageclient": "^8.0.2",
-        "yauzl": "^3.3.0",
+        "yauzl": "^3.4.0",
         "zip-a-folder": "^4.0.4"
       },
       "devDependencies": {
@@ -11696,6 +11696,7 @@
       "version": "0.2.13",
       "resolved": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz",
       "integrity": "sha512-VO9Ht/+p3SN7SKWqcrgEzjGbRSJYTx+Q1pTQC0wrWqHx0vpJraQ6GtHx8tvcg1rlK1byhU5gccxgOgj7B0TDkQ==",
+      "dev": true,
       "engines": {
         "node": "*"
       }
@@ -30645,12 +30646,11 @@
       }
     },
     "node_modules/yauzl": {
-      "version": "3.3.0",
-      "resolved": "https://registry.npmjs.org/yauzl/-/yauzl-3.3.0.tgz",
-      "integrity": "sha512-PtGEvEP30p7sbIBJKUBjUnqgTVOyMURc4dLo9iNyAJnNIEz9pm88cCXF21w94Kg3k6RXkeZh5DHOGS0qEONvNQ==",
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/yauzl/-/yauzl-3.4.0.tgz",
+      "integrity": "sha512-jIH9yLR9wqr0wOS0TpBvo/g/2UgZH5qePVbjgRliiF0BYvOZyaBknKsF+x9Iht0O6sqgnB93rCICdOZFecJuDw==",
       "license": "MIT",
       "dependencies": {
-        "buffer-crc32": "~0.2.3",
         "pend": "~1.2.0"
       },
       "engines": {
diff --git a/extensions/ql-vscode/package.json b/extensions/ql-vscode/package.json
index 82cf2fedad5..4687b260438 100644
--- a/extensions/ql-vscode/package.json
+++ b/extensions/ql-vscode/package.json
@@ -2101,7 +2101,7 @@
     "vscode-extension-telemetry": "^0.1.6",
     "vscode-jsonrpc": "^8.2.1",
     "vscode-languageclient": "^8.0.2",
-    "yauzl": "^3.3.0",
+    "yauzl": "^3.4.0",
     "zip-a-folder": "^4.0.4"
   },
   "devDependencies": {