From b4aa31e2d97897d202248b9b3f2e03b2f08f4eff Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 15:51:32 +0000
Subject: [PATCH 1/2] fix(deps): update dependency cron-parser to v5

---
 package-lock.json | 35 +++++++++++++++++++----------------
 package.json      |  2 +-
 2 files changed, 20 insertions(+), 17 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index f0d3eca90a0..44af422dabd 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -43,7 +43,7 @@
         "comment-json": "^4.6.2",
         "content-type": "^1.0.5",
         "cookie": "^2.0.0",
-        "cron-parser": "^4.9.0",
+        "cron-parser": "^5.0.0",
         "debug": "^4.4.3",
         "decache": "^4.6.2",
         "dot-prop": "^10.1.0",
@@ -3394,6 +3394,19 @@
         "node": ">=22.12.0"
       }
     },
+    "node_modules/@netlify/config/node_modules/cron-parser": {
+      "version": "4.9.0",
+      "resolved": "https://registry.npmjs.org/cron-parser/-/cron-parser-4.9.0.tgz",
+      "integrity": "sha512-p0SaNjrHOnQeR8/VnfGbmg9te2kfyYSQ7Sc/j/6DtPL3JQvKxmjO9TSjNFpujqV3vEYYBvNNvXSxzyksBWAx1Q==",
+      "deprecated": "v4 is no longer maintained, upgrade to v5",
+      "license": "MIT",
+      "dependencies": {
+        "luxon": "^3.2.1"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
     "node_modules/@netlify/config/node_modules/dot-prop": {
       "version": "9.0.0",
       "resolved": "https://registry.npmjs.org/dot-prop/-/dot-prop-9.0.0.tgz",
@@ -4370,18 +4383,6 @@
         "node": ">=22.12.0"
       }
     },
-    "node_modules/@netlify/functions-dev/node_modules/cron-parser": {
-      "version": "5.10.0",
-      "resolved": "https://registry.npmjs.org/cron-parser/-/cron-parser-5.10.0.tgz",
-      "integrity": "sha512-izNAxJyRWUP8ljBoDSub5WyrVOUlT4SLGShswE7eoRBpp6QUsSycYxLBMJlbshgPBMcPT/nrfgjNY2918ayv2A==",
-      "license": "MIT",
-      "dependencies": {
-        "luxon": "^3.7.2"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    },
     "node_modules/@netlify/functions-utils": {
       "version": "7.1.7",
       "resolved": "https://registry.npmjs.org/@netlify/functions-utils/-/functions-utils-7.1.7.tgz",
@@ -11108,13 +11109,15 @@
       "license": "MIT"
     },
     "node_modules/cron-parser": {
-      "version": "4.9.0",
+      "version": "5.10.0",
+      "resolved": "https://registry.npmjs.org/cron-parser/-/cron-parser-5.10.0.tgz",
+      "integrity": "sha512-izNAxJyRWUP8ljBoDSub5WyrVOUlT4SLGShswE7eoRBpp6QUsSycYxLBMJlbshgPBMcPT/nrfgjNY2918ayv2A==",
       "license": "MIT",
       "dependencies": {
-        "luxon": "^3.2.1"
+        "luxon": "^3.7.2"
       },
       "engines": {
-        "node": ">=12.0.0"
+        "node": ">=18"
       }
     },
     "node_modules/cross-spawn": {
diff --git a/package.json b/package.json
index c972109b338..091f08b0e2f 100644
--- a/package.json
+++ b/package.json
@@ -84,7 +84,7 @@
     "comment-json": "^4.6.2",
     "content-type": "^1.0.5",
     "cookie": "^2.0.0",
-    "cron-parser": "^4.9.0",
+    "cron-parser": "^5.0.0",
     "debug": "^4.4.3",
     "decache": "^4.6.2",
     "dot-prop": "^10.1.0",

From 1167b0cf3b1e08eec78725916215ecd374504cb7 Mon Sep 17 00:00:00 2001
From: Philippe Serhal <philippe.serhal@netlify.com>
Date: Thu, 3 Sep 2026 17:58:17 -0400
Subject: [PATCH 2/2] fix: use cron-parser named export

---
 src/lib/functions/netlify-function.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/lib/functions/netlify-function.ts b/src/lib/functions/netlify-function.ts
index ef93339a12f..90a37864910 100644
--- a/src/lib/functions/netlify-function.ts
+++ b/src/lib/functions/netlify-function.ts
@@ -4,7 +4,7 @@ import { version as nodeVersion } from 'process'
 
 import type { ExtendedRoute, Route } from '@netlify/zip-it-and-ship-it'
 import type { MemoizeCache } from '@netlify/dev-utils'
-import CronParser from 'cron-parser'
+import { parseExpression } from 'cron-parser'
 import semver from 'semver'
 
 import { logAndThrowError, type NormalizedCachedConfigConfig } from '../../utils/command-helpers.js'
@@ -36,7 +36,7 @@ type MappedOmit<T, K extends keyof T> = { [P in keyof T as P extends K ? never :
 const difference = (setA: Set<string>, setB: Set<string>) => new Set([...setA].filter((item) => !setB.has(item)))
 
 const getNextRun = function (schedule: string) {
-  const cron = CronParser.parseExpression(schedule, {
+  const cron = parseExpression(schedule, {
     tz: 'Etc/UTC',
   })
   return cron.next().toDate()