From 9ffe3d973aa369348c8d0d93bef66453e0865bcc Mon Sep 17 00:00:00 2001
From: "flagsmith-engineering[bot]"
 <216534828+flagsmith-engineering[bot]@users.noreply.github.com>
Date: Fri, 19 Jun 2026 04:39:19 +0000
Subject: [PATCH] deps(frontend): update dependency http-proxy-middleware to v3
 [security]

---
 frontend/package-lock.json | 48 +++++++++++++++-----------------------
 frontend/package.json      |  2 +-
 2 files changed, 20 insertions(+), 30 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index fdd5d07ca1cc..7538890b42c2 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -55,7 +55,7 @@
         "highlight.js": "11.0.1",
         "history": "4.10.1",
         "html-webpack-plugin": "5.5.0",
-        "http-proxy-middleware": "^2.0.9",
+        "http-proxy-middleware": "^3.0.0",
         "ionicons": "^7.2.1",
         "jquery": "^3.7.1",
         "js-cookie": "3.0.7",
@@ -14314,27 +14314,29 @@
       }
     },
     "node_modules/http-proxy-middleware": {
-      "version": "2.0.9",
-      "resolved": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-2.0.9.tgz",
-      "integrity": "sha512-c1IyJYLYppU574+YI7R4QyX2ystMtVXZwIdzazUIPIJsHuWNd+mho2j+bKoHftndicGj9yh+xjd+l0yj7VeT1Q==",
+      "version": "3.0.7",
+      "resolved": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-3.0.7.tgz",
+      "integrity": "sha512-iwbQltVlx8bCrqePUM8C+hllHvdawVhQJaLrj1X7qllkvFQdXFsr16pW/mo9+JDVjN+QO2XUx9jd8SmoFkE5qw==",
       "license": "MIT",
       "dependencies": {
-        "@types/http-proxy": "^1.17.8",
+        "@types/http-proxy": "^1.17.15",
+        "debug": "^4.3.6",
         "http-proxy": "^1.18.1",
-        "is-glob": "^4.0.1",
-        "is-plain-obj": "^3.0.0",
-        "micromatch": "^4.0.2"
+        "is-glob": "^4.0.3",
+        "is-plain-object": "^5.0.0",
+        "micromatch": "^4.0.8"
       },
       "engines": {
-        "node": ">=12.0.0"
-      },
-      "peerDependencies": {
-        "@types/express": "^4.17.13"
-      },
-      "peerDependenciesMeta": {
-        "@types/express": {
-          "optional": true
-        }
+        "node": "^14.18.0 || ^16.10.0 || >=18.0.0"
+      }
+    },
+    "node_modules/http-proxy-middleware/node_modules/is-plain-object": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-5.0.0.tgz",
+      "integrity": "sha512-VRSzKkbMm5jMDoKLbltAkFQ5Qr7VDiTFGXxYFXXowVj387GeGNOCsOH6Msy00SGZ3Fp84b1Naa1psqgcCIEP5Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
       }
     },
     "node_modules/https-proxy-agent": {
@@ -15198,18 +15200,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/is-plain-obj": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-3.0.0.tgz",
-      "integrity": "sha512-gwsOE28k+23GP1B6vFl1oVh/WOzmawBrKwo5Ev6wMKzPkaXaCDIQKzLnvsA42DRlbVTWorkgTKIviAKCWkfUwA==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/is-plain-object": {
       "version": "2.0.4",
       "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz",
diff --git a/frontend/package.json b/frontend/package.json
index cdea87e82f7e..780fd891127a 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -93,7 +93,7 @@
     "highlight.js": "11.0.1",
     "history": "4.10.1",
     "html-webpack-plugin": "5.5.0",
-    "http-proxy-middleware": "^2.0.9",
+    "http-proxy-middleware": "^3.0.0",
     "ionicons": "^7.2.1",
     "jquery": "^3.7.1",
     "js-cookie": "3.0.7",