From f0e2368ab102ea675b790fea3927a96062852efa Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 19 May 2026 16:58:09 +0000
Subject: [PATCH] chore(deps-dev): bump ws from 8.18.2 to 8.20.1

Bumps [ws](https://github.com/websockets/ws) from 8.18.2 to 8.20.1.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/8.18.2...8.20.1)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 8.20.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packages/fxa-auth-server/package.json |  2 +-
 yarn.lock                             | 17 ++++++++++++++++-
 2 files changed, 17 insertions(+), 2 deletions(-)

diff --git a/packages/fxa-auth-server/package.json b/packages/fxa-auth-server/package.json
index b937f5e17a5..7cba9d4b9b8 100644
--- a/packages/fxa-auth-server/package.json
+++ b/packages/fxa-auth-server/package.json
@@ -175,7 +175,7 @@
     "typescript": "5.5.3",
     "webpack": "^5.104.1",
     "webpack-watch-files-plugin": "^1.2.1",
-    "ws": "^8.17.1"
+    "ws": "^8.20.1"
   },
   "nx": {
     "tags": [
diff --git a/yarn.lock b/yarn.lock
index ffd3f533413..61b20b3c9b0 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -31078,7 +31078,7 @@ __metadata:
     web-push: "npm:3.4.4"
     webpack: "npm:^5.104.1"
     webpack-watch-files-plugin: "npm:^1.2.1"
-    ws: "npm:^8.17.1"
+    ws: "npm:^8.20.1"
   bin:
     fxa-auth: ./bin/key_server.js
   languageName: unknown
@@ -54780,6 +54780,21 @@ __metadata:
   languageName: node
   linkType: hard
 
+"ws@npm:^8.20.1":
+  version: 8.20.1
+  resolution: "ws@npm:8.20.1"
+  peerDependencies:
+    bufferutil: ^4.0.1
+    utf-8-validate: ">=5.0.2"
+  peerDependenciesMeta:
+    bufferutil:
+      optional: true
+    utf-8-validate:
+      optional: true
+  checksum: 10c0/ce162433218399cdedeb76fd33363d4d86a7d910058d4e3c679dce08cea65d6da6b39f11baa4d7808d024cf46ed88f6a05c17611621aaad8fc5e62edacc30c5d
+  languageName: node
+  linkType: hard
+
 "xml-name-validator@npm:^3.0.0":
   version: 3.0.0
   resolution: "xml-name-validator@npm:3.0.0"