From 150e5f7a9524ce77b867e8b28d2b5c0b1314753c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 16:42:35 +0000
Subject: [PATCH] chore(deps-dev): bump ws from 8.18.2 to 8.21.0

Bumps [ws](https://github.com/websockets/ws) from 8.18.2 to 8.21.0.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/8.18.2...8.21.0)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 8.21.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packages/fxa-auth-server/package.json |  2 +-
 yarn.lock                             | 17 ++++++++++++++++-
 2 files changed, 17 insertions(+), 2 deletions(-)

diff --git a/packages/fxa-auth-server/package.json b/packages/fxa-auth-server/package.json
index 018399a1f09..5cd7ffd3e95 100644
--- a/packages/fxa-auth-server/package.json
+++ b/packages/fxa-auth-server/package.json
@@ -176,7 +176,7 @@
     "typescript": "5.5.3",
     "webpack": "^5.104.1",
     "webpack-watch-files-plugin": "^1.2.1",
-    "ws": "^8.17.1"
+    "ws": "^8.21.0"
   },
   "nx": {
     "tags": [
diff --git a/yarn.lock b/yarn.lock
index 7905844a32c..255c5262019 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -31090,7 +31090,7 @@ __metadata:
     web-push: "npm:3.4.4"
     webpack: "npm:^5.104.1"
     webpack-watch-files-plugin: "npm:^1.2.1"
-    ws: "npm:^8.17.1"
+    ws: "npm:^8.21.0"
   bin:
     fxa-auth: ./bin/key_server.js
   languageName: unknown
@@ -54811,6 +54811,21 @@ __metadata:
   languageName: node
   linkType: hard
 
+"ws@npm:^8.21.0":
+  version: 8.21.0
+  resolution: "ws@npm:8.21.0"
+  peerDependencies:
+    bufferutil: ^4.0.1
+    utf-8-validate: ">=5.0.2"
+  peerDependenciesMeta:
+    bufferutil:
+      optional: true
+    utf-8-validate:
+      optional: true
+  checksum: 10c0/ef4a243476283fc49bc7550966c4af4aa0eef56273837211e700de3b664e08604a760cdddcb5ba43c049140e74ccfec5b0ee0bb439e08c2adf9138902fdde5f9
+  languageName: node
+  linkType: hard
+
 "xml-name-validator@npm:^3.0.0":
   version: 3.0.0
   resolution: "xml-name-validator@npm:3.0.0"