From c20bc353c195e6cbe80ace90e8d897da39b80b20 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 2 Nov 2026 12:40:38 +0000
Subject: [PATCH] chore(deps-dev): bump eventsource from 2.0.2 to 5.1.4

Bumps [eventsource](https://github.com/EventSource/eventsource) from 2.0.2 to 5.1.4.
- [Release notes](https://github.com/EventSource/eventsource/releases)
- [Changelog](https://github.com/EventSource/eventsource/blob/main/CHANGELOG.md)
- [Commits](https://github.com/EventSource/eventsource/compare/v2.0.2...v5.1.4)

---
updated-dependencies:
- dependency-name: eventsource
  dependency-version: 5.1.4
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 backend/package.json |  2 +-
 package-lock.json    | 35 ++++++++++++++++++++++++-----------
 2 files changed, 25 insertions(+), 12 deletions(-)

diff --git a/backend/package.json b/backend/package.json
index 3776f27e..e707c829 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -66,7 +66,7 @@
     "@types/swagger-ui-express": "^4.1.6",
     "@types/web-push": "^3.6.4",
     "@vitest/coverage-v8": "^3.2.7",
-    "eventsource": "^2.0.2",
+    "eventsource": "^5.1.4",
     "nodemon": "^3.1.11",
     "prisma": "^7.4.1",
     "supertest": "^7.1.0",
diff --git a/package-lock.json b/package-lock.json
index e370471b..963885ff 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -73,7 +73,7 @@
         "@types/swagger-ui-express": "^4.1.6",
         "@types/web-push": "^3.6.4",
         "@vitest/coverage-v8": "^3.2.7",
-        "eventsource": "^2.0.2",
+        "eventsource": "^5.1.4",
         "nodemon": "^3.1.11",
         "prisma": "^7.4.1",
         "supertest": "^7.1.0",
@@ -572,7 +572,7 @@
       "version": "7.29.7",
       "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz",
       "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==",
-      "dev": true,
+      "devOptional": true,
       "license": "MIT",
       "engines": {
         "node": ">=6.9.0"
@@ -582,7 +582,7 @@
       "version": "7.29.7",
       "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz",
       "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==",
-      "dev": true,
+      "devOptional": true,
       "license": "MIT",
       "engines": {
         "node": ">=6.9.0"
@@ -616,7 +616,7 @@
       "version": "7.29.9",
       "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.9.tgz",
       "integrity": "sha512-CjXrNHTnvqBVqHgdBysY3vk2T8tpJHb5/RMeHJBTyVa9xgugCB0CJTx/3oO8RV2QRQP391RWpB7D6hLjm8V9uA==",
-      "dev": true,
+      "devOptional": true,
       "license": "MIT",
       "dependencies": {
         "@babel/types": "^7.29.8"
@@ -708,7 +708,7 @@
       "version": "7.29.8",
       "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz",
       "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==",
-      "dev": true,
+      "devOptional": true,
       "license": "MIT",
       "dependencies": {
         "@babel/helper-string-parser": "^7.29.7",
@@ -5955,7 +5955,7 @@
       "version": "19.2.3",
       "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.2.3.tgz",
       "integrity": "sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==",
-      "dev": true,
+      "devOptional": true,
       "license": "MIT",
       "peerDependencies": {
         "@types/react": "^19.2.0"
@@ -9664,13 +9664,16 @@
       }
     },
     "node_modules/eventsource": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/eventsource/-/eventsource-2.0.2.tgz",
-      "integrity": "sha512-IzUmBGPR3+oUG9dUeXynyNmf91/3zUSJg1lCktzKw47OXuhco54U3r9B7O4XX+Rb1Itm9OZ2b0RkTs10bICOxA==",
+      "version": "5.1.4",
+      "resolved": "https://registry.npmjs.org/eventsource/-/eventsource-5.1.4.tgz",
+      "integrity": "sha512-awkjURTcaMUKjtEqM/78nMtFSfGcgGST6EbXGV2/E7LJXzWwnNaByn1zACiX9VluWzokVeHpjRdzo3nZr9zhMg==",
       "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "eventsource-parser": "^4.1.2"
+      },
       "engines": {
-        "node": ">=12.0.0"
+        "node": ">=22.12.0"
       }
     },
     "node_modules/eventsource-parser": {
@@ -9682,6 +9685,16 @@
         "node": ">=18.0.0"
       }
     },
+    "node_modules/eventsource/node_modules/eventsource-parser": {
+      "version": "4.1.3",
+      "resolved": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-4.1.3.tgz",
+      "integrity": "sha512-jZVIVilXZfAx6H20ZKKEj5dabbpD9ETmMj3uHsjMmgBzBHB6tsHrmdWB4mAiy3amtN6MOoVkfXRQu4wf1n88Rw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=22.12"
+      }
+    },
     "node_modules/expect-type": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.4.0.tgz",
@@ -12035,7 +12048,7 @@
       "version": "0.3.5",
       "resolved": "https://registry.npmjs.org/magicast/-/magicast-0.3.5.tgz",
       "integrity": "sha512-L0WhttDl+2BOsybvEOLK7fW3UA0OQ0IQ2d6Zl2x/a6vVRs3bAY0ECOSHHeL5jD+SbOpOCUEi0y1DgHEn9Qn1AQ==",
-      "dev": true,
+      "devOptional": true,
       "license": "MIT",
       "dependencies": {
         "@babel/parser": "^7.25.4",