From b180e1745bd9bbf7c40a20002c8bb67c2929886b Mon Sep 17 00:00:00 2001
From: "hash-worker[bot]" <180894564+hash-worker[bot]@users.noreply.github.com>
Date: Fri, 19 Jun 2026 11:09:21 +0000
Subject: [PATCH] Update npm package `nodemailer` to v9 [SECURITY]

---
 apps/hash-api/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/hash-api/package.json b/apps/hash-api/package.json
index 953c2a39a94..5abf7d2757c 100644
--- a/apps/hash-api/package.json
+++ b/apps/hash-api/package.json
@@ -101,7 +101,7 @@
     "md5": "2.3.0",
     "mime-types": "2.1.35",
     "nanoid": "3.3.11",
-    "nodemailer": "8.0.5",
+    "nodemailer": "9.0.1",
     "oembed-providers": "1.0.20250926",
     "openai": "6.6.0",
     "sanitize-html": "2.17.4",