From ab8de5169f374b56c11f01464bc53b6abb3b46e8 Mon Sep 17 00:00:00 2001
From: Richard Walkden <richard.walkden@netacea.com>
Date: Thu, 29 Oct 2026 13:46:26 +0000
Subject: [PATCH 1/2] use @netacea/cloudfront@7.8.28

---
 package-lock.json | 18 +++++++++---------
 package.json      |  2 +-
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 1b8e238..456f170 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "version": "1.0.0",
       "license": "MIT",
       "dependencies": {
-        "@netacea/cloudfront": "^7.8.24"
+        "@netacea/cloudfront": "^7.8.28"
       },
       "devDependencies": {
         "@types/aws-lambda": "^8.10.119",
@@ -868,16 +868,16 @@
       }
     },
     "node_modules/@netacea/cloudfront": {
-      "version": "7.8.24",
-      "resolved": "https://registry.npmjs.org/@netacea/cloudfront/-/cloudfront-7.8.24.tgz",
-      "integrity": "sha512-3Qs88oKR5hfYJ5v2UtQO4yGEgd+7M5CkTIvtJhucWyqSWcpjRVeMTrmrqcvV/ubetOXoYIYb3/dKvCvlwo8e4A==",
+      "version": "7.8.28",
+      "resolved": "https://registry.npmjs.org/@netacea/cloudfront/-/cloudfront-7.8.28.tgz",
+      "integrity": "sha512-f9wE1QDb4nEolnN/xF5LVZ8MZfRwrcrWBOLAymz+GbBXginIGJP7N0pILUvPdcn2x8/JtfOmgEy8puN6WaP+JQ==",
       "license": "ISC",
       "dependencies": {
         "@types/aws-lambda": "^8.10.138",
         "aws4": "1.11.0",
         "buffer": "^6.0.3",
         "jose": "^4.15.9",
-        "uuid": "^10.0.0"
+        "uuid": "^11.1.1"
       }
     },
     "node_modules/@nodelib/fs.scandir": {
@@ -6680,16 +6680,16 @@
       }
     },
     "node_modules/uuid": {
-      "version": "10.0.0",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-10.0.0.tgz",
-      "integrity": "sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==",
+      "version": "11.1.1",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz",
+      "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==",
       "funding": [
         "https://github.com/sponsors/broofa",
         "https://github.com/sponsors/ctavan"
       ],
       "license": "MIT",
       "bin": {
-        "uuid": "dist/bin/uuid"
+        "uuid": "dist/esm/bin/uuid"
       }
     },
     "node_modules/which": {
diff --git a/package.json b/package.json
index 2bdb7ac..bb4788b 100644
--- a/package.json
+++ b/package.json
@@ -31,7 +31,7 @@
     "xo": "^2.0.2"
   },
   "dependencies": {
-    "@netacea/cloudfront": "^7.8.24"
+    "@netacea/cloudfront": "^7.8.28"
   },
   "xo": {
     "space": true,

From f2439dd7aadfa56e778d1f47bdc359a7e2c44a24 Mon Sep 17 00:00:00 2001
From: Richard Walkden <richard.walkden@netacea.com>
Date: Thu, 29 Oct 2026 13:46:49 +0000
Subject: [PATCH 2/2] npm audit fix

---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 456f170..fa26b8d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7119,9 +7119,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "4.3.6",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.3.6.tgz",
-      "integrity": "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==",
+      "version": "4.6.7",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.7.tgz",
+      "integrity": "sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg==",
       "dev": true,
       "license": "MIT",
       "funding": {