From bb3b587e404d7ce81e45c08da04278494dabc761 Mon Sep 17 00:00:00 2001
From: xarmian <xarmian@gmail.com>
Date: Thu, 1 Oct 2026 20:05:42 -0400
Subject: [PATCH] chore(deps): npm update devalue to 5.9.4 (unblocks the Web
 job's audit gate) (#1705)

Six devalue advisories (high) covering <= 5.9.2 were published after
#1701, so every PR's Web job now fails audit:ci. devalue reaches us
through @sveltejs/kit (^5.8.1) and svelte (^5.9.2); 5.9.4 is inside both,
so this is a lockfile-only update of that one entry.

Claude-Session: https://claude.ai/code/session_01H63zaWhkb5pAafx2WGjrVC
---
 web/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/web/package-lock.json b/web/package-lock.json
index 23fd82d7c..29ba342cb 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -3341,9 +3341,9 @@
 			}
 		},
 		"node_modules/devalue": {
-			"version": "5.9.2",
-			"resolved": "https://registry.npmjs.org/devalue/-/devalue-5.9.2.tgz",
-			"integrity": "sha512-po4PAY5c53tw5XMocSnf8A/5OHhbbUftpr93aEN6BBoAdntUmK7vu7wOATqvt7cXO7m1Cl4gMVn6p7n6n4mj0w==",
+			"version": "5.9.4",
+			"resolved": "https://registry.npmjs.org/devalue/-/devalue-5.9.4.tgz",
+			"integrity": "sha512-sPAT4pztbu6586/hrhOnMKS17IJrvg12mXiSPSS3W5qDeN2RGgvZ0diZCm31dBbnevfVmujNO3IM2wrS4Y2Rhg==",
 			"license": "MIT"
 		},
 		"node_modules/devlop": {