From 53800a168085e5b23bcc3d6fc494594ef3599d51 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 9 Sep 2026 16:32:44 +0000
Subject: [PATCH] chore(deps): bump eventsource-parser from 3.1.1 to 4.1.0

Bumps [eventsource-parser](https://github.com/rexxars/eventsource-parser) from 3.1.1 to 4.1.0.
- [Release notes](https://github.com/rexxars/eventsource-parser/releases)
- [Changelog](https://github.com/rexxars/eventsource-parser/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rexxars/eventsource-parser/compare/v3.1.1...v4.1.0)

---
updated-dependencies:
- dependency-name: eventsource-parser
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 20 ++++++++++----------
 package.json      |  2 +-
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 63a0d6a6..1f4d7d07 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "dompurify": "^3.4.15",
         "dotenv": "^17.4.2",
         "eventsource": "^5.1.1",
-        "eventsource-parser": "^3.1.1",
+        "eventsource-parser": "^4.1.0",
         "express": "^5.2.1",
         "express-fileupload": "^1.5.2",
         "express-rate-limit": "^8.7.0",
@@ -1712,6 +1712,15 @@
         "node": ">=18.0.0"
       }
     },
+    "node_modules/@modelcontextprotocol/sdk/node_modules/eventsource-parser": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.1.1.tgz",
+      "integrity": "sha512-EKN1vKAMcZ8MlYMpaNuxN6R9yakzH6uajHcHVTqWJzvu5pWw9DyhbP35HH8MVBQ+dZjAfDxk+A8NiR9KWaXiyQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
     "node_modules/@modelcontextprotocol/sdk/node_modules/json-schema-traverse": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
@@ -5800,15 +5809,6 @@
       }
     },
     "node_modules/eventsource-parser": {
-      "version": "3.1.1",
-      "resolved": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.1.1.tgz",
-      "integrity": "sha512-EKN1vKAMcZ8MlYMpaNuxN6R9yakzH6uajHcHVTqWJzvu5pWw9DyhbP35HH8MVBQ+dZjAfDxk+A8NiR9KWaXiyQ==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=18.0.0"
-      }
-    },
-    "node_modules/eventsource/node_modules/eventsource-parser": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-4.1.0.tgz",
       "integrity": "sha512-+DHvQ1wLO//MK+1OZgcuXCbZFKgu3YjKPJt7n98rxX8vezL0ni+7s3ZQiM8bJkUEOk7MsuCycrPLj0FzUNf7Og==",
diff --git a/package.json b/package.json
index a513925b..fad6a770 100644
--- a/package.json
+++ b/package.json
@@ -28,7 +28,7 @@
     "dompurify": "^3.4.15",
     "dotenv": "^17.4.2",
     "eventsource": "^5.1.1",
-    "eventsource-parser": "^3.1.1",
+    "eventsource-parser": "^4.1.0",
     "express": "^5.2.1",
     "express-fileupload": "^1.5.2",
     "express-rate-limit": "^8.7.0",