From 9ee5004e930f591cafac66c87f9b90d52c3cdcb0 Mon Sep 17 00:00:00 2001
From: "n8n-cat-bot[bot]" <283985454+n8n-cat-bot[bot]@users.noreply.github.com>
Date: Thu, 18 Jun 2026 19:59:40 +0100
Subject: [PATCH] =?UTF-8?q?chore:=20Bump=20multer=202.1.1=20=E2=86=92=202.?=
 =?UTF-8?q?2.0=20(#32607)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
---
 package.json              |  2 +-
 packages/cli/package.json |  2 +-
 pnpm-lock.yaml            | 17 ++++++++++-------
 3 files changed, 12 insertions(+), 9 deletions(-)

diff --git a/package.json b/package.json
index 3c3edb9b870..dc57140d35a 100644
--- a/package.json
+++ b/package.json
@@ -119,7 +119,7 @@
       "@types/node": "^20.17.50",
       "chokidar": "4.0.3",
       "esbuild": "^0.25.0",
-      "multer": "^2.1.1",
+      "multer": "^2.2.0",
       "prebuild-install": "7.1.3",
       "pug": "^3.0.3",
       "semver": "catalog:",
diff --git a/packages/cli/package.json b/packages/cli/package.json
index a74a2585218..80dec06b353 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -206,7 +206,7 @@
     "linkedom": "^0.18.9",
     "lodash": "catalog:",
     "luxon": "catalog:",
-    "multer": "^2.1.1",
+    "multer": "^2.2.0",
     "moment-timezone": "catalog:",
     "n8n-core": "workspace:*",
     "n8n-editor-ui": "workspace:*",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 99055ea4d26..b45655d674c 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -553,7 +553,7 @@ overrides:
   '@types/node': ^20.17.50
   chokidar: 4.0.3
   esbuild: ^0.25.0
-  multer: ^2.1.1
+  multer: ^2.2.0
   prebuild-install: 7.1.3
   pug: ^3.0.3
   semver: 7.7.3
@@ -3465,8 +3465,8 @@ importers:
         specifier: 'catalog:'
         version: 0.5.48
       multer:
-        specifier: ^2.1.1
-        version: 2.1.1
+        specifier: ^2.2.0
+        version: 2.2.0
       n8n-core:
         specifier: workspace:*
         version: link:../core
@@ -7166,6 +7166,7 @@ packages:
 
   '@daytonaio/sdk@0.175.0':
     resolution: {integrity: sha512-2MR0sUAbyH7Z7Kay12XgVby5z5Vm/AECn/ELXNlFy1AKESE3VvglGuMq+ez1Ld+7r3Eylo4aiSt5msxqqQbQaw==}
+    deprecated: 'Moved to @daytona/sdk, same API, no breaking changes. Please update: npm uninstall @daytonaio/sdk && npm i @daytona/sdk'
 
   '@dependents/detective-less@5.0.1':
     resolution: {integrity: sha512-Y6+WUMsTFWE5jb20IFP4YGa5IrGY/+a/FbOSjDF/wz9gepU2hwCYSXRHP/vPwBvwcY3SVMASt4yXxbXNXigmZQ==}
@@ -7965,6 +7966,7 @@ packages:
   '@langchain/community@1.1.27':
     resolution: {integrity: sha512-s2U3w7QV7QpkFtY1eZMni4poz+nKLFclpDi3a7hUbZ67ttsGaU9WkZ2BiLuzLIs+IFaUvON/KcGkE8EqAl9aPA==}
     engines: {node: '>=20'}
+    deprecated: This package has been deprecated. See https://github.com/langchain-ai/langchainjs-community/issues/61 for more info
     peerDependencies:
       '@arcjet/redact': ^v1.2.0
       '@aws-crypto/sha256-js': ^5.0.0
@@ -17450,8 +17452,8 @@ packages:
   muggle-string@0.4.1:
     resolution: {integrity: sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==}
 
-  multer@2.1.1:
-    resolution: {integrity: sha512-mo+QTzKlx8R7E5ylSXxWzGoXoZbOsRMpyitcht8By2KHvMbf3tjwosZ/Mu/XYU6UuJ3VZnODIrak5ZrPiPyB6A==}
+  multer@2.2.0:
+    resolution: {integrity: sha512-6rdyFg2kLrMh9Jee7/BMPuV9lEAd7lLW2YUpF9/YxR7njyoUwwQ0ZPh3TaIY50Sw6vlyD2HW3wGOkTS4P79xrQ==}
     engines: {node: '>= 10.16.0'}
 
   mustache@4.2.0:
@@ -18801,6 +18803,7 @@ packages:
     resolution: {integrity: sha512-gv6vLGcmAOg96/fgo3d9tvA4dJNZL3fMyBqVRrGxQ+Q/o4k9QzbJ3NQF9cOO/71wRodoXhaPgphvMFU68qVAJQ==}
     deprecated: |-
       You or someone you depend on is using Q, the JavaScript Promise library that gave JavaScript developers strong feelings about promises. They can almost certainly migrate to the native JavaScript promise now. Thank you literally everyone for joining me in this bet against the odds. Be excellent to each other.
+
       (For a CapTP with native promises, see @endo/eventual-send and @endo/captp)
 
   qrcode.vue@3.3.4:
@@ -32865,7 +32868,7 @@ snapshots:
       lodash.clonedeep: 4.5.0
       lodash.get: 4.4.2
       media-typer: 1.1.0
-      multer: 2.1.1
+      multer: 2.2.0
       ono: 7.1.3
       path-to-regexp: 8.4.0
       qs: 6.15.2
@@ -36517,7 +36520,7 @@ snapshots:
 
   muggle-string@0.4.1: {}
 
-  multer@2.1.1:
+  multer@2.2.0:
     dependencies:
       append-field: 1.0.0
       busboy: 1.6.0