From e16e9e28a4b32acba068bd759ff62b224824c2ae Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 2 Jul 2026 18:04:38 +0000
Subject: [PATCH] chore(deps): bump express-rate-limit in /services/tts

Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 7.5.1 to 8.5.2.
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](https://github.com/express-rate-limit/express-rate-limit/compare/v7.5.1...v8.5.2)

---
updated-dependencies:
- dependency-name: express-rate-limit
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 services/tts/package-lock.json | 44 ++++++++++++++++++++++++++++++----
 services/tts/package.json      |  2 +-
 2 files changed, 41 insertions(+), 5 deletions(-)

diff --git a/services/tts/package-lock.json b/services/tts/package-lock.json
index 66fde29b..31556d0a 100644
--- a/services/tts/package-lock.json
+++ b/services/tts/package-lock.json
@@ -17,16 +17,21 @@
         "@opentelemetry/sdk-node": "^0.219.0",
         "@opentelemetry/semantic-conventions": "^1.41.1",
         "express": "^5.2.1",
-        "express-rate-limit": "^7.5.0"
+        "express-rate-limit": "^8.5.2",
+        "opossum": "^8.3.0"
       },
       "devDependencies": {
         "@types/express": "^5.0.6",
         "@types/jest": "30.0.0",
         "@types/node": "^26.0.1",
+        "@types/opossum": "^8.1.8",
         "jest": "^30.4.2",
         "ts-jest": "^29.4.11",
         "ts-node": "^10.9.0",
         "typescript": "^6.0.3"
+      },
+      "engines": {
+        "node": ">=20.0.0 <21.0.0"
       }
     },
     "node_modules/@babel/code-frame": {
@@ -3155,6 +3160,16 @@
         "undici-types": "~8.3.0"
       }
     },
+    "node_modules/@types/opossum": {
+      "version": "8.1.9",
+      "resolved": "https://registry.npmjs.org/@types/opossum/-/opossum-8.1.9.tgz",
+      "integrity": "sha512-Jm/tYxuJFefiwRYs+/EOsUP3ktk0c8siMgAHPLnA4PXF4wKghzcjqf88dY+Xii5jId5Txw4JV0FMKTpjbd7KJA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
     "node_modules/@types/qs": {
       "version": "6.15.1",
       "resolved": "https://registry.npmjs.org/@types/qs/-/qs-6.15.1.tgz",
@@ -4600,10 +4615,13 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "7.5.1",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-7.5.1.tgz",
-      "integrity": "sha512-7iN8iPMDzOMHPUYllBEsQdWVB6fPDMPqwjBaFrgr4Jgr/+okjvzAy+UHlYYL/Vs0OsOrMkwS6PJDkFlJwoxUnw==",
+      "version": "8.5.2",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.2.tgz",
+      "integrity": "sha512-5Kb34ipNX694DH48vN9irak1Qx30nb0PLYHXfJgw4YEjiC3ZEmZJhwOp+VfiCYwFzvFTdB9QkArYS5kXa2cx2A==",
       "license": "MIT",
+      "dependencies": {
+        "ip-address": "^10.2.0"
+      },
       "engines": {
         "node": ">= 16"
       },
@@ -5171,6 +5189,15 @@
       "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
       "license": "ISC"
     },
+    "node_modules/ip-address": {
+      "version": "10.2.0",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz",
+      "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 12"
+      }
+    },
     "node_modules/ipaddr.js": {
       "version": "1.9.1",
       "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
@@ -6363,6 +6390,15 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/opossum": {
+      "version": "8.5.0",
+      "resolved": "https://registry.npmjs.org/opossum/-/opossum-8.5.0.tgz",
+      "integrity": "sha512-LZNvs+p9/ZbG4oN6unnjh4hTxkB0dyHKI2p7azVt8w+//GKDpfHss6WR7KebbpzGEssYwtSd8Mvwxqcmxg10NA==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^24 || ^22 || ^21 || ^20 || ^18 || ^16"
+      }
+    },
     "node_modules/p-limit": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz",
diff --git a/services/tts/package.json b/services/tts/package.json
index eaf0019b..00304278 100644
--- a/services/tts/package.json
+++ b/services/tts/package.json
@@ -28,7 +28,7 @@
     "@opentelemetry/sdk-node": "^0.219.0",
     "@opentelemetry/semantic-conventions": "^1.41.1",
     "express": "^5.2.1",
-    "express-rate-limit": "^7.5.0",
+    "express-rate-limit": "^8.5.2",
     "opossum": "^8.3.0"
   },
   "devDependencies": {