From 76c66f97bff7063fb894e4ab5abc5961b6155e96 Mon Sep 17 00:00:00 2001
From: "metamask-ci[bot]" <271559518+metamask-ci[bot]@users.noreply.github.com>
Date: Sun, 27 Sep 2026 06:17:09 +0000
Subject: [PATCH 1/2] fix(deps): update dependency unzipper to ^0.12.5

---
 packages/foundryup/package.json |  4 ++--
 yarn.lock                       | 27 +++++++++++++++++++--------
 2 files changed, 21 insertions(+), 10 deletions(-)

diff --git a/packages/foundryup/package.json b/packages/foundryup/package.json
index 5666cce40cf..cc6ef4afe39 100644
--- a/packages/foundryup/package.json
+++ b/packages/foundryup/package.json
@@ -50,14 +50,14 @@
   "dependencies": {
     "minipass": "^7.1.2",
     "tar": "^7.5.22",
-    "unzipper": "^0.12.3",
+    "unzipper": "^0.12.5",
     "yargs": "^17.7.3",
     "yargs-parser": "^21.1.1"
   },
   "devDependencies": {
     "@metamask/auto-changelog": "^6.2.1",
     "@types/jest": "^30.0.0",
-    "@types/unzipper": "^0.10.10",
+    "@types/unzipper": "^0.10.11",
     "@types/yargs": "^17.0.35",
     "@types/yargs-parser": "^21.0.3",
     "@typescript/native": "npm:typescript@^7.0.2",
diff --git a/yarn.lock b/yarn.lock
index 2711e7d9557..bd254bf463f 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7027,7 +7027,7 @@ __metadata:
   dependencies:
     "@metamask/auto-changelog": "npm:^6.2.1"
     "@types/jest": "npm:^30.0.0"
-    "@types/unzipper": "npm:^0.10.10"
+    "@types/unzipper": "npm:^0.10.11"
     "@types/yargs": "npm:^17.0.35"
     "@types/yargs-parser": "npm:^21.0.3"
     "@typescript/native": "npm:typescript@^7.0.2"
@@ -7042,7 +7042,7 @@ __metadata:
     typedoc: "npm:^0.25.13"
     typedoc-plugin-missing-exports: "npm:^2.0.0"
     typescript: "npm:@typescript/typescript6@^6.0.2"
-    unzipper: "npm:^0.12.3"
+    unzipper: "npm:^0.12.5"
     yaml: "npm:^2.9.1"
     yargs: "npm:^17.7.3"
     yargs-parser: "npm:^21.1.1"
@@ -12355,7 +12355,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@types/unzipper@npm:^0.10.10":
+"@types/unzipper@npm:^0.10.11":
   version: 0.10.11
   resolution: "@types/unzipper@npm:0.10.11"
   dependencies:
@@ -17802,6 +17802,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"fs-extra@npm:11.3.1":
+  version: 11.3.1
+  resolution: "fs-extra@npm:11.3.1"
+  dependencies:
+    graceful-fs: "npm:^4.2.0"
+    jsonfile: "npm:^6.0.1"
+    universalify: "npm:^2.0.0"
+  checksum: 10/2b893213411b1da11f9b061ccb0bcff4d6dd66fe90aa8f5b1616219a5e7ca659da869f454ebd8e94aa21c58342730fb43a2e5c98b5c6c5124f0c54a4633f64b0
+  languageName: node
+  linkType: hard
+
 "fs-extra@npm:^10.0.0, fs-extra@npm:^10.1.0":
   version: 10.1.0
   resolution: "fs-extra@npm:10.1.0"
@@ -27330,16 +27341,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"unzipper@npm:^0.12.3":
-  version: 0.12.3
-  resolution: "unzipper@npm:0.12.3"
+"unzipper@npm:^0.12.5":
+  version: 0.12.5
+  resolution: "unzipper@npm:0.12.5"
   dependencies:
     bluebird: "npm:~3.7.2"
     duplexer2: "npm:~0.1.4"
-    fs-extra: "npm:^11.2.0"
+    fs-extra: "npm:11.3.1"
     graceful-fs: "npm:^4.2.2"
     node-int64: "npm:^0.4.0"
-  checksum: 10/b210c421308e1913e01b54faad4ae79e758c674311892414a0697acacba9f82fa0051b677faa77e62fab422eef928c858f2d5cda9ddb47a2f3db95b0e9b36359
+  checksum: 10/5d28fbbba5371e1a401386762ec61b123807848648ff685f1b80d36302641bc9421bf12e21ca86460c5da84a827924356fc48f0463304887f15aaca1f2ac6fac
   languageName: node
   linkType: hard
 

From 8dd048eecb0729c74fbbca4df80d5ae43cc3bc4f Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Sun, 27 Sep 2026 06:21:31 +0000
Subject: [PATCH 2/2] [dependabot skip] chore: add changelog entries for bumped
 dependencies

---
 packages/foundryup/CHANGELOG.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/packages/foundryup/CHANGELOG.md b/packages/foundryup/CHANGELOG.md
index a07f12ec09e..52ad45143fe 100644
--- a/packages/foundryup/CHANGELOG.md
+++ b/packages/foundryup/CHANGELOG.md
@@ -11,6 +11,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Bump `tar` from `^7.4.3` to `^7.5.22` ([#10444](https://github.com/MetaMask/core/pull/10444))
 - Bump `yargs` from `^17.7.2` to `^17.7.3` ([#10446](https://github.com/MetaMask/core/pull/10446))
+- Bump `unzipper` from `^0.12.3` to `^0.12.5` ([#10445](https://github.com/MetaMask/core/pull/10445))
 
 ## [2.0.0]