From 29595e6ebb5e6ac670f2ddc475c53c313cb6a27d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 1 Jul 2026 23:03:36 +0000
Subject: [PATCH] chore(deps): bump @npmcli/arborist from 9.1.8 to 9.9.0

Bumps [@npmcli/arborist](https://github.com/npm/cli/tree/HEAD/workspaces/arborist) from 9.1.8 to 9.9.0.
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/v9.9.0/CHANGELOG.md)
- [Commits](https://github.com/npm/cli/commits/v9.9.0/workspaces/arborist)

---
updated-dependencies:
- dependency-name: "@npmcli/arborist"
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 25 ++++++++++++++++---------
 package.json      |  2 +-
 2 files changed, 17 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index c2f8276d0f..22b3906094 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7,13 +7,16 @@
     "": {
       "name": "nativescript",
       "version": "9.0.6",
+      "bundleDependencies": [
+        "universal-analytics"
+      ],
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "dependencies": {
         "@foxt/js-srp": "0.0.3-patch2",
         "@nativescript/doctor": "2.0.17",
         "@nativescript/hook": "3.0.5",
-        "@npmcli/arborist": "9.1.8",
+        "@npmcli/arborist": "9.9.0",
         "@nstudio/trapezedev-project": "7.2.4",
         "@rigor789/resolve-package-path": "1.0.7",
         "axios": "1.13.5",
@@ -916,11 +919,12 @@
       }
     },
     "node_modules/@npmcli/arborist": {
-      "version": "9.1.8",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-9.1.8.tgz",
-      "integrity": "sha512-TYAzq0oaXQU+uLfXFbR2wYx62qHIOSg/TYhGWJSphJDypyjdNXC7B/+k29ElC2vWlWfX4OJnhmSY5DTwSFiNpg==",
+      "version": "9.9.0",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-9.9.0.tgz",
+      "integrity": "sha512-tzsb1R8mx0k0drlLDT/9ckEYaQHIaWnUti/ci2IaFoQqdqwfmYrc+90p1+QEZC/ocvqcxBep9P1xKw4FbAGofw==",
       "license": "ISC",
       "dependencies": {
+        "@gar/promise-retry": "^1.0.0",
         "@isaacs/string-locale-compare": "^1.1.0",
         "@npmcli/fs": "^5.0.0",
         "@npmcli/installed-package-contents": "^4.0.0",
@@ -934,7 +938,7 @@
         "@npmcli/run-script": "^10.0.0",
         "bin-links": "^6.0.0",
         "cacache": "^20.0.1",
-        "common-ancestor-path": "^1.0.1",
+        "common-ancestor-path": "^2.0.0",
         "hosted-git-info": "^9.0.0",
         "json-stringify-nice": "^1.1.4",
         "lru-cache": "^11.2.1",
@@ -3153,10 +3157,13 @@
       }
     },
     "node_modules/common-ancestor-path": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/common-ancestor-path/-/common-ancestor-path-1.0.1.tgz",
-      "integrity": "sha512-L3sHRo1pXXEqX8VU28kfgUY+YGsk09hPqZiZmLacNib6XNTCM8ubYeT7ryXQw8asB1sKgcU5lkB7ONug08aB8w==",
-      "license": "ISC"
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/common-ancestor-path/-/common-ancestor-path-2.0.0.tgz",
+      "integrity": "sha512-dnN3ibLeoRf2HNC+OlCiNc5d2zxbLJXOtiZUudNFSXZrNSydxcCsSpRzXwfu7BBWCIfHPw+xTayeBvJCP/D8Ng==",
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">= 18"
+      }
     },
     "node_modules/compare-func": {
       "version": "2.0.0",
diff --git a/package.json b/package.json
index 11a87e98c9..3fc677ce8a 100644
--- a/package.json
+++ b/package.json
@@ -57,7 +57,7 @@
     "@foxt/js-srp": "0.0.3-patch2",
     "@nativescript/doctor": "2.0.17",
     "@nativescript/hook": "3.0.5",
-    "@npmcli/arborist": "9.1.8",
+    "@npmcli/arborist": "9.9.0",
     "@nstudio/trapezedev-project": "7.2.4",
     "@rigor789/resolve-package-path": "1.0.7",
     "axios": "1.13.5",