build(deps-dev): bump multiparty from 4.2.3 to 4.3.0

[dependabot]

Bumps multiparty from 4.2.3 to 4.3.0.

Release notes

Sourced from multiparty's releases.

v4.3.0

Important: Security

• Security fix for CVE-CVE-2026-8162 (GHSA-xh3c-6gcq-g4rv)
• Security fix for CVE-2026-8161 (GHSA-qxch-whhj-8956)
• Security fix for CVE-CVE-2026-8159 (GHSA-65x3-rw7q-gx94)

Fixed

• Fix decoding filenames from Chrome/Firefox a786412
• Fix form parsing when no part event listener added cb2421f

---

pillarjs/multiparty@4.2.3...v4.3.0

Commits

• f7963db 4.3.0
• a7445dd Merge commit from fork
• 8ee6aca Merge commit from fork
• e61a0b5 Merge commit from fork
• 34a016b Remove dependabot (#273)
• caf5aac build(deps): bump github/codeql-action from 2.23.2 to 3.30.0 (#268)
• 376adde ci: apply OSSF Scorecard security best practices (#1) (#257)
• be10c56 ci: add support for OSSF scorecard reporting (#255)
• a786412 Fix decoding filenames from Chrome/Firefox
• 399a4dc build: support Node.js 20.x
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for multiparty since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 2152de8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.