fix(deps): update dependency body-parser to v2 by mend-for-github-com[bot] · Pull Request #6 · shafnirlab1/JavaScript

mend-for-github-com · 2025-04-28T00:59:19Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
body-parser	`1.9.0` → `2.2.2`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

expressjs/body-parser (body-parser)

`v2.2.2`

Compare Source

=========================

deps: qs@^6.14.1
refactor(json): simplify strict mode error string construction

`v2.2.1`

Compare Source

=========================

Security fix for GHSA-wqch-xfxh-vrr4
deps:
- type-is@^2.0.1
- iconv-lite@^0.7.0
  - Handle split surrogate pairs when encoding UTF-8
  - Avoid false positives in encodingExists by using prototype-less objects
- raw-body@^3.0.1
- debug@^4.4.3

`v2.2.0`

Compare Source

=========================

refactor: normalize common options for all parsers
deps:
- iconv-lite@^0.6.3

`v2.1.0`

Compare Source

=========================

deps:
- type-is@^2.0.0
- debug@^4.4.0
- Removed destroy
refactor: prefix built-in node module imports
use the node require cache instead of custom caching

`v2.0.2`

Compare Source

=========================

remove unpipe package and use native unpipe() method

`v2.0.1`

Compare Source

=========================

Restore expected behavior extended to false

`v2.0.0`

Compare Source

=========================

Breaking Changes

Node.js 18 is the minimum supported version
req.body is no longer always initialized to {}
- it is left undefined unless a body is parsed
Remove deprecated bodyParser() combination middleware
~~urlencoded parser now defaults extended to false~~ as released, this is not the case, fixed in 2.0.1
urlencoded simple parser now uses qs module instead of querystring module

Features

Add brotli support #406
urlencoded: Add option to customize the depth with a default value of 32
urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
Use on-finished to determine when body read

Dependencies

deps: raw-body@^3.0.0
deps: qs@6.12.3
deps: debug@3.1.0
deps: iconv-lite@0.5.2

`v1.20.4`

Compare Source

===================

deps: qs@~6.14.0
deps: use tilde notation for dependencies
deps: http-errors@~2.0.1
deps: raw-body@~2.5.3

`v1.20.3`

Compare Source

===================

deps: qs@6.13.0
add depth option to customize the depth level in the parser
IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

`v1.20.2`

Compare Source

===================

Fix strict json error message on Node.js 19+
deps: content-type@~1.0.5
- perf: skip value escaping when unnecessary
deps: raw-body@2.5.2

`v1.20.1`

Compare Source

===================

deps: qs@6.11.0
perf: remove unnecessary object clone

`v1.20.0`

Compare Source

===================

Fix error message for json parse whitespace in strict
Fix internal error when inflated body exceeds limit
Prevent loss of async hooks context
Prevent hanging when request already read
deps: depd@2.0.0
- Replace internal eval usage with Function constructor
- Use instance methods on process to check for listeners
deps: http-errors@2.0.0
- deps: depd@2.0.0
- deps: statuses@2.0.1
deps: on-finished@2.4.1
deps: qs@6.10.3
deps: raw-body@2.5.1
- deps: http-errors@2.0.0

`v1.19.2`

Compare Source

===================

deps: bytes@3.1.2
deps: qs@6.9.7
- Fix handling of __proto__ keys
deps: raw-body@2.4.3
- deps: bytes@3.1.2

`v1.19.1`

Compare Source

===================

deps: bytes@3.1.1
deps: http-errors@1.8.1
- deps: inherits@2.0.4
- deps: toidentifier@1.0.1
- deps: setprototypeof@1.2.0
deps: qs@6.9.6
deps: raw-body@2.4.2
- deps: bytes@3.1.1
- deps: http-errors@1.8.1
deps: safe-buffer@5.2.1
deps: type-is@~1.6.18

`v1.19.0`

Compare Source

===================

deps: bytes@3.1.0
- Add petabyte (pb) support
deps: http-errors@1.7.2
- Set constructor name when possible
- deps: setprototypeof@1.1.1
- deps: statuses@'>= 1.5.0 < 2'
deps: iconv-lite@0.4.24
- Added encoding MIK
deps: qs@6.7.0
- Fix parsing array brackets after index
deps: raw-body@2.4.0
- deps: bytes@3.1.0
- deps: http-errors@1.7.2
- deps: iconv-lite@0.4.24
deps: type-is@~1.6.17
- deps: mime-types@~2.1.24
- perf: prevent internal throw on invalid type

`v1.18.3`

Compare Source

===================

Fix stack trace for strict json parse error
deps: depd@~1.1.2
- perf: remove argument reassignment
deps: http-errors@~1.6.3
- deps: depd@~1.1.2
- deps: setprototypeof@1.1.0
- deps: statuses@'>= 1.3.1 < 2'
deps: iconv-lite@0.4.23
- Fix loading encoding with year appended
- Fix deprecation warnings on Node.js 10+
deps: qs@6.5.2
deps: raw-body@2.3.3
- deps: http-errors@1.6.3
- deps: iconv-lite@0.4.23
deps: type-is@~1.6.16
- deps: mime-types@~2.1.18

`v1.18.2`

Compare Source

===================

deps: debug@2.6.9
perf: remove argument reassignment

`v1.18.1`

Compare Source

===================

deps: content-type@~1.0.4
- perf: remove argument reassignment
- perf: skip parameter parsing when no parameters
deps: iconv-lite@0.4.19
- Fix ISO-8859-1 regression
- Update Windows-1255
deps: qs@6.5.1
- Fix parsing & compacting very deep objects
deps: raw-body@2.3.2
- deps: iconv-lite@0.4.19

`v1.18.0`

Compare Source

===================

Fix JSON strict violation error to match native parse error
Include the body property on verify errors
Include the type property on all generated errors
Use http-errors to set status code on errors
deps: bytes@3.0.0
deps: debug@2.6.8
deps: depd@~1.1.1
- Remove unnecessary Buffer loading
deps: http-errors@~1.6.2
- deps: depd@1.1.1
deps: iconv-lite@0.4.18
- Add support for React Native
- Add a warning if not loaded as utf-8
- Fix CESU-8 decoding in Node.js 8
- Improve speed of ISO-8859-1 encoding
deps: qs@6.5.0
deps: raw-body@2.3.1
- Use http-errors for standard emitted errors
- deps: bytes@3.0.0
- deps: iconv-lite@0.4.18
- perf: skip buffer decoding on overage chunk
perf: prevent internal throw when missing charset

`v1.17.2`

Compare Source

===================

deps: debug@2.6.7
- Fix DEBUG_MAX_ARRAY_LENGTH
- deps: ms@2.0.0
deps: type-is@~1.6.15
- deps: mime-types@~2.1.15

`v1.17.1`

Compare Source

===================

deps: qs@6.4.0
- Fix regression parsing keys starting with [

`v1.17.0`

Compare Source

===================

deps: http-errors@~1.6.1
- Make message property enumerable for HttpErrors
- deps: setprototypeof@1.0.3
deps: qs@6.3.1
- Fix compacting nested arrays

`v1.16.1`

Compare Source

===================

deps: debug@2.6.1
- Fix deprecation messages in WebStorm and other editors
- Undeprecate DEBUG_FD set to 1 or 2

`v1.16.0`

Compare Source

===================

deps: debug@2.6.0
- Allow colors in workers
- Deprecated DEBUG_FD environment variable
- Fix error when running under React Native
- Use same color for same namespace
- deps: ms@0.7.2
deps: http-errors@~1.5.1
- deps: inherits@2.0.3
- deps: setprototypeof@1.0.2
- deps: statuses@'>= 1.3.1 < 2'
deps: iconv-lite@0.4.15
- Added encoding MS-31J
- Added encoding MS-932
- Added encoding MS-936
- Added encoding MS-949
- Added encoding MS-950
- Fix GBK/GB18030 handling of Euro character
deps: qs@6.2.1
- Fix array parsing from skipping empty values
deps: raw-body@~2.2.0
- deps: iconv-lite@0.4.15
deps: type-is@~1.6.14
- deps: mime-types@~2.1.13

`v1.15.2`

Compare Source

===================

deps: bytes@2.4.0
deps: content-type@~1.0.2
- perf: enable strict mode
deps: http-errors@~1.5.0
- Use setprototypeof module to replace __proto__ setting
- deps: statuses@'>= 1.3.0 < 2'
- perf: enable strict mode
deps: qs@6.2.0
deps: raw-body@~2.1.7
- deps: bytes@2.4.0
- perf: remove double-cleanup on happy path
deps: type-is@~1.6.13
- deps: mime-types@~2.1.11

`v1.15.1`

Compare Source

===================

deps: bytes@2.3.0
- Drop partial bytes on all parsed units
- Fix parsing byte string that looks like hex
deps: raw-body@~2.1.6
- deps: bytes@2.3.0
deps: type-is@~1.6.12
- deps: mime-types@~2.1.10

`v1.15.0`

Compare Source

===================

deps: http-errors@~1.4.0
- Add HttpError export, for err instanceof createError.HttpError
- deps: inherits@2.0.1
- deps: statuses@'>= 1.2.1 < 2'
deps: qs@6.1.0
deps: type-is@~1.6.11
- deps: mime-types@~2.1.9

`v1.14.2`

Compare Source

===================

deps: bytes@2.2.0
deps: iconv-lite@0.4.13
deps: qs@5.2.0
deps: raw-body@~2.1.5
- deps: bytes@2.2.0
- deps: iconv-lite@0.4.13
deps: type-is@~1.6.10
- deps: mime-types@~2.1.8

`v1.14.1`

Compare Source

===================

Fix issue where invalid charset results in 400 when verify used
deps: iconv-lite@0.4.12
- Fix CESU-8 decoding in Node.js 4.x
deps: raw-body@~2.1.4
- Fix masking critical errors from iconv-lite
- deps: iconv-lite@0.4.12
deps: type-is@~1.6.9
- deps: mime-types@~2.1.7

`v1.14.0`

Compare Source

===================

Fix JSON strict parse error to match syntax errors
Provide static require analysis in urlencoded parser
deps: depd@~1.1.0
- Support web browser loading
deps: qs@5.1.0
deps: raw-body@~2.1.3
- Fix sync callback when attaching data listener causes sync read
deps: type-is@~1.6.8
- Fix type error when given invalid type to match against
- deps: mime-types@~2.1.6

`v1.13.3`

Compare Source

===================

deps: type-is@~1.6.6
- deps: mime-types@~2.1.4

`v1.13.2`

Compare Source

===================

deps: iconv-lite@0.4.11
deps: qs@4.0.0
- Fix dropping parameters like hasOwnProperty
- Fix user-visible incompatibilities from 3.1.0
- Fix various parsing edge cases
deps: raw-body@~2.1.2
- Fix error stack traces to skip makeError
- deps: iconv-lite@0.4.11
deps: type-is@~1.6.4
- deps: mime-types@~2.1.2
- perf: enable strict mode
- perf: remove argument reassignment

`v1.13.1`

Compare Source

===================

deps: qs@2.4.2
- Downgraded from 3.1.0 because of user-visible incompatibilities

`v1.13.0`

Compare Source

===================

Add statusCode property on Errors, in addition to status
Change type default to application/json for JSON parser
Change type default to application/x-www-form-urlencoded for urlencoded parser
Provide static require analysis
Use the http-errors module to generate errors
deps: bytes@2.1.0
- Slight optimizations
deps: iconv-lite@0.4.10
- The encoding UTF-16 without BOM now defaults to UTF-16LE when detection fails
- Leading BOM is now removed when decoding
deps: on-finished@~2.3.0
- Add defined behavior for HTTP CONNECT requests
- Add defined behavior for HTTP Upgrade requests
- deps: ee-first@1.1.1
deps: qs@3.1.0
- Fix dropping parameters like hasOwnProperty
- Fix various parsing edge cases
- Parsed object now has null prototype
deps: raw-body@~2.1.1
- Use unpipe module for unpiping requests
- deps: iconv-lite@0.4.10
deps: type-is@~1.6.3
- deps: mime-types@~2.1.1
- perf: reduce try block size
- perf: remove bitwise operations
perf: enable strict mode
perf: remove argument reassignment
perf: remove delete call

`v1.12.4`

Compare Source

===================

deps: debug@~2.2.0
deps: qs@2.4.2
- Fix allowing parameters like constructor
deps: on-finished@~2.2.1
deps: raw-body@~2.0.1
- Fix a false-positive when unpiping in Node.js 0.8
- deps: bytes@2.0.1
deps: type-is@~1.6.2
- deps: mime-types@~2.0.11

`v1.12.3`

Compare Source

===================

Slight efficiency improvement when not debugging
deps: depd@~1.0.1
deps: iconv-lite@0.4.8
- Add encoding alias UNICODE-1-1-UTF-7
deps: raw-body@1.3.4
- Fix hanging callback if request aborts during read
- deps: iconv-lite@0.4.8

`v1.12.2`

Compare Source

===================

deps: qs@2.4.1
- Fix error when parameter hasOwnProperty is present

`v1.12.1`

Compare Source

===================

deps: debug@~2.1.3
- Fix high intensity foreground color for bold
- deps: ms@0.7.0
deps: type-is@~1.6.1
- deps: mime-types@~2.0.10

`v1.12.0`

Compare Source

===================

add debug messages
accept a function for the type option
use content-type to parse Content-Type headers
deps: iconv-lite@0.4.7
- Gracefully support enumerables on Object.prototype
deps: raw-body@1.3.3
- deps: iconv-lite@0.4.7
deps: type-is@~1.6.0
- fix argument reassignment
- fix false-positives in hasBody Transfer-Encoding check
- support wildcard for both type and subtype (*/*)
- deps: mime-types@~2.0.9

`v1.11.0`

Compare Source

===================

make internal extended: true depth limit infinity
deps: type-is@~1.5.6
- deps: mime-types@~2.0.8

`v1.10.2`

Compare Source

===================

deps: iconv-lite@0.4.6
- Fix rare aliases of single-byte encodings
deps: raw-body@1.3.2
- deps: iconv-lite@0.4.6

`v1.10.1`

Compare Source

===================

deps: on-finished@~2.2.0
deps: type-is@~1.5.5
- deps: mime-types@~2.0.7

`v1.10.0`

Compare Source

===================

make internal extended: true array limit dynamic

`v1.9.3`

Compare Source

==================

deps: iconv-lite@0.4.5
- Fix Windows-31J and X-SJIS encoding support
deps: qs@2.3.3
- Fix arrayLimit behavior
deps: raw-body@1.3.1
- deps: iconv-lite@0.4.5
deps: type-is@~1.5.3
- deps: mime-types@~2.0.3

`v1.9.2`

Compare Source

==================

deps: qs@2.3.2
- Fix parsing of mixed objects and values

`v1.9.1`

Compare Source

==================

deps: on-finished@~2.1.1
- Fix handling of pipelined requests
deps: qs@2.3.0
- Fix parsing of mixed implicit and explicit arrays
deps: type-is@~1.5.2
- deps: mime-types@~2.0.2

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

mend-for-github-com · 2025-04-28T00:59:20Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-2.x branch from 2614ab5 to e86f736 Compare November 26, 2025 02:57

mend-for-github-com bot changed the title ~~fix(deps): update dependency body-parser to v2~~ [NEUTRAL] Update dependency body-parser to v2 Nov 26, 2025

mend-for-github-com bot changed the title ~~[NEUTRAL] Update dependency body-parser to v2~~ fix(deps): update dependency body-parser to v2 Dec 26, 2025

[NEUTRAL] Update dependency body-parser to v2

e409aac

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-2.x branch from e86f736 to e409aac Compare January 8, 2026 18:25

mend-for-github-com bot changed the title ~~fix(deps): update dependency body-parser to v2~~ [NEUTRAL] Update dependency body-parser to v2 Jan 8, 2026

mend-for-github-com bot changed the title ~~[NEUTRAL] Update dependency body-parser to v2~~ fix(deps): update dependency body-parser to v2 Feb 7, 2026

mend-for-github-com bot changed the title ~~fix(deps): update dependency body-parser to v2~~ [NEUTRAL] Update dependency body-parser to v2 Feb 26, 2026

mend-for-github-com bot changed the title ~~[NEUTRAL] Update dependency body-parser to v2~~ fix(deps): update dependency body-parser to v2 Feb 27, 2026

mend-for-github-com bot changed the title ~~fix(deps): update dependency body-parser to v2~~ [NEUTRAL] Update dependency body-parser to v2 Mar 1, 2026

mend-for-github-com bot changed the title ~~[NEUTRAL] Update dependency body-parser to v2~~ fix(deps): update dependency body-parser to v2 Mar 2, 2026

mend-for-github-com bot changed the title ~~fix(deps): update dependency body-parser to v2~~ [NEUTRAL] Update dependency body-parser to v2 Mar 3, 2026

mend-for-github-com bot changed the title ~~[NEUTRAL] Update dependency body-parser to v2~~ fix(deps): update dependency body-parser to v2 Mar 5, 2026

mend-for-github-com bot changed the title ~~fix(deps): update dependency body-parser to v2~~ [NEUTRAL] Update dependency body-parser to v2 Mar 9, 2026

mend-for-github-com bot changed the title ~~[NEUTRAL] Update dependency body-parser to v2~~ fix(deps): update dependency body-parser to v2 Mar 15, 2026

mend-for-github-com bot changed the title ~~fix(deps): update dependency body-parser to v2~~ [NEUTRAL] Update dependency body-parser to v2 Mar 17, 2026

mend-for-github-com bot changed the title ~~[NEUTRAL] Update dependency body-parser to v2~~ fix(deps): update dependency body-parser to v2 Mar 19, 2026

mend-for-github-com bot changed the title ~~fix(deps): update dependency body-parser to v2~~ [NEUTRAL] Update dependency body-parser to v2 Mar 20, 2026

mend-for-github-com bot changed the title ~~[NEUTRAL] Update dependency body-parser to v2~~ fix(deps): update dependency body-parser to v2 Mar 21, 2026

mend-for-github-com bot changed the title ~~fix(deps): update dependency body-parser to v2~~ [NEUTRAL] Update dependency body-parser to v2 Mar 23, 2026

mend-for-github-com bot changed the title ~~[NEUTRAL] Update dependency body-parser to v2~~ fix(deps): update dependency body-parser to v2 Apr 9, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update dependency body-parser to v2#6

fix(deps): update dependency body-parser to v2#6
mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/body-parser-2.x

mend-for-github-com bot commented Apr 28, 2025 •

edited

Loading

Uh oh!

mend-for-github-com bot commented Apr 28, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

mend-for-github-com bot commented Apr 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Breaking Changes

Features

Dependencies

Configuration

Uh oh!

mend-for-github-com bot commented Apr 28, 2025

⚠️ Artifact update problem

File name: package-lock.json

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

mend-for-github-com bot commented Apr 28, 2025 •

edited

Loading