Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Also use the qs module for the simple parser #387

Merged
merged 4 commits into from
Jul 24, 2024
Merged

Also use the qs module for the simple parser #387

merged 4 commits into from
Jul 24, 2024

Conversation

papandreou
Copy link
Contributor

Following up from #326

@dougwilson dougwilson self-assigned this Feb 11, 2020
@dougwilson dougwilson added this to the 2.0 milestone Apr 23, 2020
@dougwilson dougwilson force-pushed the master branch 3 times, most recently from 0ad1d88 to 2a2f471 Compare April 3, 2022 00:47
@wesleytodd wesleytodd mentioned this pull request May 17, 2024
Closed
46 tasks
@wesleytodd wesleytodd changed the base branch from master to 2.x July 23, 2024 01:54
@wesleytodd
Copy link
Member

We are preparing to release 2.0, and to reduce churn and help us I retargeted this to that branch. Would you be able to rebase this so I can merge it there?

@papandreou
Copy link
Contributor Author

@wesleytodd, absolutely! Done.

@wesleytodd
Copy link
Member

Before I merge this, @ljharb mind taking a quick look to make sure this is good to land for v5? It appears your last comment was in 2020 just mentioning to update, which we will for sure ensure we are before publishing.

@ljharb
Copy link
Contributor

ljharb commented Jul 24, 2024

still LGTM!

@wesleytodd wesleytodd merged commit 7eb00cd into expressjs:2.x Jul 24, 2024
4 checks passed
@wesleytodd wesleytodd mentioned this pull request Jul 26, 2024
Merged
papandreou added a commit to papandreou/body-parser that referenced this pull request Jul 27, 2024
@papandreou
Merge branch '2.x' into feature/iso-8859-1/take2
14fb806 
* 2.x: (98 commits)
  fix(deps): raw-body@^3.0.0 (expressjs#529)
  Also use the qs module for the simple parser (expressjs#387)
  feat!: remove node less than 18 from ci
  2.0.0-beta.2
  docs: add missing history entry
  tests: enable strict mode
  Remove deprecated bodyParser() combination middleware
  build: remove conditional code coverage
  deps: [email protected]
  deps: [email protected]
  deps: [email protected]
  1.20.2
  Fix strict json error message on Node.js 19+
  deps: [email protected]
  build: [email protected]
  build: [email protected]
  build: [email protected]
  deps: content-type@~1.0.5
  build: [email protected]
  build: [email protected]
  ...
papandreou added a commit to papandreou/body-parser that referenced this pull request Jul 27, 2024
@papandreou
Merge branch '2.x' into feature/iso-8859-1/take2
9a4ebac 
* 2.x: (98 commits)
  fix(deps): raw-body@^3.0.0 (expressjs#529)
  Also use the qs module for the simple parser (expressjs#387)
  feat!: remove node less than 18 from ci
  2.0.0-beta.2
  docs: add missing history entry
  tests: enable strict mode
  Remove deprecated bodyParser() combination middleware
  build: remove conditional code coverage
  deps: [email protected]
  deps: [email protected]
  deps: [email protected]
  1.20.2
  Fix strict json error message on Node.js 19+
  deps: [email protected]
  build: [email protected]
  build: [email protected]
  build: [email protected]
  deps: content-type@~1.0.5
  build: [email protected]
  build: [email protected]
  ...
@ekmixon ekmixon mentioned this pull request Oct 1, 2024
Open
This was referenced Oct 1, 2024
Open
Open
Open
This was referenced Oct 1, 2024
Open
Open
@lholmquist lholmquist mentioned this pull request Oct 1, 2024
Merged
@undeadgrishnackh undeadgrishnackh mentioned this pull request Oct 1, 2024
Open
@hakatashi hakatashi mentioned this pull request Oct 1, 2024
Merged
@nishanthmahasamudram nishanthmahasamudram mentioned this pull request Oct 1, 2024
Merged
@Kingcrypto38 Kingcrypto38 mentioned this pull request Oct 1, 2024
Open
@skanda890 skanda890 mentioned this pull request Oct 1, 2024
Merged
This was referenced Oct 2, 2024
Open
Open
@Aroc902322 Aroc902322 mentioned this pull request Oct 2, 2024
Open
This was referenced Oct 2, 2024
Open
Open
@vutting4221 vutting4221 mentioned this pull request Oct 2, 2024
Open
@scottwad scottwad mentioned this pull request Oct 2, 2024
Open
@adamus1red adamus1red mentioned this pull request Oct 3, 2024
Merged
@AlexanderWiechert AlexanderWiechert mentioned this pull request Oct 31, 2024
Open
@skanda890 skanda890 mentioned this pull request Nov 1, 2024
Merged
@hakatashi hakatashi mentioned this pull request Nov 3, 2024
Merged
This was referenced Nov 4, 2024
Open
Open
@lholmquist lholmquist mentioned this pull request Nov 6, 2024
Merged
@AlexanderWiechert AlexanderWiechert mentioned this pull request Nov 6, 2024
Open
@parseplatformorg parseplatformorg mentioned this pull request Nov 10, 2024
Closed
mergify bot added a commit to reisene/HulajDusza-serwis that referenced this pull request Jan 23, 2025
@mergify
[Snyk] Upgrade body-parser from 1.20.3 to 2.0.1 (#262)
28b48d4 
![snyk-io[bot]](https://badgen.net/badge/icon/snyk-io%5Bbot%5D/green?label=)
[<img width="16" alt="Powered by Pull Request Badge"
src="https://user-images.githubusercontent.com/1393946/111216524-d2bb8e00-85d4-11eb-821b-ed4c00989c02.png">](https://pullrequestbadge.com/?utm_medium=github&utm_source=reisene&utm_campaign=badge_info)<!--
PR-BADGE: PLEASE DO NOT REMOVE THIS COMMENT -->


![snyk-top-banner](https://redirect.github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)


<h3>Snyk has created this PR to upgrade body-parser from 1.20.3 to
2.0.1.</h3>

:information_source: Keep your dependencies up-to-date. This makes it
easier to fix existing vulnerabilities and to more quickly identify and
fix newly disclosed vulnerabilities when they affect your project.

<hr/>

⚠️ **Warning:** This PR contains major version upgrade(s), and may be a
breaking change.

- The recommended version is **4 versions** ahead of your current
version.

- The recommended version was released **4 months ago**.



<details>
<summary><b>Release notes</b></summary>
<br/>
  <details>
    <summary>Package name: <b>body-parser</b></summary>
    <ul>
      <li>
<b>2.0.1</b> - <a
href="https://redirect.github.com/expressjs/body-parser/releases/tag/2.0.1">2024-09-10</a></br><h2>What's
Changed</h2>
<ul>
<li>Fix defaulting to extended url parsing by <a class="user-mention
notranslate" data-hovercard-type="user"
data-hovercard-url="/users/blakeembrey/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/blakeembrey">@ blakeembrey</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2515346637" data-permission-text="Title is private"
data-url="expressjs/body-parser#536"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/536/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/536">#536</a></li>
<li>Release: 2.0.1 by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/UlisesGascon/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/UlisesGascon">@ UlisesGascon</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2515354674" data-permission-text="Title is private"
data-url="expressjs/body-parser#537"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/537/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/537">#537</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/blakeembrey/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/blakeembrey">@ blakeembrey</a> made
their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2515346637"
data-permission-text="Title is private"
data-url="expressjs/body-parser#536"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/536/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/536">#536</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link"
href="https://redirect.github.com/expressjs/body-parser/compare/2.0.0...2.0.1"><tt>2.0.0...2.0.1</tt></a></p>
      </li>
      <li>
<b>2.0.0</b> - <a
href="https://redirect.github.com/expressjs/body-parser/releases/tag/2.0.0">2024-09-10</a></br><h2>What's
Changed</h2>
<h3>Important</h3>
<ul>
<li>add brotli support <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="656076290"
data-permission-text="Title is private"
data-url="expressjs/body-parser#406"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/406/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/406">#406</a></li>
<li><strong>Breaking Change:</strong> Node.js 18 is the minimum
supported version</li>
</ul>
<h3>Details</h3>
<ul>
<li>chore: add support for OSSF scorecard reporting by <a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/inigomarquinez/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/inigomarquinez">@ inigomarquinez</a>
in <a class="issue-link js-issue-link" data-error-text="Failed to load
title" data-id="2279511270" data-permission-text="Title is private"
data-url="expressjs/body-parser#522"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/522/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/522">#522</a></li>
<li>ci: fix errors in ci github action for node 8 and 9 by <a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/inigomarquinez/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/inigomarquinez">@ inigomarquinez</a>
in <a class="issue-link js-issue-link" data-error-text="Failed to load
title" data-id="2279679714" data-permission-text="Title is private"
data-url="expressjs/body-parser#523"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/523/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/523">#523</a></li>
<li>fix: pin to [email protected] by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/wesleytodd/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/wesleytodd">@ wesleytodd</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2417531497" data-permission-text="Title is private"
data-url="expressjs/body-parser#527"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/527/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/527">#527</a></li>
<li>deps: [email protected] by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/melikhov-dev/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/melikhov-dev">@ melikhov-dev</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2243775909" data-permission-text="Title is private"
data-url="expressjs/body-parser#521"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/521/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/521">#521</a></li>
<li>Drop support for less than LTS node versions in v2 by <a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/wesleytodd/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/wesleytodd">@ wesleytodd</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2423856942" data-permission-text="Title is private"
data-url="expressjs/body-parser#528"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/528/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/528">#528</a></li>
<li>Also use the qs module for the simple parser by <a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/papandreou/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/papandreou">@ papandreou</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="562834397" data-permission-text="Title is private"
data-url="expressjs/body-parser#387"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/387/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/387">#387</a></li>
<li><code>raw-body@3</code> by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/wesleytodd/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/wesleytodd">@ wesleytodd</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2431088746" data-permission-text="Title is private"
data-url="expressjs/body-parser#529"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/529/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/529">#529</a></li>
<li>urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
by <a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/papandreou/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/papandreou">@ papandreou</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="346357762" data-permission-text="Title is private"
data-url="expressjs/body-parser#326"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/326/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/326">#326</a></li>
<li>Added support for brotli ('br') content-encoding by <a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/danielgindi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/danielgindi">@ danielgindi</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="656076290" data-permission-text="Title is private"
data-url="expressjs/body-parser#406"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/406/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/406">#406</a></li>
<li>Add OSSF Scorecard badge by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/bjohansebas/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/bjohansebas">@ bjohansebas</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2456555585" data-permission-text="Title is private"
data-url="expressjs/body-parser#531"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/531/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/531">#531</a></li>
<li>Linter by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/UlisesGascon/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/UlisesGascon">@ UlisesGascon</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2515064856" data-permission-text="Title is private"
data-url="expressjs/body-parser#534"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/534/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/534">#534</a></li>
<li>Release: 1.20.3 by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/UlisesGascon/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/UlisesGascon">@ UlisesGascon</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2515075091" data-permission-text="Title is private"
data-url="expressjs/body-parser#535"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/535/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/535">#535</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/inigomarquinez/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/inigomarquinez">@ inigomarquinez</a>
made their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2279511270"
data-permission-text="Title is private"
data-url="expressjs/body-parser#522"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/522/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/522">#522</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/wesleytodd/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/wesleytodd">@ wesleytodd</a> made
their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2417531497"
data-permission-text="Title is private"
data-url="expressjs/body-parser#527"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/527/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/527">#527</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/melikhov-dev/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/melikhov-dev">@ melikhov-dev</a> made
their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2243775909"
data-permission-text="Title is private"
data-url="expressjs/body-parser#521"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/521/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/521">#521</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/papandreou/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/papandreou">@ papandreou</a> made
their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="562834397"
data-permission-text="Title is private"
data-url="expressjs/body-parser#387"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/387/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/387">#387</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/danielgindi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/danielgindi">@ danielgindi</a> made
their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="656076290"
data-permission-text="Title is private"
data-url="expressjs/body-parser#406"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/406/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/406">#406</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/bjohansebas/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/bjohansebas">@ bjohansebas</a> made
their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2456555585"
data-permission-text="Title is private"
data-url="expressjs/body-parser#531"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/531/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/531">#531</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/UlisesGascon/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/UlisesGascon">@ UlisesGascon</a> made
their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2515064856"
data-permission-text="Title is private"
data-url="expressjs/body-parser#534"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/534/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/534">#534</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link"
href="https://redirect.github.com/expressjs/body-parser/compare/1.20.2...2.0.0"><tt>1.20.2...2.0.0</tt></a></p>
      </li>
      <li>
<b>2.0.0-beta.2</b> - <a
href="https://redirect.github.com/expressjs/body-parser/releases/tag/v2.0.0-beta.2">2023-02-23</a></br><p>This
incorporates all changes after 1.19.1 up to 1.20.2.</p>
<ul>
<li>Remove deprecated <code>bodyParser()</code> combination
middleware</li>
<li>deps: [email protected]
<ul>
<li>Add <code>DEBUG_HIDE_DATE</code> environment variable</li>
<li>Change timer to per-namespace instead of global</li>
<li>Change non-TTY date format</li>
<li>Remove <code>DEBUG_FD</code> environment variable support</li>
<li>Support 256 namespace colors</li>
</ul>
</li>
<li>deps: [email protected]
<ul>
<li>Add encoding cp720</li>
<li>Add encoding UTF-32</li>
</ul>
</li>
<li>deps: [email protected]</li>
</ul>
      </li>
      <li>
<b>2.0.0-beta.1</b> - <a
href="https://redirect.github.com/expressjs/body-parser/releases/tag/v2.0.0-beta.1">2021-12-18</a></br><ul>
<li><code>req.body</code> is no longer always initialized to
<code>{}</code>
<ul>
<li>it is left <code>undefined</code> unless a body is parsed</li>
</ul>
</li>
<li><code>urlencoded</code> parser now defaults <code>extended</code> to
<code>false</code></li>
<li>Use <code>on-finished</code> to determine when body read</li>
</ul>
      </li>
      <li>
<b>1.20.3</b> - <a
href="https://redirect.github.com/expressjs/body-parser/releases/tag/1.20.3">2024-09-09</a></br><h2>What's
Changed</h2>
<h3>Important</h3>
<ul>
<li>deps: [email protected]</li>
<li>add <code>depth</code> option to customize the depth level in the
parser</li>
<li><strong>IMPORTANT:</strong> The default <code>depth</code> level for
parsing URL-encoded data is now <code>32</code> (previously was
<code>Infinity</code>). <a
href="https://redirect.github.com/expressjs/body-parser/blob/17529513673e39ba79886a7ce3363320cf1c0c50/README.md#depth">Documentation</a></li>
</ul>
<h3>Other changes</h3>
<ul>
<li>chore: add support for OSSF scorecard reporting by <a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/inigomarquinez/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/inigomarquinez">@ inigomarquinez</a>
in <a class="issue-link js-issue-link" data-error-text="Failed to load
title" data-id="2279511270" data-permission-text="Title is private"
data-url="expressjs/body-parser#522"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/522/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/522">#522</a></li>
<li>ci: fix errors in ci github action for node 8 and 9 by <a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/inigomarquinez/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/inigomarquinez">@ inigomarquinez</a>
in <a class="issue-link js-issue-link" data-error-text="Failed to load
title" data-id="2279679714" data-permission-text="Title is private"
data-url="expressjs/body-parser#523"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/523/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/523">#523</a></li>
<li>fix: pin to [email protected] by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/wesleytodd/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/wesleytodd">@ wesleytodd</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2417531497" data-permission-text="Title is private"
data-url="expressjs/body-parser#527"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/527/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/527">#527</a></li>
<li>deps: [email protected] by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/melikhov-dev/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/melikhov-dev">@ melikhov-dev</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2243775909" data-permission-text="Title is private"
data-url="expressjs/body-parser#521"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/521/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/521">#521</a></li>
<li>Add OSSF Scorecard badge by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/bjohansebas/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/bjohansebas">@ bjohansebas</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2456555585" data-permission-text="Title is private"
data-url="expressjs/body-parser#531"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/531/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/531">#531</a></li>
<li>Linter by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/UlisesGascon/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/UlisesGascon">@ UlisesGascon</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2515064856" data-permission-text="Title is private"
data-url="expressjs/body-parser#534"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/534/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/534">#534</a></li>
<li>Release: 1.20.3 by <a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/UlisesGascon/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/UlisesGascon">@ UlisesGascon</a> in <a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="2515075091" data-permission-text="Title is private"
data-url="expressjs/body-parser#535"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/535/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/535">#535</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/inigomarquinez/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/inigomarquinez">@ inigomarquinez</a>
made their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2279511270"
data-permission-text="Title is private"
data-url="expressjs/body-parser#522"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/522/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/522">#522</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/melikhov-dev/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/melikhov-dev">@ melikhov-dev</a> made
their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2243775909"
data-permission-text="Title is private"
data-url="expressjs/body-parser#521"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/521/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/521">#521</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/bjohansebas/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/bjohansebas">@ bjohansebas</a> made
their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2456555585"
data-permission-text="Title is private"
data-url="expressjs/body-parser#531"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/531/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/531">#531</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/UlisesGascon/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/UlisesGascon">@ UlisesGascon</a> made
their first contribution in <a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2515064856"
data-permission-text="Title is private"
data-url="expressjs/body-parser#534"
data-hovercard-type="pull_request"
data-hovercard-url="/expressjs/body-parser/pull/534/hovercard"
href="https://redirect.github.com/expressjs/body-parser/pull/534">#534</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link"
href="https://redirect.github.com/expressjs/body-parser/compare/1.20.2...1.20.3"><tt>1.20.2...1.20.3</tt></a></p>
      </li>
    </ul>
from <a
href="https://redirect.github.com/expressjs/body-parser/releases">body-parser
GitHub release notes</a>
  </details>
</details>

---

> [!IMPORTANT]
>
> - **Warning:** This PR contains a major version upgrade, and may be a
breaking change.
> - Check the changes in this PR to ensure they won't cause issues with
your project.
> - This PR was automatically created by Snyk using the credentials of a
real user.

---

**Note:** _You are seeing this because you or someone else with access
to this repository has authorized Snyk to open upgrade PRs._

**For more information:** <img
src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJmY2NmMTA2MC1iZmM1LTRjOWItOGFlMS0xZjczODJhYjI4YjEiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImZjY2YxMDYwLWJmYzUtNGM5Yi04YWUxLTFmNzM4MmFiMjhiMSJ9fQ=="
width="0" height="0"/>

> - 🧐 [View latest project
report](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source&#x3D;github-cloud-app&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)
> - 📜 [Customise PR
templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=&utm_content=fix-pr-template)
> - 🛠 [Adjust upgrade PR
settings](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59/settings/integration?utm_source&#x3D;github-cloud-app&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)
> - 🔕 [Ignore this dependency or unsubscribe from future upgrade
PRs](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59/settings/integration?pkg&#x3D;body-parser&amp;utm_source&#x3D;github-cloud-app&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr#auto-dep-upgrades)

[//]: #
'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"body-parser","from":"1.20.3","to":"2.0.1"}],"env":"prod","hasFixes":false,"isBreakingChange":true,"isMajorUpgrade":true,"issuesToFix":[],"prId":"fccf1060-bfc5-4c9b-8ae1-1f7382ab28b1","prPublicId":"fccf1060-bfc5-4c9b-8ae1-1f7382ab28b1","packageManager":"npm","priorityScoreList":[],"projectPublicId":"55e114f8-489e-4f14-b900-20574b041e59","projectUrl":"https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":[],"type":"auto","upgrade":[],"upgradeInfo":{"versionsDiff":4,"publishedDate":"2024-09-10T04:15:36.065Z"},"vulns":[]}'

## Podsumowanie przez Sourcery

Ulepszenia:
- Aktualizacja body-parser do wersji 2.0.1, która obejmuje:
  - Wsparcie dla kodowania Brotli
  - Rezygnację ze wsparcia dla starszych wersji Node.js
  - Domyślne ustawienie "extended" na "false" dla parsera urlencoded
- Zmianę domyślnego poziomu głębokości parsowania danych URL-encoded do
32

<details>
<summary>Original summary in English</summary>

## Summary by Sourcery

Enhancements:
- Upgrade body-parser to version 2.0.1, which includes support for
Brotli encoding, drops support for older Node.js versions, defaults
"extended" to "false" for urlencoded parser, and changes the default
depth level for parsing URL-encoded data to 32.

</details>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@dougwilson dougwilson Awaiting requested review from dougwilson

Assignees

@dougwilson dougwilson

Labels
enhancement pr
Projects
None yet
Milestone
2.0
Development

Successfully merging this pull request may close these issues.
4 participants
@papandreou @wesleytodd @ljharb @dougwilson