[Snyk] Upgrade body-parser from 1.20.3 to 2.0.1 #262
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![snyk-io[bot]](https://avatars.githubusercontent.com/in/372950?s=60&v=4){kind=small}
Snyk has created this PR to upgrade body-parser from 1.20.3 to 2.0.1. See this package in npm: body-parser See this project in Snyk: https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr
Current Aviator status
This PR was merged manually (without Aviator). Merging manually can negatively impact the performance of the queue. Consider using Aviator next time.
See the real-time status of this PR on the
Aviator webapp.
Use the Aviator Chrome Extension
to see the status of your PR within GitHub.
|
|
Aviator Changeset actions:
|
|
Review changes with |
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
|
Please follow naming conventions! 😿 |
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
🎉 Snyk checks have passed. No issues have been found so far.✅ security/snyk check is complete. No issues have been found. (View Details) |
|
Here's the code health analysis summary for commits Analysis Summary
|
Przewodnik Recenzenta przez SourceryTen pull request aktualizuje zależność body-parser z wersji 1.20.3 do 2.0.1. Jest to aktualizacja głównej wersji, która obejmuje zmiany powodujące niezgodność i może wymagać ręcznych dostosowań. Diagram klas przedstawiający zmiany powodujące niezgodność w body-parserclassDiagram
class BodyParser_v1 {
+req.body: Object
+urlencoded(extended: true)
+depth: Infinity
-parseBody()
}
class BodyParser_v2 {
+req.body: undefined|Object
+urlencoded(extended: false)
+depth: 32
+brotliSupport: true
-parseBody()
}
note for BodyParser_v2 "Zmiany powodujące niezgodność w v2.0.1"
Zmiany na Poziomie Plików
Porady i poleceniaInterakcja z Sourcery
Dostosowywanie Twojego DoświadczeniaUzyskaj dostęp do pulpitu nawigacyjnego, aby:
Uzyskiwanie Pomocy
Original review guide in EnglishReviewer's Guide by SourceryThis pull request upgrades the body-parser dependency from version 1.20.3 to 2.0.1. This is a major version upgrade, which includes breaking changes and may require manual adjustments. Class diagram showing body-parser breaking changesclassDiagram
class BodyParser_v1 {
+req.body: Object
+urlencoded(extended: true)
+depth: Infinity
-parseBody()
}
class BodyParser_v2 {
+req.body: undefined|Object
+urlencoded(extended: false)
+depth: 32
+brotliSupport: true
-parseBody()
}
note for BodyParser_v2 "Breaking changes in v2.0.1"
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
Pominęliśmy przegląd tego pull requesta. Oto dlaczego:
- Wygląda na to, że został utworzony przez bota (cześć, snyk-io[bot]!). Zakładamy, że wie, co robi!
- Wygląda na to, że został utworzony przez bota (znaleziono '[Snyk]' w tytule). Zakładamy, że wie, co robi!
Original comment in English
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot (hey, snyk-io[bot]!). We assume it knows what it's doing!
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
|
Click here to review and test in web IDE: |
Merge ProtectionsYour pull request matches the following merge protections and will not be merged until they are valid. 🟢 Do not merge outdated PRsWonderful, this rule succeeded.Make sure PRs are almost up to date before merging
|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.OpenSSF Scorecard
Scanned Files
|
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade body-parser from 1.20.3 to 2.0.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 4 versions ahead of your current version.
The recommended version was released 4 months ago.
Release notes
Package name: body-parser
-
2.0.1 - 2024-09-10
- Fix defaulting to extended url parsing by @ blakeembrey in #536
- Release: 2.0.1 by @ UlisesGascon in #537
- @ blakeembrey made their first contribution in #536
-
2.0.0 - 2024-09-10
- add brotli support #406
- Breaking Change: Node.js 18 is the minimum supported version
- chore: add support for OSSF scorecard reporting by @ inigomarquinez in #522
- ci: fix errors in ci github action for node 8 and 9 by @ inigomarquinez in #523
- fix: pin to [email protected] by @ wesleytodd in #527
- deps: [email protected] by @ melikhov-dev in #521
- Drop support for less than LTS node versions in v2 by @ wesleytodd in #528
- Also use the qs module for the simple parser by @ papandreou in #387
- urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities by @ papandreou in #326
- Added support for brotli ('br') content-encoding by @ danielgindi in #406
- Add OSSF Scorecard badge by @ bjohansebas in #531
- Linter by @ UlisesGascon in #534
- Release: 1.20.3 by @ UlisesGascon in #535
- @ inigomarquinez made their first contribution in #522
- @ wesleytodd made their first contribution in #527
- @ melikhov-dev made their first contribution in #521
- @ papandreou made their first contribution in #387
- @ danielgindi made their first contribution in #406
- @ bjohansebas made their first contribution in #531
- @ UlisesGascon made their first contribution in #534
-
2.0.0-beta.2 - 2023-02-23
- Remove deprecated
- deps: [email protected]
- Add
- Change timer to per-namespace instead of global
- Change non-TTY date format
- Remove
- Support 256 namespace colors
- deps: [email protected]
- Add encoding cp720
- Add encoding UTF-32
- deps: [email protected]
-
2.0.0-beta.1 - 2021-12-18
- it is left
- Use
-
1.20.3 - 2024-09-09
- deps: [email protected]
- add
- IMPORTANT: The default
- chore: add support for OSSF scorecard reporting by @ inigomarquinez in #522
- ci: fix errors in ci github action for node 8 and 9 by @ inigomarquinez in #523
- fix: pin to [email protected] by @ wesleytodd in #527
- deps: [email protected] by @ melikhov-dev in #521
- Add OSSF Scorecard badge by @ bjohansebas in #531
- Linter by @ UlisesGascon in #534
- Release: 1.20.3 by @ UlisesGascon in #535
- @ inigomarquinez made their first contribution in #522
- @ melikhov-dev made their first contribution in #521
- @ bjohansebas made their first contribution in #531
- @ UlisesGascon made their first contribution in #534
from body-parser GitHub release notesWhat's Changed
New Contributors
Full Changelog: 2.0.0...2.0.1
What's Changed
Important
Details
raw-body@3by @ wesleytodd in #529New Contributors
Full Changelog: 1.20.2...2.0.0
This incorporates all changes after 1.19.1 up to 1.20.2.
bodyParser()combination middlewareDEBUG_HIDE_DATEenvironment variableDEBUG_FDenvironment variable supportreq.bodyis no longer always initialized to{}undefinedunless a body is parsedurlencodedparser now defaultsextendedtofalseon-finishedto determine when body readWhat's Changed
Important
depthoption to customize the depth level in the parserdepthlevel for parsing URL-encoded data is now32(previously wasInfinity). DocumentationOther changes
New Contributors
Full Changelog: 1.20.2...1.20.3
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
Podsumowanie przez Sourcery
Ulepszenia:
Original summary in English
Summary by Sourcery
Enhancements: