Skip to content

chore(deps): bump body-parser and netlify-cli - #296

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-7e4a4d9d48
Open

chore(deps): bump body-parser and netlify-cli#296
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-7e4a4d9d48

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps body-parser to 2.3.0 and updates ancestor dependencies body-parser and netlify-cli. These dependencies need to be updated together.

Updates body-parser from 2.2.2 to 2.3.0

Release notes

Sourced from body-parser's releases.

v2.3.0

Important: Security

What's Changed

New Contributors

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: use static exports instead of lazy getters to improve ESM compatibility
  • feat: add subpath exports for individual parsers
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
  • deps:
    • content-type@^2.0.0
    • http-errors@^2.0.1
    • iconv-lite^0.7.2
    • qs@^6.15.2
    • raw-body@^3.0.2
    • type-is@^2.1.0
Commits
  • d0f2ace 2.3.0 (#735)
  • 7d03f2f chore: updated deps to latest (#733)
  • 8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
  • 32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
  • ff0f6b9 docs: update outdated reference to MDN docs (#730)
  • 14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
  • 37f36a2 deps: update content-type and type-is (#728)
  • e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
  • e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
  • a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
  • Additional commits viewable in compare view

Updates body-parser from 1.20.5 to 1.20.6

Release notes

Sourced from body-parser's releases.

v2.3.0

Important: Security

What's Changed

New Contributors

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: use static exports instead of lazy getters to improve ESM compatibility
  • feat: add subpath exports for individual parsers
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
  • deps:
    • content-type@^2.0.0
    • http-errors@^2.0.1
    • iconv-lite^0.7.2
    • qs@^6.15.2
    • raw-body@^3.0.2
    • type-is@^2.1.0
Commits
  • d0f2ace 2.3.0 (#735)
  • 7d03f2f chore: updated deps to latest (#733)
  • 8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
  • 32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
  • ff0f6b9 docs: update outdated reference to MDN docs (#730)
  • 14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
  • 37f36a2 deps: update content-type and type-is (#728)
  • e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
  • e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
  • a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
  • Additional commits viewable in compare view

Updates netlify-cli from 18.1.0 to 26.2.0

Release notes

Sourced from netlify-cli's releases.

v26.2.0

26.2.0 (2026-07-06)

Features

Bug Fixes

  • add a stacktrace for monitoring (#8301) (30ba6a1)
  • add commandname to error reporting (#8303) (004df96)
  • deps: replace lodash with native utilities (#8189) (137fbf0)
  • deps: update dependency @​netlify/blobs to ^10.7.9 (#8291) (419a749)
  • deps: update dependency @​netlify/dev to ^4.18.7 (#8292) (1985b3b)
  • deps: update dependency @​netlify/dev-utils to ^4.4.6 (#8293) (392af83)
  • deps: update dependency @​netlify/edge-functions to ^3.0.8 (#8295) (7d00215)
  • deps: update dependency @​netlify/functions to ^5.3.0 (#8296) (42393a4)
  • deps: update dependency @​netlify/images to ^1.3.10 (#8298) (20fb23d)
  • dev: execute dev command with shell operators (&&, ||, etc.) (#8234) (d07599e)
  • silence zip output when creating source zips (#8323) (e6fbebc)

v26.1.0

26.1.0 (2026-05-31)

Features

  • add support for new function config properties (#8278) (826fde7)

Bug Fixes

v26.0.2

26.0.2 (2026-05-15)

Bug Fixes

  • deps: unpin all dependencies (#8171) (47da71e)
  • deps: update dependency @​netlify/blobs to ^10.7.5 (#8245) (54a2334)
  • deps: update dependency @​netlify/dev to ^4.18.3 (#8246) (7141b22)
  • deps: update dependency @​netlify/dev to ^4.18.4 (#8253) (0a70cf4)

... (truncated)

Changelog

Sourced from netlify-cli's changelog.

26.2.0 (2026-07-06)

Features

Bug Fixes

  • add a stacktrace for monitoring (#8301) (30ba6a1)
  • add commandname to error reporting (#8303) (004df96)
  • deps: replace lodash with native utilities (#8189) (137fbf0)
  • deps: update dependency @​netlify/blobs to ^10.7.9 (#8291) (419a749)
  • deps: update dependency @​netlify/dev to ^4.18.7 (#8292) (1985b3b)
  • deps: update dependency @​netlify/dev-utils to ^4.4.6 (#8293) (392af83)
  • deps: update dependency @​netlify/edge-functions to ^3.0.8 (#8295) (7d00215)
  • deps: update dependency @​netlify/functions to ^5.3.0 (#8296) (42393a4)
  • deps: update dependency @​netlify/images to ^1.3.10 (#8298) (20fb23d)
  • dev: execute dev command with shell operators (&&, ||, etc.) (#8234) (d07599e)
  • silence zip output when creating source zips (#8323) (e6fbebc)

26.1.0 (2026-05-31)

Features

  • add support for new function config properties (#8278) (826fde7)

Bug Fixes

26.0.2 (2026-05-15)

Bug Fixes

  • deps: unpin all dependencies (#8171) (47da71e)
  • deps: update dependency @​netlify/blobs to ^10.7.5 (#8245) (54a2334)
  • deps: update dependency @​netlify/dev to ^4.18.3 (#8246) (7141b22)
  • deps: update dependency @​netlify/dev to ^4.18.4 (#8253) (0a70cf4)
  • deps: update dependency @​netlify/functions to ^5.2.1 (#8254) (5d11c29)
  • deps: update dependency uuid to v13.0.1 [security] (#8193) (b267a5e)
  • deps: update netlify packages (#8247) (0875c46)

... (truncated)

Commits
  • 7c10162 chore(main): release 26.2.0 (#8290)
  • 3c41e72 test: fix edge functions watch-ignore path assertions on Windows (#8327)
  • e6fbebc fix: silence zip output when creating source zips (#8323)
  • 137fbf0 fix(deps): replace lodash with native utilities (#8189)
  • d0fb528 chore(deps): update dependency @​fastify/static to v9.1.3 (#8319)
  • 4e919e2 chore(deps): update dependency http-proxy-middleware to v3.0.7 [security] (#8...
  • 5585c33 chore(deps): update actions/create-github-app-token action to v2.2.2 (#8302)
  • 004df96 fix: add commandname to error reporting (#8303)
  • 77982eb chore(deps): update dependency form-data to v4.0.6 [security] (#8308)
  • 35d52f5 chore(deps): combined dependency bumps (#8297, #8242, #8299) (#8304)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [body-parser](https://github.com/expressjs/body-parser) to 2.3.0 and updates ancestor dependencies [body-parser](https://github.com/expressjs/body-parser) and [netlify-cli](https://github.com/netlify/cli). These dependencies need to be updated together.


Updates `body-parser` from 2.2.2 to 2.3.0
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@v2.2.2...v2.3.0)

Updates `body-parser` from 1.20.5 to 1.20.6
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@v2.2.2...v2.3.0)

Updates `netlify-cli` from 18.1.0 to 26.2.0
- [Release notes](https://github.com/netlify/cli/releases)
- [Changelog](https://github.com/netlify/cli/blob/main/CHANGELOG.md)
- [Commits](netlify/cli@v18.1.0...v26.2.0)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: indirect
- dependency-name: body-parser
  dependency-version: 1.20.6
  dependency-type: indirect
- dependency-name: netlify-cli
  dependency-version: 26.2.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
@vercel

vercel Bot commented Jul 21, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
osf-website Ready Ready Preview, Comment Jul 21, 2026 10:21pm

@netlify

netlify Bot commented Jul 21, 2026

Copy link
Copy Markdown

Deploy Preview for osca-festival failed.

Name Link
🔨 Latest commit 440d79b
🔍 Latest deploy log https://app.netlify.com/projects/osca-festival/deploys/6a5ff077cae8fa0008886ed4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants