#527 build(deps-dev): bump body-parser and express Pull request opened by dependabot[bot] Bumps body-parser and express. These dependencies needed to be updated together. Updates

body-parser

from 1.20.2 to 1.20.3 Release notes Sourced from body-parser's releases.

1.20.3

What's Changed

Important

• deps: qs@6.13.0

• add

depth

option to customize the depth level in the parser

• IMPORTANT: The default

depth

level for parsing URL-encoded data is now

32

(previously was

Infinity

). Documentation

Other changes

• chore: add support for OSSF scorecard reporting by `@​inigomarquinez` in expressjs/body-parser#522

• ci: fix errors in ci github action for node 8 and 9 by `@​inigomarquinez` in expressjs/body-parser#523

• fix: pin to node@22.4.1 by `@​wesleytodd` in expressjs/body-parser#527

• deps: qs@6.12.3 by `@​melikhov-dev` in expressjs/body-parser#521

• Add OSSF Scorecard badge by `@​bjohansebas` in expressjs/body-parser#531

• Linter by `@​UlisesGascon` in expressjs/body-parser#534

• Release: 1.20.3 by `@​UlisesGascon` in expressjs/body-parser#535

New Contributors

• `@​inigomarquinez` made their first contribution in expressjs/body-parser#522

• `@​melikhov-dev` made their first contribution in expressjs/body-parser#521

• `@​bjohansebas` made their first contribution in expressjs/body-parser#531

• `@​UlisesGascon` made their first contribution in expressjs/body-parser#534

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

Changelog Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

• deps: qs@6.13.0

• add

depth

option to customize the depth level in the parser

• IMPORTANT: The default

depth

level for parsing URL-encoded data is now

32

(previously was

Infinity

)

Commits • `1752951` 1.20.3 • `39744cf` chore: linter (#534) • `b2695c4` Merge commit from fork • `ade0f3f` add scorecard to readme (#531) • `99a1bd6` deps: qs@6.12.3 (#521) • `9478591` fix: pin to node@22.4.1 • `83db46a` ci: fix errors in ci github action for node 8 and 9 (#523) • `9d4e212` chore: add support for OSSF scorecard reporting (#522) • See full diff in compare view Maintainer changes This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version. Updates

express

from 4.19.2 to 4.21.0 Release notes Sourced from express's releases.

4.21.0

What's Changed

• Deprecate

"back"

magic string in redirects by `@​blakeembrey` in expressjs/express#5935

• finalhandler@1.3.1 by `@​wesleytodd` in expressjs/express#5954

• fix(deps): serve-static@1.16.2 by `@​wesleytodd` in expressjs/express#5951

• Upgraded dependency qs to 6.13.0 to match qs in body-parser by `@​agadzinski93` in expressjs/express#5946

New Contributors

• `@​agadzinski93` made their first contribution in expressjs/express#5946

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

• IMPORTANT: The default

depth

level for parsing URL-encoded data is now

32

(previously was

Infinity

)

• Remove link renderization in html while using

res.redirect

Other Changes

• 4.19.2 Staging by `@​wesleytodd` in expressjs/express#5561

• remove duplicate location test for data uri by `@​wesleytodd` in expressjs/express#5562

• feat: document beta releases expectations by `@​marco-ippolito` in expressjs/express#5565

• Cut down on duplicated CI runs by `@​jonchurch` in expressjs/express#5564

• Add a Threat Model by `@​UlisesGascon` in expressjs/express#5526

• Assign captain of encodeurl by `@​blakeembrey` in expressjs/express#5579

• Nominate jonchurch as repo captain for

http-errors

,

<http://expressjs.com|expressjs.com>

,

morgan

,

cors

,

body-parser

by `@​jonchurch` in expressjs/express#5587

• docs: update Security.md by `@​inigomarquinez` in expressjs/express#5590

• docs: update triage nomination policy by <https://github.com/UlisesGascon|`@​Ul…

pact-foundation/pact-js-core GitHub Actions: release_dry_run ✅ 29 other checks have passed 29/30 successful checks