opentok-node icon indicating copy to clipboard operation
opentok-node copied to clipboard

Update dependency body-parser

Open mend-for-github-com[bot] opened this issue 3 years ago • 0 comments

This PR contains the following updates:

Package Type Update Change
body-parser dependencies minor ~1.12.0 -> ~1.15.0
body-parser dependencies minor ^1.12.4 -> ^1.18.2

By merging this PR, the issue #271 will be automatically resolved and closed:

Severity CVSS Score CVE
Medium Medium 5.3 CVE-2017-1000048

By merging this PR, the issue #271 will be automatically resolved and closed:

Severity CVSS Score CVE
Medium Medium 5.3 CVE-2017-16137

Release Notes

expressjs/body-parser

v1.15.0

Compare Source

===================

  • deps: http-errors@~1.4.0
    • Add HttpError export, for err instanceof createError.HttpError
    • deps: [email protected]
    • deps: statuses@'>= 1.2.1 < 2'
  • deps: [email protected]
  • deps: type-is@~1.6.11
    • deps: mime-types@~2.1.9

v1.14.2

Compare Source

===================

v1.14.1

Compare Source

===================

  • Fix issue where invalid charset results in 400 when verify used
  • deps: [email protected]
    • Fix CESU-8 decoding in Node.js 4.x
  • deps: raw-body@~2.1.4
  • deps: type-is@~1.6.9
    • deps: mime-types@~2.1.7

v1.14.0

Compare Source

===================

  • Fix JSON strict parse error to match syntax errors
  • Provide static require analysis in urlencoded parser
  • deps: depd@~1.1.0
    • Support web browser loading
  • deps: [email protected]
  • deps: raw-body@~2.1.3
    • Fix sync callback when attaching data listener causes sync read
  • deps: type-is@~1.6.8
    • Fix type error when given invalid type to match against
    • deps: mime-types@~2.1.6

v1.13.3

Compare Source

===================

  • deps: type-is@~1.6.6
    • deps: mime-types@~2.1.4

v1.13.2

Compare Source

===================

  • deps: [email protected]
  • deps: [email protected]
    • Fix dropping parameters like hasOwnProperty
    • Fix user-visible incompatibilities from 3.1.0
    • Fix various parsing edge cases
  • deps: raw-body@~2.1.2
  • deps: type-is@~1.6.4
    • deps: mime-types@~2.1.2
    • perf: enable strict mode
    • perf: remove argument reassignment

v1.13.1

Compare Source

===================

  • deps: [email protected]
    • Downgraded from 3.1.0 because of user-visible incompatibilities

v1.13.0

Compare Source

===================

  • Add statusCode property on Errors, in addition to status
  • Change type default to application/json for JSON parser
  • Change type default to application/x-www-form-urlencoded for urlencoded parser
  • Provide static require analysis
  • Use the http-errors module to generate errors
  • deps: [email protected]
    • Slight optimizations
  • deps: [email protected]
    • The encoding UTF-16 without BOM now defaults to UTF-16LE when detection fails
    • Leading BOM is now removed when decoding
  • deps: on-finished@~2.3.0
    • Add defined behavior for HTTP CONNECT requests
    • Add defined behavior for HTTP Upgrade requests
    • deps: [email protected]
  • deps: [email protected]
    • Fix dropping parameters like hasOwnProperty
    • Fix various parsing edge cases
    • Parsed object now has null prototype
  • deps: raw-body@~2.1.1
  • deps: type-is@~1.6.3
    • deps: mime-types@~2.1.1
    • perf: reduce try block size
    • perf: remove bitwise operations
  • perf: enable strict mode
  • perf: remove argument reassignment
  • perf: remove delete call

v1.12.4

Compare Source

===================

  • deps: debug@~2.2.0
  • deps: [email protected]
    • Fix allowing parameters like constructor
  • deps: on-finished@~2.2.1
  • deps: raw-body@~2.0.1
  • deps: type-is@~1.6.2
    • deps: mime-types@~2.0.11

v1.12.3

Compare Source

===================

v1.12.2

Compare Source

===================

v1.12.1

Compare Source

===================

  • deps: debug@~2.1.3
  • deps: type-is@~1.6.1
    • deps: mime-types@~2.0.10

  • [ ] If you want to rebase/retry this PR, click this checkbox.