deps(v3): bump dependencies

Open bjohansebas opened this issue 7 months ago • 5 comments

Jun 02 '25 18:06 bjohansebas

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	type-is@2.0.1
	@fastify/busboy@1.2.1 ⏵ 2.1.1	⁺¹		⁺¹

View full report

Jun 02 '25 18:06 socket-security[bot]

fastify/busboy@3 requires Node >=20, which we can't do :)

Jun 02 '25 18:06 bjohansebas

I think that our minimum version will be Node@18, so this PR can land in the next major (v4?)

Jun 03 '25 09:06 UlisesGascon

This PR uses fastify/busboy 2, which supports Node >14, so there’s no need to wait for version 4 :)

Jun 03 '25 18:06 bjohansebas

coverage: 100.0%. remained the same when pulling aeec55db1961604fc3da2ea228cbecb970e28d3e on bjohansebas:depedencies into 7dd1e552fd1c58a0333f9e748f6d14b79b4423a5 on expressjs:v3.

Jun 04 '25 01:06 coveralls