chore(deps-dev): bump koa from 2.16.1 to 3.1.1

Open dependabot[bot] opened this issue 4 months ago • 0 comments

Bumps koa from 2.16.1 to 3.1.1.

Release notes

v3.1.1

What's Changed

fix: only original value destroy if the new value is not a stream by @yowainwright in koajs/koa#1914

Full Changelog: https://github.com/koajs/koa/compare/v3.1.0...v3.1.1

v3.1.0

What's Changed

feat: fixes mem leak relating to issue-1834 by @yowainwright in koajs/koa#1893

fix: adds steam clean up by @yowainwright in koajs/koa#1910

Full Changelog: https://github.com/koajs/koa/compare/v3.0.3...v3.1.0

v3.0.3

What's Changed

fix: normalize referer before redirect by @fengmk2 in koajs/koa#1908

Full Changelog: https://github.com/koajs/koa/compare/v3.0.2...v3.0.3

v3.0.2

What's Changed

fix: fixes response.attachment behaviour leads to Content-Type Sniffing by @yowainwright in koajs/koa#1904

chore: use NPM trusted publishing with semver tag triggers by @Copilot in koajs/koa#1907

New Contributors

@Copilot made their first contribution in koajs/koa#1907

Full Changelog: https://github.com/koajs/koa/compare/v3.0.1...v3.0.2

v3.0.1

What's Changed

fix(security): only allow same origin referer on response back https://github.com/koajs/koa/commit/422c551c63d00f24e2bbbdf492f262a5935bb1f0

chore: adds initial doc text refresh; migration guide [CHORE-1870] by @yowainwright in koajs/koa#1877

build(deps-dev): bump formidable from 3.5.2 to 3.5.4 by @dependabot[bot] in koajs/koa#1878

chore: removes done callbacks in tests [CHORE-1870] by @yowainwright in koajs/koa#1875

build(deps-dev): bump supertest from 7.1.0 to 7.1.1 by @dependabot[bot] in koajs/koa#1879

build(deps): bump debug from 4.4.0 to 4.4.1 by @dependabot[bot] in koajs/koa#1880

feat: replace debug module with pure node:util::debuglog by @3imed-jaberi in koajs/koa#1885

feat: replace cache-content-type with mime-types directly by @3imed-jaberi in koajs/koa#1886

build(deps): bump statuses from 2.0.1 to 2.0.2 by @dependabot[bot] in koajs/koa#1888

build(deps-dev): bump supertest from 7.1.1 to 7.1.4 by @dependabot[bot] in koajs/koa#1895

build(deps-dev): bump form-data from 4.0.3 to 4.0.4 by @dependabot[bot] in koajs/koa#1894

Full Changelog: https://github.com/koajs/koa/compare/v3.0.0...v3.0.1

v3.0.0

... (truncated)

Changelog

Sourced from koa's changelog.

[!IMPORTANT] Moving forwards we are using the GitHub releases page at https://github.com/koajs/koa/releases in combination with np for publishing releases and their changelogs.

3.0.0-alpha.3 / 2025-02-11

fixes

Avoid redos on host and protocol getter

3.0.0-alpha.2 / 2024-11-04

breaking changes

Update http-errors to v2.0.0 #1486

ctx.throw now requires a format of ctx.throw(status, error, properties). See: https://www.npmjs.com/package/http-errors

Remove res.redirect('back'), add back() method to ctx #1115

Replace node querystring with URLSearchParams #1828

Remove obsolete createAsyncCtxStorageMiddleware #1817

features

Add support for web WHATWG #1830

updates

Update cookies to ~0.9.1 #1846

Update statuses to ^2.0.1

Update supertest to ^7.0.0 #1841

fixes

Fix exports.defaults in package.json #1630

Fix leaky handles in tests #1838

Fix body null checks #1814

Fix reformatting redirect URLs #1805 #1804

Fix passing ctx in error handler #1758

migrations

Migrate from jest to the native node test runner #1845

3.0.0-alpha.1 / 2023-04-12

fixes

[e98b8d1] - fix: can not get currentContext in error handler (#1758) (Gxkl <[email protected]>)

3.0.0-alpha.0 / 2023-01-02

Breaking Changes

... (truncated)

Commits

2e52fb5 3.1.1
863c211 fix: only original value destroy if the new value is not a stream (#1914)
1c642f4 3.1.0
27df3b6 fix: adds steam clean up (#1910)
49a3207 feat: fixes mem leak relating to issue-1834 (#1893)
ffd497a 3.0.3
769fd75 fix: normalize referer before redirect (#1908)
433b20c 3.0.2
307013b chore: use NPM trusted publishing with semver tag triggers (#1907)
83128eb fix: fixes response.attachment behavior leads to Content-Type Sniffing (#1904)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for koa since your current version.

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Oct 28 '25 02:10 dependabot[bot]