routing-controllers icon indicating copy to clipboard operation
routing-controllers copied to clipboard

Request to Upgrade express and body-parser Dependencies

Open ShashankRahatekar opened this issue 2 months ago • 1 comments

Summary

I would like to request an upgrade of the express and body-parser dependencies in the routing-controllers library to their latest versions.

Current Status

currently routing-controllers uses:

  • express: ~4.21.2
  • body-parser: ~1.20.2

Requested Upgrades

Please consider upgrading to the latest stable versions:

  • express: ~5.1.0 (https://www.npmjs.com/package/express)
  • body-parser: ~2.2.0 (https://www.npmjs.com/package/body-parser)

Important Note About body-parser

It's worth noting that since Express 4.16.0, the functionality of body-parser has been built into Express itself. Consider:

  • Whether body-parser can be removed entirely in favour of Express's built-in parsing
  • This would reduce the dependency footprint and potential security surface

Thank you for maintaining this excellent library!

ShashankRahatekar avatar Oct 10 '25 09:10 ShashankRahatekar

Express 5 is released more that 1 month back

routing-controller define these optional deps

"optionalDependencies": {
    "@koa/multer": "^3.0.2",
    "@koa/router": "^13.1.1",
    "body-parser": "^1.20.2",
    "express": "^4.21.2",
    "express-session": "^1.18.2",
    "koa": "^3.0.1",
    "koa-bodyparser": "^4.4.1",
    "multer": "^2.0.2"
  }

express must be updated to support both 4 and 5 like this for example "express": "^4.21.2 || 5"

BodyParser is internalized since express 4.16, so your current version of express 4.21 was already able to use it

Can this be updated ? it block express 5 adoption in all the modules that use routing-controller

paztis avatar Oct 10 '25 10:10 paztis