lucasbelem / nodejs-goof

Super vulnerable todo list application
Apache License 2.0
0 stars 0 forks source link

[Snyk] Upgrade body-parser from 1.9.0 to 1.20.2 #17

Open lucasbelem opened 6 months ago

lucasbelem commented 6 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade body-parser from 1.9.0 to 1.20.2.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **37 versions** ahead of your current version. - The recommended version was released **a year ago**, on 2023-02-22.
Release notes
Package name: body-parser
  • 1.20.2 - 2023-02-22
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
      • perf: skip value escaping when unnecessary
    • deps: raw-body@2.5.2
  • 1.20.1 - 2022-10-06
    • deps: qs@6.11.0
    • perf: remove unnecessary object clone
  • 1.20.0 - 2022-04-03
    • Fix error message for json parse whitespace in strict
    • Fix internal error when inflated body exceeds limit
    • Prevent loss of async hooks context
    • Prevent hanging when request already read
    • deps: depd@2.0.0
      • Replace internal eval usage with Function constructor
      • Use instance methods on process to check for listeners
    • deps: http-errors@2.0.0
      • deps: depd@2.0.0
      • deps: statuses@2.0.1
    • deps: on-finished@2.4.1
    • deps: qs@6.10.3
    • deps: raw-body@2.5.1
      • deps: http-errors@2.0.0
  • 1.19.2 - 2022-02-16
    • deps: bytes@3.1.2
    • deps: qs@6.9.7
      • Fix handling of __proto__ keys
    • deps: raw-body@2.4.3
      • deps: bytes@3.1.2
  • 1.19.1 - 2021-12-10
    • deps: bytes@3.1.1
    • deps: http-errors@1.8.1
      • deps: inherits@2.0.4
      • deps: toidentifier@1.0.1
      • deps: setprototypeof@1.2.0
    • deps: qs@6.9.6
    • deps: raw-body@2.4.2
      • deps: bytes@3.1.1
      • deps: http-errors@1.8.1
    • deps: safe-buffer@5.2.1
    • deps: type-is@~1.6.18
  • 1.19.0 - 2019-04-26
    • deps: bytes@3.1.0
      • Add petabyte (pb) support
    • deps: http-errors@1.7.2
      • Set constructor name when possible
      • deps: setprototypeof@1.1.1
      • deps: statuses@'>= 1.5.0 < 2'
    • deps: iconv-lite@0.4.24
      • Added encoding MIK
    • deps: qs@6.7.0
      • Fix parsing array brackets after index
    • deps: raw-body@2.4.0
      • deps: bytes@3.1.0
      • deps: http-errors@1.7.2
      • deps: iconv-lite@0.4.24
    • deps: type-is@~1.6.17
      • deps: mime-types@~2.1.24
      • perf: prevent internal throw on invalid type
  • 1.18.3 - 2018-05-14
    • Fix stack trace for strict json parse error
    • deps: depd@~1.1.2
      • perf: remove argument reassignment
    • deps: http-errors@~1.6.3
      • deps: depd@~1.1.2
      • deps: setprototypeof@1.1.0
      • deps: statuses@'>= 1.3.1 < 2'
    • deps: iconv-lite@0.4.23
      • Fix loading encoding with year appended
      • Fix deprecation warnings on Node.js 10+
    • deps: qs@6.5.2
    • deps: raw-body@2.3.3
      • deps: http-errors@1.6.3
      • deps: iconv-lite@0.4.23
    • deps: type-is@~1.6.16
      • deps: mime-types@~2.1.18
  • 1.18.2 - 2017-09-22
    • deps: debug@2.6.9
    • perf: remove argument reassignment
  • 1.18.1 - 2017-09-12
    • deps: content-type@~1.0.4
      • perf: remove argument reassignment
      • perf: skip parameter parsing when no parameters
    • deps: iconv-lite@0.4.19
      • Fix ISO-8859-1 regression
      • Update Windows-1255
    • deps: qs@6.5.1
      • Fix parsing & compacting very deep objects
    • deps: raw-body@2.3.2
      • deps: iconv-lite@0.4.19
  • 1.18.0 - 2017-09-09
  • 1.17.2 - 2017-05-18
  • 1.17.1 - 2017-03-06
  • 1.17.0 - 2017-03-01
  • 1.16.1 - 2017-02-11
  • 1.16.0 - 2017-01-18
  • 1.15.2 - 2016-06-20
  • 1.15.1 - 2016-05-06
  • 1.15.0 - 2016-02-11
  • 1.14.2 - 2015-12-16
  • 1.14.1 - 2015-09-28
  • 1.14.0 - 2015-09-16
  • 1.13.3 - 2015-07-31
  • 1.13.2 - 2015-07-06
  • 1.13.1 - 2015-06-16
  • 1.13.0 - 2015-06-15
  • 1.12.4 - 2015-05-11
  • 1.12.3 - 2015-04-16
  • 1.12.2 - 2015-03-17
  • 1.12.1 - 2015-03-16
  • 1.12.0 - 2015-02-14
  • 1.11.0 - 2015-01-31
  • 1.10.2 - 2015-01-21
  • 1.10.1 - 2015-01-02
  • 1.10.0 - 2014-12-03
  • 1.9.3 - 2014-11-22
  • 1.9.2 - 2014-10-28
  • 1.9.1 - 2014-10-23
  • 1.9.0 - 2014-09-24
from body-parser GitHub release notes
Commit messages
Package name: body-parser Compare

**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/lucasbelem/project/4c226e82-044d-4185-b1d5-3479978e42f6?utm_source=github&utm_medium=referral&page=upgrade-pr) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/lucasbelem/project/4c226e82-044d-4185-b1d5-3479978e42f6/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/lucasbelem/project/4c226e82-044d-4185-b1d5-3479978e42f6/settings/integration?pkg=body-parser&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)