lukeed/sirv
### [`v1.0.14`](https://togithub.com/lukeed/sirv/releases/v1.0.14)
[Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.13...v1.0.14)
#### Chores
- (`sirv`): Bump `@polka/url` to take advantage of [this fix](https://togithub.com/lukeed/polka/releases/tag/v1.0.0-next.17)
### [`v1.0.13`](https://togithub.com/lukeed/sirv/releases/v1.0.13)
[Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.12...v1.0.13)
#### Patches
- (`sirv`) Only use `req.path` if has `req._decoded` flag exists ([#82](https://togithub.com/lukeed/sirv/issues/82)):
*The `req._decoded` check was added & should have always been in there, since this was `sirv`'s way of preventing duplicate `decodeURIComponent` calls. However, this was only true when it received a request from a `polka@next` app, since Polka was previously writing the decoded value to `req.path` – this changed with `polka@v1.0.0-next.16`*
*Now that the latest `polka@next` (and Express) doesn't decode automatically anymore, `req.path` isn't trustworthy on its own. It needs `req._decoded` to be there too in order to trust it.*
*This combo-check is backwards compatible for `polka@next` users who don't upgrade and will unblock Express users for the first time, who have always had a "raw" `req.path` value set.*
Configuration
📅 Schedule: "before 3am on the first day of the month" (UTC).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, click this checkbox.
This PR contains the following updates:
1.0.12->1.0.14Release Notes
lukeed/sirv
### [`v1.0.14`](https://togithub.com/lukeed/sirv/releases/v1.0.14) [Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.13...v1.0.14) #### Chores - (`sirv`): Bump `@polka/url` to take advantage of [this fix](https://togithub.com/lukeed/polka/releases/tag/v1.0.0-next.17) ### [`v1.0.13`](https://togithub.com/lukeed/sirv/releases/v1.0.13) [Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.12...v1.0.13) #### Patches - (`sirv`) Only use `req.path` if has `req._decoded` flag exists ([#82](https://togithub.com/lukeed/sirv/issues/82)): *The `req._decoded` check was added & should have always been in there, since this was `sirv`'s way of preventing duplicate `decodeURIComponent` calls. However, this was only true when it received a request from a `polka@next` app, since Polka was previously writing the decoded value to `req.path` – this changed with `polka@v1.0.0-next.16`* *Now that the latest `polka@next` (and Express) doesn't decode automatically anymore, `req.path` isn't trustworthy on its own. It needs `req._decoded` to be there too in order to trust it.* *This combo-check is backwards compatible for `polka@next` users who don't upgrade and will unblock Express users for the first time, who have always had a "raw" `req.path` value set.*Configuration
📅 Schedule: "before 3am on the first day of the month" (UTC).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.