Skip to content

chore(deps): bump body-parser from 2.2.2 to 2.3.0#80

Merged
robrigo merged 1 commit into
mainfrom
dependabot/npm_and_yarn/body-parser-2.3.0
Jul 16, 2026
Merged

chore(deps): bump body-parser from 2.2.2 to 2.3.0#80
robrigo merged 1 commit into
mainfrom
dependabot/npm_and_yarn/body-parser-2.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 21, 2026

Copy link
Copy Markdown
Contributor

Bumps body-parser from 2.2.2 to 2.3.0.

Release notes

Sourced from body-parser's releases.

v2.3.0

Important: Security

What's Changed

New Contributors

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: use static exports instead of lazy getters to improve ESM compatibility
  • feat: add subpath exports for individual parsers
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
  • deps:
    • content-type@^2.0.0
    • http-errors@^2.0.1
    • iconv-lite^0.7.2
    • qs@^6.15.2
    • raw-body@^3.0.2
    • type-is@^2.1.0
Commits
  • d0f2ace 2.3.0 (#735)
  • 7d03f2f chore: updated deps to latest (#733)
  • 8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
  • 32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
  • ff0f6b9 docs: update outdated reference to MDN docs (#730)
  • 14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
  • 37f36a2 deps: update content-type and type-is (#728)
  • e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
  • e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
  • a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 21, 2026
@dependabot dependabot Bot changed the title build(deps): bump body-parser from 2.2.2 to 2.3.0 chore(deps): bump body-parser from 2.2.2 to 2.3.0 Jul 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/body-parser-2.3.0 branch from eef70db to 606d0de Compare July 16, 2026 01:03
@robrigo

robrigo commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

3 similar comments
@robrigo

robrigo commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@robrigo

robrigo commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@robrigo

robrigo commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@robrigo

robrigo commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

1 similar comment
@robrigo

robrigo commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.2 to 2.3.0.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@v2.2.2...v2.3.0)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/body-parser-2.3.0 branch from 606d0de to 64b8193 Compare July 16, 2026 15:11
@robrigo
robrigo merged commit 226862a into main Jul 16, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/body-parser-2.3.0 branch July 16, 2026 15:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant