Skip to content

chore(deps): bump body-parser from 2.2.2 to 2.3.0 - #2685

Closed
dependabot[bot] wants to merge 1 commit into
testfrom
dependabot/npm_and_yarn/body-parser-2.3.0
Closed

chore(deps): bump body-parser from 2.2.2 to 2.3.0#2685
dependabot[bot] wants to merge 1 commit into
testfrom
dependabot/npm_and_yarn/body-parser-2.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps body-parser from 2.2.2 to 2.3.0.

Release notes

Sourced from body-parser's releases.

v2.3.0

Important: Security

What's Changed

New Contributors

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: use static exports instead of lazy getters to improve ESM compatibility
  • feat: add subpath exports for individual parsers
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
  • deps:
    • content-type@^2.0.0
    • http-errors@^2.0.1
    • iconv-lite^0.7.2
    • qs@^6.15.2
    • raw-body@^3.0.2
    • type-is@^2.1.0
Commits
  • d0f2ace 2.3.0 (#735)
  • 7d03f2f chore: updated deps to latest (#733)
  • 8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
  • 32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
  • ff0f6b9 docs: update outdated reference to MDN docs (#730)
  • 14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
  • 37f36a2 deps: update content-type and type-is (#728)
  • e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
  • e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
  • a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor Bumps the minor version (PR to prod only) labels Jul 21, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 21, 2026 22:27
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file minor Bumps the minor version (PR to prod only) javascript Pull requests that update javascript code labels Jul 21, 2026
@dependabot
chore(deps): bump body-parser from 2.2.2 to 2.3.0
ca1faec 
Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.2 to 2.3.0.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@v2.2.2...v2.3.0)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/body-parser-2.3.0 branch from 8594e2c to ca1faec Compare July 28, 2026 18:34
@dependabot @github

dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor Author

Looks like body-parser is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 29, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/body-parser-2.3.0 branch July 29, 2026 17:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor Bumps the minor version (PR to prod only)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants