Skip to content

Bump body-parser from 1.20.5 to 1.20.6 in /scripts#2559

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/scripts/body-parser-1.20.6
Jul 24, 2026
Merged

Bump body-parser from 1.20.5 to 1.20.6 in /scripts#2559
github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/scripts/body-parser-1.20.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps body-parser from 1.20.5 to 1.20.6.

Release notes

Sourced from body-parser's releases.

1.20.6

Important: Security

What's Changed

Full Changelog: expressjs/body-parser@1.20.5...1.20.6

Changelog

Sourced from body-parser's changelog.

1.20.6 / 2026-07-09

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
Commits

@dependabot dependabot Bot added the Type: Dependencies Used for pull requests that upgrade dependencies. label Jul 24, 2026
@dependabot dependabot Bot added the Type: Dependencies Used for pull requests that upgrade dependencies. label Jul 24, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) July 24, 2026 09:07
@codecov

codecov Bot commented Jul 24, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (223190d) to head (280a7f3).
⚠️ Report is 149 commits behind head on master.

Additional details and impacted files
@@             Coverage Diff             @@
##              master     #2559   +/-   ##
===========================================
  Coverage     100.00%   100.00%           
  Complexity       573       573           
===========================================
  Files             64        64           
  Lines           1521      1521           
  Branches          89        89           
===========================================
  Hits            1521      1521           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.5 to 1.20.6.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.5...1.20.6)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 1.20.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/scripts/body-parser-1.20.6 branch from 091b58f to 280a7f3 Compare July 24, 2026 09:12
@github-actions
github-actions Bot merged commit f487111 into master Jul 24, 2026
20 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/scripts/body-parser-1.20.6 branch July 24, 2026 09:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Type: Dependencies Used for pull requests that upgrade dependencies.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants