Skip to content

chore: bump itty-router from 5.0.22 to 5.0.24 - #1086

Merged
ovflowd merged 2 commits into
mainfrom
dependabot/npm_and_yarn/itty-router-5.0.24
Nov 1, 2026
Merged

ovflowd merged 2 commits into
mainfrom
dependabot/npm_and_yarn/itty-router-5.0.24

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps itty-router from 5.0.22 to 5.0.24.

Release notes

Sourced from itty-router's releases.

Release v5.0.24

See v5.0.24 CHANGELOG entry for notes

Release v5.0.23

See v5.0.23 CHANGELOG entry for notes

Changelog

Sourced from itty-router's changelog.

v5.0.24

  • fixed: greedy param (/a/:b+) would reject /a but accept /a/ (bad)

v5.0.23

  • fixed: cors/corsify should no longer throw immutable headers error (edge case fix)

v5.0.20

  • docs: export default { ...router } as README example

v5.0.17

  • fixed: corsify should clone response before appending headers

v5.0.16

  • maintenance: README

v5.0.15

  • maintenance: types cleanup and publishing test

v5.0.14

  • maintenance: types cleanup and publishing test

v5.0.13

  • fixed: Router/AutoRouter stages were not connected to router-level generics

v5.0.12

  • fixed: ./types was not being properly exported

v5.0.10

  • fixed: response formatters in finally stage could still cross pollute headers in Node

v5.0.9

  • fixed: cors preflight should reflect requested headers as the default (required for credentials)

v5.0.7

  • fixed: withParams could attempt to bind null (collision with node adapter)

v5.0.6

  • fixed: corsify as replacing status codes (now mutates original response)

v5.0.5

  • fixed: corsify now properly ignores WebSocket responses

v5.0.4

  • fixed: (TypeScript) middleware corrupting downstream request types and args

v5.0.2

  • fixed: AutoRouter was missing the router-level generics support of the other 2 routers.
  • fixed: All 3 routers had their 3rd generic argument, ResponseType added per the spec.

v5.0.0

  • BREAKING: router.fetch replaces router.handle (now deprecated)
  • BREAKING: "createCors" has been deprecated in favor of "cors" (new options & requirements)
  • changed: previous Router (smallest) is now IttyRouter
  • added: Router (full backwards compatability with previous Router) has been added, including:
    • "before" stage (array of request handlers)
    • "finally" stage (array of response handlers)
    • "catch" stage (single error handler)
  • added: AutoRouter (batteries-included Router)
  • fixed (TS): Routers types have been modified to allow both rotuer-level generics AND route-level generics in the same instance.
  • docs: see Migration guide at https://itty.dev/itty-router/migrations/v4-v5

For changes prior to v5, see the v4 CHANGELOG

Commits
  • ec4264f released v5.0.24 - fixed greedy param bug
  • dbf8bff Hotfix/greedy params (#272)
  • af492f8 released v5.0.23 - cors should no longer throw immutable headers error in cer...
  • 51a7a27 version bump on itty-packager
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added the auto-merge Ready to automatically merge after being open for 48 hours label Nov 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner November 1, 2026 18:31
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 1, 2026
dependabot Bot and others added 2 commits November 1, 2026 19:58
Bumps [itty-router](https://github.com/kwhitley/itty-router) from 5.0.22 to 5.0.24.
- [Release notes](https://github.com/kwhitley/itty-router/releases)
- [Changelog](https://github.com/kwhitley/itty-router/blob/v5.x/CHANGELOG.md)
- [Commits](kwhitley/itty-router@v5.0.22...v5.0.24)

---
updated-dependencies:
- dependency-name: itty-router
  dependency-version: 5.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
itty-router 5.0.24 stopped greedy params (`:filePath+`) from matching
an empty value, so `/dist`, `/dist/`, `/download/`, `/api/` and
`/metrics/` fell through to the 404 handler. `:filePath+?` makes the
param optional, like the docs route already does. On those paths it
leaves `filePath` undefined, which r2Middleware already maps to ''.

Assisted-by: Claude Opus 5.5 <noreply@anthropic.com>
@ovflowd
ovflowd force-pushed the dependabot/npm_and_yarn/itty-router-5.0.24 branch from b49576e to 0c18148 Compare November 1, 2026 19:09
@ovflowd
ovflowd enabled auto-merge (squash) November 1, 2026 19:09
@ovflowd
ovflowd merged commit 38e33aa into main Nov 1, 2026
8 checks passed
@ovflowd
ovflowd deleted the dependabot/npm_and_yarn/itty-router-5.0.24 branch November 1, 2026 19:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge Ready to automatically merge after being open for 48 hours dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant