Skip to content

build(deps): bump elysia from 1.4.29 to 1.4.30 - #300

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/bun/elysia-1.4.30
Sep 2, 2026
Merged

build(deps): bump elysia from 1.4.29 to 1.4.30#300
github-actions[bot] merged 1 commit into
masterfrom
dependabot/bun/elysia-1.4.30

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps elysia from 1.4.29 to 1.4.30.

Release notes

Sourced from elysia's releases.

1.4.30

What's changed

The current development effort will be focused in Elysia 2, see kiana and beta release note.

1.4.x will only publish security updates, no new features.

Chore:

  • update test case for Bun 1.4

Advisory:

  • GHSA-gmm9-qwx3-2m3h
  • GHSA-2p5p-r4r9-f9jm
  • GHSA-3958-wq4x-729c
  • GHSA-46qc-v7pw-4j7j
  • GHSA-mx4m-hmpr-4w39

Full Changelog: elysiajs/elysia@1.4.29...1.4.30

Changelog

Sourced from elysia's changelog.

1.4.30 - 26 Aug 2026

Chore:

  • update test case for Bun 1.4

Advisory:

  • GHSA-gmm9-qwx3-2m3h
  • GHSA-2p5p-r4r9-f9jm
  • GHSA-3958-wq4x-729c
  • GHSA-46qc-v7pw-4j7j
  • GHSA-mx4m-hmpr-4w39
Commits
  • e037eca 🧹 chore: correct spelling mistake in changelog
  • acea3a7 🧹 chore: add SECURITY.md
  • a6b9fc7 🧹 chore: update for bun 1.4
  • b1c325f Merge branch 'main' of https://github.com/elysiajs/elysia
  • b8256cc 🧹 chore: update for bun 1.4
  • 767bad1 Merge commit from fork
  • be31c27 🔧 fix: escape schema default keys and values to prevent code injection
  • 89088df 🧹 chore: remove blank issue
  • 2c8b61d 🧹 chore: 'I have nothing but my burger and I want nothing more' disclosure
  • 7e7dabd 🧹 chore: 'I have nothing but my burger and I want nothing more' disclosure
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 31, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedelysia@​1.4.29 ⏵ 1.4.307610086 +195 -1100

View full report

Bumps [elysia](https://github.com/elysiajs/elysia) from 1.4.29 to 1.4.30.
- [Release notes](https://github.com/elysiajs/elysia/releases)
- [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia@1.4.29...1.4.30)

---
updated-dependencies:
- dependency-name: elysia
  dependency-version: 1.4.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/elysia-1.4.30 branch from 88d9502 to f79f291 Compare September 2, 2026 19:19
@github-actions
github-actions Bot merged commit 9fcff7d into master Sep 2, 2026
7 checks passed
@dependabot
dependabot Bot deleted the dependabot/bun/elysia-1.4.30 branch September 2, 2026 19:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants