build(deps): bump body-parser, @nestjs/platform-express and @nestjs/terminus in /src/user by dependabot[bot] · Pull Request #394 · junior/oci-quickstart-cloudnative

dependabot · 2026-07-26T11:09:44Z

Bumps body-parser to 2.3.0 and updates ancestor dependencies body-parser, @nestjs/platform-express and @nestjs/terminus. These dependencies need to be updated together.

Updates body-parser from 1.19.0 to 2.3.0

Release notes

Sourced from body-parser's releases.

v2.3.0

Important: Security

Security fix for CVE-2026-12590 (GHSA-v422-hmwv-36x6)

What's Changed

build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in expressjs/body-parser#681

build(deps): bump actions/checkout from 5.0.0 to 6.0.1 by @dependabot[bot] in expressjs/body-parser#682

build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in expressjs/body-parser#683

build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in expressjs/body-parser#685

build(deps): bump github/codeql-action from 4.31.2 to 4.31.9 by @dependabot[bot] in expressjs/body-parser#684

perf(urlencoded): move empty-body guard to avoid extra function closure by @Phillip9587 in expressjs/body-parser#647

Improve ESM compatibility by @Phillip9587 in expressjs/body-parser#697

docs: add recommendations for configuring payload limits by @bjohansebas in expressjs/body-parser#699

build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 by @dependabot[bot] in expressjs/body-parser#701

build(deps): bump github/codeql-action from 4.31.10 to 4.32.0 by @dependabot[bot] in expressjs/body-parser#702

build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in expressjs/body-parser#700

chore: add explicit type commonjs to package.json by @Phillip9587 in expressjs/body-parser#711

deps: update dependencies to latest versions by @Phillip9587 in expressjs/body-parser#708

build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in expressjs/body-parser#712

build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by @dependabot[bot] in expressjs/body-parser#713

build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in expressjs/body-parser#714

fix: improve limit option validation by @Phillip9587 in expressjs/body-parser#698

build(deps): bump github/codeql-action from 4.32.4 to 4.35.1 by @dependabot[bot] in expressjs/body-parser#719

build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in expressjs/body-parser#718

build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @dependabot[bot] in expressjs/body-parser#717

perf: eliminate conditional check in json strict mode hot path by @Phillip9587 in expressjs/body-parser#651

ci: add node.js 26 to text matrix by @Phillip9587 in expressjs/body-parser#726

build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in expressjs/body-parser#725

build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in expressjs/body-parser#724

build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 by @dependabot[bot] in expressjs/body-parser#723

Upgrade "content-type" by @blakeembrey in expressjs/body-parser#728

refactor: switch to const/let and enable eslint no-var rule by @Phillip9587 in expressjs/body-parser#729

Update outdated reference to MDN docs by @krzysdz in expressjs/body-parser#730

build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 by @dependabot[bot] in expressjs/body-parser#731

build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in expressjs/body-parser#732

chore: updated deps to latest by @Phillip9587 in expressjs/body-parser#733

2.3.0 by @UlisesGascon in expressjs/body-parser#735

New Contributors

@krzysdz made their first contribution in expressjs/body-parser#730

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

v2.2.2

What's Changed

docs: update README links by @efekrskl in expressjs/body-parser#673

docs: release notes for the v1.20.4 release by @Phillip9587 in expressjs/body-parser#674

docs: update URL-encoded parser description to include ISO-8859-1 encoding support by @Phillip9587 in expressjs/body-parser#679

docs: use standard jsdoc tags everywhere by @Phillip9587 in expressjs/body-parser#677

... (truncated)

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

Security fix for GHSA-v422-hmwv-36x6

fix: use static exports instead of lazy getters to improve ESM compatibility

feat: add subpath exports for individual parsers

fix: improve limit option validation (#698)

Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement

null and undefined fall back to the default 100kb limit

deps:

content-type@^2.0.0

http-errors@^2.0.1

iconv-lite^0.7.2

qs@^6.15.2

raw-body@^3.0.2

type-is@^2.1.0

2.2.2 / 2026-01-07

deps: qs@^6.14.1

refactor(json): simplify strict mode error string construction

2.2.1 / 2025-11-24

Security fix for GHSA-wqch-xfxh-vrr4

deps:

type-is@^2.0.1

iconv-lite@^0.7.0

Handle split surrogate pairs when encoding UTF-8

Avoid false positives in encodingExists by using prototype-less objects

raw-body@^3.0.1

debug@^4.4.3

2.2.0 / 2025-03-27

refactor: normalize common options for all parsers

deps:

iconv-lite@^0.6.3

2.1.0 / 2025-02-10

deps:

type-is@^2.0.0

debug@^4.4.0

Removed destroy

refactor: prefix built-in node module imports

... (truncated)

Commits

d0f2ace 2.3.0 (#735)
7d03f2f chore: updated deps to latest (#733)
8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
ff0f6b9 docs: update outdated reference to MDN docs (#730)
14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
37f36a2 deps: update content-type and type-is (#728)
e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.

Updates @nestjs/platform-express from 6.7.1 to 11.1.28

Release notes

Sourced from @nestjs/platform-express's releases.

v11.1.28 (2026-07-08)

Bug fixes

core

#17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@jyx-07)

common

#17257 fix(common): Add missing exception classes to HttpErrorByCode (@Se3do)

websockets

#17188 fix(websockets): correct type guard to check value not key (@Se3do)

Enhancements

core

#17241 feat(core): include auto-converted route in legacy route path warning (@ronielli)

Dependencies

platform-fastify

#17262 chore(deps): bump fastify from 5.8.5 to 5.10.0 (@dependabot[bot])

platform-express

#17164 fix(deps): update dependency multer to v2.2.0 [security] (@renovate[bot])

Committers: 4

Mohammed Said (@Se3do)

Ronielli (@ronielli)

greymoth (@greymoth-jp)

종윤 (@jyx-07)

v11.1.27

What's Changed

fix(core): sse async handlers teardown issue by @kamilmysliwiec in nestjs/nest#17131

fix(platform-fastify): forRoutes middleware ending slash by @kamilmysliwiec in nestjs/nest#17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

fix(core): post sse endpoint empty response #17098 by @kamilmysliwiec in nestjs/nest#17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

fix(microservices): reject pending Redis requests on close by @yudin-s in nestjs/nest#17024

fix(core): register SSE close listener before async setup by @fallintoplace in nestjs/nest#17018

fix(platform-fastify): remove pathname ending slash by @kamilmysliwiec in nestjs/nest#17094

New Contributors

@fallintoplace made their first contribution in nestjs/nest#17018

@DucMinhNe made their first contribution in nestjs/nest#17085

... (truncated)

Commits

dfaa376 chore(release): publish v11.1.28 release
541977a fix(deps): update dependency multer to v2.2.0 [security]
660a124 chore(release): publish v11.1.27 release
aa5c4f1 chore: update readme and package.json
9ff83d5 chore(release): publish v11.1.26 release
02f8041 chore(release): publish v11.1.25 release
d8a0ab8 chore(release): publish v11.1.24 release
2dccece chore: update readmes
b8be8c1 chore(release): publish v11.1.23 release
801c46f chore(release): publish v11.1.22 release
Additional commits viewable in compare view

Updates @nestjs/terminus from 6.5.5 to 11.1.1

Release notes

Sourced from @nestjs/terminus's releases.

Release 11.1.1

11.1.1 (2026-02-18)

Bug Fixes

use dependency injection to provide custom loggers (8d7226b), closes #2694, @flovouin @BrunnerLivio

Release 11.1.0

11.1.0 (2026-02-17)

Bug Fixes

disallow using reserved keyword status for health indicators (303948f), closes #2682

Features

add support for dynamic configuration with Terminus.forRootAsync (489904f), closes #2649

infer health check result (4e59375)

Release 11.0.0

11.0.0 (2025-01-25)

Migration Guide

Features

simplify custom health indicator creation (9f10a9b)

upgrade to nestjs v11 (c2569df), closes #2570

update dependencies

BREAKING CHANGES

Drop support for Node 16 / 18

For users who have implemented a custom health indicator, an enhanced API is now available. However, the existing API will continue to function as-is without requiring any changes.

The new and improved HealthIndicatorService provides a streamlined way to indicate whether a health indicator is up or down.

Please note that the HealthIndicator and HealthCheckError classes have been marked as deprecated and are scheduled for removal in the next major release, version 12.0.0.
@Injectable()
export class DogHealthIndicator {
</tr></table> 

... (truncated)

Changelog

Sourced from @nestjs/terminus's changelog.

Changelog

11.1.0 (2026-02-17)

Bug Fixes

deps: update dependency @grpc/grpc-js to v1.12.6 (7dd0d5f)

deps: update dependency @mikro-orm/nestjs to v6.1.0 (177fc8c)

deps: update dependency @mikro-orm/nestjs to v6.1.1 (8e3b253)

deps: update dependency @nestjs/mongoose to v11.0.1 (0af02b5)

deps: update dependency @nestjs/typeorm to v11 (687a4fe)

deps: update dependency ioredis to v5.4.2 (47125b6)

deps: update dependency mongoose to v8.10.1 (4b8e133)

deps: update dependency mysql2 to v3.12.0 (0970ecd)

deps: update dependency rxjs to v7.8.2 (4cceadb)

deps: update dependency typeorm to v0.3.22 (b0e6662)

deps: update mikro-orm monorepo to v6.4.5 (5ece0f8)

deps: update nest monorepo (eb4cab2)

deps: update nest monorepo (abd9ba8)

deps: update nest monorepo to v11 (207b45d)

deps: update nest monorepo to v11.0.11 (a36f951)

deps: update nest monorepo to v11.0.9 (2865a5b)

deps: update prisma monorepo to v6.3.0 (4c42699)

deps: update prisma monorepo to v6.3.1 (1ed2ff0)

disallow using reserved keyword status for health indicators (303948f), closes #2682

Features

add support for dynamic configuration with Terminus.forRootAsync (489904f), closes #2649

infer health check result (4e59375)

11.0.0 (2025-01-25)

11.0.0-beta.1 (2025-01-25)

Bug Fixes

deps: update dependency @grpc/proto-loader to v0.7.13 (bf08ece)

deps: update dependency @nestjs/typeorm to v10.0.2 (8430d1f)

deps: update dependency mysql2 to v3.9.8 [security] (eae8679)

deps: update dependency reflect-metadata to v0.2.2 (004d971)

Features

update dependencies (969bfd7)

... (truncated)

Commits

a5dc4a5 chore: release 1.11.1
ff8dbcf Merge pull request #2696 from nestjs/next
a5c030d chore: release 11.1.1-beta.1
e45f528 chore: formatting
eb3e234 chore: release 11.1.1-beta.0
8d7226b fix: use dependency injection to provide custom loggers
5a2647e chore(): release v11.1.0
c9386ae Merge pull request #2621 from nestjs/renovate/mikro-orm-monorepo
c6862f4 Merge pull request #2678 from nestjs/next
f2a33b4 chore(deps): update mikro-orm monorepo to v6.6.7
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

…erminus Bumps [body-parser](https://github.com/expressjs/body-parser) to 2.3.0 and updates ancestor dependencies [body-parser](https://github.com/expressjs/body-parser), [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) and [@nestjs/terminus](https://github.com/nestjs/terminus). These dependencies need to be updated together. Updates `body-parser` from 1.19.0 to 2.3.0 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.19.0...v2.3.0) Updates `@nestjs/platform-express` from 6.7.1 to 11.1.28 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/platform-express) Updates `@nestjs/terminus` from 6.5.5 to 11.1.1 - [Release notes](https://github.com/nestjs/terminus/releases) - [Changelog](https://github.com/nestjs/terminus/blob/master/CHANGELOG.md) - [Commits](nestjs/terminus@6.5.5...11.1.1) --- updated-dependencies: - dependency-name: body-parser dependency-version: 2.3.0 dependency-type: indirect - dependency-name: "@nestjs/platform-express" dependency-version: 11.1.28 dependency-type: direct:production - dependency-name: "@nestjs/terminus" dependency-version: 11.1.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 26, 2026

dependabot Bot requested a review from junior as a code owner July 26, 2026 11:09

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 26, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump body-parser, @nestjs/platform-express and @nestjs/terminus in /src/user - #394

build(deps): bump body-parser, @nestjs/platform-express and @nestjs/terminus in /src/user#394
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/src/user/multi-25ae00f01b

dependabot Bot commented on behalf of github Jul 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 26, 2026

v2.3.0

Important: Security

What's Changed

New Contributors

v2.2.2

What's Changed

2.3.0 / 2026-06-15

2.2.2 / 2026-01-07

2.2.1 / 2025-11-24

2.2.0 / 2025-03-27

2.1.0 / 2025-02-10

v11.1.28 (2026-07-08)

Bug fixes

Enhancements

Dependencies

Committers: 4

v11.1.27

What's Changed

v11.1.26

What's Changed

v11.1.25

What's Changed

New Contributors

Release 11.1.1

11.1.1 (2026-02-18)

Bug Fixes

Release 11.1.0

11.1.0 (2026-02-17)

Bug Fixes

Features

Release 11.0.0

11.0.0 (2025-01-25)

Features

BREAKING CHANGES

Changelog

11.1.0 (2026-02-17)

Bug Fixes

Features

11.0.0 (2025-01-25)

11.0.0-beta.1 (2025-01-25)

Bug Fixes

Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants