Skip to content

Bump body-parser from 1.20.5 to 1.20.6#1074

Merged
Progi1984 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/body-parser-1.20.6
Jul 22, 2026
Merged

Bump body-parser from 1.20.5 to 1.20.6#1074
Progi1984 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/body-parser-1.20.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps body-parser from 1.20.5 to 1.20.6.

Release notes

Sourced from body-parser's releases.

1.20.6

Important: Security

What's Changed

Full Changelog: expressjs/body-parser@1.20.5...1.20.6

Changelog

Sourced from body-parser's changelog.

1.20.6 / 2026-07-09

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
@github-project-automation github-project-automation Bot moved this to Ready for review in PR Dashboard Jul 21, 2026
@Progi1984

Copy link
Copy Markdown
Member

@dependabot rebase

@Progi1984 Progi1984 added this to the 0.0.12 milestone Jul 21, 2026
Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.5 to 1.20.6.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.5...1.20.6)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 1.20.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@Progi1984
Progi1984 merged commit 1e0036b into main Jul 22, 2026
2 checks passed
@Progi1984
Progi1984 deleted the dependabot/npm_and_yarn/body-parser-1.20.6 branch July 22, 2026 05:35
@github-project-automation github-project-automation Bot moved this from Ready for review to Merged in PR Dashboard Jul 22, 2026
@ps-jarvis ps-jarvis moved this from Merged to Ready for review in PR Dashboard Jul 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: Ready for review

Development

Successfully merging this pull request may close these issues.

2 participants