Skip to content

Bump body-parser from 2.2.2 to 2.3.0 - #43

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/body-parser-2.3.0
Closed

Bump body-parser from 2.2.2 to 2.3.0#43
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/body-parser-2.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps body-parser from 2.2.2 to 2.3.0.

Release notes

Sourced from body-parser's releases.

v2.3.0

Important: Security

What's Changed

New Contributors

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: use static exports instead of lazy getters to improve ESM compatibility
  • feat: add subpath exports for individual parsers
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
  • deps:
    • content-type@^2.0.0
    • http-errors@^2.0.1
    • iconv-lite^0.7.2
    • qs@^6.15.2
    • raw-body@^3.0.2
    • type-is@^2.1.0
Commits
  • d0f2ace 2.3.0 (#735)
  • 7d03f2f chore: updated deps to latest (#733)
  • 8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
  • 32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
  • ff0f6b9 docs: update outdated reference to MDN docs (#730)
  • 14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
  • 37f36a2 deps: update content-type and type-is (#728)
  • e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
  • e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
  • a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
@vercel

vercel Bot commented Jul 21, 2026

Copy link
Copy Markdown

Deployment failed with the following error:

Resource is limited - try again in 24 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/atomicdjts-projects?upgradeToPro=build-rate-limit

Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.2 to 2.3.0.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@v2.2.2...v2.3.0)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/body-parser-2.3.0 branch from d2bc6c2 to 835d81c Compare July 30, 2026 05:02
@vercel

vercel Bot commented Jul 30, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

8 Skipped Deployments
Project Deployment Actions Updated (UTC)
ai-project-portfolio-focusforge Skipped Skipped Jul 30, 2026 5:02am
ai-project-portfolio-layerforge-studio Skipped Skipped Jul 30, 2026 5:02am
ai-project-portfolio-opspilot-ai-operations-toolkit Skipped Skipped Jul 30, 2026 5:02am
ai-project-portfolio-portfolio-hub Skipped Skipped Jul 30, 2026 5:02am
ai-project-portfolio-redactready-local Skipped Skipped Jul 30, 2026 5:02am
ai-project-portfolio-redactready-pro-hri-os Skipped Skipped Jul 30, 2026 5:02am
ai-project-portfolio-scamshield-ai Skipped Skipped Jul 30, 2026 5:02am
ai-project-portfolio-variantvision-pro Skipped Skipped Jul 30, 2026 5:02am

@vercel
vercel Bot temporarily deployed to Preview – ai-project-portfolio-focusforge July 30, 2026 05:02 Inactive
@vercel
vercel Bot temporarily deployed to Preview – ai-project-portfolio-layerforge-studio July 30, 2026 05:02 Inactive
@vercel
vercel Bot temporarily deployed to Preview – ai-project-portfolio-redactready-pro-hri-os July 30, 2026 05:02 Inactive
@vercel
vercel Bot temporarily deployed to Preview – ai-project-portfolio-redactready-local July 30, 2026 05:02 Inactive
@vercel
vercel Bot temporarily deployed to Preview – ai-project-portfolio-scamshield-ai July 30, 2026 05:02 Inactive
@vercel
vercel Bot temporarily deployed to Preview – ai-project-portfolio-opspilot-ai-operations-toolkit July 30, 2026 05:02 Inactive
@vercel
vercel Bot temporarily deployed to Preview – ai-project-portfolio-portfolio-hub July 30, 2026 05:02 Inactive
@vercel
vercel Bot temporarily deployed to Preview – ai-project-portfolio-variantvision-pro July 30, 2026 05:02 Inactive
@atomicdjt

Copy link
Copy Markdown
Owner

Superseded: The root body-parser update is included in merged PR #52. Closing this duplicate Dependabot PR to keep the review queue accurate.

@atomicdjt atomicdjt closed this Jul 30, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/body-parser-2.3.0 branch July 30, 2026 05:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant