Uh oh!
There was an error while loading. Please reload this page.
Bump form-data from 4.0.0 to 4.0.6 - #45
Conversation
Bumps [form-data](https://github.com/form-data/form-data) from 4.0.0 to 4.0.6. - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.0...v4.0.6) --- updated-dependencies: - dependency-name: form-data dependency-version: 4.0.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
🤖 Augment PR SummarySummary: Updates the project’s Changes:
Technical Notes: The upstream release notes include fixes around multipart field/filename escaping and other internal robustness changes; the PR also flags a new npm releaser and install-script adjustments, which are worth a quick sanity check. 🤖 Was this summary useful? React with 👍 or 👎 |
| "express": "^4.16.4", | ||
| "extract-files": "^10.0.0", | ||
| "form-data": "^4.0.0", | ||
| "form-data": "^4.0.6", |
There was a problem hiding this comment.
form-data is a supply-chain sensitive dependency; given the PR notes about a new npm releaser and install-script changes, it’d be good to review the published package contents/scripts (e.g., tarball) before merging.
Severity: medium
🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.
Bumps form-data from 4.0.0 to 4.0.6.
Release notes
Sourced from form-data's releases.
... (truncated)
Changelog
Sourced from form-data's changelog.
... (truncated)
Commits
64190dbv4.0.692ae0eb[Deps] updatehasown,mime-typesf31d21e[Dev Deps] update@ljharb/eslint-config,auto-changelog,tape8dff42c[Fix] escape CR, LF, and"in field names and filenames67b0f65[Dev Deps] updatejs-randomness-predictor68ff7ddv4.0.55822467[Dev Deps] update@ljharb/eslint-config,eslint76d0dee[Fix] set Symbol.toStringTag in the proper place16e0076[Tests] Switch to newer v8 prediction library; enable node 24 testing41996f5v4.0.4Maintainer changes
This version was pushed to npm by ljharb, a new releaser for form-data since your current version.
Install script changes
This version modifies
prepublishscript that runs during installation. Review the package contents before updating.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.