chore(deps): update dependency got to v16 by renovate[bot] · Pull Request #630 · pmb0/express-sharp

renovate · 2026-09-03T20:58:56Z

ℹ️ Note
This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
got	`^11.5.0` → `^16.0.0`

Release Notes

sindresorhus/got (got)

`v16.0.0`

Compare Source

Breaking changes

Rewrite HTTP/2 support and drop the http2-wrapper dependency (#2464) 1e157c4
- Got now has a built-in HTTP/2 client: ALPN negotiation, a pooled session cache with multiplexing, GOAWAY retirement, request and response trailers, informational (1xx) responses, abort signals, response caching, IPv6 authorities, and h2c through h2session.
- agent.http2 is no longer an agent slot. It is only an opt-out flag now: pass false to skip session pooling. Passing an agent instance throws.
- Response headers no longer contain HTTP/2 pseudo-headers. Use response.statusCode instead of response.headers[':status'].
- A custom agent.https combined with http2: true makes Got use the native HTTP/1.1 path, because the built-in session pool does not support custom HTTPS agents.
- HTTP/2 proxy support is gone. It came from http2-wrapper. It was very buggy anyway.
- If options.request returns a request or response, it controls the transport and the HTTP/2 client is bypassed. Return undefined to fall back to Got's own transport.
Rewrite DNS cache and drop the cacheable-lookup dependency (#2463) bfc400b
- dnsCache: true now uses Got's own cache. The option accepts any object with a lookup function and an optional clear(hostname?) function, so an existing CacheableLookup instance still works if you keep the dependency yourself.
- The built-in cache resolves A and AAAA records separately, so it cannot preserve OS-specific verbatim address ordering from dns.lookup().
A beforeRequest hook, an afterResponse retry, or a pagination step that moves the request to a different origin now strips credentials and drops the body (#2465) dd3b295
- authorization, cookie, cookie2, host, and proxy-authorization are removed, URL credentials are dropped, and an unchanged body is cleared. Set the headers or body explicitly inside the hook if you want them to cross the origin boundary.
- This applies whether the origin changes through url or through prefixUrl.
copyPipedHeaders no longer copies credentials 1d233ba
- authorization, cookie, cookie2, set-cookie, and set-cookie2 are now omitted along with host, the hop-by-hop headers, and anything nominated by Connection / Proxy-Connection. Pass credentials explicitly in headers when the upstream is trusted.
Remove the deprecated searchParameters, followRedirects, and auth option stubs 1d233ba
- They only existed to throw a guidance message. Passing them now throws Unexpected option: ….
Remove the OptionsOfUnknownResponseBody type 1d233ba
- It was a pure alias for StrictOptions.

Improvements

Add support for the QUERY HTTP method (#2466) e3924aa
- Adds got.query() and got.stream.query(). QUERY is safe and idempotent, so it is retried by default and keeps a replayable body across 301 and 302 redirects as well as 307 and 308. It is not stored by the built-in cache, because correct QUERY caching needs cache keys that include the request content.
allowGetBody now also works over HTTP/2 1e157c4
timeout.socket now applies during HTTP/2 TLS negotiation and session setup c6bbb8a
- It was previously folded into the connection setup timeout and reported as a request timeout. It now produces a real socket timeout and no longer counts DNS lookup time.
Two fewer dependencies: cacheable-lookup and http2-wrapperbfc400b1e157c4

Fixes

Retry on connection errors reported by request.end() instead of failing the request (#2470) 67919b2
Retry immediately when the server answers with Retry-After: 0 instead of falling back to the backoff delay (#2471) d35ce87
Preserve the response body when a cookie jar write throws c6bbb8a
- error.response.body is now complete, decompressed, and decoded with the configured encoding, and a decoding failure no longer masks the original error.
Wait for async cookie jar writes on terminal redirect responses, for example with followRedirect: falsec6bbb8a
Only buffer the response body for cookie handling when the response actually sends set-cookiec6bbb8a
Fix got.stream finalizing the response before the response event and before piped server response headers are set c6bbb8a
Fix strictContentLength counting bytes from responses that were not actually decompressed c6bbb8a
Freeze hooks.beforeCache along with the other hook arrays on non-mutable defaults 1d233ba
Keep URL credentials when prefixUrl is changed to a same-origin value, and treat credentials in prefixUrl as explicit dd3b295

Migration guide

HTTP/2

Remove http2-wrapper from your code. Got's HTTP/2 client is built in.

Before:

importhttp2wrapperfrom'http2-wrapper';const{headers}=awaitgot(url,{http2: true,request: http2wrapper.auto,agent: {http2: newhttp2wrapper.Agent()}});console.log(headers[':status']);

After:

const{statusCode}=awaitgot(url,{http2: true});console.log(statusCode);

To opt out of HTTP/2 session pooling for a request, set agent.http2 to false.

If you need an HTTP/2 proxy, keep using http2-wrapper through the request option. Returning a request from request bypasses Got's HTTP/2 client.

`h2c`

The h2session hook example no longer needs request or http2.

Before:

importhttp2from'http2-wrapper';got.extend({hooks: {beforeRequest: [options=>{options.h2session=getSession(options.url);options.http2=true;options.request=http2.request;}]}});

After:

got.extend({hooks: {beforeRequest: [options=>{options.h2session=getSession(options.url);}]}});

`dnsCache`

dnsCache: true keeps working and now uses Got's built-in cache. If you depend on cacheable-lookup specific options, install it yourself and pass the instance:

importCacheableLookupfrom'cacheable-lookup';constdnsCache=newCacheableLookup({maxTtl: 60});awaitgot(url,{dnsCache});

Cross-origin hooks

If a beforeRequest hook, an afterResponse retry, or a pagination step sends the request to a different origin, set the headers and body you want to keep explicitly:

got.extend({hooks: {beforeRequest: [options=>{options.url=newURL('https://other.example.com/path');options.headers.authorization='Bearer …';}]}});

`copyPipedHeaders`

Credentials are no longer forwarded from a piped request. Pass them explicitly when the upstream is trusted:

got.stream(url,{copyPipedHeaders: true,headers: {authorization: request.headers.authorization}});

`v15.1.0`

Compare Source

Add allowAbsoluteUrls option (#2462) 1c88e88

`v15.0.7`

Compare Source

Fix: Preserve request body on cross-origin 307 and 308 redirects (#2460) aee9249

`v15.0.6`

Compare Source

Fix searchParams setter dropping the value when a URL is set (#2454) 5772bf2

`v15.0.5`

Compare Source

Fix: Handle abort signals added by handlers 74e3167

`v15.0.4`

Compare Source

Fix aborting during download progress 11a2202

`v15.0.3`

Compare Source

Fix false ReadError on responses without Content-Length071ea07

`v15.0.2`

Compare Source

Fix stream cookie jar completion race b170125

`v15.0.1`

Compare Source

Fix init types 20633bc

`v15.0.0`

Compare Source

Breaking changes

Require Node.js 22 b933476
Remove promise cancel API a06ac6c
- promise.cancel() is gone. Use the signal option with AbortController instead.
Remove isStream option c241c6c
- Use got.stream() directly.
Use native FormData global 670b228
- Use the Web API FormData global directly (available in Node.js 18+).
responseType: 'buffer' returns Uint8Array instead of Buffer309e36d
- response.rawBody and promise.buffer() now return a Uint8Array. Buffer is a subclass of Uint8Array, so most code will continue to work, but strict type checks will need updating.
strictContentLength defaults to true08e9dff
- Got now throws a ContentLengthMismatchError by default if Content-Length doesn't match the actual body size. Set {strictContentLength: false} to restore the old behavior.
retry.enforceRetryRules defaults to true9bc8dfb
- Custom calculateDelay functions are now only called when a retry is actually allowed by limit, methods, statusCodes, and errorCodes. If your calculateDelay was previously used to override retry eligibility unconditionally, set {retry: {enforceRetryRules: false}}.
Piped header copying is now opt-in 8e392f3
- Got no longer automatically copies headers from a piped stream. Set {copyPipedHeaders: true} to re-enable. Hop-by-hop headers are never copied even when enabled (RFC 9110 §7.6.1).
url removed from public options objects 87de8d6
- The url property is no longer present on the options object passed to hooks. Use response.url or request.requestUrl instead.
300 and 304 responses are no longer auto-followed 5fccaab
- Per RFC 9110, 304 is a conditional-GET hint, not a redirect, and 300 is only a SHOULD for user agents. Got now returns these responses as-is. Handle them manually if needed.
Removed the undocumented named export for Got.
- Got has always been a default export. The named export was there only for buggy build tools during the ESM migration times.

Improvements

Stream decode large text/json bodies incrementally for lower peak memory usage c9a95b1
uploadProgress now emits granular per-chunk events for json and form request bodies 13c889d

Migration guide

Replace `promise.cancel()` with `AbortController`

Before:

constpromise=got(url);promise.cancel();

After:

constcontroller=newAbortController();constpromise=got(url,{signal: controller.signal});controller.abort();

Replace `isStream: true` with `got.stream()`

Before:

got(url,{isStream: true});

After:

got.stream(url);

Replace `form-data` / `form-data-encoder` with native `FormData`

Before:

import{FormData}from'formdata-node';// or: import {FormData} from 'formdata-polyfill/esm.min.js';constform=newFormData();form.set('name','value');awaitgot.post(url,{body: form});

After:

constform=newFormData();form.set('name','value');awaitgot.post(url,{body: form});

Update `Buffer` usage to `Uint8Array`

response.rawBody and promise.buffer() now return Uint8Array instead of Buffer.

Before:

constdata=awaitgot(url).buffer();constcopy=Buffer.from(data);

After:

constdata=awaitgot(url).buffer();constcopy=newUint8Array(data);

If you need Buffer-specific APIs, wrap with Buffer.from(data.buffer, data.byteOffset, data.byteLength).

`strictContentLength` is now on by default

If you send requests where the Content-Length header might not match the actual body size, opt out:

got.extend({strictContentLength: false});

`retry.enforceRetryRules` is now on by default

If your calculateDelay function was overriding retry eligibility (e.g. retrying on methods or status codes outside the defaults), opt out:

got.extend({retry: {enforceRetryRules: false,calculateDelay: ({computedValue})=>{// computedValue is 0 when retry is not allowedif(computedValue===0){return0;}returncomputedValue;},},});

Piped header copying is now opt-in

If you pipe streams into Got and rely on automatic header forwarding (e.g. Content-Type), re-enable it:

got.extend({copyPipedHeaders: true});

300 and 304 responses are no longer followed

If your code depended on Got auto-following 300 Multi-Choice or handling 304 Not Modified as a redirect, you now need to handle them yourself in an afterResponse hook or check response.statusCode manually.

`v14.6.6`

Compare Source

Fix stream auto-end for empty PATCH/DELETE/OPTIONS 4d5168c
- The bug was introduced in b65b0e1, where it incorrectly auto-closed streams for empty PATCH/DELETE/OPTIONS when using streams. This broke the documented use case of piping data to a got stream for these methods.
- Docs:
  got.stream does not auto-end for OPTIONS, DELETE, or PATCH so you can pipe or write a body without getting write after end. Call stream.end() when you are not piping a body.

`v14.6.5`

Compare Source

Fix TypeScript type inference for got.extend() with responseType option f7ab6e9

`v14.6.4`

Compare Source

Fix dnsLookup option type to accept Node.js dns.lookup47c3155

`v14.6.3`

Compare Source

Fix socket reuse timing and DNS timing fb03d8461d5e3b

`v14.6.2`

Compare Source

Fix path segments containing colons being misidentified as absolute URLs 0a16a9c

`v14.6.1`

Compare Source

Fix the TS code not being built in 14.6.0.

`v14.6.0`

Compare Source

Improvements

Add beforeCache hook 1c3a041
Add retryCount to beforeRequest hook context 91cdc48
Improve HTTPError message to include method and URL 6dd7574
Add support for typed arrays as request body ecf5633
Add Node.js diagnostic channel support 3e2a781
Allow custom Error classes in beforeError hook 1c71194
Add zstd (Zstandard) compression support 449833a
Improve validation error messages by including option names f5c54a3
Add strictContentLength option 4206f0e
Add support for https.secureOptions option 7ec1714
Add copyPipedHeaders option to control automatic header copying from piped streams d83dadd
Add stream.isReadonly property to detect read-only streams 030dfbb

Fixes

Fix HTTP/2 timings NaN issue 398c11a
Fix shortcut methods ignoring handler errors f004564
Fix body reassignment in beforeRetry hooks bf84d36
Fix beforeError hook not being called for ERR_UNSUPPORTED_PROTOCOL error fb86418
FIx preserving prefixUrl in hooks 9725fbd
Fix race condition causing retry after promise settles 1e49781
Fix stream validation errors causing unhandled rejections 2527bf6
Fix incorrect content-length when piping decompressed responses 30b3b79
Fix EPIPE errors bypassing retry logic in Promise API 6ae3e7f
Fix silent hang when returning cached response with FormData body from beforeRequest hook e09a9bd
Fix hook type definitions to reflect normalized runtime state 6a544a3
Fix afterResponse hook validation to allow null body values 60a4419
Fix DNS timing being non-zero when connecting to IP addresses 3d66aec
Fix timings.end being undefined when stream is destroyed before completion 4e75679
Fix properly treating different UNIX socket paths as different origins e5659d4

`v14.5.0`

Compare Source

Add retry.enforceRetryRules option to fix statusCodes/limit bypassing 7c0aee6
Add support for serverName HTTPS option cdaab63
Add preserveHooks option for retryWithMergedOptions1abeba4
Support Iterable and AsyncIterable as request body b65b0e1
Fix hang on revalidated cached responses 2ab94fd
Fix handling of FormData getLength errors a2812de
Fix downloadProgress firing for redirect responses 9ec6ff0
Fix TypeScript type definition for retry event's createRetryStream parameter e899c07
Fix validation to accept false as agent value 6961284
Fix HTTP/2 memory leak from timeout listeners with connection reuse d1d4ed2
Fix QuickLRU v7+ compatibility 23d0b6b
Fix it not using HTTP/2 connection reuse by default 724d592
Fix hang with stream requests without body for methods like OPTIONS dc4f1e3

`v14.4.9`

Compare Source

Fix hang with responses containing content-encoding headers but no body cc434bc

`v14.4.8`

Compare Source

Fix infinite loop when retrying with request.options in afterResponse hook dad6a91

`v14.4.7`

Compare Source

Fix: Gracefully handle undefined request (#2404) 06029e0

`v14.4.6`

Compare Source

Fix timeout error firing even though it's cancelled (#2399) 7a92064

`v14.4.5`

Compare Source

Fix a crash with Got accessing a non-existent request (#2391) c079b93

`v14.4.4`

Compare Source

Fix support for AbortSignal#timeout() (#2388) 92b378e

`v14.4.3`

Compare Source

Fix cache with HTTP2 (#2380) f2f8cb2

`v14.4.2`

Compare Source

Fix handling of invalid arguments (#2367) f44ef43

`v14.4.1`

Compare Source

Fix missing dependency dfc54d9

`v14.4.0`

Compare Source

Improve TypeScript types with generic extend (#2353) 15ca4a0

`v14.3.0`

Compare Source

Update dependencies dbab6c3

`v14.2.1`

Compare Source

Fix error handling when UTF-8 decoding fails (#2336) c81a611

`v14.2.0`

Compare Source

Add cause property with the original error to RequestError (#2327) 4cbd01d

`v14.1.0`

Compare Source

Allow typing the body of a RequestError response (#2325) 5e4f6ff

`v14.0.0`

Compare Source

Breaking

Require Node.js 20 (#2313) a004263
- Why not target the oldest active Node.js LTS, which is Node.js 18? I usually strictly follow this convention in my packages. However, this package is the exception because the HTTP part of Node.js is consistently buggy, and I don't have time to work around issues in older Node.js releases. I you need to still support Node.js 18, I suggest staying on Got v13, which is quite stable. Node.js 18 will be out of active LTS in 5 months.

Improvements

Make followRedirect option accept a function (#2306) 7c3f147

`v13.0.0`

Compare Source

As a reminder, Got continues to require ESM. For TypeScript users, this includes having "module": "node16", "moduleResolution": "node16" in your tsconfig.

Breaking

Require Node.js 16 52a1063
Change the enableUnixSockets option to be false by default 852c312
- Most users don't need it.

Improvements

Allow specifying undefined for options (#2258) 1cefe8b

`v12.6.1`

Compare Source

Fix get-stream import statement (#2266) 67d5039

`v12.6.0`

Compare Source

Update dependencies 88c88fb979272e
Loosen URL validation strictness (#2200) 0ca0b7f

`v12.5.3`

Compare Source

Fix abort event listeners not always being cleaned up (#2162) 3cc40b5

`v12.5.2`

Compare Source

Improve TypeScript 4.9 compatibility (#2163) 39f83b6

`v12.5.1`

Compare Source

Fix compatibility with TypeScript and ESM 3b3ea67
Fix request body not being properly cached (#2150) 3e9d3af

`v12.5.0`

Compare Source

Disable method rewriting on 307 and 308 status codes (#2145) e049e94
Upgrade dependencies 8630815f0ac0b34c3762a

`v12.4.1`

Compare Source

Fixes

Fix options.context being not extensible b671480
Don't emit uploadProgress after promise cancelation 693de21

`v12.4.0`

Compare Source

Improvements

Support FormData without known length (#2120) 850773c

Fixes

Don't call beforeError hooks with HTTPError if the throwHttpErrors option is false (#2104) 3927348

`v12.3.1`

Compare Source

Don't freeze signal when freezing Options (#2100) 43b1467

`v12.3.0`

Compare Source

Add .off() method for events (#2092) 88056be

`v12.2.0`

Compare Source

Support AbortController (#2020) 6a6d2a9
Add enableUnixSockets option (#2062) 461b3d4

`v12.1.0`

Compare Source

Improvements

Add response.ok (#2043) 22d58fb
- This is only useful if you have {throwHttpErrors: false}

Fixes

Do not redirect to UNIX sockets (#2047) 861ccd9
- CVE-2022-33987
- Also back ported to v11

`v12.0.4`

Compare Source

Remove stream lock - unreliable since Node 17.3.0 bb8eca9

`v12.0.3`

Compare Source

Allow more types in the json option (#2015) eb045bf

`v12.0.2`

Compare Source

Fix encoding option with {responseType: 'json'} (#1996) 0703318

`v12.0.1`

Compare Source

Fix nock compatibility (#1959) bf39d2c
Fix missing export of Request TypeScript type (#1940) 0f9f2b8

`v12.0.0`

Compare Source

Introducing Got v12.0.0 🎉

Long time no see! The latest Got version (v11.8.2) was released just in February ❄️
We have been working hard on squashing bugs and improving overall experience.

If you find Got useful, you might want to sponsor the Got maintainers.

This package is now pure ESM

Please read this. Also see #1789.

Please don't open issues about [ERR_REQUIRE_ESM] and Must use import to load ES Module errors. This is a problem with your setup, not Got.
Please don't open issues about using Got with Jest. Jest does not fully support ESM.
Pretty much any problem with loading this package is a problem with your bundler, test framework, etc, not Got.
If you use TypeScript, you will want to stay on Got v11 until TypeScript 4.6 is out. Why.
If you use a bundler, make sure it supports ESM and that you have correctly configured it for ESM.
The Got issue tracker is not a support channel for your favorite build/bundler tool.

Required Node.js >=14

While working with streams, we encountered more Node.js bugs that needed workarounds.
In order to keep our code clean, we had to drop Node.js v12 as the code would get more messy.
We strongly recommend that you update Node.js to v14 LTS.

HTTP/2 support

Every Node.js release, the native http2 module gets more stable.
Unfortunately there are still some issues on the Node.js side, so we decided to keep HTTP/2 disabled for now.
We may enable it by default in Got v13. It is still possible to turn it on via the http2 option.

To run HTTP/2 requests, it is required to use Node.js v15.10 or above.

Bug fixes

Woah, we possibly couldn't make a release if we didn't fix some bugs!

Do not throw on custom stack traces (#1491) 49c16ee
Remove automatic content-length on ReadStream (#1510) 472b8ef
Fix promise shortcuts in case of error status code (#1543) ff918fb1107cc6
Invert the methodRewriting option 51d88a0
Fix url not being reused on retry in rare case (#1487) 462bc63
Fix hanging promise on HTTP/2 timeout (#1492) a59fac4
Prevent uncaught ParseErrors on initial successful response (#1527) 77df9c3
Throw an error when retrying with consumed body (#1507) 62305d7
Fix a Node.js 16 bug that hangs Got streams 06a2d3d
Fix default pagination handling for empty Link header (#1768) 1e1e506
Fix incorrect response.complete when using cache 9e15d88
Fix Cannot call end error when request returns a Writable226cc39
Fix Request options not being reused on retry 3c23eea
Fix types being not compatible with CommonJS 3c23eea
Fix got.paginate does not call init hooks (#1574) 3c23eea
Generate a new object when passing options to the native https module (#1567) 3c23eea
Remove stream reuse check (#1803) 9ecc5ee
Fix merging searchParams (#1814) 1018c20732e9bd
Fix unhandled exception when lookup returns invalid IP early (#1737) 2453e5e
Fix relative URLs when paginating 439fb82
Require url to be an instance of URL when paginating (#1818) eda69ff
Fix username and password encoding in URL (#1169 #1317) d65d0ca
Clone raw options 1c4cefc
Fix invalid afterResponse return check cbc8902
Fix https.alpnProtocols not having an effect e1099fb

Improvements

Make the context option mergeable (#1459) 2b8ed1f
Add generic argument to AfterResponseHook TypeScript type (#1589) 6fc04a9
Add read timeout (#1518) e943672(blocked by nodejs/node#35923)
Improve the pagination API (#1644) 2675046
Change the stackAllItems option to be false by default (#1645) 1120370
Throw when afterResponse hook returns an invalid value 4f21eb3
Add retry.backoffLimit option 41c4136
Add noise retry option e830077
Enable more HTTPS options 83575d5fe723a0 (thanks @Giotino)
Define error.codef27e8d3
Set options.url even if some options are invalid 8d6a680
Improve memory usage when merging options 2db5ec5
Support async generators as body 854430f3df52f3
Add missing once types for Stream API 3c23eea
New error type: RetryError which always triggers a new retry when thrown 3c23eea
error.options is now enumerable 3c23eea
defaults.handlers don't need a default handler now 3c23eea
Add a parser for the Link header 3c23eea
General code improvements a5dd9aa

Breaking changes

Improved option normalization

Got exports an Option class that is specifically designed to parse and validate Got options.
It is made of setters and getters that provide fast normalization and more consistent behavior.

When passing an option does not exist, Got will throw an error. In order to retrieve the options before the error, use error.options.

importgotfrom'got';try{awaitgot('https://httpbin.org/anything',{thisOptionDoesNotExist: true});}catch(error){console.error(error);console.error(error.options.url.href);// Unexpected option: thisOptionDoesNotExist// https://httpbin.org/anything}

The init hook now accepts a second argument: self, which points to an Options instance.

In order to define your own options, you have to move them to options.context in an init hook or store them in options.context directly.

The init hooks are ran only when passing an options object explicitly.

- await got('https://example.com'); // this will *not* trigger the init hooks+ await got('https://example.com', {}); // this *will** trigger init hooks

options.merge() replaced got.mergeOptions and Request.normalizeArguments

- got.defaults.options = got.mergeOptions(got.defaults.options, {…});+ got.defaults.options.merge(…);

This fixes issues like #1450

Legacy Url instances are not supported anymore. You need to use WHATWG URL instead.

- await got(string, {port: 8443});+ const url = new URL(string);+ url.port = 8443;+ await got(url);

No implicit timeout declaration.

- await got('https://example.com', {timeout: 5000})+ await got('https://example.com', {timeout: {request: 5000})

No implicit retry declaration.

- await got('https://example.com', {retry: 5})+ await got('https://example.com', {retry: {limit: 5})

dnsLookupIpVersion is now a number (4 or 6) or undefined

- await got('https://example.com', {dnsLookupIpVersion: 'ipv4'})+ await got('https://example.com', {dnsLookupIpVersion: 4})

redirectUrls and requestUrl now give URL instances

- request.requestUrl+ request.requestUrl.origin+ request.requestUrl.href+ request.requestUrl.toString()

- request.redirectUrls[0]+ request.redirectUrls[0].origin+ request.redirectUrls[0].href+ request.redirectUrls[0].toString()

Renamed request.aborted to request.isAborted

- request.aborted+ request.isAborted

Reason: consistency with options.isStream.

Renamed the lookup option to dnsLookup

- await got('https://example.com', {lookup: cacheable.lookup})+ await got('https://example.com', {dnsLookup: cacheable.lookup})

The beforeRetry hook now accepts only two arguments: error and retryCount

await got('https://example.com', {
hooks: {
beforeRetry: [
- (options, error, retryCount) => {- console.log(options, error, retryCount);- }+ (error, retryCount) => {+ console.log(error.options, error, retryCount);+ }
]
}
})

The options argument has been removed, however it's still accessible via error.options. All modifications on error.options will be reflected in the next requests (no behavior change, same as with Got 11).

The beforeRedirect hook's first argument (options) is now a cloned instance of the Request options.

This was done to make retrieving the original options possible: plainResponse.request.options.

await got('http://szmarczak.com', {
hooks: {
beforeRedirect: [
(options, response) => {
- console.log(options === response.request.options); //=> true [invalid! our original options were overriden]+ console.log(options === response.request.options); //=> false [we can access the original options now]
}
]
}
})

The redirect event now takes two arguments in this order: updatedOptions and plainResponse.

- stream.on('redire> ✂ **Note**>> PR body was truncated to here.
</details>
---### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/pmb0/express-sharp).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42MS4zIiwidXBkYXRlZEluVmVyIjoiNDQuNjEuMyIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->

renovate · 2026-09-03T20:58:58Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

 WARN GET https://registry.npmjs.org/@commitlint/cli/-/cli-17.0.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@commitlint/config-conventional/-/config-conventional-17.0.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@heise/eslint-config/-/eslint-config-19.0.13.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@keyv/redis/-/redis-2.1.3.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@semantic-release/changelog/-/changelog-6.0.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@semantic-release/commit-analyzer/-/commit-analyzer-9.0.1.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@semantic-release/git/-/git-10.0.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@semantic-release/npm/-/npm-9.0.1.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@semantic-release/release-notes-generator/-/release-notes-generator-10.0.2.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@types/cache-manager/-/cache-manager-4.0.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@types/cors/-/cors-2.8.12.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@types/debug/-/debug-4.1.7.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@types/etag/-/etag-1.8.1.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@types/express/-/express-4.17.13.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@types/got/-/got-9.6.12.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@types/jest/-/jest-27.0.2.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@commitlint/cli/-/cli-17.0.0.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@commitlint/config-conventional/-/config-conventional-17.0.0.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@heise/eslint-config/-/eslint-config-19.0.13.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@keyv/redis/-/redis-2.1.3.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@semantic-release/changelog/-/changelog-6.0.0.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@semantic-release/commit-analyzer/-/commit-analyzer-9.0.1.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@semantic-release/git/-/git-10.0.0.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@semantic-release/npm/-/npm-9.0.1.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@semantic-release/release-notes-generator/-/release-notes-generator-10.0.2.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@types/cache-manager/-/cache-manager-4.0.0.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@types/cors/-/cors-2.8.12.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@types/debug/-/debug-4.1.7.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@types/etag/-/etag-1.8.1.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@types/express/-/express-4.17.13.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@types/got/-/got-9.6.12.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@types/jest/-/jest-27.0.2.tgz error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
WARN GET https://registry.npmjs.org/@types/keyv/-/keyv-3.1.3.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
ERR_INVALID_THIS Value of "this" must be of type URLSearchParams
WARN GET https://registry.npmjs.org/@types/node/-/node-14.17.27.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@types/sharp/-/sharp-0.30.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/@types/supertest/-/supertest-2.0.11.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/aws-sdk/-/aws-sdk-2.1009.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/eslint-plugin-no-only-tests/-/eslint-plugin-no-only-tests-2.6.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/eslint-plugin-sort-keys-fix/-/eslint-plugin-sort-keys-fix-1.1.2.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/express/-/express-4.17.1.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/got/-/got-11.8.2.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/husky/-/husky-8.0.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/jest/-/jest-27.3.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/lint-staged/-/lint-staged-13.0.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/nodemon/-/nodemon-2.0.13.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/prettier/-/prettier-2.4.1.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
WARN GET https://registry.npmjs.org/pug/-/pug-3.0.2.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.

chore(deps): update dependency got to v16
1a84ba1

Navigation Menu

chore(deps): update dependency got to v16 - #630

chore(deps): update dependency got to v16#630
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/got-16.x

renovateBot commented Sep 3, 2026

Uh oh!

renovateBot commented Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovateBot commented Sep 3, 2026

Release Notes

Breaking changes

Improvements

Fixes

Migration guide

HTTP/2

h2c

dnsCache

Cross-origin hooks

copyPipedHeaders

Breaking changes

Improvements

Migration guide

Replace promise.cancel() with AbortController

Replace isStream: true with got.stream()

Replace form-data / form-data-encoder with native FormData

Update Buffer usage to Uint8Array

strictContentLength is now on by default

retry.enforceRetryRules is now on by default

Piped header copying is now opt-in

300 and 304 responses are no longer followed

Improvements

Fixes

Meta

Breaking

Improvements

Breaking

Improvements

Fixes

Improvements

Fixes

Improvements

Fixes

Introducing Got v12.0.0 🎉

This package is now pure ESM

Required Node.js >=14

HTTP/2 support

Bug fixes

Improvements

Breaking changes

Improved option normalization

Uh oh!

renovateBot commented Sep 3, 2026

⚠️ Artifact update problem

File name: pnpm-lock.yaml

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`h2c`

`dnsCache`

`copyPipedHeaders`

Replace `promise.cancel()` with `AbortController`

Replace `isStream: true` with `got.stream()`

Replace `form-data` / `form-data-encoder` with native `FormData`

Update `Buffer` usage to `Uint8Array`

`strictContentLength` is now on by default

`retry.enforceRetryRules` is now on by default