Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 9, 2025

Bumps body-parser from 1.20.3 to 2.0.0.

Release notes

Sourced from body-parser's releases.

2.0.0

What's Changed

Important

  • add brotli support #406
  • Breaking Change: Node.js 18 is the minimum supported version

Details

New Contributors

Full Changelog: expressjs/body-parser@1.20.2...2.0.0

2.0.0-beta.2

This incorporates all changes after 1.19.1 up to 1.20.2.

  • Remove deprecated bodyParser() combination middleware
  • deps: [email protected]
    • Add DEBUG_HIDE_DATE environment variable
    • Change timer to per-namespace instead of global
    • Change non-TTY date format
    • Remove DEBUG_FD environment variable support
    • Support 256 namespace colors
  • deps: [email protected]
    • Add encoding cp720
    • Add encoding UTF-32
  • deps: [email protected]

2.0.0-beta.1

  • req.body is no longer always initialized to {}

... (truncated)

Changelog

Sourced from body-parser's changelog.

2.0.0 / 2024-09-10

Breaking Changes

  • Node.js 18 is the minimum supported version
  • req.body is no longer always initialized to {}
    • it is left undefined unless a body is parsed
  • Remove deprecated bodyParser() combination middleware
  • urlencoded parser now defaults extended to false as released, this is not the case, fixed in 2.0.1
  • urlencoded simple parser now uses qs module instead of querystring module

Features

  • Add brotli support #406
  • urlencoded: Add option to customize the depth with a default value of 32
  • urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
  • Use on-finished to determine when body read

Dependencies

2.0.0-beta.2 / 2023-02-23

This incorporates all changes after 1.19.1 up to 1.20.2.

  • Remove deprecated bodyParser() combination middleware
  • deps: [email protected]
    • Add DEBUG_HIDE_DATE environment variable
    • Change timer to per-namespace instead of global
    • Change non-TTY date format
    • Remove DEBUG_FD environment variable support
    • Support 256 namespace colors
  • deps: [email protected]
    • Add encoding cp720
    • Add encoding UTF-32
  • deps: [email protected]

2.0.0-beta.1 / 2021-12-17

  • Drop support for Node.js 0.8
  • req.body is no longer always initialized to {}
    • it is left undefined unless a body is parsed
  • urlencoded parser now defaults extended to false
  • Use on-finished to determine when body read
Commits
  • 9e06a79 2.0.0
  • 9232c77 Merge branch 'master' into 2.x
  • afd0f39 feat: add option to customize the depth with a default value of 32
  • 07ce14d Added support for brotli ('br') content-encoding (#406)
  • 6cea6bd urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities (#326)
  • 35b50b5 fix(deps): raw-body@^3.0.0 (#529)
  • 7eb00cd Also use the qs module for the simple parser (#387)
  • ddf9b75 feat!: remove node less than 18 from ci
  • fccaf48 2.0.0-beta.2
  • b53363c docs: add missing history entry
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.3 to 2.0.0.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.3...2.0.0)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 2.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants