Skip to content

chore(deps): bump body-parser from 1.20.4 to 1.20.6 in /docs#2385

Merged
latonz merged 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/body-parser-1.20.6
Jul 23, 2026
Merged

chore(deps): bump body-parser from 1.20.4 to 1.20.6 in /docs#2385
latonz merged 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/body-parser-1.20.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps body-parser from 1.20.4 to 1.20.6.

Release notes

Sourced from body-parser's releases.

1.20.6

Important: Security

What's Changed

Full Changelog: expressjs/body-parser@1.20.5...1.20.6

v1.20.5

What's Changed

The reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (> 100) on qs@6.14.2+. (expressjs/body-parser#716)

New Contributors

Special thanks to triager @​krzysdz for keeping this on our radar and effectively triaging the specific issue!

Full Changelog: expressjs/body-parser@1.20.4...1.20.5

Changelog

Sourced from body-parser's changelog.

1.20.6 / 2026-07-09

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit

1.20.5 / 2026-04-24

  • refactor(json): simplify strict mode error string construction
  • fix: extended urlencoded parsing of arrays with >100 elements (#716)
  • deps: qs@~6.15.1
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/body-parser-1.20.6 branch 7 times, most recently from 9071b13 to 3386aac Compare July 23, 2026 13:35
@dependabot @latonz
chore(deps): bump body-parser from 1.20.4 to 1.20.6 in /docs
99887c2 
Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.4 to 1.20.6.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.4...1.20.6)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 1.20.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@latonz
latonz force-pushed the dependabot/npm_and_yarn/docs/body-parser-1.20.6 branch from 3386aac to 99887c2 Compare July 23, 2026 13:38
@latonz
latonz merged commit 8f6c856 into main Jul 23, 2026
16 checks passed
@latonz
latonz deleted the dependabot/npm_and_yarn/docs/body-parser-1.20.6 branch July 23, 2026 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@latonz