Skip to content

build(deps): bump body-parser from 1.20.5 to 1.20.6 in /accelerators/mirror-lakehouse/server - #609

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/accelerators/mirror-lakehouse/server/body-parser-1.20.6
Open

build(deps): bump body-parser from 1.20.5 to 1.20.6 in /accelerators/mirror-lakehouse/server#609
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/accelerators/mirror-lakehouse/server/body-parser-1.20.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps body-parser from 1.20.5 to 1.20.6.

Release notes

Sourced from body-parser's releases.

1.20.6

Important: Security

What's Changed

Full Changelog: expressjs/body-parser@1.20.5...1.20.6

Changelog

Sourced from body-parser's changelog.

1.20.6 / 2026-07-09

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 23, 2026
Copilot AI review requested due to automatic review settings July 23, 2026 13:13
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 23, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.

Files not reviewed (1)
  • accelerators/mirror-lakehouse/server/package-lock.json: Generated file

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.5 to 1.20.6.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.5...1.20.6)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 1.20.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump body-parser from 1.20.4 to 1.20.6 in /accelerators/mirror-lakehouse/server build(deps): bump body-parser from 1.20.5 to 1.20.6 in /accelerators/mirror-lakehouse/server Jul 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/accelerators/mirror-lakehouse/server/body-parser-1.20.6 branch from 62034af to 7b8a9e4 Compare July 23, 2026 13:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants