René's URL Explorer Experiment

Title: Bump qs, body-parser, express and react-scripts by dependabot[bot] · Pull Request #9 · DavidBuck/ionic-react-rest-example · GitHub

Open Graph Title: Bump qs, body-parser, express and react-scripts by dependabot[bot] · Pull Request #9 · DavidBuck/ionic-react-rest-example

X Title: Bump qs, body-parser, express and react-scripts by dependabot[bot] · Pull Request #9 · DavidBuck/ionic-react-rest-example

Description: Bumps qs to 6.14.1 and updates ancestor dependencies qs, body-parser, express and react-scripts. These dependencies need to be updated together. Updates qs from 6.7.0 to 6.14.1 Changelog Sourced from qs's changelog. 6.14.1 [Fix] ensure arrayLength applies to [] notation as well [Fix] parse: when a custom decoder returns null for a key, ignore that key [Refactor] parse: extract key segment splitting helper [meta] add threat model [actions] add workflow permissions [Tests] stringify: increase coverage [Dev Deps] update eslint, @ljharb/eslint-config, npmignore, es-value-fixtures, for-each, object-inspect 6.14.0 [New] parse: add throwOnParameterLimitExceeded option (#517) [Refactor] parse: use utils.combine more [patch] parse: add explicit throwOnLimitExceeded default [actions] use shared action; re-add finishers [meta] Fix changelog formatting bug [Deps] update side-channel [Dev Deps] update es-value-fixtures, has-bigints, has-proto, has-symbols [Tests] increase coverage 6.13.1 [Fix] stringify: avoid a crash when a filter key is null [Fix] utils.merge: functions should not be stringified into keys [Fix] parse: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset [Fix] stringify: ensure a non-string filter does not crash [Refactor] use __proto__ syntax instead of Object.create for null objects [Refactor] misc cleanup [Tests] utils.merge: add some coverage [Tests] fix a test case [actions] split out node 10-20, and 20+ [Dev Deps] update es-value-fixtures, mock-property, object-inspect, tape 6.13.0 [New] parse: add strictDepth option (#511) [Tests] use npm audit instead of aud 6.12.3 [Fix] parse: properly account for strictNullHandling when allowEmptyArrays [meta] fix changelog indentation 6.12.2 [Fix] parse: parse encoded square brackets (#506) [readme] add CII best practices badge 6.12.1 [Fix] parse: Disable decodeDotInKeys by default to restore previous behavior (#501) [Performance] utils: Optimize performance under large data volumes, reduce memory usage, and speed up processing (#502) [Refactor] utils: use += [Tests] increase coverage 6.12.0 ... (truncated) Commits 3fa11a5 v6.14.1 a626704 [Dev Deps] update npmignore 3086902 [Fix] ensure arrayLength applies to [] notation as well fc7930e [Dev Deps] update eslint, @ljharb/eslint-config 0b06aac [Dev Deps] update @ljharb/eslint-config 64951f6 [Refactor] parse: extract key segment splitting helper e1bd259 [Dev Deps] update @ljharb/eslint-config f4b3d39 [eslint] add eslint 9 optional peer dep 6e94d95 [Dev Deps] update eslint, @ljharb/eslint-config, npmignore 973dc3c [actions] add workflow permissions Additional commits viewable in compare view Updates body-parser from 1.19.0 to 1.20.4 Release notes Sourced from body-parser's releases. 1.20.4 What's Changed Remove redundant depth check by @​blakeembrey in expressjs/body-parser#538 ci: add support for Node.js v23 by @​Phillip9587 in expressjs/body-parser#553 ci: restore CI for 1.x branch by @​bjohansebas in expressjs/body-parser#665 deps: qs@^6.14.0 by @​bjohansebas in expressjs/body-parser#664 deps: use tilde notation and update certain dependencies by @​Phillip9587 in expressjs/body-parser#668 chore: remove SECURITY.md by @​Phillip9587 in expressjs/body-parser#669 ci: add CodeQL (SAST) by @​Phillip9587 in expressjs/body-parser#670 Release: 1.20.4 by @​UlisesGascon in expressjs/body-parser#672 Full Changelog: expressjs/body-parser@1.20.3...1.20.4 1.20.3 What's Changed Important deps: qs@6.13.0 add depth option to customize the depth level in the parser IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation Other changes chore: add support for OSSF scorecard reporting by @​inigomarquinez in expressjs/body-parser#522 ci: fix errors in ci github action for node 8 and 9 by @​inigomarquinez in expressjs/body-parser#523 fix: pin to node@22.4.1 by @​wesleytodd in expressjs/body-parser#527 deps: qs@6.12.3 by @​melikhov-dev in expressjs/body-parser#521 Add OSSF Scorecard badge by @​bjohansebas in expressjs/body-parser#531 Linter by @​UlisesGascon in expressjs/body-parser#534 Release: 1.20.3 by @​UlisesGascon in expressjs/body-parser#535 New Contributors @​inigomarquinez made their first contribution in expressjs/body-parser#522 @​melikhov-dev made their first contribution in expressjs/body-parser#521 @​bjohansebas made their first contribution in expressjs/body-parser#531 @​UlisesGascon made their first contribution in expressjs/body-parser#534 Full Changelog: expressjs/body-parser@1.20.2...1.20.3 1.20.2 Fix strict json error message on Node.js 19+ deps: content-type@~1.0.5 perf: skip value escaping when unnecessary deps: raw-body@2.5.2 1.20.1 deps: qs@6.11.0 perf: remove unnecessary object clone ... (truncated) Changelog Sourced from body-parser's changelog. 1.20.4 / 2025-12-01 deps: qs@~6.14.0 deps: use tilde notation for dependencies deps: http-errors@~2.0.1 deps: raw-body@~2.5.3 1.20.3 / 2024-09-10 deps: qs@6.13.0 add depth option to customize the depth level in the parser IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity) 1.20.2 / 2023-02-21 Fix strict json error message on Node.js 19+ deps: content-type@~1.0.5 perf: skip value escaping when unnecessary deps: raw-body@2.5.2 1.20.1 / 2022-10-06 deps: qs@6.11.0 perf: remove unnecessary object clone 1.20.0 / 2022-04-02 Fix error message for json parse whitespace in strict Fix internal error when inflated body exceeds limit Prevent loss of async hooks context Prevent hanging when request already read deps: depd@2.0.0 Replace internal eval usage with Function constructor Use instance methods on process to check for listeners deps: http-errors@2.0.0 deps: depd@2.0.0 deps: statuses@2.0.1 deps: on-finished@2.4.1 deps: qs@6.10.3 deps: raw-body@2.5.1 deps: http-errors@2.0.0 1.19.2 / 2022-02-15 ... (truncated) Commits 7db202c 1.20.4 (#672) d8f8adb ci: add CodeQL (SAST) (#670) 6d133c1 chore: remove SECURITY.md (#669) fcd1535 deps: use tilde notation and update certain dependencies (#668) ec5fa29 deps: qs@~6.14.0 (#664) ffb95c1 ci: restore CI for 1.x branch (#665) 48a5f07 ci: add support for Node.js v23 (#553) f20f6ad Remove redundant depth check (#538) 1752951 1.20.3 39744cf chore: linter (#534) Additional commits viewable in compare view Maintainer changes This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version. Updates express from 4.17.1 to 4.22.1 Release notes Sourced from express's releases. v4.22.1 What's Changed [!IMPORTANT] The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release. Release: 4.22.1 by @​UlisesGascon in expressjs/express#6934 Full Changelog: expressjs/express@4.22.0...v4.22.1 4.22.0 Important: Security Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6) What's Changed Refactor: improve readability by @​sazk07 in expressjs/express#6190 ci: add support for Node.js@23.0 by @​UlisesGascon in expressjs/express#6080 Method functions with no path should error by @​wesleytodd in expressjs/express#5957 ci: updated github actions ci workflow by @​Phillip9587 in expressjs/express#6323 ci: reorder npm i steps to fix ci for older node versions by @​Phillip9587 in expressjs/express#6336 Backport: ci: add node.js 24 to test matrix by @​Phillip9587 in expressjs/express#6506 chore(4.x): wider range for query test skip by @​jonchurch in expressjs/express#6513 use tilde notation for certain dependencies by @​UlisesGascon in expressjs/express#6905 deps: qs@6.14.0 by @​UlisesGascon in expressjs/express#6909 deps: use tilde notation for qs by @​Phillip9587 in expressjs/express#6919 Release: 4.22.0 by @​UlisesGascon in expressjs/express#6921 Full Changelog: expressjs/express@4.21.2...4.22.0 4.21.2 What's Changed Add funding field (v4) by @​bjohansebas in expressjs/express#6065 deps: path-to-regexp@0.1.11 by @​blakeembrey in expressjs/express#5956 deps: bump path-to-regexp@0.1.12 by @​jonchurch in expressjs/express#6209 Release: 4.21.2 by @​UlisesGascon in expressjs/express#6094 Full Changelog: expressjs/express@4.21.1...4.21.2 4.21.1 What's Changed Backport a fix for CVE-2024-47764 to the 4.x branch by @​joshbuker in expressjs/express#6029 Release: 4.21.1 by @​UlisesGascon in expressjs/express#6031 Full Changelog: expressjs/express@4.21.0...4.21.1 ... (truncated) Changelog Sourced from express's changelog. 4.22.1 / 2025-12-01 Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6) 4.22.0 / 2025-12-01 Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6) deps: use tilde notation for dependencies deps: qs@6.14.0 4.21.2 / 2024-11-06 deps: path-to-regexp@0.1.12 Fix backtracking protection deps: path-to-regexp@0.1.11 Throws an error on invalid path values 4.21.1 / 2024-10-08 Backported a fix for CVE-2024-47764 4.21.0 / 2024-09-11 Deprecate res.location("back") and res.redirect("back") magic string deps: serve-static@1.16.2 includes send@0.19.0 deps: finalhandler@1.3.1 deps: qs@6.13.0 4.20.0 / 2024-09-10 deps: serve-static@0.16.0 Remove link renderization in html while redirecting deps: send@0.19.0 Remove link renderization in html while redirecting deps: body-parser@0.6.0 add depth option to customize the depth level in the parser IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity) Remove link renderization in html while using res.redirect deps: path-to-regexp@0.1.10 Adds support for named matching groups in the routes using a regex Adds backtracking protection to parameters without regexes defined deps: encodeurl@~2.0.0 Removes encoding of \, |, and ^ to align better with URL spec Deprecate passing options.maxAge and options.expires to res.clearCookie ... (truncated) Commits 12fae14 4.22.1 5ddf311 Revert "sec: security patch for CVE-2024-51999" 49744ab 4.22.0 (#6921) 6e97452 sec: security patch for CVE-2024-51999 6a23d34 deps: use tilde notation for qs (#6919) 8c12cdf deps: qs@6.14.0 (#6909) 7fea74f deps: use tilde notation for certain dependencies (#6905) dac7a04 chore: wider range for query test skip (#6513) 997919b ci: add node.js 24 to test matrix (#6506) 36fb59c fix(ci): reorder npm i steps to fix ci for older node versions (#6336) Additional commits viewable in compare view Maintainer changes This version was pushed to npm by jonchurch, a new releaser for express since your current version. Updates react-scripts from 3.4.4 to 5.0.1 Commits 19fa58d Publish 9802941 fix: webpack noise printed only if error or warning (#12245) 2eef1d0 Update templates to use React 18 createRoot (#12220) 221e511 Publish 5614c87 Add support for Tailwind (#11717) 20edab4 fix(webpackDevServer): disable overlay for warnings (#11413) 3afbbc0 Update all dependencies (#11624) f5467d5 feat(eslint-config-react-app): support ESLint 8.x (#11375) c7627ce Update webpack and dev server (#11646) 544befe Update package.json (#11597) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot show ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

Open Graph Description: Bumps qs to 6.14.1 and updates ancestor dependencies qs, body-parser, express and react-scripts. These dependencies need to be updated together. Updates qs from 6.7.0 to 6.14.1 Changelog Sourced f...

X Description: Bumps qs to 6.14.1 and updates ancestor dependencies qs, body-parser, express and react-scripts. These dependencies need to be updated together. Updates qs from 6.7.0 to 6.14.1 Changelog Sourced f...

Opengraph URL: https://github.com/DavidBuck/ionic-react-rest-example/pull/9

X: @github

direct link

Domain: patch-diff.githubusercontent.com

Links:

Viewport: width=device-width