Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: koajs/koa
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v3.0.0
Choose a base ref
...
head repository: koajs/koa
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v3.0.1
Choose a head ref
  • 15 commits
  • 22 files changed
  • 6 contributors

Commits on Apr 28, 2025

  1. package: remove experimental

    @jonathanong
    jonathanong committed Apr 28, 2025
    Configuration menu
    Copy the full SHA
    e63b22d View commit details
    Browse the repository at this point in the history

  2. docs++

    @jonathanong
    jonathanong committed Apr 28, 2025
    Configuration menu
    Copy the full SHA
    44b568f View commit details
    Browse the repository at this point in the history

  3. feat: add custom asyncLocalStorage support

    @jonathanong
    jonathanong committed Apr 28, 2025
    Configuration menu
    Copy the full SHA
    f7b9a18 View commit details
    Browse the repository at this point in the history

  4. chore: adds initial doc text refresh; migration guide [CHORE-1870] (#… 

    …1877)

## Checklist

Adds initial migration guide from v2 to v3. 

- [x] I have ensured my pull request is not behind the main or master
branch of the original repository.
- [x] I have rebased all commits where necessary so that reviewing this
pull request can be done without having to merge it first.
- [x] I have written a commit message that passes commitlint linting.
- [x] I have ensured that my code changes pass linting tests.
- [x] I have ensured that my code changes pass unit tests.
- [x] I have described my pull request and the reasons for code changes
along with context if necessary.

---

@jonathanong should I try to make a reasonable codemod for this?
    @yowainwright
    yowainwright authored Apr 28, 2025
    Configuration menu
    Copy the full SHA
    9746a8f View commit details
    Browse the repository at this point in the history

Commits on Apr 29, 2025

  1. build(deps-dev): bump formidable from 3.5.2 to 3.5.4 (#1878) 

    Bumps [formidable](https://github.com/node-formidable/formidable) from
3.5.2 to 3.5.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/node-formidable/formidable/releases">formidable's
releases</a>.</em></p>
<blockquote>
<h2>v3.5.3</h2>
<h2>What's Changed</h2>
<ul>
<li>
<p>Fix existing test failure by <a
href="https://github.com/ryhmrt"><code>@​ryhmrt</code></a> in <a
href="https://redirect.github.com/node-formidable/formidable/pull/990">node-formidable/formidable#990</a></p>
</li>
<li>
<p>update Ryan Dahl x account link by <a
href="https://github.com/moetezch"><code>@​moetezch</code></a> in <a
href="https://redirect.github.com/node-formidable/formidable/pull/989">node-formidable/formidable#989</a></p>
</li>
<li>
<p>update failing tests</p>
</li>
<li>
<p>update CI/CD workflows and actions;</p>
</li>
<li>
<p>update CodeQL github action for security analysis</p>
</li>
<li>
<p>update readme, links and badges</p>
</li>
<li>
<p>update to use cuid2 (battle-tested <code>@paralleldrive/cuid2</code>
package) for better random names - should not be breaking anything since
it's still 25 characters long, but a lot safer and faster.</p>
</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ryhmrt"><code>@​ryhmrt</code></a> made
their first contribution in <a
href="https://redirect.github.com/node-formidable/formidable/pull/990">node-formidable/formidable#990</a></li>
<li><a href="https://github.com/moetezch"><code>@​moetezch</code></a>
made their first contribution in <a
href="https://redirect.github.com/node-formidable/formidable/pull/989">node-formidable/formidable#989</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/node-formidable/formidable/compare/v3.5.2...v3.5.3">https://github.com/node-formidable/formidable/compare/v3.5.2...v3.5.3</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/node-formidable/formidable/blob/master/CHANGELOG.md">formidable's
changelog</a>.</em></p>
<blockquote>
<h3>3.5.4</h3>
<ul>
<li>fix the <code>os.machine</code> breaking some dependents, fix <a
href="https://redirect.github.com/node-formidable/formidable/issues/994">#994</a></li>
<li>add Node 16, 18, 20, 22 to CI/CD</li>
</ul>
<h3>3.5.3</h3>
<ul>
<li>security report by ZAST.AI help for some vulnerabilities addressing
(primarily the random names generation)</li>
<li>update failing tests</li>
<li>update CI/CD workflows and actions;</li>
<li>update CodeQL github action for security analysis</li>
<li>update readme, links and badges</li>
<li>update to use cuid2 (battle-tested <code>@paralleldrive/cuid2</code>
package) for better random names - should not be breaking anything since
it's still 25 characters long, but a lot safer and faster.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/node-formidable/formidable/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=formidable&package-manager=npm_and_yarn&previous-version=3.5.2&new-version=3.5.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/koajs/koa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 29, 2025
    Configuration menu
    Copy the full SHA
    61bf494 View commit details
    Browse the repository at this point in the history

Commits on May 8, 2025

  1. chore: removes done callbacks in tests [CHORE-1870] (#1875) 

    ## Checklist

Chore: removes done callback; prefer async

- [x] I have ensured my pull request is not behind the main or master
branch of the original repository.
- [x] I have rebased all commits where necessary so that reviewing this
pull request can be done without having to merge it first.
- [x] I have written a commit message that passes commitlint linting.
- [x] I have ensured that my code changes pass linting tests.
- [x] I have ensured that my code changes pass unit tests.
- [x] I have described my pull request and the reasons for code changes
along with context if necessary.

---------

Co-authored-by: jongleberry <jonathanrichardong@gmail.com>
Co-authored-by: Jeff Wainwright <jeffry@tuta.com>
    @yowainwright @jonathanong
    3 people authored May 8, 2025
    Configuration menu
    Copy the full SHA
    9057541 View commit details
    Browse the repository at this point in the history

Commits on May 24, 2025

  1. build(deps-dev): bump supertest from 7.1.0 to 7.1.1 (#1879) 

    Bumps [supertest](https://github.com/ladjs/supertest) from 7.1.0 to
7.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ladjs/supertest/releases">supertest's
releases</a>.</em></p>
<blockquote>
<h2>v7.1.1</h2>
<ul>
<li>Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/858">#858</a>
from ByteOPCode/master f553845</li>
<li>feat: update superagent version  d37d197</li>
</ul>
<p><a
href="https://github.com/ladjs/supertest/compare/v7.1.0...v7.1.1">https://github.com/ladjs/supertest/compare/v7.1.0...v7.1.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ladjs/supertest/commit/200031e21905b25591ece2111ab2eb56cbf48fa2"><code>200031e</code></a>
7.1.1</li>
<li><a
href="https://github.com/ladjs/supertest/commit/f55384519f758e7482b5bece0eaf132ede6afc69"><code>f553845</code></a>
Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/858">#858</a>
from ByteOPCode/master</li>
<li><a
href="https://github.com/ladjs/supertest/commit/d37d197bd7e8306973a851ddaddc27d519c906bc"><code>d37d197</code></a>
feat: update superagent version</li>
<li>See full diff in <a
href="https://github.com/ladjs/supertest/compare/v7.1.0...v7.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=supertest&package-manager=npm_and_yarn&previous-version=7.1.0&new-version=7.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored May 24, 2025
    Configuration menu
    Copy the full SHA
    dec1ffc View commit details
    Browse the repository at this point in the history

  2. build(deps): bump debug from 4.4.0 to 4.4.1 (#1880) 

    Bumps [debug](https://github.com/debug-js/debug) from 4.4.0 to 4.4.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/debug-js/debug/releases">debug's
releases</a>.</em></p>
<blockquote>
<h2>4.4.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(Issue-996): replace whitespaces in namespaces string with commas
globally by <a
href="https://github.com/pdahal-cx"><code>@​pdahal-cx</code></a> in <a
href="https://redirect.github.com/debug-js/debug/pull/997">debug-js/debug#997</a></li>
<li>fixes <a
href="https://redirect.github.com/debug-js/debug/issues/987">#987</a>
fallback to localStorage.DEBUG if debug is not defined by <a
href="https://github.com/lzilioli"><code>@​lzilioli</code></a> in <a
href="https://redirect.github.com/debug-js/debug/pull/988">debug-js/debug#988</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/pdahal-cx"><code>@​pdahal-cx</code></a>
made their first contribution in <a
href="https://redirect.github.com/debug-js/debug/pull/997">debug-js/debug#997</a></li>
<li><a href="https://github.com/lzilioli"><code>@​lzilioli</code></a>
made their first contribution in <a
href="https://redirect.github.com/debug-js/debug/pull/988">debug-js/debug#988</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/debug-js/debug/compare/4.4.0...4.4.1">https://github.com/debug-js/debug/compare/4.4.0...4.4.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/debug-js/debug/commit/33330fa8616b9b33f29f7674747be77266878ba6"><code>33330fa</code></a>
4.4.1</li>
<li><a
href="https://github.com/debug-js/debug/commit/98df33ed9d5215c1d801b74e6ab00969759a6839"><code>98df33e</code></a>
remove istanbul</li>
<li><a
href="https://github.com/debug-js/debug/commit/bf2f574c3e588ce4b660bf4e392e7a5e788640c0"><code>bf2f574</code></a>
fixes <a
href="https://redirect.github.com/debug-js/debug/issues/987">#987</a>
fallback to localStorage.DEBUG if debug is not defined (<a
href="https://redirect.github.com/debug-js/debug/issues/988">#988</a>)</li>
<li><a
href="https://github.com/debug-js/debug/commit/a0497bd46dacb701437f62cfc065dc72bf0952c7"><code>a0497bd</code></a>
Replace whitespaces in namespaces string with commas globally instead of
just...</li>
<li>See full diff in <a
href="https://github.com/debug-js/debug/compare/4.4.0...4.4.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=debug&package-manager=npm_and_yarn&previous-version=4.4.0&new-version=4.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@jonathanong.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored May 24, 2025
    Configuration menu
    Copy the full SHA
    8620ced View commit details
    Browse the repository at this point in the history

Commits on Jun 5, 2025

  1. feat: replace debug module with pure node:util::debuglog (#1885) 

    ## Checklist

- [x] I have ensured my pull request is not behind the main or master
branch of the original repository.
- [x] I have rebased all commits where necessary so that reviewing this
pull request can be done without having to merge it first.
- [x] I have written a commit message that passes commitlint linting.
- [x] I have ensured that my code changes pass linting tests.
- [x] I have ensured that my code changes pass unit tests.
- [x] I have described my pull request and the reasons for code changes
along with context if necessary.
    @3imed-jaberi
    3imed-jaberi authored Jun 5, 2025
    Configuration menu
    Copy the full SHA
    2f6e814 View commit details
    Browse the repository at this point in the history

Commits on Jun 6, 2025

  1. feat: replace cache-content-type with mime-types directly (#1886) 

    ## Checklist

- [x] I have ensured my pull request is not behind the main or master
branch of the original repository.
- [x] I have rebased all commits where necessary so that reviewing this
pull request can be done without having to merge it first.
- [x] I have written a commit message that passes commitlint linting.
- [x] I have ensured that my code changes pass linting tests.
- [x] I have ensured that my code changes pass unit tests.
- [x] I have described my pull request and the reasons for code changes
along with context if necessary.
    @3imed-jaberi
    3imed-jaberi authored Jun 6, 2025
    Configuration menu
    Copy the full SHA
    0acad8f View commit details
    Browse the repository at this point in the history

Commits on Jun 28, 2025

  1. build(deps): bump statuses from 2.0.1 to 2.0.2 (#1888) 

    Bumps [statuses](https://github.com/jshttp/statuses) from 2.0.1 to
2.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jshttp/statuses/releases">statuses's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Ci/add missing node versions by <a
href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a
href="https://redirect.github.com/jshttp/statuses/pull/32">jshttp/statuses#32</a></li>
<li>chore: add support for OSSF scorecard reporting by <a
href="https://github.com/inigomarquinez"><code>@​inigomarquinez</code></a>
in <a
href="https://redirect.github.com/jshttp/statuses/pull/24">jshttp/statuses#24</a></li>
<li>chore: pin dependencies and specify permissions in the pipeline by
<a
href="https://github.com/inigomarquinez"><code>@​inigomarquinez</code></a>
in <a
href="https://redirect.github.com/jshttp/statuses/pull/25">jshttp/statuses#25</a></li>
<li>docs: add openssf badge in readme file by <a
href="https://github.com/inigomarquinez"><code>@​inigomarquinez</code></a>
in <a
href="https://redirect.github.com/jshttp/statuses/pull/29">jshttp/statuses#29</a></li>
<li>chore: add codeql pipeline by <a
href="https://github.com/inigomarquinez"><code>@​inigomarquinez</code></a>
in <a
href="https://redirect.github.com/jshttp/statuses/pull/26">jshttp/statuses#26</a></li>
<li>chore: add dependency review tool by <a
href="https://github.com/inigomarquinez"><code>@​inigomarquinez</code></a>
in <a
href="https://redirect.github.com/jshttp/statuses/pull/27">jshttp/statuses#27</a></li>
<li>chore: add dependabot by <a
href="https://github.com/inigomarquinez"><code>@​inigomarquinez</code></a>
in <a
href="https://redirect.github.com/jshttp/statuses/pull/28">jshttp/statuses#28</a></li>
<li>fix: use <code>ubuntu-latest</code> as ci runner by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/jshttp/statuses/pull/33">jshttp/statuses#33</a></li>
<li>Replace deprecated String.prototype.substr() by <a
href="https://github.com/CommanderRoot"><code>@​CommanderRoot</code></a>
in <a
href="https://redirect.github.com/jshttp/statuses/pull/23">jshttp/statuses#23</a></li>
<li>ci: modernize pipelines by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/jshttp/statuses/pull/34">jshttp/statuses#34</a></li>
<li>fix: typo in pipeline by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/jshttp/statuses/pull/39">jshttp/statuses#39</a></li>
<li>build(deps-dev): bump raw-body from 2.4.1 to 2.5.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/jshttp/statuses/pull/35">jshttp/statuses#35</a></li>
<li>build(deps-dev): bump eslint-plugin-promise from 4.2.1 to 4.3.1 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/jshttp/statuses/pull/36">jshttp/statuses#36</a></li>
<li>build(deps-dev): bump csv-parse from 4.15.1 to 4.16.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/jshttp/statuses/pull/37">jshttp/statuses#37</a></li>
<li>build(deps-dev): bump eslint-plugin-import from 2.23.2 to 2.31.0 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/jshttp/statuses/pull/38">jshttp/statuses#38</a></li>
<li>Release: 2.0.2 by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/jshttp/statuses/pull/40">jshttp/statuses#40</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/carpasse"><code>@​carpasse</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/statuses/pull/32">jshttp/statuses#32</a></li>
<li><a
href="https://github.com/inigomarquinez"><code>@​inigomarquinez</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/statuses/pull/24">jshttp/statuses#24</a></li>
<li><a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/statuses/pull/33">jshttp/statuses#33</a></li>
<li><a
href="https://github.com/CommanderRoot"><code>@​CommanderRoot</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/statuses/pull/23">jshttp/statuses#23</a></li>
<li><a
href="https://github.com/dependabot"><code>@​dependabot</code></a> made
their first contribution in <a
href="https://redirect.github.com/jshttp/statuses/pull/35">jshttp/statuses#35</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/jshttp/statuses/compare/v2.0.1...v2.0.2">https://github.com/jshttp/statuses/compare/v2.0.1...v2.0.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jshttp/statuses/blob/master/HISTORY.md">statuses's
changelog</a>.</em></p>
<blockquote>
<h1>2.0.2 / 2025-06-06</h1>
<ul>
<li>Migrate to <code>String.prototype.slice()</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/jshttp/statuses/commit/33ec007ae094c35edb35d9edd293b9524b3adcb9"><code>33ec007</code></a>
2.0.2 (<a
href="https://redirect.github.com/jshttp/statuses/issues/40">#40</a>)</li>
<li><a
href="https://github.com/jshttp/statuses/commit/cc539ee32ce575f6f4dfac022bcbaf1320ad414b"><code>cc539ee</code></a>
build(deps-dev): bump eslint-plugin-import from 2.23.2 to 2.31.0 (<a
href="https://redirect.github.com/jshttp/statuses/issues/38">#38</a>)</li>
<li><a
href="https://github.com/jshttp/statuses/commit/c3a417aa27552de0a8de53ca8e3b1e84dfe6c235"><code>c3a417a</code></a>
build(deps-dev): bump csv-parse from 4.15.1 to 4.16.3 (<a
href="https://redirect.github.com/jshttp/statuses/issues/37">#37</a>)</li>
<li><a
href="https://github.com/jshttp/statuses/commit/99d64aeffe544ad13063f2d6ce6ff0526748c1a8"><code>99d64ae</code></a>
build(deps-dev): bump eslint-plugin-promise from 4.2.1 to 4.3.1 (<a
href="https://redirect.github.com/jshttp/statuses/issues/36">#36</a>)</li>
<li><a
href="https://github.com/jshttp/statuses/commit/6eb7e1199dd961e4fbb9639fd3b0f525f5202497"><code>6eb7e11</code></a>
build(deps-dev): bump raw-body from 2.4.1 to 2.5.2 (<a
href="https://redirect.github.com/jshttp/statuses/issues/35">#35</a>)</li>
<li><a
href="https://github.com/jshttp/statuses/commit/2e7a28e297f67bd971ff3e655e8e57510fe0ed5a"><code>2e7a28e</code></a>
fix: typo in pipeline (<a
href="https://redirect.github.com/jshttp/statuses/issues/39">#39</a>)</li>
<li><a
href="https://github.com/jshttp/statuses/commit/8f80743554e389fe534eac0bf2818ffe63181184"><code>8f80743</code></a>
ci: modernize pipelines (<a
href="https://redirect.github.com/jshttp/statuses/issues/34">#34</a>)</li>
<li><a
href="https://github.com/jshttp/statuses/commit/ed17ccd1d6c03c774ade0c5ac47b625100cf5cb0"><code>ed17ccd</code></a>
chore: migrate to <code>String.prototype.slice()</code> (<a
href="https://redirect.github.com/jshttp/statuses/issues/23">#23</a>)</li>
<li><a
href="https://github.com/jshttp/statuses/commit/76d850208bf29171b5cc80c449e53f4e586ca5db"><code>76d8502</code></a>
fix: use <code>ubuntu-latest</code> as ci runner (<a
href="https://redirect.github.com/jshttp/statuses/issues/33">#33</a>)</li>
<li><a
href="https://github.com/jshttp/statuses/commit/4f369f5942f3e57808ba378256f7f42ddf4ee009"><code>4f369f5</code></a>
ci: add dependabot (<a
href="https://redirect.github.com/jshttp/statuses/issues/28">#28</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/jshttp/statuses/compare/v2.0.1...v2.0.2">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~ulisesgascon">ulisesgascon</a>, a new
releaser for statuses since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=statuses&package-manager=npm_and_yarn&previous-version=2.0.1&new-version=2.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Jun 28, 2025
    Configuration menu
    Copy the full SHA
    cb22d8d View commit details
    Browse the repository at this point in the history

Commits on Jul 27, 2025

  1. build(deps-dev): bump supertest from 7.1.1 to 7.1.4 (#1895) 

    Bumps [supertest](https://github.com/ladjs/supertest) from 7.1.1 to
7.1.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ladjs/supertest/releases">supertest's
releases</a>.</em></p>
<blockquote>
<h2>v7.1.4</h2>
<ul>
<li>chore: bump deps  6021ec8</li>
<li>Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/865">#865</a>
from forwardemail/dependabot/npm_and_yarn/form-data-4.0.4 ceca508</li>
<li>chore(deps): bump form-data from 4.0.3 to 4.0.4  b1fb983</li>
</ul>
<hr />
<p><a
href="https://github.com/ladjs/supertest/compare/v7.1.3...v7.1.4">https://github.com/ladjs/supertest/compare/v7.1.3...v7.1.4</a></p>
<h2>v7.1.3</h2>
<ul>
<li>fix: revert automatic server closing (per <a
href="https://redirect.github.com/ladjs/supertest/issues/651">#651</a>)
b6fd281</li>
<li>fix: rename ci file  75bcbc9</li>
</ul>
<hr />
<p><a
href="https://github.com/ladjs/supertest/compare/v7.1.2...v7.1.3">https://github.com/ladjs/supertest/compare/v7.1.2...v7.1.3</a></p>
<h2>v7.1.2</h2>
<ul>
<li>feat: fix server lifecycle, callback handling, and SuperAgent v10
compatibility 6d060e3</li>
<li>Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/862">#862</a>
from noritaka1166/fix-typo-test 0413057</li>
<li>Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/841">#841</a>
from viniciusamc/master e2be0e1</li>
<li>chore: fix typo in test  b7f985b</li>
<li>feat(bearer):bearer auth token method  411f7ce</li>
</ul>
<hr />
<p><a
href="https://github.com/ladjs/supertest/compare/v7.1.1...v7.1.2">https://github.com/ladjs/supertest/compare/v7.1.1...v7.1.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/forwardemail/supertest/commit/076228a654236d65e593cd94b8c8950722d78c5a"><code>076228a</code></a>
7.1.4</li>
<li><a
href="https://github.com/forwardemail/supertest/commit/6021ec817482f3c9abef3e322846d194d07039f4"><code>6021ec8</code></a>
chore: bump deps</li>
<li><a
href="https://github.com/forwardemail/supertest/commit/ceca508bd47f45c0af23738f3733a2bef8e35a58"><code>ceca508</code></a>
Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/865">#865</a>
from forwardemail/dependabot/npm_and_yarn/form-data-4...</li>
<li><a
href="https://github.com/forwardemail/supertest/commit/b1fb983db7e396176497f95c34a42a890ce96255"><code>b1fb983</code></a>
chore(deps): bump form-data from 4.0.3 to 4.0.4</li>
<li><a
href="https://github.com/forwardemail/supertest/commit/0cf2ec375f1aeed4eac257e51b1d81263452337c"><code>0cf2ec3</code></a>
7.1.3</li>
<li><a
href="https://github.com/forwardemail/supertest/commit/b6fd281d290d6991567c6b739aa2dceabfbd4309"><code>b6fd281</code></a>
fix: revert automatic server closing (per <a
href="https://redirect.github.com/ladjs/supertest/issues/651">#651</a>)</li>
<li><a
href="https://github.com/forwardemail/supertest/commit/75bcbc941dccad5cdd1e3969b002f30a32f1066d"><code>75bcbc9</code></a>
fix: rename ci file</li>
<li><a
href="https://github.com/forwardemail/supertest/commit/29c3267d31740bee7af17144703045f836e59405"><code>29c3267</code></a>
7.1.2</li>
<li><a
href="https://github.com/forwardemail/supertest/commit/6d060e3c8dbf18ddeea5728cf5118717c70d0251"><code>6d060e3</code></a>
feat: fix server lifecycle, callback handling, and SuperAgent v10
compatibility</li>
<li><a
href="https://github.com/forwardemail/supertest/commit/04130571b0e430b140b72514b5f5832afa9d2be6"><code>0413057</code></a>
Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/862">#862</a>
from noritaka1166/fix-typo-test</li>
<li>Additional commits viewable in <a
href="https://github.com/ladjs/supertest/compare/v7.1.1...v7.1.4">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~titanism">titanism</a>, a new releaser for
supertest since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=supertest&package-manager=npm_and_yarn&previous-version=7.1.1&new-version=7.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Jul 27, 2025
    Configuration menu
    Copy the full SHA
    d378e5c View commit details
    Browse the repository at this point in the history

  2. build(deps-dev): bump form-data from 4.0.3 to 4.0.4 (#1894) 

    Bumps [form-data](https://github.com/form-data/form-data) from 4.0.3 to
4.0.4.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/form-data/form-data/blob/master/CHANGELOG.md">form-data's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.3...v4.0.4">v4.0.4</a>
- 2025-07-16</h2>
<h3>Commits</h3>
<ul>
<li>[meta] add <code>auto-changelog</code> <a
href="https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479"><code>811f682</code></a></li>
<li>[Tests] handle predict-v8-randomness failures in node &lt; 17 and
node &gt; 23 <a
href="https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402"><code>1d11a76</code></a></li>
<li>[Fix] Switch to using <code>crypto</code> random for boundary values
<a
href="https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"><code>3d17230</code></a></li>
<li>[Tests] fix linting errors <a
href="https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a"><code>5e34080</code></a></li>
<li>[meta] actually ensure the readme backup isn’t published <a
href="https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef"><code>316c82b</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code> <a
href="https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d"><code>58c25d7</code></a></li>
<li>[meta] fix readme capitalization <a
href="https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61"><code>2300ca1</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/form-data/form-data/commit/41996f5ac73a867046d48512cab62e64fc846dad"><code>41996f5</code></a>
v4.0.4</li>
<li><a
href="https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef"><code>316c82b</code></a>
[meta] actually ensure the readme backup isn’t published</li>
<li><a
href="https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61"><code>2300ca1</code></a>
[meta] fix readme capitalization</li>
<li><a
href="https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479"><code>811f682</code></a>
[meta] add <code>auto-changelog</code></li>
<li><a
href="https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a"><code>5e34080</code></a>
[Tests] fix linting errors</li>
<li><a
href="https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402"><code>1d11a76</code></a>
[Tests] handle predict-v8-randomness failures in node &lt; 17 and node
&gt; 23</li>
<li><a
href="https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d"><code>58c25d7</code></a>
[Dev Deps] update <code>@ljharb/eslint-config</code></li>
<li><a
href="https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"><code>3d17230</code></a>
[Fix] Switch to using <code>crypto</code> random for boundary
values</li>
<li>See full diff in <a
href="https://github.com/form-data/form-data/compare/v4.0.3...v4.0.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=form-data&package-manager=npm_and_yarn&previous-version=4.0.3&new-version=4.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/koajs/koa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Jul 27, 2025
    Configuration menu
    Copy the full SHA
    6e51eb1 View commit details
    Browse the repository at this point in the history

  3. Merge commit from fork 

    GHSA-jgmv-j7ww-jx2x

close #1892
    @fengmk2
    fengmk2 authored Jul 27, 2025
    Configuration menu
    Copy the full SHA
    422c551 View commit details
    Browse the repository at this point in the history

  4. 3.0.1

    @fengmk2
    fengmk2 committed Jul 27, 2025
    Configuration menu
    Copy the full SHA
    1ddb048 View commit details
    Browse the repository at this point in the history
Loading