From ec7993c5e79d0b801fa5ec97537957bb6788461e Mon Sep 17 00:00:00 2001 From: renovate <29139614+renovate@users.noreply.github.com> Date: Tue, 20 May 2025 02:07:39 +0000 Subject: [PATCH] chore: bump up multer version to v2 (#12374) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [multer](https://redirect.github.com/expressjs/multer) | [`^1.4.5-lts.1` -> `^2.0.0`](https://renovatebot.com/diffs/npm/multer/1.4.5-lts.2/2.0.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/multer/2.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/multer/2.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/multer/1.4.5-lts.2/2.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/multer/1.4.5-lts.2/2.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes
expressjs/multer (multer) ### [`v2.0.0`](https://redirect.github.com/expressjs/multer/releases/tag/v2.0.0) [Compare Source](https://redirect.github.com/expressjs/multer/compare/v1.4.5-lts.2...v2.0.0) #### Important - **Breaking change: The minimum supported Node version is now 10.16.0** - Fix [CVE-2025-47935](https://www.cve.org/CVERecord?id=CVE-2025-47935) ([GHSA-44fp-w29j-9vj5](https://redirect.github.com/expressjs/multer/security/advisories/GHSA-44fp-w29j-9vj5)) - Fix [CVE-2025-47944](https://www.cve.org/CVERecord?id=CVE-2025-47944) ([GHSA-4pg4-qvpc-4q3h](https://redirect.github.com/expressjs/multer/security/advisories/GHSA-4pg4-qvpc-4q3h)) #### What's Changed - 🐛 drain stream. fixes regression in node 18, remove old CI, set minimum node version, fix readme badges, add .npmrc - fix: handle two busboy error events - ♻️ fully drain stream - 🥅 explicitly handle req error - 🚨 lint:fix - ⬆️ bump mocha - docs: include release 2.0.0 details
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). --- .../media-capture-playground/package.json | 2 +- yarn.lock | 19 +++++++++++++++++-- 2 files changed, 18 insertions(+), 3 deletions(-) diff --git a/packages/frontend/media-capture-playground/package.json b/packages/frontend/media-capture-playground/package.json index c5bc067e2b..159429f7e0 100644 --- a/packages/frontend/media-capture-playground/package.json +++ b/packages/frontend/media-capture-playground/package.json @@ -22,7 +22,7 @@ "express-rate-limit": "^7.1.5", "fs-extra": "^11.3.0", "lodash-es": "^4.17.21", - "multer": "^1.4.5-lts.1", + "multer": "^2.0.0", "react": "^19.0.0", "react-dom": "^19.0.0", "react-markdown": "^10.0.0", diff --git a/yarn.lock b/yarn.lock index 6ae5424066..d807b05792 100644 --- a/yarn.lock +++ b/yarn.lock @@ -718,7 +718,7 @@ __metadata: express-rate-limit: "npm:^7.1.5" fs-extra: "npm:^11.3.0" lodash-es: "npm:^4.17.21" - multer: "npm:^1.4.5-lts.1" + multer: "npm:^2.0.0" react: "npm:^19.0.0" react-dom: "npm:^19.0.0" react-markdown: "npm:^10.0.0" @@ -27097,7 +27097,7 @@ __metadata: languageName: node linkType: hard -"multer@npm:1.4.5-lts.2, multer@npm:^1.4.5-lts.1": +"multer@npm:1.4.5-lts.2": version: 1.4.5-lts.2 resolution: "multer@npm:1.4.5-lts.2" dependencies: @@ -27112,6 +27112,21 @@ __metadata: languageName: node linkType: hard +"multer@npm:^2.0.0": + version: 2.0.0 + resolution: "multer@npm:2.0.0" + dependencies: + append-field: "npm:^1.0.0" + busboy: "npm:^1.0.0" + concat-stream: "npm:^1.5.2" + mkdirp: "npm:^0.5.4" + object-assign: "npm:^4.1.1" + type-is: "npm:^1.6.4" + xtend: "npm:^4.0.0" + checksum: 10/e6aebea164666dff522a4d2aff235dbab12ac6d50c6e491c6b9ccafeddc229c5ccd34911374d223d597d602454951dd2e9b7d6e0a7b401053e47ef43e2838e2a + languageName: node + linkType: hard + "multicast-dns@npm:^7.2.5": version: 7.2.5 resolution: "multicast-dns@npm:7.2.5"