Bump form-data, serverless, jsdom and serverless-bundle
Type: Pull Request
State: Open
Association: None
Comments: 0
(11 months ago)
(11 months ago)
dependencies javascript
Bumps form-data to 3.0.4 and updates ancestor dependencies form-data, serverless, jsdom and serverless-bundle. These dependencies need to be updated together.
Updates form-data from 2.3.3 to 3.0.4
Release notes
Sourced from form-data's releases.
v3.0.2
Fixes
Tests
- migrate from travis to GHA
v3.0.1
- feat: add setBoundary method 55d90ce
- Merge pull request #451 from arku/patch-1 d702625
- Fix typo: ads -> adds 714ac8b
https://github.com/form-data/form-data/compare/v3.0.0...v3.0.1
v2.5.2
Fixes
Buffer.fromandBuffer.allocrequire node 4+- npmignore temporary build files (#532)
- move util.isArray to Array.isArray (#564)
Tests
- migrate from travis to GHA
Dev Improvements
- Fixed error in the documentations as indicated in #439
- Added remaining combined-stream options to typedef
- Bumped rimraf to 2.7.1 (dev-dep)
- Added constructor options to TypeScript defs
- Fixed error in callback signatures
Added Types
- Added TS types
- Improved documentation
Added getBuffer method
Updated test builds to support node10 and 12.
Changelog
Sourced from form-data's changelog.
v3.0.4 - 2025-07-16
Fixed
- [Fix]
append: avoid a crash on nullish values[#577](https://github.com/form-data/form-data/issues/577)Commits
- [eslint] update linting config
f5e7eb0- [meta] add
auto-changelogd2eb290- [Tests] handle predict-v8-randomness failures in node < 17 and node > 23
e8c574c- [Fix] Switch to using
cryptorandom for boundary valuesc6ced61- [Refactor] use
hasown1a78b5d- [Fix] validate boundary type in
setBoundary()method70bbaa0- [Tests] add tests to check the behavior of
getBoundarywith non-stringsb22a64e- [meta] actually ensure the readme backup isn’t published
0150851- [meta] remove local commit hooks
fc42bb9- [Dev Deps] remove unused deps
a14d09e- [meta] fix scripts to use prepublishOnly
11d9f73- [meta] fix readme capitalization
fc38b48v3.0.3 - 2025-02-14
Merged
- [Fix] set
Symbol.toStringTagwhen available[#573](https://github.com/form-data/form-data/issues/573)Fixed
- [Fix] set
Symbol.toStringTagwhen available (#573)[#396](https://github.com/form-data/form-data/issues/396)Commits
- [Refactor] use
Object.prototype.hasOwnProperty.call7fecefe- [Dev Deps] update
@types/node,browserify,coveralls,cross-spawn,eslint,formidable,in-publish,pkgfiles,pre-commit,puppeteer,request,tape,typescript8261fcb- Only apps should have lockfiles
b82f590- [Dev Deps] pin
requestwhich viatough-cookie^2.4 depends onpsle5df7f2- [Deps] update
mime-types5a5bafev3.0.2 - 2024-10-10
Merged
- fix (npmignore): ignore temporary build files
[#532](https://github.com/form-data/form-data/issues/532)Commits
... (truncated)
Commits
- See full diff in compare view
Maintainer changes
This version was pushed to npm by ljharb, a new releaser for form-data since your current version.
Updates serverless from 1.70.1 to 4.17.1
Release notes
Sourced from serverless's releases.
4.17.1
Features
- Serverless Framework
- Add support for
ENABLE_LEGACY_DEPLOYMENT_BUCKETenv var.- Enable packaging without AWS credentials if using legacy deployment buckets.
Bug Fixes
- Serverless Framework
- Add better validation if deploying to multiple regions and/or stages at the same time.
4.17.0
Features
- Serverless Framework
- Add support for
NO_PROXY(serverless/serverless#6048)4.16.1
Features
- Serverless Container Framework
- A new AWS DeploymentType with faster and more reliable routing
4.15.1
Bug Fixes
- Serverless Framework
- Fixes an error when using dashboards with alerts plugin.
- Logs a warning instead of an error if the user is using the external alerts plugin.
4.15.0
Features
- Serverless Framework
- Update and add the cloudwatch alerts plugin into the core.
Bug Fixes
Serverless Framework
- Default to dev stage if user specified the stage option without a value
Serverless Container Framework
- Handle when containers are not running during rebuild
4.14.4
Bug Fixes
- Serverless Framework
- Skip AWS credentials check on the
packagecommand if a deployment bucket name is explicitly set viaprovider.deploymentBucket- Fix support for the
-sshortcut in certain cases- Fix handling of the service name when
serviceis provided as an object with anameproperty- Serverless Container Framework
- Fix wildcard domain detection in ACM and Route 53
4.14.3
Security Fixes
... (truncated)
Changelog
Sourced from serverless's changelog.
Changelog
All notable changes to this project will be documented in this file. See standard-version for commit guidelines.
3.38.0 (2023-11-21)
Features
3.37.0 (2023-11-16)
Features
Bug Fixes
- bump platform-client version for axios (#12260) (10980b9)
- Update pkg config to include axios cjs (#12261) (b21afaf)
3.36.0 (2023-10-23)
Features
Bug Fixes
- Dashboard documentation improvements (bb4d7c8)
- Fix menu for dashboard documentation (8f266af)
- Improve dashboard documentation (ad8bbf1)
- Improve dashboard documentation (f67df7f)
- Minor dashboard doc improvements (#12177) (f1fa19c)
3.35.2 (2023-09-16)
Bug Fixes
3.35.1 (2023-09-16)
Bug Fixes
3.35.0 (2023-09-15)
Features
... (truncated)
Commits
e2681bdchore: update readme to include serverless MCP and container framework1003a32docs: update SECURITY.md (#13026)ec4957fchore: automate CLA signing (#13019)c4cebaechore: automate CLA signing87b4f5bdocs: read license key from aws ssm (#12986)3f37cbadocs(dev-mode): added note regarding vpc (#12977)d262ac3feat: add support for ap-southeast-5 and ca-west-1 (#12981)2aea99dfix: correctly resolve layer package artifact and docker image paths (#12972)3704754fix(esbuild): track files added to the zip file (#12966)c9d519efeat: add support for provenance option in docker build (#12958)- Additional commits viewable in compare view
Updates jsdom from 16.2.2 to 16.7.0
Release notes
Sourced from jsdom's releases.
Version 16.7.0
- Added
AbortSignal.abort(). (ninevra)- Added dummy
xandyproperties to the return value ofgetBoundingClientRect(). (eiko)- Implemented wrapping for
textareaEl.valueif thewrap=""attribute is specified. (ninevra)- Changed newline normalization in
<textarea>s according to recent HTML Standard updates. (ninevra)- Fixed some bad cascade computation in
getComputedStyle(). (romain-trotard)Version 16.6.0
- Added
parentNode.replaceChildren(). (@ninevra)- Fixed jsdom's handling of when code running inside the jsdom throws
nullorundefinedas an exception. (@mbest)- Removed the dependency on the deprecated
requestpackage, in the process fixing several issues with theXMLHttpRequestimplementation around header processing. Thanks go to@tobyhinloopen,@andrewaylett, and especially@vegardbb, for completing this months-long effort!Version 16.5.3
- Fixed infinite recursion when using
MutationObservers to observe elements inside aMutationObservercallback.Version 16.5.2
- Fixed
Access-Control-Allow-Headers: *to work withXMLHttpRequest. (silviot)- Fixed
xhr.responseto strip any leading BOM whenxhr.responseTypeis"json".- Fixed
new Text()andnew Comment()constructors to properly set the resulting node'sownerDocument.- Fixed
customElements.whenDefined()to resolve its returned promise with the custom element constructor, per recent spec updates. (ExE-Boss)- Fixed parsing to ensure that
<svg>\<template></template></svg>does not throw an exception, but instead correctly produces a SVG-namespace\<template>element.- Fixed
domParser.parseFromString()to treat<noscript>elements appropriately.- Fixed form control validity checking when the control was outside the
<form>element and instead associated using theform=""attribute.- Fixed
legendEl.formto return the correct result based on its parent<fieldset>.- Fixed
optionEl.textto exclude<script>descendants.- Fixed radio buttons and checkboxes to not fire
inputandchangeevents when disconnected.- Fixed
inputEl.indeterminateto reset to its previous value when canceling aclickevent on a checkbox or radio button.- Fixed the behavior of event handler attributes (e.g.
onclick="...code...") when there were global variables namedelementorformOwner. (ExE-Boss)- On Node.js v14.6.0+ where
WeakRefs are available, fixedNodeIteratorto no longer stop working when more than tenNodeIteratorinstances are created, and to use less memory due to inactiveNodeIterators sticking around. (ExE-Boss)Version 16.5.1
- Fixed a regression that broke
customElements.get()in v16.5.0. (fdesforges)- Fixed
window.eventto have a setter which overwrites thewindow.eventproperty with the given value, per the specification. This fixes an issue where after upgrading to jsdom v16.5.0 you would no longer be able to set a global variable namedeventin the jsdom context.Version 16.5.0
- Added
window.queueMicrotask().- Added
window.event.- Added
inputEvent.inputType. (diegohaz)- Removed
ondragexitfromWindowand friends, per a spec update.- Fixed the URL of
about:blankiframes. Previously it was getting set to the parent's URL. (SimonMueller)- Fixed the loading of subresources from the filesystem when they had non-ASCII filenames.
- Fixed the
hidden=""attribute to causedisplay: noneper the user-agent stylesheet. (ph-fritsche)- Fixed the
new File()constructor to no longer convert/to:, per a pending spec update.- Fixed mutation observer callbacks to be called with the
MutationObserverinstance as theirthisvalue.- Fixed
<input type=checkbox>and<input type=radio>to be mutable even when disabled, per a spec update.- Fixed
XMLHttpRequestto not fire a redundant finalprogressevent if aprogressevent was previously fired with the sameloadedvalue. This would usually occur with small files.- Fixed
XMLHttpRequestto expose theContent-Lengthheader on cross-origin responses.- Fixed
xhr.responseto returnnullfor failures that occur during the middle of the download.- Fixed edge cases around passing callback functions or event handlers. (ExE-Boss)
- Fixed edge cases around the properties of proxy-like objects such as
localStorageordataset. (ExE-Boss)
... (truncated)
Changelog
Sourced from jsdom's changelog.
16.7.0
- Added
AbortSignal.abort(). (ninevra)- Added dummy
xandyproperties to the return value ofgetBoundingClientRect(). (eiko)- Implemented wrapping for
textareaEl.valueif thewrap=""attribute is specified. (ninevra)- Changed newline normalization in
<textarea>s according to recent HTML Standard updates. (ninevra)- Fixed some bad cascade computation in
getComputedStyle(). (romain-trotard)16.6.0
- Added
parentNode.replaceChildren(). (ninevra)- Fixed jsdom's handling of when code running inside the jsdom throws
nullorundefinedas an exception. (mbest)- Removed the dependency on the deprecated
requestpackage, in the process fixing several issues with theXMLHttpRequestimplementation around header processing. Special thanks to vegardbb for completing this months-long effort!16.5.3
- Fixed infinite recursion when using
MutationObservers to observe elements inside aMutationObservercallback.16.5.2
- Fixed
Access-Control-Allow-Headers: *to work withXMLHttpRequest. (silviot)- Fixed
xhr.responseto strip any leading BOM whenxhr.responseTypeis"json".- Fixed
new Text()andnew Comment()constructors to properly set the resulting node'sownerDocument.- Fixed
customElements.whenDefined()to resolve its returned promise with the custom element constructor, per recent spec updates. (ExE-Boss)- Fixed parsing to ensure that
<svg>\<template></template></svg>does not throw an exception, but instead correctly produces a SVG-namespace\<template>element.- Fixed
domParser.parseFromString()to treat<noscript>elements appropriately.- Fixed form control validity checking when the control was outside the
<form>element and instead associated using theform=""attribute.- Fixed
legendEl.formto return the correct result based on its parent<fieldset>.- Fixed
optionEl.textto exclude<script>descendants.- Fixed radio buttons and checkboxes to not fire
inputandchangeevents when disconnected.- Fixed
inputEl.indeterminateto reset to its previous value when canceling aclickevent on a checkbox or radio button.- Fixed the behavior of event handler attributes (e.g.
onclick="...code...") when there were global variables namedelementorformOwner. (ExE-Boss)- On Node.js v14.6.0+ where
WeakRefs are available, fixedNodeIteratorto no longer stop working when more than tenNodeIteratorinstances are created, and to use less memory due to inactiveNodeIterators sticking around. (ExE-Boss)16.5.1
- Fixed a regression that broke
customElements.get()in v16.5.0. (fdesforges)- Fixed
window.eventto have a setter which overwrites thewindow.eventproperty with the given value, per the specification. This fixes an issue where after upgrading to jsdom v16.5.0 you would no longer be able to set a global variable namedeventin the jsdom context.16.5.0
- Added
window.queueMicrotask().- Added
window.event.- Added
inputEvent.inputType. (diegohaz)- Removed
ondragexitfromWindowand friends, per a spec update.- Fixed the URL of
about:blankiframes. Previously it was getting set to the parent's URL. (SimonMueller)- Fixed the loading of subresources from the filesystem when they had non-ASCII filenames.
- Fixed the
hidden=""attribute to causedisplay: noneper the user-agent stylesheet. (ph-fritsche)- Fixed the
new File()constructor to no longer convert/to:, per a pending spec update.- Fixed mutation observer callbacks to be called with the
MutationObserverinstance as theirthisvalue.
... (truncated)
Commits
1aa3cbcVersion 16.7.0df1f551Don't run WebSocketStream testseb105b2Fix browser tests by enabling SharedArrayBuffer0dedfc0Fix some bad cascade computation in getComputedStyle()8021a56Fix "configuation" typo (#3213)a7febe3Fix typo in level2/html.js (#3222)c9896c0Return x, y properties from Element.getBoundingClientRect (#3187)346ea98Update web-platform tests (#3203)364c77dBump to ws 7.4.693ba6a0We are now on Matrix (#3207)- Additional commits viewable in compare view
Updates serverless-bundle from 1.2.5 to 6.3.1
Release notes
Sourced from serverless-bundle's releases.
v6.3.1
:bug: Bug Fix
Committers: 1
- Marvin Kilp (
@mkilp)v6.3.0
:bug: Bug Fix
- #375 Upgrade dependencies to fix security issues within sub-dependencies (
@gligorkot)Committers: 6
- Gligor Kotushevski (
@gligorkot)v6.1.0
:rocket: Enhancement
- #366 Conditional
forceExcludeofaws-sdkbased onruntimeversion (@cnuss)- #368 Expose nodeModulesRelativeDir serverless-webpack config (
@gligorkot)Committers:
- Christian Nuss (
@cnuss)- Gligor Kotushevski (
@gligorkot)
Update using
$ npm install --save-dev --save-exact serverless-bundle@6.1.0v6.0.0
:boom: Breaking Change
- #343 To upgrade to Node 18, we are dropping support for the concat text plugin, closes #341 (
@fancywriter)Committers:
- Pavel Kozlov (
@fancywriter)
Update using
$ npm install --save-dev --save-exact serverless-bundle@6.0.0v5.5.0
:rocket: Enhancement
- #296 Configurable minification (
@jurajmatus)
... (truncated)
Commits
3c992ca6.3.1b8c074alockfilee67862cMerge pull request #377 from mkilp/masterf9bbfb3fix: bump serverless-webpack to 5.14.2868a4626.3.0ff8bf096.1.0b5c9f4f6.0.059cb064Merge pull request #375 from gligorkot/upgrade-dependencies-and-fix-security-...2d8e84bdrop node 14 and 16 CI testsa238175fixed externals test- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Pull Request Statistics
1
2
+22991
-18547
Package Dependencies
form-data, serverless, jsdom
npm
Technical Details
| ID: | 3961593 |
| UUID: | 2683712266 |
| Node ID: | PR_kwDOD6QCg86f9jMK |
| Host: | GitHub |
| Repository: | joncode/serverless-stack-api |
| Merge State: | Unknown |