1
0
mirror of https://github.com/Unleash/unleash.git synced 2025-05-12 01:17:04 +02:00

chore(deps): update dependency http-proxy-middleware to v2.0.8 [security] (#9787)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[http-proxy-middleware](https://redirect.github.com/chimurai/http-proxy-middleware)
| [`2.0.7` ->
`2.0.8`](https://renovatebot.com/diffs/npm/http-proxy-middleware/2.0.7/2.0.8)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/http-proxy-middleware/2.0.8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/http-proxy-middleware/2.0.8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/http-proxy-middleware/2.0.7/2.0.8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/http-proxy-middleware/2.0.7/2.0.8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

### GitHub Vulnerability Alerts

#### [CVE-2025-32996](https://nvd.nist.gov/vuln/detail/CVE-2025-32996)

In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody
can be called twice because "else if" is not used.

---

### Release Notes

<details>
<summary>chimurai/http-proxy-middleware
(http-proxy-middleware)</summary>

###
[`v2.0.8`](https://redirect.github.com/chimurai/http-proxy-middleware/releases/tag/v2.0.8)

[Compare
Source](https://redirect.github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.8)

#### What's Changed

- fix(fixRequestBody): prevent multiple .write() calls by
[@&#8203;chimurai](https://redirect.github.com/chimurai) in
[https://github.com/chimurai/http-proxy-middleware/pull/1090](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1090)
- fix(fixRequestBody): handle invalid request by
[@&#8203;chimurai](https://redirect.github.com/chimurai) in
[https://github.com/chimurai/http-proxy-middleware/pull/1091](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1091)
- chore(package): v2.0.8 by
[@&#8203;chimurai](https://redirect.github.com/chimurai) in
[https://github.com/chimurai/http-proxy-middleware/pull/1094](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1094)

**Full Changelog**:
https://github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.8

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" in timezone Europe/Madrid,
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/Unleash/unleash).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMzguMCIsInVwZGF0ZWRJblZlciI6IjM5LjIzOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This commit is contained in:
renovate[bot] 2025-04-16 20:10:43 +00:00 committed by GitHub
parent 4454656713
commit 61c98a9994
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 6 additions and 6 deletions

View File

@ -87,7 +87,7 @@
"deep-diff": "1.0.2",
"dequal": "2.0.3",
"fast-json-patch": "3.1.1",
"http-proxy-middleware": "2.0.7",
"http-proxy-middleware": "2.0.8",
"immer": "9.0.21",
"jsdom": "25.0.1",
"lodash.clonedeep": "4.5.0",

View File

@ -5980,9 +5980,9 @@ __metadata:
languageName: node
linkType: hard
"http-proxy-middleware@npm:2.0.7":
version: 2.0.7
resolution: "http-proxy-middleware@npm:2.0.7"
"http-proxy-middleware@npm:2.0.8":
version: 2.0.8
resolution: "http-proxy-middleware@npm:2.0.8"
dependencies:
"@types/http-proxy": "npm:^1.17.8"
http-proxy: "npm:^1.18.1"
@ -5994,7 +5994,7 @@ __metadata:
peerDependenciesMeta:
"@types/express":
optional: true
checksum: 10c0/8d00a61eb215b83826460b07489d8bb095368ec16e02a9d63e228dcf7524e7c20d61561e5476de1391aecd4ec32ea093279cdc972115b311f8e0a95a24c9e47e
checksum: 10c0/9426e64d9c6c671b4c093236bceb373b96a43ac850c7ad926355bb9f9452e1da48b9b8a5592b225970ca7d68eacbfb6eb22099a96231663a850364db36ef28cb
languageName: node
linkType: hard
@ -10157,7 +10157,7 @@ __metadata:
deep-diff: "npm:1.0.2"
dequal: "npm:2.0.3"
fast-json-patch: "npm:3.1.1"
http-proxy-middleware: "npm:2.0.7"
http-proxy-middleware: "npm:2.0.8"
immer: "npm:9.0.21"
jsdom: "npm:25.0.1"
json-2-csv: "npm:^5.5.5"