github balena-io/balena-cli v23.2.29

latest release: v23.2.30
10 hours ago

Update dependency body-parser to v2

Notable changes

  • deps: qs@^6.14.1
  • refactor(json): simplify strict mode error string construction
  • Security fix for GHSA-wqch-xfxh-vrr4
  • deps:
  • refactor: normalize common options for all parsers
  • refactor: prefix built-in node module imports
  • use the node require cache instead of custom caching
  • remove unpipe package and use native unpipe() method
  • Restore expected behavior extended to false
  • Node.js 18 is the minimum supported version
  • req.body is no longer always initialized to {}
  • Remove deprecated bodyParser() combination middleware
  • urlencoded parser now defaults extended to false as released, this is not the case, fixed in 2.0.1
  • urlencoded simple parser now uses qs module instead of querystring module
  • Add brotli support #​406
  • urlencoded: Add option to customize the depth with a default value of 32
  • urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
  • Use on-finished to determine when body read
  • deps: raw-body@^3.0.0
  • deps: qs@​6.12.3
  • deps: debug@​3.1.0
  • deps: iconv-lite@​0.5.2
expressjs/body-parser (body-parser)

v2.2.2

Compare Source

=========================

  • deps: qs@^6.14.1
  • refactor(json): simplify strict mode error string construction

v2.2.1

Compare Source

=========================

  • Security fix for GHSA-wqch-xfxh-vrr4
  • deps:
    • type-is@^2.0.1
    • iconv-lite@^0.7.0
      • Handle split surrogate pairs when encoding UTF-8
      • Avoid false positives in encodingExists by using prototype-less objects
    • raw-body@^3.0.1
    • debug@^4.4.3

v2.2.0

Compare Source

=========================

  • refactor: normalize common options for all parsers
  • deps:
    • iconv-lite@^0.6.3

v2.1.0

Compare Source

=========================

  • deps:
    • type-is@^2.0.0
    • debug@^4.4.0
    • Removed destroy
  • refactor: prefix built-in node module imports
  • use the node require cache instead of custom caching

v2.0.2

Compare Source

=========================

  • remove unpipe package and use native unpipe() method

v2.0.1

Compare Source

=========================

  • Restore expected behavior extended to false

v2.0.0

Compare Source

=========================

Breaking Changes

  • Node.js 18 is the minimum supported version
  • req.body is no longer always initialized to {}
    • it is left undefined unless a body is parsed
  • Remove deprecated bodyParser() combination middleware
  • urlencoded parser now defaults extended to false as released, this is not the case, fixed in 2.0.1
  • urlencoded simple parser now uses qs module instead of querystring module

Features

  • Add brotli support #​406
  • urlencoded: Add option to customize the depth with a default value of 32
  • urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
  • Use on-finished to determine when body read

Dependencies

  • deps: raw-body@^3.0.0
  • deps: qs@​6.12.3
  • deps: debug@​3.1.0
  • deps: iconv-lite@​0.5.2

List of commits

a4bb84b (Update dependency body-parser to v2, 2026-01-16)
b12ba3e (Drop unneeded dependency @types/body-parser, 2026-01-16)
aec9484 (server: Add optional chain after request.body, 2026-01-16)
cebc4c9 (server.spec: Test for undefined bodies, 2026-01-16)
cd265ac (Deduplicate dependencies, 2026-01-16)

Don't miss a new balena-cli release

NewReleases is sending notifications on new releases.