github balena-io/open-balena v4.1.650

7 hours ago

Update dependency balena-io/balena-cli to v23.2.30

Notable changes

  • Move internal typing dependencies to devDependencies [Thodoris Greasidis]
  • Fix node engine version requirements [Matthew Yarmolinsky]
  • Drop support for property paths in the get method [Matthew Yarmolinsky]
  • Drop support for node <20.12.0 and require es2019 [Matthew Yarmolinsky]
  • Update author to balena [Matthew Yarmolinsky]
  • Drop Bluebird [Matthew Yarmolinsky]
  • Drop mergeObjects in favor of es-toolkit merge [Matthew Yarmolinsky]
  • Replace lodash with es-toolkit [Matthew Yarmolinsky]
  • Update jsdoc-to-markdown [Matthew Yarmolinsky]
  • Update TypeScript to 5.1.3 [Thodoris Greasidis]
    -balena-io-modules/balena-settings-client (balena-settings-client)
  • deps: qs@^6.14.1
  • refactor(json): simplify strict mode error string construction
  • Security fix for GHSA-wqch-xfxh-vrr4
  • deps:
  • refactor: normalize common options for all parsers
  • refactor: prefix built-in node module imports
  • use the node require cache instead of custom caching
  • remove unpipe package and use native unpipe() method
  • Restore expected behavior extended to false
  • Node.js 18 is the minimum supported version
  • req.body is no longer always initialized to {}
  • Remove deprecated bodyParser() combination middleware
  • urlencoded parser now defaults extended to false as released, this is not the case, fixed in 2.0.1
  • urlencoded simple parser now uses qs module instead of querystring module
  • Add brotli support #​406
  • urlencoded: Add option to customize the depth with a default value of 32
  • urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
  • Use on-finished to determine when body read
  • deps: raw-body@^3.0.0
  • deps: qs@​6.12.3
  • deps: debug@​3.1.0
  • deps: iconv-lite@​0.5.2
    -expressjs/body-parser (body-parser)
balena-io/balena-cli (balena-io/balena-cli)

v23.2.30

Compare Source

Update dependency balena-settings-client to v6

Notable changes
  • Move internal typing dependencies to devDependencies [Thodoris Greasidis]
  • Fix node engine version requirements [Matthew Yarmolinsky]
  • Drop support for property paths in the get method [Matthew Yarmolinsky]
  • Drop support for node <20.12.0 and require es2019 [Matthew Yarmolinsky]
  • Update author to balena [Matthew Yarmolinsky]
  • Drop Bluebird [Matthew Yarmolinsky]
  • Drop mergeObjects in favor of es-toolkit merge [Matthew Yarmolinsky]
  • Replace lodash with es-toolkit [Matthew Yarmolinsky]
  • Update jsdoc-to-markdown [Matthew Yarmolinsky]
  • Update TypeScript to 5.1.3 [Thodoris Greasidis]
balena-io-modules/balena-settings-client (balena-settings-client)
v6.0.2

Compare Source

(2025-12-23)
  • Move internal typing dependencies to devDependencies [Thodoris Greasidis]
v6.0.1

Compare Source

(2025-12-23)
  • Fix node engine version requirements [Matthew Yarmolinsky]
v6.0.0

Compare Source

(2025-12-23)
  • Drop support for property paths in the get method [Matthew Yarmolinsky]
  • Drop support for node <20.12.0 and require es2019 [Matthew Yarmolinsky]
  • Update author to balena [Matthew Yarmolinsky]
  • Drop Bluebird [Matthew Yarmolinsky]
  • Drop mergeObjects in favor of es-toolkit merge [Matthew Yarmolinsky]
  • Replace lodash with es-toolkit [Matthew Yarmolinsky]
  • Update jsdoc-to-markdown [Matthew Yarmolinsky]
v5.0.3

Compare Source

(2023-06-02)
  • Update TypeScript to 5.1.3 [Thodoris Greasidis]
List of commits

22c6989 (Update dependency balena-settings-client to v6, 2026-01-16)

v23.2.29

Compare Source

Update dependency body-parser to v2

Notable changes
  • deps: qs@^6.14.1
  • refactor(json): simplify strict mode error string construction
  • Security fix for GHSA-wqch-xfxh-vrr4
  • deps:
  • refactor: normalize common options for all parsers
  • refactor: prefix built-in node module imports
  • use the node require cache instead of custom caching
  • remove unpipe package and use native unpipe() method
  • Restore expected behavior extended to false
  • Node.js 18 is the minimum supported version
  • req.body is no longer always initialized to {}
  • Remove deprecated bodyParser() combination middleware
  • urlencoded parser now defaults extended to false as released, this is not the case, fixed in 2.0.1
  • urlencoded simple parser now uses qs module instead of querystring module
  • Add brotli support #​406
  • urlencoded: Add option to customize the depth with a default value of 32
  • urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
  • Use on-finished to determine when body read
  • deps: raw-body@^3.0.0
  • deps: qs@​6.12.3
  • deps: debug@​3.1.0
  • deps: iconv-lite@​0.5.2
expressjs/body-parser (body-parser)
v2.2.2

Compare Source

=========================

  • deps: qs@^6.14.1
  • refactor(json): simplify strict mode error string construction
v2.2.1

Compare Source

=========================

  • Security fix for GHSA-wqch-xfxh-vrr4
  • deps:
    • type-is@^2.0.1
    • iconv-lite@^0.7.0
      • Handle split surrogate pairs when encoding UTF-8
      • Avoid false positives in encodingExists by using prototype-less objects
    • raw-body@^3.0.1
    • debug@^4.4.3
v2.2.0

Compare Source

=========================

  • refactor: normalize common options for all parsers
  • deps:
    • iconv-lite@^0.6.3
v2.1.0

Compare Source

=========================

  • deps:
    • type-is@^2.0.0
    • debug@^4.4.0
    • Removed destroy
  • refactor: prefix built-in node module imports
  • use the node require cache instead of custom caching
v2.0.2

Compare Source

=========================

  • remove unpipe package and use native unpipe() method
v2.0.1

Compare Source

=========================

  • Restore expected behavior extended to false
v2.0.0

Compare Source

=========================

Breaking Changes
  • Node.js 18 is the minimum supported version
  • req.body is no longer always initialized to {}
    • it is left undefined unless a body is parsed
  • Remove deprecated bodyParser() combination middleware
  • urlencoded parser now defaults extended to false as released, this is not the case, fixed in 2.0.1
  • urlencoded simple parser now uses qs module instead of querystring module
Features
  • Add brotli support #​406
  • urlencoded: Add option to customize the depth with a default value of 32
  • urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
  • Use on-finished to determine when body read
Dependencies
  • deps: raw-body@^3.0.0
  • deps: qs@​6.12.3
  • deps: debug@​3.1.0
  • deps: iconv-lite@​0.5.2
List of commits

a4bb84b (Update dependency body-parser to v2, 2026-01-16)
b12ba3e (Drop unneeded dependency @types/body-parser, 2026-01-16)
aec9484 (server: Add optional chain after request.body, 2026-01-16)
cebc4c9 (server.spec: Test for undefined bodies, 2026-01-16)
cd265ac (Deduplicate dependencies, 2026-01-16)

List of commits

83f9e0d (Update dependency balena-io/balena-cli to v23.2.30, 2026-01-16)

Don't miss a new open-balena release

NewReleases is sending notifications on new releases.