Skip to content

refactor: Security upgrade body-parser from 2.2.0 to 2.2.1 #3021

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
mtrezza merged 2 commits into from
Nov 28, 2025
Merged

refactor: Security upgrade body-parser from 2.2.0 to 2.2.1 #3021

mtrezza merged 2 commits into from
Nov 28, 2025

Conversation

@parseplatformorg
Copy link
Contributor

@parseplatformorg parseplatformorg commented Nov 26, 2025 •
edited by coderabbitai bot
Loading

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JS-BODYPARSER-14105059

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

Summary by CodeRabbit

  • Chores
    • Updated body-parser dependency to the latest patch version.

✏️ Tip: You can customize this high-level summary in your review settings.

@parse-github-assistant
Copy link

parse-github-assistant bot commented Nov 26, 2025

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title [Snyk] Security upgrade body-parser from 2.2.0 to 2.2.1 refactor: Security upgrade body-parser from 2.2.0 to 2.2.1 Nov 26, 2025
@parse-github-assistant
Copy link

parse-github-assistant bot commented Nov 26, 2025

🚀 Thanks for opening this pull request!

@coderabbitai
Copy link

coderabbitai bot commented Nov 26, 2025 •
edited
Loading

Warning

Rate limit exceeded

@mtrezza has exceeded the limit for the number of commits or files that can be reviewed per hour. Please wait 0 minutes and 44 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

📥 Commits

Reviewing files that changed from the base of the PR and between 0256fea and 9f59bde.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json (1 hunks)
📝 Walkthrough

Walkthrough

Updated the body-parser dependency from version 2.2.0 to 2.2.1 in package.json. This is a patch-level version update with no code logic changes or public API modifications.

Changes

Cohort / File(s) Summary
Dependency Update
package.json		 Bumped body-parser from 2.2.0 to 2.2.1

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Pre-merge checks and finishing touches

❌ Failed checks (1 warning)
Check name Status Explanation Resolution
Description check ⚠️ Warning The PR description lacks the required template structure, missing key sections like Issue Description (with 'Closes' link), Approach, and TODOs checklist. Add the required PR template sections: Issue Description with a 'Closes' reference, Approach section describing the security upgrade rationale, and TODOs checklist before merging.
✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and accurately summarizes the main change: a security upgrade of the body-parser dependency from version 2.2.0 to 2.2.1.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@parseplatformorg
Copy link
Contributor Author

parseplatformorg commented Nov 26, 2025 •
edited
Loading

✅ Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@mtrezza mtrezza merged commit 93812d7 into alpha Nov 28, 2025
9 of 11 checks passed
@mtrezza mtrezza deleted the snyk-fix-345b4e9957b9547f9a2e4c6495478ff7 branch November 28, 2025 02:37
@parseplatformorg
Copy link
Contributor Author

parseplatformorg commented Nov 28, 2025

🎉 This change has been released in version 8.1.0-alpha.9

@parseplatformorg parseplatformorg added the state:released-alpha Released as alpha version label Nov 28, 2025
@parseplatformorg
Copy link
Contributor Author

parseplatformorg commented Dec 1, 2025

🎉 This change has been released in version 8.1.0

@parseplatformorg parseplatformorg added the state:released Released as stable version label Dec 1, 2025
beiguancyc pushed a commit to beiguancyc/parse-dashboard that referenced this pull request Dec 16, 2025
@cycqitianwushuge
Merge commit '68e9be3a35edb730db5a0174b0dab5e763e67622'
fef9bd6 
* commit '68e9be3a35edb730db5a0174b0dab5e763e67622': (31 commits)
  chore(release): 8.1.0 [skip ci]
  empty commit to trigger CI
  chore(release): 8.1.0-alpha.13 [skip ci]
  feat: Upgrade to parse 7.1.2 (parse-community#3038)
  chore(release): 8.1.0-alpha.12 [skip ci]
  fix: Data browser export triggers confirmation dialog for navigating with selected rows (parse-community#3037)
  chore(release): 8.1.0-alpha.11 [skip ci]
  fix: Info panel may show stale data of previous objects when refreshing the data table or navigating between classes (parse-community#3036)
  chore(release): 8.1.0-alpha.10 [skip ci]
  feat: Remember info panel width and count across browser sessions (parse-community#3031)
  chore(release): 8.1.0-alpha.9 [skip ci]
  refactor: Bump @babel/preset-env from 7.27.2 to 7.28.5 (parse-community#3017)
  refactor: Security upgrade body-parser from 2.2.0 to 2.2.1 (parse-community#3021)
  fix: Selected saved filter is not expanded in sidebar when reloading browser page (parse-community#3029)
  chore(release): 8.1.0-alpha.8 [skip ci]
  feat: Remember selected column when navigating between saved filters of a class with auto-load first row enabled (parse-community#3028)
  chore(release): 8.1.0-alpha.7 [skip ci]
  fix: Info panel data not reloading when clicking refresh button in data browser (parse-community#3027)
  refactor: Bump js-yaml from 3.14.1 to 3.14.2 (parse-community#3022)
  chore(release): 8.1.0-alpha.6 [skip ci]
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@coderabbitai coderabbitai[bot] coderabbitai[bot] approved these changes

Assignees

No one assigned

Labels

state:released Released as stable version state:released-alpha Released as alpha version

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@parseplatformorg @mtrezza @snyk-bot