[PR #74] [CLOSED] chore(deps-dev): bump koa from 3.1.1 to 3.1.2 #79

New issue

Closed

opened 2026-05-06 16:07:27 +02:00 by BreizhHardware · 0 comments

BreizhHardware commented

2026-05-06 16:07:27 +02:00

Owner

📋 Pull Request Information

Original PR: https://github.com/BreizhHardware/express-prom-bundle/pull/74
Author: @dependabot[bot]
Created: 3/2/2026
Status: ❌ Closed

Base: dev ← Head: dependabot/npm_and_yarn/dev/koa-3.1.2

📝 Commits (1)

814705a chore(deps-dev): bump koa from 3.1.1 to 3.1.2

📊 Changes

1 file changed (+14 additions, -23 deletions)

View changed files

📝 package-lock.json (+14 -23)

📄 Description

Bumps koa from 3.1.1 to 3.1.2.

Release notes

Sourced from koa's releases.

v3.1.2

What's Changed

fix: typo in troubleshooting.md by @WuMingDao in koajs/koa#1916

build(deps-dev): bump qs from 6.14.0 to 6.14.1 by @dependabot[bot] in koajs/koa#1921

build(deps): bump http-errors from 2.0.0 to 2.0.1 by @dependabot[bot] in koajs/koa#1919

build(deps): bump mime-types from 3.0.1 to 3.0.2 by @dependabot[bot] in koajs/koa#1918

docs: use correct term "Server-Sent Events" in guide by @jtr860830 in koajs/koa#1920

build(deps): bump content-disposition from 0.5.4 to 1.0.1 by @dependabot[bot] in koajs/koa#1917

build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 by @dependabot[bot] in koajs/koa#1922

fix(security): Host Header Injection via ctx.hostname by @killagu https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm

New Contributors

@WuMingDao made their first contribution in koajs/koa#1916

@jtr860830 made their first contribution in koajs/koa#1920

Full Changelog: https://github.com/koajs/koa/compare/v3.1.1...v3.1.2

Commits

c5a52e0 3.1.2
55ab9ba Merge commit from fork
fecd464 build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#1922)
d2066cf build(deps): bump content-disposition from 0.5.4 to 1.0.1 (#1917)
8694a06 docs: use correct term "Server-Sent Events" in guide (#1920)
096682b build(deps): bump mime-types from 3.0.1 to 3.0.2 (#1918)
8215c2e build(deps): bump http-errors from 2.0.0 to 2.0.1 (#1919)
cfe5ec6 build(deps-dev): bump qs from 6.14.0 to 6.14.1 (#1921)
0a6afa5 fix: typo in troubleshooting.md (#1916)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/BreizhHardware/express-prom-bundle/pull/74 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/2/2026 **Status:** ❌ Closed **Base:** `dev` ← **Head:** `dependabot/npm_and_yarn/dev/koa-3.1.2` --- ### 📝 Commits (1) - [`814705a`](https://github.com/BreizhHardware/express-prom-bundle/commit/814705ab0877ae85981dea2613537925f5e0eeb4) chore(deps-dev): bump koa from 3.1.1 to 3.1.2 ### 📊 Changes **1 file changed** (+14 additions, -23 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+14 -23) </details> ### 📄 Description Bumps [koa](https://github.com/koajs/koa) from 3.1.1 to 3.1.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/koajs/koa/releases">koa's releases</a>.</em></p> <blockquote> <h2>v3.1.2</h2> <h2>What's Changed</h2> <ul> <li>fix: typo in troubleshooting.md by <a href="https://github.com/WuMingDao"><code>@WuMingDao</code></a> in <a href="https://redirect.github.com/koajs/koa/pull/1916">koajs/koa#1916</a></li> <li>build(deps-dev): bump qs from 6.14.0 to 6.14.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/koajs/koa/pull/1921">koajs/koa#1921</a></li> <li>build(deps): bump http-errors from 2.0.0 to 2.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/koajs/koa/pull/1919">koajs/koa#1919</a></li> <li>build(deps): bump mime-types from 3.0.1 to 3.0.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/koajs/koa/pull/1918">koajs/koa#1918</a></li> <li>docs: use correct term "Server-Sent Events" in guide by <a href="https://github.com/jtr860830"><code>@jtr860830</code></a> in <a href="https://redirect.github.com/koajs/koa/pull/1920">koajs/koa#1920</a></li> <li>build(deps): bump content-disposition from 0.5.4 to 1.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/koajs/koa/pull/1917">koajs/koa#1917</a></li> <li>build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/koajs/koa/pull/1922">koajs/koa#1922</a></li> <li>fix(security): Host Header Injection via <code>ctx.hostname</code> by <a href="https://github.com/killagu"><code>@killagu</code></a> <a href="https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm">https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/WuMingDao"><code>@WuMingDao</code></a> made their first contribution in <a href="https://redirect.github.com/koajs/koa/pull/1916">koajs/koa#1916</a></li> <li><a href="https://github.com/jtr860830"><code>@jtr860830</code></a> made their first contribution in <a href="https://redirect.github.com/koajs/koa/pull/1920">koajs/koa#1920</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/koajs/koa/compare/v3.1.1...v3.1.2">https://github.com/koajs/koa/compare/v3.1.1...v3.1.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/koajs/koa/commit/c5a52e056d61afa012a08d3aa89a59bce5ccbf1b"><code>c5a52e0</code></a> 3.1.2</li> <li><a href="https://github.com/koajs/koa/commit/55ab9bab044ead4e82c70a30a4f9dc0fc9c1b6df"><code>55ab9ba</code></a> Merge commit from fork</li> <li><a href="https://github.com/koajs/koa/commit/fecd464ae7be82bd71b275c1faa746dd1c45ef5b"><code>fecd464</code></a> build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (<a href="https://redirect.github.com/koajs/koa/issues/1922">#1922</a>)</li> <li><a href="https://github.com/koajs/koa/commit/d2066cf2a52fe3aeeb5778c8cce204a73ea6fb87"><code>d2066cf</code></a> build(deps): bump content-disposition from 0.5.4 to 1.0.1 (<a href="https://redirect.github.com/koajs/koa/issues/1917">#1917</a>)</li> <li><a href="https://github.com/koajs/koa/commit/8694a06eb67aeec90f06f17b2a716bccfbad11e5"><code>8694a06</code></a> docs: use correct term "Server-Sent Events" in guide (<a href="https://redirect.github.com/koajs/koa/issues/1920">#1920</a>)</li> <li><a href="https://github.com/koajs/koa/commit/096682b31592b20319549f57517abf3fc90649a1"><code>096682b</code></a> build(deps): bump mime-types from 3.0.1 to 3.0.2 (<a href="https://redirect.github.com/koajs/koa/issues/1918">#1918</a>)</li> <li><a href="https://github.com/koajs/koa/commit/8215c2e3896932d966951042f9a0d8aa743e40fe"><code>8215c2e</code></a> build(deps): bump http-errors from 2.0.0 to 2.0.1 (<a href="https://redirect.github.com/koajs/koa/issues/1919">#1919</a>)</li> <li><a href="https://github.com/koajs/koa/commit/cfe5ec6aea6acf2ebf2868687692dae7fac726fe"><code>cfe5ec6</code></a> build(deps-dev): bump qs from 6.14.0 to 6.14.1 (<a href="https://redirect.github.com/koajs/koa/issues/1921">#1921</a>)</li> <li><a href="https://github.com/koajs/koa/commit/0a6afa5a6107c0c8baf4722e29de7566f33d1651"><code>0a6afa5</code></a> fix: typo in troubleshooting.md (<a href="https://redirect.github.com/koajs/koa/issues/1916">#1916</a>)</li> <li>See full diff in <a href="https://github.com/koajs/koa/compare/v3.1.1...v3.1.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=koa&package-manager=npm_and_yarn&previous-version=3.1.1&new-version=3.1.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>