Skip to content

Commit

Permalink
Update the busboy dependency to v1.
Browse files Browse the repository at this point in the history
Fixes #311 .
  • Loading branch information
jaydenseric committed May 27, 2022
1 parent ab06b20 commit 5d4c758
Show file tree
Hide file tree
Showing 4 changed files with 185 additions and 177 deletions.
8 changes: 8 additions & 0 deletions changelog.md
Expand Up @@ -2,6 +2,14 @@

## Next

### Major

- Updated the [`busboy`](https://npm.im/busboy) dependency to v1, fixing [#311](https://github.com/jaydenseric/graphql-upload/issues/311).
- This important update addresses the vulnerability [CVE-2022-24434](https://nvd.nist.gov/vuln/detail/CVE-2022-24434) ([GHSA-wm7h-9275-46v2](https://github.com/advisories/GHSA-wm7h-9275-46v2)).
- It now emits an error on a file upload stream if the request disconnects partway through, which is different to the error that used to come from [`graphql-upload`](https://npm.im/graphql-upload).
- Some error messages have changed.
- Temporarily until [mscdex/busboy#297](https://github.com/mscdex/busboy/issues/297) is fixed upstream, for the function `processRequest` and the middleware `graphqlUploadExpress` and `graphqlUploadKoa` the option `maxFileSize` is actually 1 byte less than the amount specified.

### Patch

- Updated the [`typescript`](https://npm.im/typescript) dev dependency.
Expand Down
4 changes: 2 additions & 2 deletions package.json
Expand Up @@ -61,10 +61,10 @@
}
},
"dependencies": {
"@types/busboy": "^0.3.2",
"@types/busboy": "^1.5.0",
"@types/node": "*",
"@types/object-path": "^0.11.1",
"busboy": "^0.3.1",
"busboy": "^1.6.0",
"fs-capacitor": "^6.2.0",
"http-errors": "^2.0.0",
"object-path": "^0.11.8"
Expand Down

0 comments on commit 5d4c758

Please sign in to comment.