Skip to content

v1.0.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Nov 08:13
· 8 commits to main since this release
v1.0.2
d6ee362

Maintenance release for the development tool chain. The published package and its behaviour do not change.

Highlights

  • Security updates of development-only dependencies (multer, body-parser, and undici inside the npm CLI that Node-RED bundles). The package has no runtime dependencies, so installed nodes were not affected.

Upgrade notes

None.

Details (CHANGELOG)

Security

  • Development dependencies only (the published package has no dependencies): npm overrides for multer 2.5.0 (GHSA high), body-parser 1.20.9 (high) and the npm CLI bundled by Node-RED 11.21.2, which brings undici 6.29.1 (high and medium). No change to the nodes or the binaries.

Full diff: v1.0.1...v1.0.2

Assets 3
Loading