Skip to content

chore(deps): bump the server-dependencies group across 1 directory with 2 updates - #1186

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server-dependencies-3e4af54ad7
Open

chore(deps): bump the server-dependencies group across 1 directory with 2 updates#1186
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server-dependencies-3e4af54ad7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the server-dependencies group with 2 updates in the / directory: cookie and http-proxy-middleware.

Updates cookie from 1.1.1 to 2.0.1

Release notes

Sourced from cookie's releases.

v2.0.1

Improved:

  • Small performance improvement by incrementing = index while parsing set-cookie (jshttp/cookie#280)

v2.0.0

Important: This release moves the package to ESM only. In node 22+ you can require(esm), and older node versions are not supported.

Changed

  • Switch to ESM (jshttp/cookie#273)
  • Remove deprecated code paths (jshttp/cookie#272)
    • The old parse and stringify methods have been renamed: parseCookie and stringifySetCookie
    • stringifySetCookie only supports object mode (e.g. { name: "", value: "" })

Improvements

Fixed

  • Omit leading semicolon when stringifying cookies with skipped values (#267)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cookie since your current version.


Updates http-proxy-middleware from 4.1.1 to 4.2.0

Release notes

Sourced from http-proxy-middleware's releases.

v4.2.0

What's Changed

New Contributors

Full Changelog: chimurai/http-proxy-middleware@v4.1.1...v4.2.0

Changelog

Sourced from http-proxy-middleware's changelog.

v4.2.0

  • feat(types): export OnProxyEvent type
  • feat(debug-proxy-errors-plugin): diagnostic message for POST + bodyParser + ECONNRESET error
  • chore(package.json): update to httpxy v0.5.4
Commits
  • 4abb1ba chore(package.json): v4.2.0 (#1276)
  • d40ae3e chore(package.json): update dependencies (#1275)
  • 89a78d0 chore(debug-proxy-errors-plugin): fix BODY_PARSER_ERROR_MESSAGE formatting (#...
  • 7ba87a9 feat(debug-proxy-errors-plugin): debug message for bodyParser + ECONNRESET er...
  • 006f1a4 test(e2e): assert invalid multipart error log (#1272)
  • 22281bf test(e2e): add HttpAgent keepAlive test (#472) (#1267)
  • 5b37301 chore(package.json): bump dev deps (#1265)
  • 3695b93 refactor(errors): use HttpProxyMiddlewareError class (#1264)
  • b9242af feat(types): export OnProxyEvent type (#1263)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026
@trustify-ci-bot

Copy link
Copy Markdown
Contributor

Major version update — Dependabot version-update:semver-major requires manual review before merging.

@codecov

codecov Bot commented Aug 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.22%. Comparing base (e1f27d0) to head (3f28d4f).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1186      +/-   ##
==========================================
+ Coverage   54.19%   54.22%   +0.03%     
==========================================
  Files         255      255              
  Lines        5715     5715              
  Branches     1774     1774              
==========================================
+ Hits         3097     3099       +2     
  Misses       2355     2355              
+ Partials      263      261       -2     
Flag Coverage Δ
e2e 70.41% <ø> (+0.04%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

…th 2 updates

Bumps the server-dependencies group with 2 updates in the / directory: [cookie](https://github.com/jshttp/cookie) and [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware).


Updates `cookie` from 1.1.1 to 2.0.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v1.1.1...v2.0.1)

Updates `http-proxy-middleware` from 4.1.1 to 4.2.0
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/master/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v4.1.1...v4.2.0)

---
updated-dependencies:
- dependency-name: cookie
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: http-proxy-middleware
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/server-dependencies-3e4af54ad7 branch from 2c6f719 to 3f28d4f Compare August 9, 2026 11:30
@trustify-ci-bot

Copy link
Copy Markdown
Contributor

Major version update — Dependabot version-update:semver-major requires manual review before merging.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

0 participants