[PR #27] [MERGED] build(deps): bump multer from 1.4.5-lts.1 to 2.0.1 #29

New issue

Closed

opened 2026-05-22 22:03:17 +01:00 by JakeStanger · 0 comments

JakeStanger commented

2026-05-22 22:03:17 +01:00

Owner

📋 Pull Request Information

Original PR: https://github.com/JakeStanger/filexplorer/pull/27
Author: @dependabot[bot]
Created: 6/5/2025
Status: ✅ Merged
Merged: 6/5/2025
Merged by: @JakeStanger

Base: main ← Head: dependabot/npm_and_yarn/multer-2.0.1

📝 Commits (1)

86dad54 build(deps): bump multer from 1.4.5-lts.1 to 2.0.1

📊 Changes

2 files changed (+39 additions, -30 deletions)

View changed files

📝 package.json (+1 -1)
📝 yarn.lock (+38 -29)

📄 Description

Bumps multer from 1.4.5-lts.1 to 2.0.1.

Release notes

Sourced from multer's releases.

v2.0.1

Important

Fix CVE-2025-48997 (GHSA-g5hg-p3ph-g8qg)

What's Changed

add Arabic translation for README .. by @3imed-jaberi in expressjs/multer#762

Update README.md to fix issue #1114 by @Mohamed-Abdelfattah in expressjs/multer#1169

Improved documentation translation to Spanish by @juliomontenegro in expressjs/multer#1174

Translated to french by @AlanLg in expressjs/multer#1182

Improve the Brazilian Portuguese translation by @vitorRibeiro7 in expressjs/multer#1204

doc: uzbek language by @eugene0928 in expressjs/multer#1232

Fix a mistake with README-pt-br.md by @Igor-CA in expressjs/multer#1251

Update in Readme-pt-br and fix in Readme-ko by @carlosstenzel in expressjs/multer#1252

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/multer#1260

ci: replace travis with github action by @inigomarquinez in expressjs/multer#1259

docs: improve readability by @Sreejit-Sengupto in expressjs/multer#1255

test: add test for out-of-band error event by @LinusU in expressjs/multer#1294

chore: upgrade scorecard workflow pinned action versions by @carpasse in expressjs/multer#1290

Documentation: remove unfortunate abbreviation from readme by @MaddyGuthridge in expressjs/multer#1299

ci: use ubuntu-latest as default runner by @UlisesGascon in expressjs/multer#1308

ci: add CodeQL (SAST) by @bjohansebas in expressjs/multer#1289

Update readme badges by @bjohansebas in expressjs/multer#1268

📝 fix changelog information by @ctcpip in expressjs/multer#1316

master -> v2 by @ctcpip in expressjs/multer#1317

chore: fix typo by @saucecodee in expressjs/multer#993

Remove --save from README by @username1001 in expressjs/multer#929

feat - update link badge in docs by @carlosstenzel in expressjs/multer#1273

ci: change branch reference by @UlisesGascon in expressjs/multer#1319

♻️ use version tag for CI, fix CI badge, fix references to master/main by @ctcpip in expressjs/multer#1324

deps: update dependencies to latest versions by @bjohansebas in expressjs/multer#1328

📝 list languages in table to prevent GH right-aligning list due to RTL language by @ctcpip in expressjs/multer#1325

[StepSecurity] Apply security best practices by @step-security-bot in expressjs/multer#1311

New Contributors

@3imed-jaberi made their first contribution in expressjs/multer#762

@Mohamed-Abdelfattah made their first contribution in expressjs/multer#1169

@juliomontenegro made their first contribution in expressjs/multer#1174

@AlanLg made their first contribution in expressjs/multer#1182

@vitorRibeiro7 made their first contribution in expressjs/multer#1204

@eugene0928 made their first contribution in expressjs/multer#1232

@Igor-CA made their first contribution in expressjs/multer#1251

@inigomarquinez made their first contribution in expressjs/multer#1260

@Sreejit-Sengupto made their first contribution in expressjs/multer#1255

@carpasse made their first contribution in expressjs/multer#1290

@MaddyGuthridge made their first contribution in expressjs/multer#1299

@saucecodee made their first contribution in expressjs/multer#993

@username1001 made their first contribution in expressjs/multer#929

@step-security-bot made their first contribution in expressjs/multer#1311

... (truncated)

Changelog

Sourced from multer's changelog.

2.0.1

Fix CVE-2025-48997 (GHSA-g5hg-p3ph-g8qg)

2.0.0

Breaking change: The minimum supported Node version is now 10.16.0

Fix CVE-2025-47935 (GHSA-44fp-w29j-9vj5)

Fix CVE-2025-47944 (GHSA-4pg4-qvpc-4q3h)

1.4.5-lts.2

Fix out-of-band error event from busboy (#1177)

Commits

e259a7e 🔖 2.0.1
35a3272 Fixes expressjs/multer#1233. Makes multer handle mi...
f897007 ci: apply security best practices (#1311)
061f4cb 📝 list languages in table to prevent GH right-aligning list due to RTL language
854d769 deps: update dependencies to latest versions (#1328)
256da2f ♻️ use version tag for CI, fix CI badge, fix references to master/main
dd9dde4 📝 fix badges in translation files (#1321)
dc2a880 ci: change branch reference
de80e57 ci: change branch reference
1b92c67 docs: update badge links in docs (#1273)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for multer since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/JakeStanger/filexplorer/pull/27 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 6/5/2025 **Status:** ✅ Merged **Merged:** 6/5/2025 **Merged by:** [@JakeStanger](https://github.com/JakeStanger) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/multer-2.0.1` --- ### 📝 Commits (1) - [`86dad54`](https://github.com/JakeStanger/filexplorer/commit/86dad54a5a397e29b85ad708154e5c7ea804cda4) build(deps): bump multer from 1.4.5-lts.1 to 2.0.1 ### 📊 Changes **2 files changed** (+39 additions, -30 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+1 -1) 📝 `yarn.lock` (+38 -29) </details> ### 📄 Description Bumps [multer](https://github.com/expressjs/multer) from 1.4.5-lts.1 to 2.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/multer/releases">multer's releases</a>.</em></p> <blockquote> <h2>v2.0.1</h2> <h2>Important</h2> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2025-48997">CVE-2025-48997</a> (<a href="https://github.com/expressjs/multer/security/advisories/GHSA-g5hg-p3ph-g8qg">GHSA-g5hg-p3ph-g8qg</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>add Arabic translation for README .. by <a href="https://github.com/3imed-jaberi"><code>@3imed-jaberi</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/762">expressjs/multer#762</a></li> <li>Update README.md to fix issue <a href="https://redirect.github.com/expressjs/multer/issues/1114">#1114</a> by <a href="https://github.com/Mohamed-Abdelfattah"><code>@Mohamed-Abdelfattah</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1169">expressjs/multer#1169</a></li> <li>Improved documentation translation to Spanish by <a href="https://github.com/juliomontenegro"><code>@juliomontenegro</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1174">expressjs/multer#1174</a></li> <li>Translated to french by <a href="https://github.com/AlanLg"><code>@AlanLg</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1182">expressjs/multer#1182</a></li> <li>Improve the Brazilian Portuguese translation by <a href="https://github.com/vitorRibeiro7"><code>@vitorRibeiro7</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1204">expressjs/multer#1204</a></li> <li>doc: uzbek language by <a href="https://github.com/eugene0928"><code>@eugene0928</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1232">expressjs/multer#1232</a></li> <li>Fix a mistake with README-pt-br.md by <a href="https://github.com/Igor-CA"><code>@Igor-CA</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1251">expressjs/multer#1251</a></li> <li>Update in Readme-pt-br and fix in Readme-ko by <a href="https://github.com/carlosstenzel"><code>@carlosstenzel</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1252">expressjs/multer#1252</a></li> <li>chore: add support for OSSF scorecard reporting by <a href="https://github.com/inigomarquinez"><code>@inigomarquinez</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1260">expressjs/multer#1260</a></li> <li>ci: replace travis with github action by <a href="https://github.com/inigomarquinez"><code>@inigomarquinez</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1259">expressjs/multer#1259</a></li> <li>docs: improve readability by <a href="https://github.com/Sreejit-Sengupto"><code>@Sreejit-Sengupto</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1255">expressjs/multer#1255</a></li> <li>test: add test for out-of-band error event by <a href="https://github.com/LinusU"><code>@LinusU</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1294">expressjs/multer#1294</a></li> <li>chore: upgrade scorecard workflow pinned action versions by <a href="https://github.com/carpasse"><code>@carpasse</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1290">expressjs/multer#1290</a></li> <li>Documentation: remove unfortunate abbreviation from readme by <a href="https://github.com/MaddyGuthridge"><code>@MaddyGuthridge</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1299">expressjs/multer#1299</a></li> <li>ci: use <code>ubuntu-latest</code> as default runner by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1308">expressjs/multer#1308</a></li> <li>ci: add CodeQL (SAST) by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1289">expressjs/multer#1289</a></li> <li>Update readme badges by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1268">expressjs/multer#1268</a></li> <li>📝 fix changelog information by <a href="https://github.com/ctcpip"><code>@ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1316">expressjs/multer#1316</a></li> <li>master -> v2 by <a href="https://github.com/ctcpip"><code>@ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1317">expressjs/multer#1317</a></li> <li>chore: fix typo by <a href="https://github.com/saucecodee"><code>@saucecodee</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/993">expressjs/multer#993</a></li> <li>Remove --save from README by <a href="https://github.com/username1001"><code>@username1001</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/929">expressjs/multer#929</a></li> <li>feat - update link badge in docs by <a href="https://github.com/carlosstenzel"><code>@carlosstenzel</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1273">expressjs/multer#1273</a></li> <li>ci: change branch reference by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1319">expressjs/multer#1319</a></li> <li>♻️ use version tag for CI, fix CI badge, fix references to master/main by <a href="https://github.com/ctcpip"><code>@ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1324">expressjs/multer#1324</a></li> <li>deps: update dependencies to latest versions by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1328">expressjs/multer#1328</a></li> <li>📝 list languages in table to prevent GH right-aligning list due to RTL language by <a href="https://github.com/ctcpip"><code>@ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1325">expressjs/multer#1325</a></li> <li>[StepSecurity] Apply security best practices by <a href="https://github.com/step-security-bot"><code>@step-security-bot</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1311">expressjs/multer#1311</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/3imed-jaberi"><code>@3imed-jaberi</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/762">expressjs/multer#762</a></li> <li><a href="https://github.com/Mohamed-Abdelfattah"><code>@Mohamed-Abdelfattah</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1169">expressjs/multer#1169</a></li> <li><a href="https://github.com/juliomontenegro"><code>@juliomontenegro</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1174">expressjs/multer#1174</a></li> <li><a href="https://github.com/AlanLg"><code>@AlanLg</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1182">expressjs/multer#1182</a></li> <li><a href="https://github.com/vitorRibeiro7"><code>@vitorRibeiro7</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1204">expressjs/multer#1204</a></li> <li><a href="https://github.com/eugene0928"><code>@eugene0928</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1232">expressjs/multer#1232</a></li> <li><a href="https://github.com/Igor-CA"><code>@Igor-CA</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1251">expressjs/multer#1251</a></li> <li><a href="https://github.com/inigomarquinez"><code>@inigomarquinez</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1260">expressjs/multer#1260</a></li> <li><a href="https://github.com/Sreejit-Sengupto"><code>@Sreejit-Sengupto</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1255">expressjs/multer#1255</a></li> <li><a href="https://github.com/carpasse"><code>@carpasse</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1290">expressjs/multer#1290</a></li> <li><a href="https://github.com/MaddyGuthridge"><code>@MaddyGuthridge</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1299">expressjs/multer#1299</a></li> <li><a href="https://github.com/saucecodee"><code>@saucecodee</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/993">expressjs/multer#993</a></li> <li><a href="https://github.com/username1001"><code>@username1001</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/929">expressjs/multer#929</a></li> <li><a href="https://github.com/step-security-bot"><code>@step-security-bot</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1311">expressjs/multer#1311</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/multer/blob/main/CHANGELOG.md">multer's changelog</a>.</em></p> <blockquote> <h2>2.0.1</h2> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2025-48997">CVE-2025-48997</a> (<a href="https://github.com/expressjs/multer/security/advisories/GHSA-g5hg-p3ph-g8qg">GHSA-g5hg-p3ph-g8qg</a>)</li> </ul> <h2>2.0.0</h2> <ul> <li><strong>Breaking change: The minimum supported Node version is now 10.16.0</strong></li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2025-47935">CVE-2025-47935</a> (<a href="https://github.com/expressjs/multer/security/advisories/GHSA-44fp-w29j-9vj5">GHSA-44fp-w29j-9vj5</a>)</li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2025-47944">CVE-2025-47944</a> (<a href="https://github.com/expressjs/multer/security/advisories/GHSA-4pg4-qvpc-4q3h">GHSA-4pg4-qvpc-4q3h</a>)</li> </ul> <h2>1.4.5-lts.2</h2> <ul> <li>Fix out-of-band error event from busboy (<a href="https://redirect.github.com/expressjs/multer/issues/1177">#1177</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/multer/commit/e259a7ee2141f5c89fd3d3e7d6825e706754340e"><code>e259a7e</code></a> 🔖 2.0.1</li> <li><a href="https://github.com/expressjs/multer/commit/35a3272b611945155e046dd5cef11088587635e9"><code>35a3272</code></a> Fixes <a href="https://redirect.github.com/expressjs/multer/issues/1233">expressjs/multer#1233</a>. Makes multer handle mi...</li> <li><a href="https://github.com/expressjs/multer/commit/f897007a94da404ac9586630dc168c5c30d82512"><code>f897007</code></a> ci: apply security best practices (<a href="https://redirect.github.com/expressjs/multer/issues/1311">#1311</a>)</li> <li><a href="https://github.com/expressjs/multer/commit/061f4cbb2b7bdb803923bb3f1252281f1b89dbb3"><code>061f4cb</code></a> 📝 list languages in table to prevent GH right-aligning list due to RTL language</li> <li><a href="https://github.com/expressjs/multer/commit/854d769af40542b28abd5785be6a2818406c8c2a"><code>854d769</code></a> deps: update dependencies to latest versions (<a href="https://redirect.github.com/expressjs/multer/issues/1328">#1328</a>)</li> <li><a href="https://github.com/expressjs/multer/commit/256da2f6eb8377b09740e78f8dacfad52a2b5122"><code>256da2f</code></a> ♻️ use version tag for CI, fix CI badge, fix references to master/main</li> <li><a href="https://github.com/expressjs/multer/commit/dd9dde4da1a40a6f03229233491fc5f68ed0012a"><code>dd9dde4</code></a> 📝 fix badges in translation files (<a href="https://redirect.github.com/expressjs/multer/issues/1321">#1321</a>)</li> <li><a href="https://github.com/expressjs/multer/commit/dc2a880e76b210088ce841ca264fdea5744f8358"><code>dc2a880</code></a> ci: change branch reference</li> <li><a href="https://github.com/expressjs/multer/commit/de80e57b26eaca762829c1e01a2b378d0532eb4c"><code>de80e57</code></a> ci: change branch reference</li> <li><a href="https://github.com/expressjs/multer/commit/1b92c6786fae84a9cd202d38ea62f46804dccde0"><code>1b92c67</code></a> docs: update badge links in docs (<a href="https://redirect.github.com/expressjs/multer/issues/1273">#1273</a>)</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/multer/compare/v1.4.5-lts.1...v2.0.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~ulisesgascon">ulisesgascon</a>, a new releaser for multer since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=multer&package-manager=npm_and_yarn&previous-version=1.4.5-lts.1&new-version=2.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/JakeStanger/filexplorer/network/alerts). </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

JakeStanger

2026-05-22 22:03:17 +01:00