JakeStanger/filexplorer

Fork 0

mirror of https://github.com/JakeStanger/filexplorer.git synced 2026-07-11 05:15:12 +01:00

[PR #32] [MERGED] build(deps): bump multer from 2.0.2 to 2.1.0 #32

New issue

Closed

opened 2026-05-22 22:03:18 +01:00 by JakeStanger · 0 comments

JakeStanger commented

2026-05-22 22:03:18 +01:00

Owner

📋 Pull Request Information

Original PR: https://github.com/JakeStanger/filexplorer/pull/32
Author: @dependabot[bot]
Created: 3/3/2026
Status: ✅ Merged
Merged: 3/3/2026
Merged by: @JakeStanger

Base: main ← Head: dependabot/npm_and_yarn/multer-2.1.0

📝 Commits (1)

3ee7f2b build(deps): bump multer from 2.0.2 to 2.1.0

📊 Changes

2 files changed (+7 additions, -17 deletions)

View changed files

📝 package.json (+1 -1)
📝 yarn.lock (+6 -16)

📄 Description

Bumps multer from 2.0.2 to 2.1.0.

Release notes

Sourced from multer's releases.

v2.1.0

Important

Fix CVE-2026-2359 (GHSA-v52c-386h-88mc)

Fix CVE-2026-3304 (GHSA-xf7r-hgr6-v32p)

What's Changed

chore: add funding to package.json by @bjohansebas in expressjs/multer#1346

chore: drop mkdirp dependency by @wojtekmaj in expressjs/multer#1350

chore: drop object-assign dependency by @wojtekmaj in expressjs/multer#1351

chore: drop xtend dependency by @wojtekmaj in expressjs/multer#1352

chore(gitignore): ignore .nyc_output directory by @ShubhamOulkar in expressjs/multer#1332

Fix typo in README-vi.md regarding file upload by @Kunniii in expressjs/multer#1366

Fix typo in README-pt-br.md for array method by @matheushbm192 in expressjs/multer#1367

headers-support-utf8 by @Doc999tor in expressjs/multer#1210

Add Turkish translation (README-tr.md) by @Sabandogan in expressjs/multer#1360

Release: 2.1.0 by @UlisesGascon in expressjs/multer#1371

New Contributors

@wojtekmaj made their first contribution in expressjs/multer#1350

@ShubhamOulkar made their first contribution in expressjs/multer#1332

@Kunniii made their first contribution in expressjs/multer#1366

@matheushbm192 made their first contribution in expressjs/multer#1367

@Doc999tor made their first contribution in expressjs/multer#1210

@Sabandogan made their first contribution in expressjs/multer#1360

Full Changelog: https://github.com/expressjs/multer/compare/v2.0.2...v2.1.0

Changelog

Sourced from multer's changelog.

2.1.0

Add defParamCharset option for UTF-8 filename support (#1210)

Fix CVE-2026-2359 (GHSA-v52c-386h-88mc)

Fix CVE-2026-3304 (GHSA-xf7r-hgr6-v32p)

Commits

809f9dd 2.1.0 (#1371)
7399190 🔒 fix orphaned files issue
cccf0fe 🔒️ improve disconnect handling
2c8cd23 docs: add Turkish translation (README-tr.md) (#1360)
fd3c7d3 feat: add defParamCharset option for UTF-8 filename support (#1210)
c13ab94 docs: improve readability in README-pt-br.md for array method (#1367)
e28d678 docs: improve readability (#1366)
51529e3 fix: add .nyc_output to .gitignore (#1332)
b6e4b1f chore: drop xtend dependency (#1352)
5c8407f chore: drop object-assign dependency (#1351)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/JakeStanger/filexplorer/pull/32 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/3/2026 **Status:** ✅ Merged **Merged:** 3/3/2026 **Merged by:** [@JakeStanger](https://github.com/JakeStanger) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/multer-2.1.0` --- ### 📝 Commits (1) - [`3ee7f2b`](https://github.com/JakeStanger/filexplorer/commit/3ee7f2bc9b82ce75c0c291e746bf12de9f511777) build(deps): bump multer from 2.0.2 to 2.1.0 ### 📊 Changes **2 files changed** (+7 additions, -17 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+1 -1) 📝 `yarn.lock` (+6 -16) </details> ### 📄 Description Bumps [multer](https://github.com/expressjs/multer) from 2.0.2 to 2.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/multer/releases">multer's releases</a>.</em></p> <blockquote> <h2>v2.1.0</h2> <h2>Important</h2> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-2359">CVE-2026-2359</a> (<a href="https://github.com/expressjs/multer/security/advisories/GHSA-v52c-386h-88mc">GHSA-v52c-386h-88mc</a>)</li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-3304">CVE-2026-3304</a> (<a href="https://github.com/expressjs/multer/security/advisories/GHSA-xf7r-hgr6-v32p">GHSA-xf7r-hgr6-v32p</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>chore: add funding to package.json by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1346">expressjs/multer#1346</a></li> <li>chore: drop mkdirp dependency by <a href="https://github.com/wojtekmaj"><code>@wojtekmaj</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1350">expressjs/multer#1350</a></li> <li>chore: drop object-assign dependency by <a href="https://github.com/wojtekmaj"><code>@wojtekmaj</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1351">expressjs/multer#1351</a></li> <li>chore: drop xtend dependency by <a href="https://github.com/wojtekmaj"><code>@wojtekmaj</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1352">expressjs/multer#1352</a></li> <li>chore(gitignore): ignore .nyc_output directory by <a href="https://github.com/ShubhamOulkar"><code>@ShubhamOulkar</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1332">expressjs/multer#1332</a></li> <li>Fix typo in README-vi.md regarding file upload by <a href="https://github.com/Kunniii"><code>@Kunniii</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1366">expressjs/multer#1366</a></li> <li>Fix typo in README-pt-br.md for array method by <a href="https://github.com/matheushbm192"><code>@matheushbm192</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1367">expressjs/multer#1367</a></li> <li>headers-support-utf8 by <a href="https://github.com/Doc999tor"><code>@Doc999tor</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1210">expressjs/multer#1210</a></li> <li>Add Turkish translation (README-tr.md) by <a href="https://github.com/Sabandogan"><code>@Sabandogan</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1360">expressjs/multer#1360</a></li> <li>Release: 2.1.0 by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/multer/pull/1371">expressjs/multer#1371</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/wojtekmaj"><code>@wojtekmaj</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1350">expressjs/multer#1350</a></li> <li><a href="https://github.com/ShubhamOulkar"><code>@ShubhamOulkar</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1332">expressjs/multer#1332</a></li> <li><a href="https://github.com/Kunniii"><code>@Kunniii</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1366">expressjs/multer#1366</a></li> <li><a href="https://github.com/matheushbm192"><code>@matheushbm192</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1367">expressjs/multer#1367</a></li> <li><a href="https://github.com/Doc999tor"><code>@Doc999tor</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1210">expressjs/multer#1210</a></li> <li><a href="https://github.com/Sabandogan"><code>@Sabandogan</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/multer/pull/1360">expressjs/multer#1360</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/multer/compare/v2.0.2...v2.1.0">https://github.com/expressjs/multer/compare/v2.0.2...v2.1.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/multer/blob/main/CHANGELOG.md">multer's changelog</a>.</em></p> <blockquote> <h2>2.1.0</h2> <ul> <li>Add <code>defParamCharset</code> option for UTF-8 filename support (<a href="https://redirect.github.com/expressjs/multer/pull/1210">#1210</a>)</li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-2359">CVE-2026-2359</a> (<a href="https://github.com/expressjs/multer/security/advisories/GHSA-v52c-386h-88mc">GHSA-v52c-386h-88mc</a>)</li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-3304">CVE-2026-3304</a> (<a href="https://github.com/expressjs/multer/security/advisories/GHSA-xf7r-hgr6-v32p">GHSA-xf7r-hgr6-v32p</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/multer/commit/809f9ddac298a5aff4686e14cfac8d003b93e9c9"><code>809f9dd</code></a> 2.1.0 (<a href="https://redirect.github.com/expressjs/multer/issues/1371">#1371</a>)</li> <li><a href="https://github.com/expressjs/multer/commit/739919097dde3921ec31b930e4b9025036fa74ee"><code>7399190</code></a> 🔒 fix orphaned files issue</li> <li><a href="https://github.com/expressjs/multer/commit/cccf0fe0e64150c4f42ccf6654165c0d66b9adab"><code>cccf0fe</code></a> 🔒️ improve disconnect handling</li> <li><a href="https://github.com/expressjs/multer/commit/2c8cd23ac30bf8ab915eeb5f8d18a4381ed53708"><code>2c8cd23</code></a> docs: add Turkish translation (README-tr.md) (<a href="https://redirect.github.com/expressjs/multer/issues/1360">#1360</a>)</li> <li><a href="https://github.com/expressjs/multer/commit/fd3c7d33f9eb34661451b61e6540f2126e8c3ae8"><code>fd3c7d3</code></a> feat: add defParamCharset option for UTF-8 filename support (<a href="https://redirect.github.com/expressjs/multer/issues/1210">#1210</a>)</li> <li><a href="https://github.com/expressjs/multer/commit/c13ab9494da3e70a1b9f776f2ac493564915d136"><code>c13ab94</code></a> docs: improve readability in README-pt-br.md for array method (<a href="https://redirect.github.com/expressjs/multer/issues/1367">#1367</a>)</li> <li><a href="https://github.com/expressjs/multer/commit/e28d6786a443b6a98529d9567d4a117c2ed5fadf"><code>e28d678</code></a> docs: improve readability (<a href="https://redirect.github.com/expressjs/multer/issues/1366">#1366</a>)</li> <li><a href="https://github.com/expressjs/multer/commit/51529e34f1845e6324f9a809f5160438aa19f782"><code>51529e3</code></a> fix: add <code>.nyc_output</code> to <code>.gitignore</code> (<a href="https://redirect.github.com/expressjs/multer/issues/1332">#1332</a>)</li> <li><a href="https://github.com/expressjs/multer/commit/b6e4b1f6abb85673e9307b42368b3e7bfb1fc63b"><code>b6e4b1f</code></a> chore: drop xtend dependency (<a href="https://redirect.github.com/expressjs/multer/issues/1352">#1352</a>)</li> <li><a href="https://github.com/expressjs/multer/commit/5c8407f3524dfb285fe00e5b15ed7158f097a0c0"><code>5c8407f</code></a> chore: drop object-assign dependency (<a href="https://redirect.github.com/expressjs/multer/issues/1351">#1351</a>)</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/multer/compare/v2.0.2...v2.1.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=multer&package-manager=npm_and_yarn&previous-version=2.0.2&new-version=2.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/JakeStanger/filexplorer/network/alerts). </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

JakeStanger

2026-05-22 22:03:18 +01:00

closed this issue
added the
pull-request
label

No labels

bug

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

JakeStanger/filexplorer#32

No description provided.

Rows
Columns