[Snyk] Upgrade body-parser from 1.20.3 to 2.0.0

[nishanthmahasamudram]

Snyk has created this PR to upgrade body-parser from 1.20.3 to 2.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 3 versions ahead of your current version.

• The recommended version was released on 21 days ago.

Release notes

Package name: body-parser

• 2.0.0 - 2024-09-10
  

  What's Changed

  Important

  • add brotli support #406
  • Breaking Change: Node.js 18 is the minimum supported version

  Details

  • chore: add support for OSSF scorecard reporting by @ inigomarquinez in #522
  • ci: fix errors in ci github action for node 8 and 9 by @ inigomarquinez in #523
  • fix: pin to [email protected] by @ wesleytodd in #527
  • deps: [email protected] by @ melikhov-dev in #521
  • Drop support for less than LTS node versions in v2 by @ wesleytodd in #528
  • Also use the qs module for the simple parser by @ papandreou in #387
  • raw-body@3 by @ wesleytodd in #529
  • urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities by @ papandreou in #326
  • Added support for brotli ('br') content-encoding by @ danielgindi in #406
  • Add OSSF Scorecard badge by @ bjohansebas in #531
  • Linter by @ UlisesGascon in #534
  • Release: 1.20.3 by @ UlisesGascon in #535

  New Contributors

  • @ inigomarquinez made their first contribution in #522
  • @ wesleytodd made their first contribution in #527
  • @ melikhov-dev made their first contribution in #521
  • @ papandreou made their first contribution in #387
  • @ danielgindi made their first contribution in #406
  • @ bjohansebas made their first contribution in #531
  • @ UlisesGascon made their first contribution in #534

  Full Changelog: 1.20.2...2.0.0

• 2.0.0-beta.2 - 2023-02-23
  

  This incorporates all changes after 1.19.1 up to 1.20.2.

  • Remove deprecated bodyParser() combination middleware
  • deps: [email protected]
    • Add DEBUG_HIDE_DATE environment variable
    • Change timer to per-namespace instead of global
    • Change non-TTY date format
    • Remove DEBUG_FD environment variable support
    • Support 256 namespace colors
  • deps: [email protected]
    • Add encoding cp720
    • Add encoding UTF-32
  • deps: [email protected]
• 2.0.0-beta.1 - 2021-12-18
  
  • req.body is no longer always initialized to {}
    • it is left undefined unless a body is parsed
  • urlencoded parser now defaults extended to false
  • Use on-finished to determine when body read
• 1.20.3 - 2024-09-09
  

  What's Changed

  Important

  • deps: [email protected]
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

  Other changes

  • chore: add support for OSSF scorecard reporting by @ inigomarquinez in #522
  • ci: fix errors in ci github action for node 8 and 9 by @ inigomarquinez in #523
  • fix: pin to [email protected] by @ wesleytodd in #527
  • deps: [email protected] by @ melikhov-dev in #521
  • Add OSSF Scorecard badge by @ bjohansebas in #531
  • Linter by @ UlisesGascon in #534
  • Release: 1.20.3 by @ UlisesGascon in #535

  New Contributors

  • @ inigomarquinez made their first contribution in #522
  • @ melikhov-dev made their first contribution in #521
  • @ bjohansebas made their first contribution in #531
  • @ UlisesGascon made their first contribution in #534

  Full Changelog: 1.20.2...1.20.3

from body-parser GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[ushkarev]

it’s weird that snyk wants body-parser to go to v2 when that is still tagged “next” (not “latest”) on npmjs.com