Skip to content

Bump mime-types and @types/mime-types - #584

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/multi-7c9d6dfe31
Open

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/multi-7c9d6dfe31

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps mime-types and @types/mime-types. These dependencies needed to be updated together.
Updates mime-types from 2.1.35 to 3.0.2

Release notes

Sourced from mime-types's releases.

v3.0.2

What's Changed

New Contributors

Full Changelog: jshttp/mime-types@v3.0.1...v3.0.2

v3.0.1

What's Changed

New Contributors

Full Changelog: jshttp/mime-types@v3.0.0...v3.0.1

v3.0.0

What's Changed

... (truncated)

Changelog

Sourced from mime-types's changelog.

3.0.2 / 2025-11-20

  • Fix: update JSDoc to reflect that functions return only false or string, not boolean|string.
  • Fix: refined mime-score logic so .mp4 resolves correctly
  • Fix:reflect the current Node.js version supported to ≥ 18 (See 3.0.0 for more details).

3.0.1 / 2025-03-26

  • deps: mime-db@1.54.0

3.0.0 / 2024-08-31

  • Drop support for node <18
  • deps: mime-db@1.53.0
  • resolve extension conflicts with mime-score (#119)
    • asc -> application/pgp-signature is now application/pgp-keys
    • mpp -> application/vnd.ms-project is now application/dash-patch+xml
    • ac -> application/vnd.nokia.n-gage.ac+xml is now application/pkix-attr-cert
    • bdoc -> application/x-bdoc is now application/bdoc
    • wmz -> application/x-msmetafile is now application/x-ms-wmz
    • xsl -> application/xslt+xml is now application/xml
    • wav -> audio/wave is now audio/wav
    • rtf -> text/rtf is now application/rtf
    • xml -> text/xml is now application/xml
    • mp4 -> video/mp4 is now application/mp4
    • mpg4 -> video/mp4 is now application/mp4
Commits
  • 29a0302 3.0.2 (#169)
  • c3ebfb1 build(deps-dev): bump eslint-plugin-import from 2.27.5 to 2.32.0 (#155)
  • 02e8eb2 fix: update JSDoc to convey only false return (#152)
  • ef03e6a build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 (#147)
  • 636cd1b build(deps-dev): bump mocha from 10.2.0 to 10.8.2 (#149)
  • c02166b build(deps-dev): bump eslint-plugin-markdown from 3.0.0 to 3.0.1 (#148)
  • 44956c6 build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#144)
  • 5e3bb15 build(deps-dev): bump eslint-plugin-promise from 6.1.1 to 6.6.0 (#150)
  • 53f720c build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#167)
  • eac806f build(deps): bump github/codeql-action from 3.30.0 to 3.30.5 (#168)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for mime-types since your current version.


Updates @types/mime-types from 2.1.4 to 3.0.1

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [mime-types](https://github.com/jshttp/mime-types) and [@types/mime-types](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/mime-types). These dependencies needed to be updated together.

Updates `mime-types` from 2.1.35 to 3.0.2
- [Release notes](https://github.com/jshttp/mime-types/releases)
- [Changelog](https://github.com/jshttp/mime-types/blob/master/HISTORY.md)
- [Commits](jshttp/mime-types@2.1.35...v3.0.2)

Updates `@types/mime-types` from 2.1.4 to 3.0.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/mime-types)

---
updated-dependencies:
- dependency-name: mime-types
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: "@types/mime-types"
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 12, 2026
@bkendall

Copy link
Copy Markdown
Collaborator

Cause of Test Failure After mime-types Upgrade

In mime-types v3.x (bumped from 2.1.35 to 3.0.2), the underlying MIME database was updated in accordance with RFC 9239: Updates to ECMAScript Media Types. RFC 9239 officially obsoleted application/javascript in favor of text/javascript.

Because Superstatic resolves MIME types using mime.contentType(...):

  • mime.contentType("js") and mime.contentType(".js") now return text/javascript; charset=utf-8 instead of application/javascript; charset=utf-8.

This caused test assertions expecting the legacy MIME type to fail:

  • test/unit/middleware/env.spec.js (when fetching /__/env.js)
  • test/integration/serving-files.spec.ts (when fetching /app.js)

Resolution:
Updated the expected Content-Type headers in the test assertions from application/javascript; charset=utf-8 to text/javascript; charset=utf-8 to match RFC 9239 and the new mime-types output.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant