Skip to content

build(deps): bump form-data from 4.0.5 to 4.0.6 - #207

Merged
oleksandr-nc merged 1 commit into
mainfrom
dependabot/npm_and_yarn/form-data-4.0.6
Jul 31, 2026
Merged

build(deps): bump form-data from 4.0.5 to 4.0.6#207
oleksandr-nc merged 1 commit into
mainfrom
dependabot/npm_and_yarn/form-data-4.0.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor

Bumps form-data from 4.0.5 to 4.0.6.

Changelog

Sourced from form-data's changelog.

v4.0.6 - 2026-06-12

Commits

  • [Fix] escape CR, LF, and " in field names and filenames 8dff42c
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, tape f31d21e
  • [Deps] update hasown, mime-types 92ae0eb
  • [Dev Deps] update js-randomness-predictor 67b0f65
Commits
  • 64190db v4.0.6
  • 92ae0eb [Deps] update hasown, mime-types
  • f31d21e [Dev Deps] update @ljharb/eslint-config, auto-changelog, tape
  • 8dff42c [Fix] escape CR, LF, and " in field names and filenames
  • 67b0f65 [Dev Deps] update js-randomness-predictor
  • See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 16, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 16, 2026
@oleksandr-nc

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6.
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.5...v4.0.6)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/form-data-4.0.6 branch from 96be28e to ecd2ba5 Compare July 31, 2026 11:52

@oleksandr-nc oleksandr-nc left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

form-data 4.0.5 -> 4.0.6 plus hasown 2.0.2 -> 2.0.4, closing an open high-severity advisory. Bundle byte-identical to main.

Verified locally by merging this PR into current main and building the result — not the PR head, and not refs/pull/N/merge, which GitHub still has cached against b8979fa and would misreport unrelated commits. npm ci + npm run build clean, 21/21 bundles with the same names, and ESLINT_USE_FLAT_CONFIG=false npm run lint passes.

@oleksandr-nc
oleksandr-nc merged commit 3f7d6d4 into main Jul 31, 2026
28 checks passed
@oleksandr-nc
oleksandr-nc deleted the dependabot/npm_and_yarn/form-data-4.0.6 branch July 31, 2026 12:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant