You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@casbin.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/03/10 16:03:26 UTC
[PR] ⬆️ Bump koa from 2.7.0 to 3.1.2 [casbin-koa-authz]
dependabot[bot] opened a new pull request, #92:
URL: https://github.com/apache/casbin-koa-authz/pull/92
Bumps [koa](https://github.com/koajs/koa) from 2.7.0 to 3.1.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/koajs/koa/releases">koa's releases</a>.</em></p>
<blockquote>
<h2>v3.1.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: typo in troubleshooting.md by <a href="https://github.com/WuMingDao"><code>@WuMingDao</code></a> in <a href="https://redirect.github.com/koajs/koa/pull/1916">koajs/koa#1916</a></li>
<li>build(deps-dev): bump qs from 6.14.0 to 6.14.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/koajs/koa/pull/1921">koajs/koa#1921</a></li>
<li>build(deps): bump http-errors from 2.0.0 to 2.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/koajs/koa/pull/1919">koajs/koa#1919</a></li>
<li>build(deps): bump mime-types from 3.0.1 to 3.0.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/koajs/koa/pull/1918">koajs/koa#1918</a></li>
<li>docs: use correct term "Server-Sent Events" in guide by <a href="https://github.com/jtr860830"><code>@jtr860830</code></a> in <a href="https://redirect.github.com/koajs/koa/pull/1920">koajs/koa#1920</a></li>
<li>build(deps): bump content-disposition from 0.5.4 to 1.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/koajs/koa/pull/1917">koajs/koa#1917</a></li>
<li>build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/koajs/koa/pull/1922">koajs/koa#1922</a></li>
<li>fix(security): Host Header Injection via <code>ctx.hostname</code> by <a href="https://github.com/killagu"><code>@killagu</code></a> <a href="https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm">https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/WuMingDao"><code>@WuMingDao</code></a> made their first contribution in <a href="https://redirect.github.com/koajs/koa/pull/1916">koajs/koa#1916</a></li>
<li><a href="https://github.com/jtr860830"><code>@jtr860830</code></a> made their first contribution in <a href="https://redirect.github.com/koajs/koa/pull/1920">koajs/koa#1920</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/koajs/koa/compare/v3.1.1...v3.1.2">https://github.com/koajs/koa/compare/v3.1.1...v3.1.2</a></p>
<h2>v3.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: only original value destroy if the new value is not a stream by <a href="https://github.com/yowainwright"><code>@yowainwright</code></a> in <a href="https://redirect.github.com/koajs/koa/pull/1914">koajs/koa#1914</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/koajs/koa/compare/v3.1.0...v3.1.1">https://github.com/koajs/koa/compare/v3.1.0...v3.1.1</a></p>
<h2>v3.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: fixes mem leak relating to issue-1834 by <a href="https://github.com/yowainwright"><code>@yowainwright</code></a> in <a href="https://redirect.github.com/koajs/koa/pull/1893">koajs/koa#1893</a></li>
<li>fix: adds steam clean up by <a href="https://github.com/yowainwright"><code>@yowainwright</code></a> in <a href="https://redirect.github.com/koajs/koa/pull/1910">koajs/koa#1910</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/koajs/koa/compare/v3.0.3...v3.1.0">https://github.com/koajs/koa/compare/v3.0.3...v3.1.0</a></p>
<h2>v3.0.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: normalize referer before redirect by <a href="https://github.com/fengmk2"><code>@fengmk2</code></a> in <a href="https://redirect.github.com/koajs/koa/pull/1908">koajs/koa#1908</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/koajs/koa/compare/v3.0.2...v3.0.3">https://github.com/koajs/koa/compare/v3.0.2...v3.0.3</a></p>
<h2>v3.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: fixes response.attachment behaviour leads to Content-Type Sniffing by <a href="https://github.com/yowainwright"><code>@yowainwright</code></a> in <a href="https://redirect.github.com/koajs/koa/pull/1904">koajs/koa#1904</a></li>
<li>chore: use NPM trusted publishing with semver tag triggers by <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/koajs/koa/pull/1907">koajs/koa#1907</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Copilot"><code>@Copilot</code></a> made their first contribution in <a href="https://redirect.github.com/koajs/koa/pull/1907">koajs/koa#1907</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/koajs/koa/compare/v3.0.1...v3.0.2">https://github.com/koajs/koa/compare/v3.0.1...v3.0.2</a></p>
<h2>v3.0.1</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/koajs/koa/blob/master/History.md">koa's changelog</a>.</em></p>
<blockquote>
<blockquote>
<p>[!IMPORTANT]
Moving forwards we are using the GitHub releases page at <a href="https://github.com/koajs/koa/releases">https://github.com/koajs/koa/releases</a> in combination with <a href="https://www.npmjs.com/package/np">np</a> for publishing releases and their changelogs.</p>
</blockquote>
<hr />
<h1>3.0.0-alpha.3 / 2025-02-11</h1>
<p><strong>fixes</strong></p>
<ul>
<li>Avoid redos on host and protocol getter</li>
</ul>
<h1>3.0.0-alpha.2 / 2024-11-04</h1>
<p><strong>breaking changes</strong></p>
<ul>
<li>Update <code>http-errors</code> to <code>v2.0.0</code> <a href="https://redirect.github.com/koajs/koa/pull/1486">#1486</a>
<ul>
<li><code>ctx.throw</code> now requires a format of <code>ctx.throw(status, error, properties)</code>. See: <a href="https://www.npmjs.com/package/http-errors">https://www.npmjs.com/package/http-errors</a></li>
</ul>
</li>
<li>Remove <code>res.redirect('back')</code>, add <code>back()</code> method to <code>ctx</code> <a href="https://redirect.github.com/koajs/koa/pull/1115">#1115</a></li>
<li>Replace node querystring with <code>URLSearchParams</code> <a href="https://redirect.github.com/koajs/koa/pull/1828">#1828</a></li>
<li>Remove obsolete <code>createAsyncCtxStorageMiddleware</code> <a href="https://redirect.github.com/koajs/koa/pull/1817">#1817</a></li>
</ul>
<p><strong>features</strong></p>
<ul>
<li>Add support for web WHATWG <a href="https://redirect.github.com/koajs/koa/pull/1830">#1830</a></li>
</ul>
<p><strong>updates</strong></p>
<ul>
<li>Update <code>cookies</code> to <code>~0.9.1</code> <a href="https://redirect.github.com/koajs/koa/pull/1846">#1846</a></li>
<li>Update <code>statuses</code> to <code>^2.0.1</code></li>
<li>Update <code>supertest</code> to <code>^7.0.0</code> <a href="https://redirect.github.com/koajs/koa/pull/1841">#1841</a></li>
</ul>
<p><strong>fixes</strong></p>
<ul>
<li>Fix <code>exports.defaults</code> in <code>package.json</code> <a href="https://redirect.github.com/koajs/koa/pull/1630">#1630</a></li>
<li>Fix leaky handles in tests <a href="https://redirect.github.com/koajs/koa/pull/1838">#1838</a></li>
<li>Fix body null checks <a href="https://redirect.github.com/koajs/koa/pull/1814">#1814</a></li>
<li>Fix reformatting redirect URLs <a href="https://redirect.github.com/koajs/koa/pull/1805">#1805</a> <a href="https://redirect.github.com/koajs/koa/pull/1804">#1804</a></li>
<li>Fix passing <code>ctx</code> in error handler <a href="https://redirect.github.com/koajs/koa/pull/1758">#1758</a></li>
</ul>
<p><strong>migrations</strong></p>
<ul>
<li>Migrate from <code>jest</code> to the native node test runner <a href="https://redirect.github.com/koajs/koa/pull/1845">#1845</a></li>
</ul>
<h1>3.0.0-alpha.1 / 2023-04-12</h1>
<p><strong>fixes</strong></p>
<ul>
<li>[<a href="http://github.com/koajs/koa/commit/e98b8d1918376dc2957aa62906bf5893bef66c4c"><code>e98b8d1</code></a>] - fix: can not get currentContext in error handler (<a href="https://redirect.github.com/koajs/koa/issues/1758">#1758</a>) (Gxkl <<a href="mailto:gxkl203@gmail.com">gxkl203@gmail.com</a>>)</li>
</ul>
<h1>3.0.0-alpha.0 / 2023-01-02</h1>
<h2>Breaking Changes</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/koajs/koa/commit/c5a52e056d61afa012a08d3aa89a59bce5ccbf1b"><code>c5a52e0</code></a> 3.1.2</li>
<li><a href="https://github.com/koajs/koa/commit/55ab9bab044ead4e82c70a30a4f9dc0fc9c1b6df"><code>55ab9ba</code></a> Merge commit from fork</li>
<li><a href="https://github.com/koajs/koa/commit/fecd464ae7be82bd71b275c1faa746dd1c45ef5b"><code>fecd464</code></a> build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (<a href="https://redirect.github.com/koajs/koa/issues/1922">#1922</a>)</li>
<li><a href="https://github.com/koajs/koa/commit/d2066cf2a52fe3aeeb5778c8cce204a73ea6fb87"><code>d2066cf</code></a> build(deps): bump content-disposition from 0.5.4 to 1.0.1 (<a href="https://redirect.github.com/koajs/koa/issues/1917">#1917</a>)</li>
<li><a href="https://github.com/koajs/koa/commit/8694a06eb67aeec90f06f17b2a716bccfbad11e5"><code>8694a06</code></a> docs: use correct term "Server-Sent Events" in guide (<a href="https://redirect.github.com/koajs/koa/issues/1920">#1920</a>)</li>
<li><a href="https://github.com/koajs/koa/commit/096682b31592b20319549f57517abf3fc90649a1"><code>096682b</code></a> build(deps): bump mime-types from 3.0.1 to 3.0.2 (<a href="https://redirect.github.com/koajs/koa/issues/1918">#1918</a>)</li>
<li><a href="https://github.com/koajs/koa/commit/8215c2e3896932d966951042f9a0d8aa743e40fe"><code>8215c2e</code></a> build(deps): bump http-errors from 2.0.0 to 2.0.1 (<a href="https://redirect.github.com/koajs/koa/issues/1919">#1919</a>)</li>
<li><a href="https://github.com/koajs/koa/commit/cfe5ec6aea6acf2ebf2868687692dae7fac726fe"><code>cfe5ec6</code></a> build(deps-dev): bump qs from 6.14.0 to 6.14.1 (<a href="https://redirect.github.com/koajs/koa/issues/1921">#1921</a>)</li>
<li><a href="https://github.com/koajs/koa/commit/0a6afa5a6107c0c8baf4722e29de7566f33d1651"><code>0a6afa5</code></a> fix: typo in troubleshooting.md (<a href="https://redirect.github.com/koajs/koa/issues/1916">#1916</a>)</li>
<li><a href="https://github.com/koajs/koa/commit/2e52fb589c29c9aa6f0915515263372c3a2ce4bf"><code>2e52fb5</code></a> 3.1.1</li>
<li>Additional commits viewable in <a href="https://github.com/koajs/koa/compare/2.7.0...v3.1.2">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for koa since your current version.</p>
</details>
<details>
<summary>Install script changes</summary>
<p>This version adds <code>prepare</code> script that runs during installation. Review the package contents before updating.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/casbin-koa-authz/network/alerts).
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@casbin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@casbin.apache.org
For additional commands, e-mail: commits-help@casbin.apache.org