StefanMewes/send2ereader
1
0
Fork 0
Code Pull Requests 10 Actions Packages Releases Wiki Activity

Update dependency koa to v3 #12

Open
renovate wants to merge 1 commits from renovate/koa-3.x into master
pull from: renovate/koa-3.x
merge into: StefanMewes:master
Conversation 0 Commits 1 Files Changed 2 +67 -157
renovate commented 2026-04-15 01:00:33 +00:00
Collaborator
Copy Link

This PR contains the following updates:

Package Type Update Change
koa (source) dependencies major ^2.15.3 → ^3.0.0

Release Notes

koajs/koa (koa)

v3.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/koajs/koa/compare/v3.1.2...v3.2.0

v3.1.2

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/koajs/koa/compare/v3.1.1...v3.1.2

v3.1.1

Compare Source

What's Changed

Full Changelog: https://github.com/koajs/koa/compare/v3.1.0...v3.1.1

v3.1.0

Compare Source

==================

fixes

  • [2ee32f5] - fix: pin debug@~3.1.0 avoid deprecated warnning (#​1245) (fengmk2 <<fengmk2@​gmail.com>>)

others

v3.0.3

Compare Source

What's Changed

Full Changelog: https://github.com/koajs/koa/compare/v3.0.2...v3.0.3

v3.0.2

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/koajs/koa/compare/v3.0.1...v3.0.2

v3.0.1

Compare Source

What's Changed

Full Changelog: https://github.com/koajs/koa/compare/v3.0.0...v3.0.1

v3.0.0

Compare Source

==================

fixes

  • Avoid redos on host and protocol getter

v2.16.4

Compare Source

What's Changed

v2.16.3

Compare Source

What's Changed

Full Changelog: https://github.com/koajs/koa/compare/v2.16.2...v2.16.3

v2.16.2

Compare Source

What's Changed

Full Changelog: https://github.com/koajs/koa/compare/v2.16.1...v2.16.2

v2.16.1

Compare Source

fix: don't render redirect values in anchor ref

v2.16.0

Compare Source

This is a backported release to fix core underlying issue with HEAD requests when using http2.createSecureServer. See discussion at #​1593 and #​1547.

  • fix missing cleanup, if response socket is no longer writeable (issue 1547) (#​1593) 399cb6b

v2.15.4

Compare Source

Full Changelog: https://github.com/koajs/koa/compare/2.15.3...2.15.4

Fix: avoid redos on host and protocol getter, see https://github.com/koajs/koa/security/advisories/GHSA-593f-38f6-jp5m

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [koa](https://koajs.com) ([source](https://github.com/koajs/koa)) | dependencies | major | [`^2.15.3` → `^3.0.0`](https://renovatebot.com/diffs/npm/koa/2.15.3/3.2.0) | --- ### Release Notes <details> <summary>koajs/koa (koa)</summary> ### [`v3.2.0`](https://github.com/koajs/koa/releases/tag/v3.2.0) [Compare Source](https://github.com/koajs/koa/compare/v3.1.2...v3.2.0) #### What's Changed - docs: remove dead Job Board links by [@&#8203;Jerry-CodeHub](https://github.com/Jerry-CodeHub) in [#&#8203;1926](https://github.com/koajs/koa/pull/1926) - build(deps-dev): bump qs from 6.14.1 to 6.14.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1927](https://github.com/koajs/koa/pull/1927) - chore: Add workflow\_dispatch trigger to npm-publish workflow by [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1930](https://github.com/koajs/koa/pull/1930) - feat: defer AsyncLocalStorage creation for v8 startup snapshots by [@&#8203;killagu](https://github.com/killagu) in [#&#8203;1946](https://github.com/koajs/koa/pull/1946) #### New Contributors - [@&#8203;Jerry-CodeHub](https://github.com/Jerry-CodeHub) made their first contribution in [#&#8203;1926](https://github.com/koajs/koa/pull/1926) - [@&#8203;killagu](https://github.com/killagu) made their first contribution in [#&#8203;1946](https://github.com/koajs/koa/pull/1946) **Full Changelog**: <https://github.com/koajs/koa/compare/v3.1.2...v3.2.0> ### [`v3.1.2`](https://github.com/koajs/koa/releases/tag/v3.1.2) [Compare Source](https://github.com/koajs/koa/compare/v3.1.1...v3.1.2) #### What's Changed - fix: typo in troubleshooting.md by [@&#8203;WuMingDao](https://github.com/WuMingDao) in [#&#8203;1916](https://github.com/koajs/koa/pull/1916) - build(deps-dev): bump qs from 6.14.0 to 6.14.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1921](https://github.com/koajs/koa/pull/1921) - build(deps): bump http-errors from 2.0.0 to 2.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1919](https://github.com/koajs/koa/pull/1919) - build(deps): bump mime-types from 3.0.1 to 3.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1918](https://github.com/koajs/koa/pull/1918) - docs: use correct term "Server-Sent Events" in guide by [@&#8203;jtr860830](https://github.com/jtr860830) in [#&#8203;1920](https://github.com/koajs/koa/pull/1920) - build(deps): bump content-disposition from 0.5.4 to 1.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1917](https://github.com/koajs/koa/pull/1917) - build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1922](https://github.com/koajs/koa/pull/1922) - fix(security): Host Header Injection via `ctx.hostname` by [@&#8203;killagu](https://github.com/killagu) <https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm> #### New Contributors - [@&#8203;WuMingDao](https://github.com/WuMingDao) made their first contribution in [#&#8203;1916](https://github.com/koajs/koa/pull/1916) - [@&#8203;jtr860830](https://github.com/jtr860830) made their first contribution in [#&#8203;1920](https://github.com/koajs/koa/pull/1920) **Full Changelog**: <https://github.com/koajs/koa/compare/v3.1.1...v3.1.2> ### [`v3.1.1`](https://github.com/koajs/koa/releases/tag/v3.1.1) [Compare Source](https://github.com/koajs/koa/compare/v3.1.0...v3.1.1) #### What's Changed - fix: only original value destroy if the new value is not a stream by [@&#8203;yowainwright](https://github.com/yowainwright) in [#&#8203;1914](https://github.com/koajs/koa/pull/1914) **Full Changelog**: <https://github.com/koajs/koa/compare/v3.1.0...v3.1.1> ### [`v3.1.0`](https://github.com/koajs/koa/blob/HEAD/History.md#253--2018-09-11) [Compare Source](https://github.com/koajs/koa/compare/v3.0.3...v3.1.0) \================== **fixes** - \[[`2ee32f5`](http://github.com/koajs/koa/commit/2ee32f50b88b383317e33cc0a4bfaa5f2eadead7)] - fix: pin debug@\~3.1.0 avoid deprecated warnning ([#&#8203;1245](https://github.com/koajs/koa/issues/1245)) (fengmk2 <<fengmk2@&#8203;gmail.com>>) **others** - \[[`2180839`](http://github.com/koajs/koa/commit/2180839eda2cb16edcfda46ccfe24711680af850)] - docs: Update koa-vs-express.md ([#&#8203;1230](https://github.com/koajs/koa/issues/1230)) (Clayton Ray <<iamclaytonray@gmail.com>>) ### [`v3.0.3`](https://github.com/koajs/koa/releases/tag/v3.0.3) [Compare Source](https://github.com/koajs/koa/compare/v3.0.2...v3.0.3) #### What's Changed - fix: normalize referer before redirect by [@&#8203;fengmk2](https://github.com/fengmk2) in [#&#8203;1908](https://github.com/koajs/koa/pull/1908) **Full Changelog**: <https://github.com/koajs/koa/compare/v3.0.2...v3.0.3> ### [`v3.0.2`](https://github.com/koajs/koa/releases/tag/v3.0.2) [Compare Source](https://github.com/koajs/koa/compare/v3.0.1...v3.0.2) #### What's Changed - fix: fixes response.attachment behaviour leads to Content-Type Sniffing by [@&#8203;yowainwright](https://github.com/yowainwright) in [#&#8203;1904](https://github.com/koajs/koa/pull/1904) - chore: use NPM trusted publishing with semver tag triggers by [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1907](https://github.com/koajs/koa/pull/1907) #### New Contributors - [@&#8203;Copilot](https://github.com/Copilot) made their first contribution in [#&#8203;1907](https://github.com/koajs/koa/pull/1907) **Full Changelog**: <https://github.com/koajs/koa/compare/v3.0.1...v3.0.2> ### [`v3.0.1`](https://github.com/koajs/koa/releases/tag/v3.0.1) [Compare Source](https://github.com/koajs/koa/compare/v3.0.0...v3.0.1) #### What's Changed - fix(security): only allow same origin referer on response back [`422c551`](https://github.com/koajs/koa/commit/422c551c63d00f24e2bbbdf492f262a5935bb1f0) - chore: adds initial doc text refresh; migration guide \[CHORE-1870] by [@&#8203;yowainwright](https://github.com/yowainwright) in [#&#8203;1877](https://github.com/koajs/koa/pull/1877) - build(deps-dev): bump formidable from 3.5.2 to 3.5.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1878](https://github.com/koajs/koa/pull/1878) - chore: removes done callbacks in tests \[CHORE-1870] by [@&#8203;yowainwright](https://github.com/yowainwright) in [#&#8203;1875](https://github.com/koajs/koa/pull/1875) - build(deps-dev): bump supertest from 7.1.0 to 7.1.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1879](https://github.com/koajs/koa/pull/1879) - build(deps): bump debug from 4.4.0 to 4.4.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1880](https://github.com/koajs/koa/pull/1880) - feat: replace debug module with pure node:util::debuglog by [@&#8203;3imed-jaberi](https://github.com/3imed-jaberi) in [#&#8203;1885](https://github.com/koajs/koa/pull/1885) - feat: replace cache-content-type with mime-types directly by [@&#8203;3imed-jaberi](https://github.com/3imed-jaberi) in [#&#8203;1886](https://github.com/koajs/koa/pull/1886) - build(deps): bump statuses from 2.0.1 to 2.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1888](https://github.com/koajs/koa/pull/1888) - build(deps-dev): bump supertest from 7.1.1 to 7.1.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1895](https://github.com/koajs/koa/pull/1895) - build(deps-dev): bump form-data from 4.0.3 to 4.0.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1894](https://github.com/koajs/koa/pull/1894) **Full Changelog**: <https://github.com/koajs/koa/compare/v3.0.0...v3.0.1> ### [`v3.0.0`](https://github.com/koajs/koa/blob/HEAD/History.md#300-alpha3--2025-02-11) [Compare Source](https://github.com/koajs/koa/compare/v2.16.4...v3.0.0) \================== **fixes** - Avoid redos on host and protocol getter ### [`v2.16.4`](https://github.com/koajs/koa/releases/tag/v2.16.4) [Compare Source](https://github.com/koajs/koa/compare/v2.16.3...v2.16.4) #### What's Changed - fix(security): Host Header Injection via `ctx.hostname` by [@&#8203;killagu](https://github.com/killagu) <https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm> ### [`v2.16.3`](https://github.com/koajs/koa/releases/tag/v2.16.3) [Compare Source](https://github.com/koajs/koa/compare/v2.16.2...v2.16.3) #### What's Changed - fix: normalize referer before redirect by [@&#8203;fengmk2](https://github.com/fengmk2) in [#&#8203;1909](https://github.com/koajs/koa/pull/1909) **Full Changelog**: <https://github.com/koajs/koa/compare/v2.16.2...v2.16.3> ### [`v2.16.2`](https://github.com/koajs/koa/releases/tag/v2.16.2) [Compare Source](https://github.com/koajs/koa/compare/v2.16.1...v2.16.2) #### What's Changed - fix: only allow back redirect to the same origin referer by [@&#8203;fengmk2](https://github.com/fengmk2) in [#&#8203;1898](https://github.com/koajs/koa/pull/1898) **Full Changelog**: <https://github.com/koajs/koa/compare/v2.16.1...v2.16.2> ### [`v2.16.1`](https://github.com/koajs/koa/releases/tag/v2.16.1) [Compare Source](https://github.com/koajs/koa/compare/v2.16.0...v2.16.1) fix: don't render redirect values in anchor ref ### [`v2.16.0`](https://github.com/koajs/koa/releases/tag/2.16.0) [Compare Source](https://github.com/koajs/koa/compare/2.15.4...v2.16.0) This is a backported release to fix core underlying issue with `HEAD` requests when using `http2.createSecureServer`. See discussion at [#&#8203;1593](https://github.com/koajs/koa/pull/1593) and [#&#8203;1547](https://github.com/koajs/koa/issues/1547). - fix missing cleanup, if response socket is no longer writeable (issue 1547) ([#&#8203;1593](https://github.com/koajs/koa/pull/1593)) [`399cb6b`](https://github.com/koajs/koa/commit/399cb6b0dd2104224c0ef0ce8e92f84e4f7faf42) ### [`v2.15.4`](https://github.com/koajs/koa/releases/tag/2.15.4) [Compare Source](https://github.com/koajs/koa/compare/2.15.3...2.15.4) **Full Changelog**: <https://github.com/koajs/koa/compare/2.15.3...2.15.4> Fix: avoid redos on host and protocol getter, see <https://github.com/koajs/koa/security/advisories/GHSA-593f-38f6-jp5m> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMTQiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMTAuMTQiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOltdfQ==-->
renovate added 1 commit 2026-04-15 01:16:32 +00:00
Update dependency koa to v3 0cf3b1c2f2
renovate force-pushed renovate/koa-3.x from c285969441 to 0cf3b1c2f2 2026-04-15 01:16:32 +00:00 Compare
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/koa-3.x:renovate/koa-3.x
git checkout renovate/koa-3.x
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
renovate StefanMewes
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: StefanMewes/send2ereader#12
Delete Branch "renovate/koa-3.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?