renovate created pull request StefanMewes/send2ereader#6

renovate
Tue, 14 Apr 2026 22:00:22 +0000

6#Update dependency koa to v2.16.4#

This PR contains the following updates:

Package | Type | Update | Change
koa (source) | dependencies | minor | 2.15.3 → 2.16.4

Release Notes

koajs/koa (koa)

v2.16.4

Compare Source

What's Changed

fix(security): Host Header Injection via ctx.hostname by @​killagu https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm

v2.16.3

Compare Source

What's Changed

fix: normalize referer before redirect by @​fengmk2 in #​1909

Full Changelog: https://github.com/koajs/koa/compare/v2.16.2...v2.16.3

v2.16.2

Compare Source

What's Changed

fix: only allow back redirect to the same origin referer by @​fengmk2 in #​1898

Full Changelog: https://github.com/koajs/koa/compare/v2.16.1...v2.16.2

v2.16.1

Compare Source

fix: don't render redirect values in anchor ref

v2.16.0

Compare Source

This is a backported release to fix core underlying issue with HEAD requests when using http2.createSecureServer. See discussion at #​1593 and #​1547.

fix missing cleanup, if response socket is no longer writeable (issue 1547) (#​1593) 399cb6b

v2.15.4

Compare Source

Full Changelog: https://github.com/koajs/koa/compare/2.15.3...2.15.4

Fix: avoid redos on host and protocol getter, see https://github.com/koajs/koa/security/advisories/GHSA-593f-38f6-jp5m

Configuration

📅 Schedule: (UTC)

Branch creation

At any time (no schedule defined)

Automerge

At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.