Skip to content

chore(deps): update dependency multer to v2.4.0 - #1892

Merged
renovate[bot] merged 1 commit into
masterfrom
renovate/multer-2.x-lockfile
Sep 20, 2026
Merged

renovate[bot] merged 1 commit into
masterfrom
renovate/multer-2.x-lockfile

Conversation

@renovate

@renovate renovate Bot commented Sep 17, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
multer 2.3.02.4.0 age confidence

Release Notes

expressjs/multer (multer)

v2.4.0

Compare Source

  • Fix CVE-2026-88932 (GHSA-3pph-fpjx-jg34)
  • Add filename to LIMIT_FILE_SIZE and LIMIT_UNEXPECTED_FILE errors (#​1416)
  • Accept a function for limits, called with the request, to set limits per request (#​1133)
  • Add opt-in flush option to DiskStorage to fsync files before the callback runs (#​1458)
  • Expose busboy's defCharset, highWaterMark and fileHwm options (#​1465)
  • Add streamHandler option to feed busboy from pre-consumed bodies (Google Cloud Functions, Firebase) (#​1466)
  • Allow multer.diskStorage() to be called without options (#​1471)
  • Decode WHATWG-escaped characters (%0A, %0D, %22) in field names, matching file.originalname since 2.3.0: req.body keys, file.fieldname and err.field now carry the real name. If you matched the escaped spelling as a workaround, use the real name now (#​1473)
  • Report the decoded filename in err.filename on LIMIT_FILE_SIZE errors, matching file.originalname (#​1478)
  • Reject non-integer or negative limits values at construction time; a float limit silently disabled the check (#​1395, #​1335)
  • Accept requests with exactly limits.parts parts; LIMIT_PART_COUNT now fires only when the limit is exceeded. If you set parts one higher to work around this, you can drop the extra one (#​1446)
  • Files skipped by fileFilter no longer count towards maxCount (#​1426)
  • Change the LIMIT_UNEXPECTED_FILE message to "Unexpected file field" (#​426)
  • Remove the concat-stream dependency (#​1356)
  • Docs: add JSDoc to the public API and document the storage engine stream contract (#​1467, #​1468)
  • Docs: add FormData upload examples (#​896)
  • Docs: remove the translated READMEs (#​1463)
  • Internal: run the test suite on macOS (#​1464)

Configuration

📅 Schedule: (in timezone Europe/London)

  • Branch creation
    • "after 10pm every weekday,before 5am every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@cypress

cypress Bot commented Sep 17, 2026

Copy link
Copy Markdown

BanManager-WebUI    Run #11601

Run Properties:  status check passed Passed #11601  •  git commit bf7a87ea61 ℹ️: Merge 284f396f16d8d59b00382638639bcccf82ba7820 into dee662179cef608aa6f553843b89...
Project BanManager-WebUI
Branch Review renovate/multer-2.x-lockfile
Run status status check passed Passed #11601
Run duration 02m 04s
Commit git commit bf7a87ea61 ℹ️: Merge 284f396f16d8d59b00382638639bcccf82ba7820 into dee662179cef608aa6f553843b89...
Committer renovate[bot]
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 1
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 49
View all changes introduced in this branch ↗︎

@renovate
renovate Bot force-pushed the renovate/multer-2.x-lockfile branch from b0c14f7 to 3ebe0a2 Compare September 17, 2026 11:12
@renovate
renovate Bot force-pushed the renovate/multer-2.x-lockfile branch from 3ebe0a2 to 284f396 Compare September 20, 2026 10:25
@sonarqubecloud

Copy link
Copy Markdown

@renovate
renovate Bot merged commit f30a966 into master Sep 20, 2026
10 checks passed
@renovate
renovate Bot deleted the renovate/multer-2.x-lockfile branch September 20, 2026 13:02
@cypress

cypress Bot commented Sep 20, 2026

Copy link
Copy Markdown

BanManager-WebUI    Run #11613

Run Properties:  status check passed Passed #11613  •  git commit f30a966dec: chore(deps): update dependency multer to v2.4.0 (#1892)
Project BanManager-WebUI
Branch Review master
Run status status check passed Passed #11613
Run duration 02m 22s
Commit git commit f30a966dec: chore(deps): update dependency multer to v2.4.0 (#1892)
Committer renovate[bot]
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 1
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 49
View all changes introduced in this branch ↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants