Skip to content

chore(deps): bump form-data and @nx/node#407

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8698efea9f
Open

chore(deps): bump form-data and @nx/node#407
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8698efea9f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 25, 2026

Copy link
Copy Markdown
Contributor

Bumps form-data and @nx/node. These dependencies needed to be updated together.
Updates form-data from 4.0.5 to 4.0.6

Changelog

Sourced from form-data's changelog.

v4.0.6 - 2026-06-12

Commits

  • [Fix] escape CR, LF, and " in field names and filenames 8dff42c
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, tape f31d21e
  • [Deps] update hasown, mime-types 92ae0eb
  • [Dev Deps] update js-randomness-predictor 67b0f65
Commits
  • 64190db v4.0.6
  • 92ae0eb [Deps] update hasown, mime-types
  • f31d21e [Dev Deps] update @ljharb/eslint-config, auto-changelog, tape
  • 8dff42c [Fix] escape CR, LF, and " in field names and filenames
  • 67b0f65 [Dev Deps] update js-randomness-predictor
  • See full diff in compare view

Updates @nx/node from 22.7.5 to 22.7.7

Release notes

Sourced from @​nx/node's releases.

22.7.7 (2026-07-10)

🩹 Fixes

  • core: prevent path traversal / zip-slip in self-hosted remote cache (#36116)
  • core: warn when the self-hosted remote cache disables TLS verification (NXC-4593) (#36132, #36116)
  • dotnet: declare obj as a publish output to fix sandbox violation (#35858)
  • dotnet: declare directory build props input for analyzer dotnet tasks (df7540195a)
  • dotnet: declare directory build props on the separate release build target (6545ee2222)
  • dotnet: declare directory build props on the analyzer tests dotnet targets (e72ee0dd79)

❤️ Thank You

22.7.6 (2026-06-23)

🩹 Fixes

  • misc: bump happy-dom, tmp, and form-data to patched versions (#36013)

❤️ Thank You

Commits

@dependabot dependabot Bot added the type/dependencies Dependency updates label Jun 25, 2026
@vercel

vercel Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
naap-platform Ready Ready Preview Jul 17, 2026 4:41pm

Request Review

@github-actions github-actions Bot added the size/XL Extra large PR (500+ lines) label Jun 25, 2026
@github-actions

github-actions Bot commented Jun 25, 2026

Copy link
Copy Markdown

⚠️ This PR is very large (1740 lines changed). Please split it into smaller, focused PRs if possible.

github-actions[bot]
github-actions Bot previously approved these changes Jun 25, 2026
@github-actions github-actions Bot added the scope/backend Backend service changes label Jun 25, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) June 25, 2026 18:39
@github-actions

github-actions Bot commented Jul 3, 2026

Copy link
Copy Markdown

This PR has been inactive for 7 days. It will be closed in 5 days if no activity occurs. Feel free to reopen anytime.

@github-actions github-actions Bot added the stale No recent activity label Jul 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-8698efea9f branch from d0b0b6d to 17dadfc Compare July 9, 2026 00:55
github-actions[bot]
github-actions Bot previously approved these changes Jul 9, 2026
@github-actions

Copy link
Copy Markdown

This PR has been inactive for 7 days. It will be closed in 5 days if no activity occurs. Feel free to reopen anytime.

@github-actions github-actions Bot added the stale No recent activity label Jul 17, 2026
Bumps [form-data](https://github.com/form-data/form-data) and [@nx/node](https://github.com/nrwl/nx/tree/HEAD/packages/node). These dependencies needed to be updated together.

Updates `form-data` from 4.0.5 to 4.0.6
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.5...v4.0.6)

Updates `@nx/node` from 22.7.5 to 22.7.7
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.7/packages/node)

---
updated-dependencies:
- dependency-name: "@nx/node"
  dependency-version: 22.7.6
  dependency-type: direct:development
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-8698efea9f branch from 17dadfc to 7a87302 Compare July 17, 2026 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

scope/backend Backend service changes size/XL Extra large PR (500+ lines) type/dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants