This PR contains the following updates:
GitHub Vulnerability Alerts
Affected versions of request will disclose local system memory to remote systems in certain circumstances. When a multipart request is made, and the type of body is number, then a buffer of that size will be allocated and sent to the remote server as the body.
Release Notes
request/request
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
- #2447 Always set request timeout on keep-alive connections (@mscdex)
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
- #1906 Update README URLs based on HTTP redirects (@ReadmeCritic)
- #1905 Convert typed arrays into regular buffers (@simov)
- #1902 node-uuid@1.4.7 breaks build 🚨 (@greenkeeperio-bot)
- #1894 Fix tunneling after redirection from https (Original:#1881) (@simov,@falms)
- #1893 Update eslint to version 1.9.0 🚀 (@greenkeeperio-bot)
- #1852 Update eslint to version 1.7.3 🚀 (@simov,@greenkeeperio-bot,@paulomcnally,@michelsalib,@arbaaz,@nsklkn,@LoicMahieu,@JoshWillik,@jzaefferer,@ryanwholey,@djchie,@thisconnect,@mgenereu,@acroca,@Sebmaster,@KoltesDigital)
- #1876 Implement loose matching for har mime types (@simov)
- #1875 Update bluebird to version 3.0.2 🚀 (@simov,@greenkeeperio-bot)
- #1871 Update browserify to version 12.0.1 🚀 (@greenkeeperio-bot)
- #1866 Add missing quotes on x-token property in README (@miguelmota)
- #1874 Fix typo in README.md (@gswalden)
- #1860 Improve referer header tests and docs (@simov)
- #1861 Remove redundant call to Stream constructor (@watson)
- #1857 Fix Referer header to point to the original host name (@simov)
- #1850 Update karma-coverage to version 0.5.3 🚀 (@greenkeeperio-bot)
- #1847 Use node's latest version when building (@simov)
- #1836 Tunnel: fix wrong property name (@KoltesDigital)
- #1820 Set href as request.js uses it (@mgenereu)
- #1840 Update http-signature to version 1.0.2 🚀 (@greenkeeperio-bot)
- #1845 Update istanbul to version 0.4.0 🚀 (@greenkeeperio-bot)
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
Compare Source
- #1615 Replace '.client' with '.socket' as the former was deprecated in 2.2.0. (@ChALkeR)
Compare Source
Compare Source
Compare Source
- #1501 HTTP Archive 1.2 support (@ahmadnassri)
- #1486 Add a test for the forever agent (@akshayp)
- #1500 Adding handling for no auth method and null bearer (@philberg)
- #1498 Add table of contents in readme (@simov)
- #1477 Add support for qs options via qsOptions key (@simov)
- #1496 Parameters encoded to base 64 should be decoded as UTF-8, not ASCII. (@albanm)
- #1494 Update eslint (@froatsnook)
- #1474 Require Colon in Basic Auth (@erykwalder)
- #1481 Fix baseUrl and redirections. (@burningtree)
- #1469 Feature/base url (@froatsnook)
- #1459 Add option to time request/response cycle (including rollup of redirects) (@aaron-em)
- #1468 Re-enable io.js/node 0.12 build (@simov,@mikeal,@BBB)
- #1442 Fixed the issue with strictSSL tests on 0.12 & io.js by explicitly setting a cipher that matches the cert. (@BBB,@nickmccurdy,@demohi,@simov,@0x4139)
- #1460 localAddress or proxy config is lost when redirecting (@simov,@0x4139)
- #1453 Test on Node.js 0.12 and io.js with allowed failures (@nickmccurdy,@demohi)
- #1426 Fixing tests to pass on io.js and node 0.12 (only test-https.js stiff failing) (@mikeal)
- #1446 Missing HTTP referer header with redirects Fixes#1038 (@simov,@guimon)
- #1428 Deprecate Node v0.8.x (@nylen)
- #1436 Add ability to set a requester without setting default options (@tikotzky)
- #1435 dry up verb methods (@sethpollack)
- #1423 Allow fully qualified multipart content-type header (@simov)
- #1430 Fix recursive requester (@tikotzky)
- #1429 Throw error when making HEAD request with a body (@tikotzky)
- #1419 Add note that the project is broken in 0.12.x (@nylen)
- #1413 Fix basic auth (@simov)
- #1397 Improve pipe-from-file tests (@nylen)
Compare Source
Compare Source
- #1383 Add missing HTTPS options that were not being passed to tunnel (@brichard19) (@nylen)
- #1388 Upgrade mime-types package version (@roderickhsiao)
- #1389 Revise Setup Tunnel Function (@seanstrom)
- #1374 Allow explicitly disabling tunneling for proxied https destinations (@nylen)
- #1376 Use karma-browserify for tests. Add browser test coverage reporter. (@eiriksm)
- #1366 Refactor OAuth into separate module (@simov)
- #1373 Rewrite tunnel test to be pure Node.js (@nylen)
- #1371 Upgrade test reporter (@nylen)
- #1360 Refactor basic, bearer, digest auth logic into separate class (@simov)
- #1354 Remove circular dependency from debugging code (@nylen)
- #1351 Move digest auth into private prototype method (@simov)
- #1352 Update hawk dependency to ~2.3.0 (@mridgway)
- #1353 Correct travis-ci badge (@dogancelik)
- #1349 Make sure we return on errored browser requests. (@eiriksm)
- #1346 getProxyFromURI Extraction Refactor (@seanstrom)
- #1337 Standardize test ports on 6767 (@nylen)
- #1341 Emit FormData error events as Request error events (@nylen,@rwky)
- #1343 Clean up readme badges, and add Travis and Coveralls badges (@nylen)
- #1345 Update README.md (@Aaron-Hartwig)
- #1338 Always wait for server.close() callback in tests (@nylen)
- #1342 Add mock https server and redo start of browser tests for this purpose. (@eiriksm)
- #1339 Improve auth docs (@nylen)
- #1335 Add support for OAuth plaintext signature method (@simov)
- #1332 Add clean script to remove test-browser.js after the tests run (@seanstrom)
- #1327 Fix errors generating coverage reports. (@nylen)
- #1330 Return empty buffer upon empty response body and encoding is set to null (@seanstrom)
- #1326 Use faster container-based infrastructure on Travis (@nylen)
- #1315 Implement rfc3986 option (@simov,@nylen,@apoco,@DullReferenceException,@mmalecki,@oliamb,@cliffcrosland,@LewisJEllis,@eiriksm,@poislagarde)
- #1314 Detect urlencoded form data header via regex (@simov)
- #1317 Improve OAuth1.0 server side flow example (@simov)
Compare Source
Compare Source
Compare Source
Compare Source
Renovate configuration
📅Schedule: "" (UTC).
🚦Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻️Rebasing: Whenever PR becomes conflicted, or if you modify the PR title to begin with "rebase!".
🔕Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated byRenovate Bot. View repository job loghere.
Uh oh!
There was an error while loading.Please reload this page.
This PR contains the following updates:
~2.27.0->~2.88.0GitHub Vulnerability Alerts
CVE-2017-16026
Affected versions of request will disclose local system memory to remote systems in certain circumstances. When a multipart request is made, and the type of body is number, then a buffer of that size will be allocated and sent to the remote server as the body.
Release Notes
request/request
v2.88.0Compare Source
v2.87.0Compare Source
v2.86.0Compare Source
v2.85.0Compare Source
v2.84.0Compare Source
v2.83.0Compare Source
v2.82.0Compare Source
v2.81.0Compare Source
v2.80.0Compare Source
v2.79.0Compare Source
filesin package.json (@SimenB)v2.78.0Compare Source
v2.77.0Compare Source
v2.76.0Compare Source
v2.75.0Compare Source
v2.74.0Compare Source
v2.73.0Compare Source
v2.72.0Compare Source
v2.71.0Compare Source
v2.70.0Compare Source
v2.69.0Compare Source
v2.68.0Compare Source
extendmodule instead of util._extend (@simov)v2.67.0Compare Source
v2.66.0Compare Source
v2.65.0Compare Source
readResponseBodymethod out ofonRequestResponse(@pvoisin)v2.64.0Compare Source
v2.63.0Compare Source
v2.62.0Compare Source
v2.61.0Compare Source
v2.60.0Compare Source
v2.59.0Compare Source
Forever option defaults to using http(s).Agent in node 0.12+ (@simov)
encodingoption documentation in README.md (@daniel347x)formoption (@simov)cainagentOptions(@jeffcharles)v2.58.0Compare Source
extendmodule to deep extend in the defaults method (@simov)v2.57.0Compare Source
v2.56.0Compare Source
v2.55.0Compare Source
v2.54.0Compare Source
v2.53.0Compare Source
timeoutoption description (@watson)v2.52.0Compare Source
v2.51.0Compare Source
v2.50.0Compare Source
v2.49.0Compare Source
caselessto 0.8.1 (@mmalecki)v2.48.0Compare Source
Renovate configuration
📅Schedule: "" (UTC).
🚦Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻️Rebasing: Whenever PR becomes conflicted, or if you modify the PR title to begin with "
rebase!".🔕Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated byRenovate Bot. View repository job loghere.