dev: bump http-proxy-middleware from 3.0.7 to 4.2.1 by dependabot[bot] · Pull Request #8087 · TheThingsNetwork/lorawan-stack

dependabot · 2026-11-02T23:04:55Z

Bumps http-proxy-middleware from 3.0.7 to 4.2.1.

Release notes

Sourced from http-proxy-middleware's releases.

v4.2.1

What's Changed

test(HTTP QUERY): add tests for HTTP QUERY method (RFC 10008) by @chimurai in chimurai/http-proxy-middleware#1277

docs: add POST modification example and test by @chimurai in chimurai/http-proxy-middleware#1278

docs(README.md): deeplink to servers.md by @chimurai in chimurai/http-proxy-middleware#1279

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1280

chore(package.json): update dev deps by @chimurai in chimurai/http-proxy-middleware#1282

chore(package): update dev deps by @chimurai in chimurai/http-proxy-middleware#1285

docs: add AGENTS.md and AI disclosure section to PR template by @chimurai in chimurai/http-proxy-middleware#1286

docs(AGENTS.md): update git commit body instruction by @chimurai in chimurai/http-proxy-middleware#1287

test(http-query): use mockttp forQuery() by @chimurai in chimurai/http-proxy-middleware#1288

test(fix-request-body): add tests by @chimurai in chimurai/http-proxy-middleware#1289

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1291

chore(examples): bump dependencies by @chimurai in chimurai/http-proxy-middleware#1292

docs(CONTRIBUTING.md): update docs by @chimurai in chimurai/http-proxy-middleware#1293

docs(AGENTS.md): update AI disclosure by @chimurai in chimurai/http-proxy-middleware#1295

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1296

ci(github-actions): remove 'yarn audit' by @chimurai in chimurai/http-proxy-middleware#1298

test(http-proxy-middleware): avoid SuperTest listener warnings by @chimurai in chimurai/http-proxy-middleware#1297

refactor(types): improve types by @chimurai in chimurai/http-proxy-middleware#1299

refactor(factory.ts): improve typing by @chimurai in chimurai/http-proxy-middleware#1300

docs(SECURITY.md): add SECURITY.md with AI usage disclosure by @chimurai in chimurai/http-proxy-middleware#1301

chore(package.json): bump dev dependencies by @chimurai in chimurai/http-proxy-middleware#1302

fix(loggerPlugin): fix logging url with query string by @chimurai in chimurai/http-proxy-middleware#1307

chore(package.json): bump dev dependencies by @chimurai in chimurai/http-proxy-middleware#1308

fix(fixRequestBody): wait for request stream to end by @chimurai in chimurai/http-proxy-middleware#1311

chore(package.json): v4.2.1 by @chimurai in chimurai/http-proxy-middleware#1314

Full Changelog: chimurai/http-proxy-middleware@v4.2.0...v4.2.1

v4.2.0

What's Changed

feat(types): export OnProxyEvent type by @Netail in chimurai/http-proxy-middleware#1263

refactor(errors): use HttpProxyMiddlewareError class by @chimurai in chimurai/http-proxy-middleware#1264

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1265

test(e2e): add HttpAgent keepAlive test (#472) by @chimurai in chimurai/http-proxy-middleware#1267

test(e2e): assert invalid multipart error log by @chimurai in chimurai/http-proxy-middleware#1272

feat(debug-proxy-errors-plugin): diagnostic message for POST + bodyParser + ECONNRESET error by @chimurai in chimurai/http-proxy-middleware#1273

chore(debug-proxy-errors-plugin): fix BODY_PARSER_ERROR_MESSAGE formatting by @chimurai in chimurai/http-proxy-middleware#1274

chore(package.json): update dependencies by @chimurai in chimurai/http-proxy-middleware#1275

chore(package.json): v4.2.0 by @chimurai in chimurai/http-proxy-middleware#1276

New Contributors

@Netail made their first contribution in chimurai/http-proxy-middleware#1263

Full Changelog: chimurai/http-proxy-middleware@v4.1.1...v4.2.0

v4.1.1

What's Changed

... (truncated)

Changelog

Sourced from http-proxy-middleware's changelog.

v4.2.1

fix(loggerPlugin): fix logging url with query string

fix(fixRequestBody): wait for request stream to end

v4.2.0

feat(types): export OnProxyEvent type

feat(debug-proxy-errors-plugin): diagnostic message for POST + bodyParser + ECONNRESET error

chore(package.json): update to httpxy v0.5.4

v4.1.1

fix(fixRequestBody): harden form-data stringification

v4.1.0

feat(definePlugin): helper function to create plugins

chore(package.json): update to httpxy@0.5.3

fix(ipv6): preserve credentials when normalizing bracketed IPv6 target string

fix(ipv6): unspecified IPv6 target hostname (::)

fix(response-interceptor): reduce responseInterceptor buffer churn

fix(ws): handle multi-server upgrade subscription and safe proxy shutdown

feat(router): add 'res' and 'options' to router function

feat(pathRewrite): add 'res' and 'options' to custom pathRewrite function

fix(responseInterceptor): prevent trailer/content-length conflict

feat(zstd): support zstd compression in responseInterceptor and fixRequestBody

fix(responseInterceptor): handle bodyless responses (HEAD/1xx/204/304) with content-encoding

fix(router): harden proxy-table matching

v4.0.0

fix(types): fix Logger type

fix(error-response-plugin): sanitize input

feat: drop node v14/v16/v18 [BREAKING CHANGE]

refactor: replace http-proxy w/ httpxy

chore: remove legacyCreateProxyMiddleware() [BREAKING CHANGE]

ci: migrate from jest to vitest

chore(package.json): esm only [BREAKING CHANGE]

chore(package.json): bump to httpxy 0.5.0 (#1183)

chore(package.json): drop node20 [BREAKING CHANGE] (#1179)

refactor: remove deprecated url.parse() (#1176)

fix(fixRequestBody): support content-encoding on request body (#1142)

fix: prevent TypeError when ws enabled but server is undefined (#1163)

fix: applyPathRewrite logs old req.url instead of rewritten path (#1157)

feat(hono): support for hono with createHonoProxyMiddleware

feat(ipv6): support literal IPv6 addresses in target and forward options (ie. "http://[::1]:8000")

chore(package.json): bump httpxy to ^0.5.1

fix(logger-plugin): support ipv6 host and handle undefined protocol/host

ci(publish.yml): pin github.triggering_actor

... (truncated)

Commits

0da3ba1 chore(package.json): v4.2.1 (#1314)
412856f fix(fixRequestBody): wait for request stream to end (#1311)
cf5dc17 chore(package.json): bump dev dependencies (#1308)
520603b fix(loggerPlugin): fix logging url with query string (#1307)
0e26561 chore(package.json): bump dev dependencies (#1302)
c57f073 docs(SECURITY.md): add SECURITY.md with AI usage disclosure (#1301)
64426dc refactor(factory.ts): improve typing (#1300)
4ed80ab refactor(types): improve types (#1299)
cf713ad test(http-proxy-middleware): avoid SuperTest listener warnings (#1297)
9ce1576 ci(github-actions): remove 'yarn audit' (#1298)
Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) from 3.0.7 to 4.2.1. - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/master/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v3.0.7...v4.2.1) --- updated-dependencies: - dependency-name: http-proxy-middleware dependency-version: 4.2.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

http-proxy-middleware 4 is ESM-only. webpack-cli first tries to load the config as native ESM, which failed on the JSON import of package.json and left the half-loaded http-proxy-middleware module behind, so the CommonJS fallback could not require it either. Add the JSON import attribute so the config loads as ESM. Also pass the response interceptor via `on.proxyRes`. The legacy `onProxyRes` option is ignored since http-proxy-middleware 3, which together with `selfHandleResponse` made proxied API requests of the development server hang.

dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 2, 2026

dependabot Bot requested a review from a team as a code owner November 2, 2026 23:04

dependabot Bot added the javascript Pull requests that update Javascript code label Nov 2, 2026

dependabot Bot requested a review from mjamescompton November 2, 2026 23:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/http-proxy-middleware-4.2.1 branch from 8636ff3 to dd70b29 Compare November 4, 2026 13:30

PavelJankoski force-pushed the dependabot/npm_and_yarn/http-proxy-middleware-4.2.1 branch from 7f033bd to 95ead86 Compare November 4, 2026 14:09

PavelJankoski approved these changes Nov 4, 2026

View reviewed changes

PavelJankoski merged commit 76c722f into v3.37 Nov 4, 2026
13 checks passed

PavelJankoski deleted the dependabot/npm_and_yarn/http-proxy-middleware-4.2.1 branch November 4, 2026 14:31

Navigation Menu

Repository navigation

dev: bump http-proxy-middleware from 3.0.7 to 4.2.1 - #8087

dev: bump http-proxy-middleware from 3.0.7 to 4.2.1#8087
PavelJankoski merged 2 commits into
v3.37from
dependabot/npm_and_yarn/http-proxy-middleware-4.2.1

dependabot Bot commented on behalf of github Nov 2, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.2.1

What's Changed

v4.2.0

What's Changed

New Contributors

v4.1.1

What's Changed

v4.2.1

v4.2.0

v4.1.1

v4.1.0

v4.0.0

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Nov 2, 2026 •

edited

Loading