Watch

build(deps): bump form-data from 2.5.1 to 2.5.6 in /test/cli/install/migration/contoso-test #48

Open

dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/test/cli/install/migration/contoso-test/form-data-2.5.6 into local/mlkem-default

dependabot[bot] commented

2026-06-20 07:46:29 -04:00

(Migrated from github.com)

Bumps form-data from 2.5.1 to 2.5.6.

Changelog

Sourced from form-data's changelog.

v2.5.6 - 2026-06-12

Commits

[Fix] escape CR, LF, and " in field names and filenames b620316

[Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape 12be578

[Dev Deps] update js-randomness-predictor 46cfd23

[Tests] use safe-buffer so the header-injection test runs on node < 4 633044a

[Deps] update hasown e3b96ee

v2.5.5 - 2025-07-18

Commits

[meta] actually ensure the readme backup isn’t published 10626c0

[Fix] use proper dependency 026abe5

v2.5.4 - 2025-07-17

Fixed

[Fix] append: avoid a crash on nullish values [#577](https://github.com/form-data/form-data/issues/577)

Commits

[eslint] update linting config 8bf2492

[meta] add auto-changelog b5101ad

[Tests] handle predict-v8-randomness failures in node < 17 and node > 23 0e93122

[Fix] Switch to using crypto random for boundary values b88316c

[Fix] validate boundary type in setBoundary() method 131ae5e

[Tests] Switch to newer v8 prediction library; enable node 24 testing c97cfbe

[Refactor] use hasown 97ac9c2

[meta] remove local commit hooks be99d4e

[Dev Deps] remove unused deps ddbc89b

[meta] fix scripts to use prepublishOnly e351a97

[Dev Deps] remove unused script 8f23366

[Dev Deps] add missing peer dep 02ff026

[meta] fix readme capitalization 2fd5f61

v2.5.3 - 2025-02-14

Merged

[Fix] set Symbol.toStringTag when available [#573](https://github.com/form-data/form-data/issues/573)

Fixed

[Fix] set Symbol.toStringTag when available (#573) [#396](https://github.com/form-data/form-data/issues/396)

Commits

... (truncated)

Commits

c713349 v2.5.6
46cfd23 [Dev Deps] update js-randomness-predictor
633044a [Tests] use safe-buffer so the header-injection test runs on node < 4
e3b96ee [Deps] update hasown
12be578 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape
b620316 [Fix] escape CR, LF, and " in field names and filenames
40de5a7 v2.5.5
026abe5 [Fix] use proper dependency
10626c0 [meta] actually ensure the readme backup isn’t published
efe6c26 v2.5.4
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for form-data since your current version.

Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [form-data](https://github.com/form-data/form-data) from 2.5.1 to 2.5.6. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/form-data/form-data/blob/master/CHANGELOG.md">form-data's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/form-data/form-data/compare/v2.5.5...v2.5.6">v2.5.6</a> - 2026-06-12</h2> <h3>Commits</h3> <ul> <li>[Fix] escape CR, LF, and <code>"</code> in field names and filenames <a href="https://github.com/form-data/form-data/commit/b62031603c2d7c329b2a369b49466790f0ba6314"><code>b620316</code></a></li> <li>[Dev Deps] update <code>@ljharb/eslint-config</code>, <code>auto-changelog</code>, <code>eslint</code>, <code>tape</code> <a href="https://github.com/form-data/form-data/commit/12be578e936fd77eee75e2e656955f5343c4b80f"><code>12be578</code></a></li> <li>[Dev Deps] update <code>js-randomness-predictor</code> <a href="https://github.com/form-data/form-data/commit/46cfd23bd40be14cfa0391e1c5357c4d74098f23"><code>46cfd23</code></a></li> <li>[Tests] use <code>safe-buffer</code> so the header-injection test runs on node < 4 <a href="https://github.com/form-data/form-data/commit/633044a57a7b19f41cec2271ffd24afa2f6280af"><code>633044a</code></a></li> <li>[Deps] update <code>hasown</code> <a href="https://github.com/form-data/form-data/commit/e3b96eef1661bca8ea4297de057b78bf2734e900"><code>e3b96ee</code></a></li> </ul> <h2><a href="https://github.com/form-data/form-data/compare/v2.5.4...v2.5.5">v2.5.5</a> - 2025-07-18</h2> <h3>Commits</h3> <ul> <li>[meta] actually ensure the readme backup isn’t published <a href="https://github.com/form-data/form-data/commit/10626c0a9b78c7d3fcaa51772265015ee0afc25c"><code>10626c0</code></a></li> <li>[Fix] use proper dependency <a href="https://github.com/form-data/form-data/commit/026abe5c5c0489d8a2ccb59d5cfd14fb63078377"><code>026abe5</code></a></li> </ul> <h2><a href="https://github.com/form-data/form-data/compare/v2.5.3...v2.5.4">v2.5.4</a> - 2025-07-17</h2> <h3>Fixed</h3> <ul> <li>[Fix] <code>append</code>: avoid a crash on nullish values <a href="https://redirect.github.com/form-data/form-data/issues/577"><code>[#577](https://github.com/form-data/form-data/issues/577)</code></a></li> </ul> <h3>Commits</h3> <ul> <li>[eslint] update linting config <a href="https://github.com/form-data/form-data/commit/8bf2492e0555d41ff58fa04c91593af998f87a3c"><code>8bf2492</code></a></li> <li>[meta] add <code>auto-changelog</code> <a href="https://github.com/form-data/form-data/commit/b5101ad3d5f73cfd0143aae3735b92826fd731ea"><code>b5101ad</code></a></li> <li>[Tests] handle predict-v8-randomness failures in node < 17 and node > 23 <a href="https://github.com/form-data/form-data/commit/0e93122358414942393d9c2dc434ae69e58be7c8"><code>0e93122</code></a></li> <li>[Fix] Switch to using <code>crypto</code> random for boundary values <a href="https://github.com/form-data/form-data/commit/b88316c94bb004323669cd3639dc8bb8262539eb"><code>b88316c</code></a></li> <li>[Fix] validate boundary type in <code>setBoundary()</code> method <a href="https://github.com/form-data/form-data/commit/131ae5efa30b9c608add4faef3befb38aa2e1bf1"><code>131ae5e</code></a></li> <li>[Tests] Switch to newer v8 prediction library; enable node 24 testing <a href="https://github.com/form-data/form-data/commit/c97cfbed9eb6d2d4b5d53090f69ded4bf9fd8a21"><code>c97cfbe</code></a></li> <li>[Refactor] use <code>hasown</code> <a href="https://github.com/form-data/form-data/commit/97ac9c208be0b83faeee04bb3faef1ed3474ee4c"><code>97ac9c2</code></a></li> <li>[meta] remove local commit hooks <a href="https://github.com/form-data/form-data/commit/be99d4eea5ce47139c23c1f0914596194019d7fb"><code>be99d4e</code></a></li> <li>[Dev Deps] remove unused deps <a href="https://github.com/form-data/form-data/commit/ddbc89b6d6d64f730bcb27cb33b7544068466a05"><code>ddbc89b</code></a></li> <li>[meta] fix scripts to use prepublishOnly <a href="https://github.com/form-data/form-data/commit/e351a97e9f6c57c74ffd01625e83b09de805d08a"><code>e351a97</code></a></li> <li>[Dev Deps] remove unused script <a href="https://github.com/form-data/form-data/commit/8f233664842da5bd605ce85541defc713d1d1e0a"><code>8f23366</code></a></li> <li>[Dev Deps] add missing peer dep <a href="https://github.com/form-data/form-data/commit/02ff026fda71f9943cfdd5754727c628adb8d135"><code>02ff026</code></a></li> <li>[meta] fix readme capitalization <a href="https://github.com/form-data/form-data/commit/2fd5f61ebfb526cd015fb8e7b8b8c1add4a38872"><code>2fd5f61</code></a></li> </ul> <h2><a href="https://github.com/form-data/form-data/compare/v2.5.2...v2.5.3">v2.5.3</a> - 2025-02-14</h2> <h3>Merged</h3> <ul> <li>[Fix] set <code>Symbol.toStringTag</code> when available <a href="https://redirect.github.com/form-data/form-data/pull/573"><code>[#573](https://github.com/form-data/form-data/issues/573)</code></a></li> </ul> <h3>Fixed</h3> <ul> <li>[Fix] set <code>Symbol.toStringTag</code> when available (<a href="https://redirect.github.com/form-data/form-data/issues/573">#573</a>) <a href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li> </ul> <h3>Commits</h3>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"><code>c713349</code></a> v2.5.6</li> <li><a href="https://github.com/form-data/form-data/commit/46cfd23bd40be14cfa0391e1c5357c4d74098f23"><code>46cfd23</code></a> [Dev Deps] update <code>js-randomness-predictor</code></li> <li><a href="https://github.com/form-data/form-data/commit/633044a57a7b19f41cec2271ffd24afa2f6280af"><code>633044a</code></a> [Tests] use <code>safe-buffer</code> so the header-injection test runs on node < 4</li> <li><a href="https://github.com/form-data/form-data/commit/e3b96eef1661bca8ea4297de057b78bf2734e900"><code>e3b96ee</code></a> [Deps] update <code>hasown</code></li> <li><a href="https://github.com/form-data/form-data/commit/12be578e936fd77eee75e2e656955f5343c4b80f"><code>12be578</code></a> [Dev Deps] update <code>@ljharb/eslint-config</code>, <code>auto-changelog</code>, <code>eslint</code>, <code>tape</code></li> <li><a href="https://github.com/form-data/form-data/commit/b62031603c2d7c329b2a369b49466790f0ba6314"><code>b620316</code></a> [Fix] escape CR, LF, and <code>"</code> in field names and filenames</li> <li><a href="https://github.com/form-data/form-data/commit/40de5a74209992979f6695d894c1d554ddb72f29"><code>40de5a7</code></a> v2.5.5</li> <li><a href="https://github.com/form-data/form-data/commit/026abe5c5c0489d8a2ccb59d5cfd14fb63078377"><code>026abe5</code></a> [Fix] use proper dependency</li> <li><a href="https://github.com/form-data/form-data/commit/10626c0a9b78c7d3fcaa51772265015ee0afc25c"><code>10626c0</code></a> [meta] actually ensure the readme backup isn’t published</li> <li><a href="https://github.com/form-data/form-data/commit/efe6c2693159084b18c58648e77203d1d810395b"><code>efe6c26</code></a> v2.5.4</li> <li>Additional commits viewable in <a href="https://github.com/form-data/form-data/compare/v2.5.1...v2.5.6">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~ljharb">ljharb</a>, a new releaser for form-data since your current version.</p> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>prepublish</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=form-data&package-manager=npm_and_yarn&previous-version=2.5.1&new-version=2.5.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/orpheuslummis/bun-mlkem/network/alerts). </details>

autofix-troubleshooter commented

2026-06-20 07:48:10 -04:00

(Migrated from github.com)

Hi! I'm the autofix.ci troubleshooter bot.

It looks like you correctly set up a CI job that uses the autofix.ci GitHub Action, but the autofix.ci GitHub App has not been installed for this repository. This means that autofix.ci unfortunately does not have the permissions to fix this pull request. If you are the repository owner, please install the app and then restart the CI workflow! 😃

Hi! I'm the <a href="https://autofix.ci"><img alt="autofix logo" src="https://autofix.ci/logo/logo.svg" width="16"><strong>autofix.ci</strong></a> troubleshooter bot. It looks like you correctly set up a CI job that uses the autofix.ci GitHub Action, but the [**autofix.ci GitHub App**](https://github.com/apps/autofix-ci/) has not been installed for this repository. This means that autofix.ci unfortunately does not have the permissions to fix this pull request. If you are the repository owner, please install the app and then restart the CI workflow! 😃

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/npm_and_yarn/test/cli/install/migration/contoso-test/form-data-2.5.6:dependabot/npm_and_yarn/test/cli/install/migration/contoso-test/form-data-2.5.6

git switch dependabot/npm_and_yarn/test/cli/install/migration/contoso-test/form-data-2.5.6

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.