Skip to content

chore(deps): bump @adonisjs/bodyparser, @adonisjs/auth and @adonisjs/core#178

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-f7a241a096
Closed

chore(deps): bump @adonisjs/bodyparser, @adonisjs/auth and @adonisjs/core#178
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-f7a241a096

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Feb 6, 2026

Removes @adonisjs/bodyparser. It's no longer used after updating ancestor dependencies @adonisjs/bodyparser, @adonisjs/auth and @adonisjs/core. These dependencies need to be updated together.

Removes @adonisjs/bodyparser

Updates @adonisjs/auth from 8.2.3 to 9.6.0

Release notes

Sourced from @​adonisjs/auth's releases.

Add deleteAll method on TokensProvider

9.6.0 (2026-01-27)

Features

  • add deleteAll method on access token provider (#260) (2c72627)

Full Changelog: adonisjs/auth@v9.5.1...v9.6.0

Make sure the user is defined in the session logout event

9.5.1 (2025-10-20)

Bug Fixes

  • emit event session logout before update local data (028945c)

Full Changelog: adonisjs/auth@v9.5.0...v9.5.1

Add checkUsing method that accepts multiple guards to check for authenticated user

9.5.0 (2025-09-22)

Features

What's Changed

Full Changelog: adonisjs/auth@v9.4.2...v9.5.0

Update dependencies

Full Changelog: adonisjs/auth@v9.4.1...v9.4.2

Fix OAT guard to allow case-insensitive value in the Authorization header

What's Changed

New Contributors

Full Changelog: adonisjs/auth@v9.4.0...v9.4.1

Add createToken and invalidateToken methods to the guard

9.4.0 (2025-04-01)

Features

... (truncated)

Commits
  • 033a72c chore(release): 9.6.0
  • a05344e style: format source code
  • ad5d20d ci: update release workflow Node version to 24
  • 2c72627 feat: add deleteAll method on access token provider (#260)
  • 17c6d82 chore(release): 9.5.1
  • 028945c fix: emit event session logout before update local data
  • 3022af9 chore(release): 9.5.0
  • 7569519 chore: update dependencies
  • 7ad0436 feat: add checkUsing method (#257)
  • e8d25bc chore(release): 9.4.2
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​adonisjs/auth since your current version.


Updates @adonisjs/core from 5.9.0 to 6.20.0

Release notes

Sourced from @​adonisjs/core's releases.

Security update

6.20.0 (2026-02-05)

Security update for CVE-2026-25754 (GHSA-f5x2-vj4h-vg4c) & CVE-2026-25762 (GHSA-xx9g-fh25-4q64).

Features

  • i18n: add command to publish localization templates (#5037) (ee49f8a)

Update dependencies

6.19.3 (2026-01-10)

Security update

6.19.2 (2026-01-02)

Security update for CVE-2026-21440 (GHSA-gvq6-hvvp-h34h)

Full Changelog: adonisjs/core@v6.19.1...v6.19.2

Add support for VineJS v4

6.19.1 (2025-10-31)

Full Changelog: adonisjs/core@v6.19.0...v6.19.1

Export VineMultipartClass for extending and fix multipart file serialization issue

6.19.0 (2025-06-17)

Features

What's Changed

New Contributors

Full Changelog: adonisjs/core@v6.18.0...v6.19.0

Use merged request body when mergeMultipartFieldsAndFiles is enabled

6.18.0 (2025-05-15)

Please read the release notes of @adonisjs/bodyparser package to understand how merged request body works and why this feature was added. https://github.com/adonisjs/bodyparser/releases/tag/v10.1.0. Solves issue adonisjs/core#4777

Features

  • enable allowUnknownFlags for specific commands (6fdf953)
  • use merged request body during validation when mergeMultipartFieldsAndFiles flag is enabled (bd80b39), closes #4777

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​adonisjs/core since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 6, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented Feb 6, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.06%. Comparing base (d8c2c2b) to head (bdc1a8e).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #178   +/-   ##
=======================================
  Coverage   93.06%   93.06%           
=======================================
  Files          10       10           
  Lines         591      591           
  Branches       76       75    -1     
=======================================
  Hits          550      550           
  Misses         41       41           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

…core

Removes [@adonisjs/bodyparser](https://github.com/adonisjs/bodyparser). It's no longer used after updating ancestor dependencies [@adonisjs/bodyparser](https://github.com/adonisjs/bodyparser), [@adonisjs/auth](https://github.com/adonisjs/auth) and [@adonisjs/core](https://github.com/adonisjs/core). These dependencies need to be updated together.


Removes `@adonisjs/bodyparser`

Updates `@adonisjs/auth` from 8.2.3 to 9.6.0
- [Release notes](https://github.com/adonisjs/auth/releases)
- [Commits](adonisjs/auth@v8.2.3...v9.6.0)

Updates `@adonisjs/core` from 5.9.0 to 6.20.0
- [Release notes](https://github.com/adonisjs/core/releases)
- [Commits](adonisjs/core@v5.9.0...v6.20.0)

---
updated-dependencies:
- dependency-name: "@adonisjs/bodyparser"
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@adonisjs/auth"
  dependency-version: 9.6.0
  dependency-type: direct:development
- dependency-name: "@adonisjs/core"
  dependency-version: 6.20.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-f7a241a096 branch from 62abe6b to bdc1a8e Compare February 28, 2026 08:01
@targos targos closed this Feb 28, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Feb 28, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@targos targos deleted the dependabot/npm_and_yarn/multi-f7a241a096 branch February 28, 2026 16:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant