Update dependencies

11.0.4 (2026-05-25)

Full Changelog: v11.0.3...v11.0.4

prevent nested prototype pollution

11.0.3 (2026-05-22)

Bug Fixes

• prevent nested prototype pollution (aa96908)

Full Changelog: v11.0.2...v11.0.3

prevent nested prototype pollution

10.1.5 (2026-05-22)

Bug Fixes

• prevent nested prototype pollution (8a85eb0)

Full Changelog: v10.1.4...v10.1.5

Update dependencies

11.0.2 (2026-05-19)

Bug Fixes

• typing issues (151a283)

Full Changelog: v11.0.1...v11.0.2

Fixed gzip request body parsing

11.0.1 (2026-04-04)

Bug Fixes

• handle gzip request bodies without invalid length checks (#78) (5ae99e1)

Tag as latest

11.0.0 (2026-02-25)

Check 11.0.0 pre-releases to get a better sense of changes

What's Changed

• fix: #72 allow case insensitive comparision of the extensions list by @JanStevens in #73

New Contributors

• @JanStevens made their first contribution in #73

Full Changelog: v10.1.0...v11.0.0

Fix wrongly thrown error

10.1.4 (2026-02-23)

Bug Fixes

• mismatch catch err variable used (#77) (afa988b)

What's Changed

• fix: mismatch catch err variable used by @davisthedev in #77

New Contributors

• @davisthedev made their first contribution in #77

Full Changelog: v10.1.3...v10.1.4

Security Fixes

Multipart field names sanitization

Hardened the internal storage used by the multipart parser to collect form fields, preventing potential misuse of specially crafted field names.

File type detection memory improvement

Fixed an issue where the internal buffer used for file type detection could grow indefinitely when processing files whose content didn't match any known magic number signature. The parser now falls back to filename-based detection after a reasonable threshold, ensuring predictable memory usage during file uploads.

Full Changelog: v11.0.0-next.8...v11.0.0-next.9

Security Fixes

Multipart field names sanitization

Hardened the internal storage used by the multipart parser to collect form fields, preventing potential misuse of specially crafted field names.

File type detection memory improvement

Fixed an issue where the internal buffer used for file type detection could grow indefinitely when processing files whose content didn't match any known magic number signature. The parser now falls back to filename-based detection after a reasonable threshold, ensuring predictable memory usage during file uploads.

Use flash symbol to prevent Multipart files being part of flash messages

11.0.0-next.8 (2026-02-01)

Bug Fixes

• use Symbol.for to use portable symbols (080b53a)

Full Changelog: v11.0.0-next.7...v11.0.0-next.8