formidable

What's Changed

• switch to pnpm, minimize deps & devDeps, fix deps through pnpm audit
• remove os.machine, fix #994 in #995

Full Changelog: v3.5.3...v3.5.4

What's Changed

• Fix existing test failure by @ryhmrt in #990

• update Ryan Dahl x account link by @moetezch in #989

• update failing tests

• update CI/CD workflows and actions;

• update CodeQL github action for security analysis

• update readme, links and badges

• update to use cuid2 (battle-tested @paralleldrive/cuid2 package) for better random names - should not be breaking anything since it's still 25 characters long, but a lot safer and faster.

New Contributors

• @ryhmrt made their first contribution in #990
• @moetezch made their first contribution in #989

Full Changelog: v3.5.2...v3.5.3

• fix: (#982) make it easier to import hexoid with webpack

• fix: (#945) multipart parser fix: flush or fail always (don't hang)

• feature: (#944) Dual package: Can be imported as ES module and required as commonjs module

• feature: (#940) form.parse returns a promise if no callback is provided
• it resolves with an array [fields, files]

• feature: (#855) add options.createDirsFromUploads, see README for usage
• form.parse is an async function (ignore the promise)
• benchmarks: add e2e becnhmark with as many request as possible per second
  • npm run to display all the commands
• mark as latest on npm

• fix: (#881) fail earlier when maxFiles is exceeded

fix: Improve keep extension (#857)

* tests: add failing test case

* docs: add comment

* tests: add comment

* tests: add a test case that proves that the regex was always bad

* fix: replace regex with reliable filtering

* feat: stop at first invalid char

* feat: allow numbers in file extensions

* feat: stop extension from being '.'

* refactor: code style

* docs: use slugify in the example

* chore: prepare release

• fix: (#852) end event is emitted once

• fix: do not let empty file on error (#796)
• it was probably due to the fact that .destroy on a file stream does not always complete on time

• feat: maxFileSize option is now per file (as the name suggests) (#791)
• feat: add maxFiles option, default Infinity
• feat: add maxTotalFileSize, default is maxFileSize (for backwards compatibility)
• fix: minFileSize is per file
• fix: allowEmptyFiles fix in cases where one file is not empty
• fix: allowEmptyFiles false option by default
• fix: rename wrongly named error
• refactor: rename wrongly named maxFileSize into maxTotalFileSize

• fix: PersistentFile.toString (#796)

• fix: add missing pluginFailed error (#794)
• refactor: use explicit node imports (#786)

• feat: files are detected if a mimetype is present (previously it was based on filename)
• feat: add options.filter (#716)
• feat: add code and httpCode to most errors (#686)
• rename: option.hash into option.hashAlgorithm (#689)
• rename: file.path into file.filepath (#689)
• rename: file.type into file.mimetype (#689)
• refactor: split file.name into file.newFilename and file.originalFilename (#689)
• feat: prevent directory traversal attacks by default (#689)
• meta: stop including test files in npm (7003c)
• fix: handle invalid filenames (d0a34)
• feat: add fileWriteStreamHandler option
• feat: add allowEmptyFiles and minFileSize options
• feat: Array support for fields and files (#380, #340, #367, #33, #498, #280, #483)
• possible partial fix of #386 with #380 (need tests and better implementation)
• refactor: use hasOwnProperty in check against files/fields (#522)
• meta: do not promote IncomingForm and add exports.default (#529)
• meta: Improve examples and tests (#523)
• refactor: First step of Code quality improvements (#525)
• chore(funding): remove patreon & add npm funding field (#525
• feat: use Modern Streams API (#531)
• fix: urlencoded parsing to emit end #543, introduced in #531
• fix(tests): include multipart and qs parser unit tests, part of #415
• fix: reorganize exports + move parsers to src/parsers/
• fix: update docs and examples #544 (#248, #335, #371, #372, #387, partly #471, #535)
• feat: introduce Plugins API, fix silent failing tests (#545, #391, #407, #386, #374, #521, #267)
• fix: exposing file writable stream errors (#520, #316, #469, #470)
• feat: custom file (re)naming, thru options.filename (#591, #84, #86, #94, #154, #158, #488, #595)

• maxFileSize option with default of 200MB (Charlike Mike Reagent, Nima Shahri)
• Simplified buffering in JSON parser to avoid denial of service attack (Kornel)
• Fixed upload file cleanup on aborted requests (liaoweiqiang)
• Fixed error handling of closed _writeStream (Vitalii)

• Fix DeprecationWarning about os.tmpDir() (Christian)
• Update buffer.write order of arguments for Node 7 (Kornel Lesiński)
• JSON Parser emits error events to the IncomingForm (alessio.montagnani)
• Improved Content-Disposition parsing (Sebastien)
• Access WriteStream of fs during runtime instead of include time (Jonas Amundsen)
• Use built-in toString to convert buffer to hex (Charmander)
• Add hash to json if present (Nick Stamas)
• Add license to package.json (Simen Bekkhus)

• Add failing hash tests. (Ben Trask)
• Enable hash calculation again (Eugene Girshov)
• Test for immediate data events (Tim Smart)
• Re-arrange IncomingForm#parse (Tim Smart)

• Only update hash if update method exists (Sven Lito)
• According to travis v0.10 needs to go quoted (Sven Lito)
• Bumping build node versions (Sven Lito)
• Additional fix for empty requests (Eugene Girshov)
• Change the default to 1000, to match the new Node behaviour. (OrangeDog)
• Add ability to control maxKeys in the querystring parser. (OrangeDog)
• Adjust test case to work with node 0.9.x (Eugene Girshov)
• Update package.json (Sven Lito)
• Path adjustment according to eb4468b (Markus Ast)

• Emit error on aborted connections (Eugene Girshov)
• Add support for empty requests (Eugene Girshov)
• Fix name/filename handling in Content-Disposition (jesperp)
• Tolerate malformed closing boundary in multipart (Eugene Girshov)
• Ignore preamble in multipart messages (Eugene Girshov)
• Add support for application/json (Mike Frey, Carlos Rodriguez)
• Add support for Base64 encoding (Elmer Bulthuis)
• Add File#toJSON (TJ Holowaychuk)
• Remove support for Node.js 0.4 & 0.6 (Andrew Kelley)
• Documentation improvements (Sven Lito, Andre Azevedo)
• Add support for application/octet-stream (Ion Lupascu, Chris Scribner)
• Use os.tmpdir() to get tmp directory (Andrew Kelley)
• Improve package.json (Andrew Kelley, Sven Lito)
• Fix benchmark script (Andrew Kelley)
• Fix scope issue in incoming_forms (Sven Lito)
• Fix file handle leak on error (OrangeDog)

---

First commit, #3270eb4b1f8b (May 4th, 2010)