Skip to content

chore(deps): bump @adonisjs/http-server from 8.0.0 to 8.2.0#65

Open
dependabot[bot] wants to merge 1 commit into
22.xfrom
dependabot/npm_and_yarn/adonisjs/http-server-8.2.0
Open

chore(deps): bump @adonisjs/http-server from 8.0.0 to 8.2.0#65
dependabot[bot] wants to merge 1 commit into
22.xfrom
dependabot/npm_and_yarn/adonisjs/http-server-8.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 26, 2026

Copy link
Copy Markdown

Bumps @adonisjs/http-server from 8.0.0 to 8.2.0.

Release notes

Sourced from @​adonisjs/http-server's releases.

Add isValidRedirectUrl helper to be re-used by other packages

8.2.0 (2026-04-09)

Features

  • add isValidRedirectUrl helper, ctx on Redirect, and helper tests (2008fb6)

Full Changelog: adonisjs/http-server@v8.1.3...v8.2.0

Secure redirect-back with host validation and new configuration options

8.1.3 (2026-04-09)

Redirect back now validates the referrer URL against the request's Host header and a configurable allowedHosts list, preventing open-redirect vulnerabilities.

Additions

  • getPreviousUrl helper, available on both the HttpRequest and Redirect classes, for resolving the previous URL in one place.
  • Redirect extends Macroable, so you can override getPreviousUrl with your own resolution logic (for example, reading from a session)
  • forwardQueryString config option to control the default behavior.
  • redirect.withQs(boolean) overload for per-call control over query-string forwarding

Bug Fixes

  • prevent open redirect in redirect back via referrer host validation (ebba697)

Full Changelog: adonisjs/http-server@v8.1.2...v8.1.3

Catch malformed URIs and return 400

8.1.2 (2026-04-07)

Bug Fixes

  • return 400 for requests with malformed percent-encoded URIs (e96808e), closes #118

Full Changelog: adonisjs/http-server@v8.1.1...v8.1.2

Fix build issue

8.1.1 (2026-03-20)

Bug Fixes

  • rollback tsdown version for now (2f86348), closes #116

Pass original trust proxy fn to getIp method

8.1.0 (2026-03-20)

Features

... (truncated)

Commits
  • 384a5df chore(release): 8.2.0
  • bcdb2f1 style: reformat source code
  • 2008fb6 feat: add isValidRedirectUrl helper, ctx on Redirect, and helper tests
  • 929ea1a chore(release): 8.1.3
  • ebba697 fix: prevent open redirect in redirect back via referrer host validation
  • 3e6ffad chore: update dependencies
  • fe688b7 chore: update dependencies
  • dd44178 chore(release): 8.1.2
  • e96808e fix: return 400 for requests with malformed percent-encoded URIs
  • c16f074 chore(release): 8.1.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@adonisjs/http-server](https://github.com/adonisjs/http-server) from 8.0.0 to 8.2.0.
- [Release notes](https://github.com/adonisjs/http-server/releases)
- [Commits](adonisjs/http-server@v8.0.0...v8.2.0)

---
updated-dependencies:
- dependency-name: "@adonisjs/http-server"
  dependency-version: 8.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 26, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented May 26, 2026

Copy link
Copy Markdown

Deploying lucid-adonisjs-com with  Cloudflare Pages  Cloudflare Pages

Latest commit: 5ffc1e9
Status:🚫  Build failed.

View logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants