Skip to content

fix(deps): update middy-js monorepo to v7.6.8#44

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/middy-js-monorepo
Jun 23, 2026
Merged

fix(deps): update middy-js monorepo to v7.6.8#44
renovate[bot] merged 1 commit into
mainfrom
renovate/middy-js-monorepo

Conversation

@renovate

@renovate renovate Bot commented Jun 23, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@middy/core (source) 7.6.77.6.8 age confidence
@middy/input-output-logger (source) 7.6.77.6.8 age confidence

Release Notes

middyjs/middy (@​middy/core)

v7.6.8

Compare Source

What's Changed
  • chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 in the everything group by @​dependabot[bot] in #​1656
Security hardening
  • http-response-serializer — caps media-type length at 128 chars and validates against a media-type grammar before reflecting into Content-Type. Stops ReDoS via attacker-supplied media types and prevents echoing
Bug fixes / edge cases
  • fix: add in missing defaults, plus small fixes across http-header-normalizer, http-multipart-body-parser, glue-schema-registry, validator, http-content-negotiation, event-batch-response, http-x402.
Performance
  • core/index.js reworked (~73 lines) across the standard/durable/streamify execution modes, plus two perf commits (fix: perf optimization, fix: small perf boost).
Tooling / CI (not user-facing)
  • Biome bumped to 2.5.0 + config migration (the lint fix from earlier in our session — preset: "recommended", SVG/proto/test overrides).
  • Fuzz-test fixes (event-normalizer), mutation-coverage improvements, provenance-attestation source fix.
Docs
  • Added a WAF alternative note; typo fixes.

Full Changelog: middyjs/middy@7.6.7...7.6.8


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner June 23, 2026 04:54
@renovate renovate Bot enabled auto-merge (squash) June 23, 2026 04:54
@renovate

renovate Bot commented Jun 23, 2026

Copy link
Copy Markdown
Contributor Author

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

@coderbyheart coderbyheart added the non-significant Non-significant changes that do not need a PR review label Jun 23, 2026
@renovate renovate Bot merged commit bb68ecf into main Jun 23, 2026
2 checks passed
@coderbyheart

Copy link
Copy Markdown
Member

Non-significant change, no PR review required.

@renovate renovate Bot deleted the renovate/middy-js-monorepo branch June 23, 2026 07:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies non-significant Non-significant changes that do not need a PR review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant