Skip to content

Bump form-data - #2661

Open
dependabot[bot] wants to merge 7 commits into
mainfrom
dependabot/npm_and_yarn/multi-e9aa88d040
Open

Bump form-data#2661
dependabot[bot] wants to merge 7 commits into
mainfrom
dependabot/npm_and_yarn/multi-e9aa88d040

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Contributor

Bumps and form-data. These dependencies needed to be updated together.
Updates form-data from 2.5.5 to 2.5.6

Changelog

Sourced from form-data's changelog.

v2.5.6 - 2026-06-12

Commits

  • [Fix] escape CR, LF, and " in field names and filenames b620316
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape 12be578
  • [Dev Deps] update js-randomness-predictor 46cfd23
  • [Tests] use safe-buffer so the header-injection test runs on node < 4 633044a
  • [Deps] update hasown e3b96ee
Commits
  • c713349 v2.5.6
  • 46cfd23 [Dev Deps] update js-randomness-predictor
  • 633044a [Tests] use safe-buffer so the header-injection test runs on node < 4
  • e3b96ee [Deps] update hasown
  • 12be578 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape
  • b620316 [Fix] escape CR, LF, and " in field names and filenames
  • See full diff in compare view

Updates form-data from 4.0.5 to 4.0.6

Changelog

Sourced from form-data's changelog.

v2.5.6 - 2026-06-12

Commits

  • [Fix] escape CR, LF, and " in field names and filenames b620316
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape 12be578
  • [Dev Deps] update js-randomness-predictor 46cfd23
  • [Tests] use safe-buffer so the header-injection test runs on node < 4 633044a
  • [Deps] update hasown e3b96ee
Commits
  • c713349 v2.5.6
  • 46cfd23 [Dev Deps] update js-randomness-predictor
  • 633044a [Tests] use safe-buffer so the header-injection test runs on node < 4
  • e3b96ee [Deps] update hasown
  • 12be578 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape
  • b620316 [Fix] escape CR, LF, and " in field names and filenames
  • See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps  and [form-data](https://github.com/form-data/form-data). These dependencies needed to be updated together.

Updates `form-data` from 2.5.5 to 2.5.6
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v2.5.5...v2.5.6)

Updates `form-data` from 4.0.5 to 4.0.6
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v2.5.5...v2.5.6)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 2.5.6
  dependency-type: indirect
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 19, 2026
Copilot AI review requested due to automatic review settings June 19, 2026 07:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 19, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@jainakanksha-msft

Copy link
Copy Markdown
Member

@copilot 1. rebase the branch with main
2. if there is any build issue fix that
3. Run though test cases and validate the changes fully if it impacts the code
4. Update the changelist

* Bumped undici version

* Enforced undici through overrides
* Fixed constant identifiable credential Security Issue

* Updated changelog

* Updated copilot review comment
…andling for the Blob and Queue services (#2675)

* Updated npm package fixes
* Updated changelog
* Bump morgan and refresh audit changelog note
* Bump service API versions to 2026-06-06 and update changelog
* Bump axios/esbuild and update constants
* Fix #2672: Handle GC startup errors during server initialization
Fixes race condition where GC error during startup would attempt to close server while still in 'Starting' state, resulting in 'Cannot close server in status Starting' error.

Changes:
- Modified BlobServer and QueueServer error handlers to wait for server to reach 'Running' state before attempting close
- Added timeout logic (up to 5 seconds) to wait for server startup completion
- Gracefully handles case where server cannot transition to Running state
- Allows Azurite to recover when encountering errors processing legacy persisted data from previous versions

Fixes: #2672

* Add comprehensive test suite for issue #2672
- Added 4 test files with 10 total test cases covering:
  * Unit tests for GC error handler state machine (3 tests)
  * Blob server startup error recovery scenarios (3 tests)
  * Upgrade regression tests (2 tests)
  * Queue server startup error recovery scenarios (2 tests)

- Tests validate:
  * Fresh start scenarios without persisted data
  * Graceful error handling during GC initialization in Starting state
  * Concurrent startup operations
  * Data persistence across upgrade scenarios
  * Multi-container and multi-blob scenarios
  * Recovery from timeout conditions

- All 777 tests passing (including 10 new tests)
- No regressions in existing tests
- Full TypeScript compilation clean
Copilot AI review requested due to automatic review settings July 31, 2026 08:06
@dependabot
dependabot Bot removed the request for review from Copilot July 31, 2026 08:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code v3.37.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants