Skip to content

chore(deps): bump content-type and @types/content-type#6608

Open
dependabot[bot] wants to merge 8 commits into
mainfrom
dependabot/npm_and_yarn/main/multi-4f2a9f8c10
Open

chore(deps): bump content-type and @types/content-type#6608
dependabot[bot] wants to merge 8 commits into
mainfrom
dependabot/npm_and_yarn/main/multi-4f2a9f8c10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 17, 2026

Copy link
Copy Markdown
Contributor

Bumps content-type and @types/content-type. These dependencies needed to be updated together.
Updates content-type from 1.0.5 to 2.0.0

Release notes

Sourced from content-type's releases.

v2.0.0

Rewrite package to be 3x faster and support lenient parsing. No longer errors during parse, so you must validate things like type after parsing before using it blindly.

Changed

  • Only accept first parameter by name (#67) ac5ba17
  • Null object perf optimization (#62) 427eb1b

Added

  • Add parameters option to parse (#61) 5f65f1c
    • Set parameters: false to only extract type when parsing

jshttp/content-type@v1.0.5...v2.0.0

Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for content-type since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @types/content-type from 1.1.9 to 2.0.0

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 17, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/main/multi-4f2a9f8c10 branch from f4092a1 to add7d5d Compare May 19, 2026 08:59
@davidkna-sap

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [content-type](https://github.com/jshttp/content-type) and [@types/content-type](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/content-type). These dependencies needed to be updated together.

Updates `content-type` from 1.0.5 to 2.0.0
- [Release notes](https://github.com/jshttp/content-type/releases)
- [Changelog](https://github.com/jshttp/content-type/blob/master/HISTORY.md)
- [Commits](jshttp/content-type@v1.0.5...v2.0.0)

Updates `@types/content-type` from 1.1.9 to 2.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/content-type)

---
updated-dependencies:
- dependency-name: "@types/content-type"
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
- dependency-name: content-type
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/main/multi-4f2a9f8c10 branch from add7d5d to c01c852 Compare May 26, 2026 14:34
@davidkna-sap davidkna-sap self-assigned this May 26, 2026
@davidkna-sap davidkna-sap force-pushed the dependabot/npm_and_yarn/main/multi-4f2a9f8c10 branch from 477185e to 650459f Compare May 26, 2026 14:50
@davidkna-sap

davidkna-sap commented Jun 23, 2026

Copy link
Copy Markdown
Member

Note: The parser is now less strict, which shouldn't strongly impact the way this is used.

Comment thread packages/openapi-generator/package.json Outdated
});

it('throws error with malformed content type', async () => {
it('parses malformed content type leniently (strips bad params)', async () => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Was the behavior change intentional? Previously the generator threw on invalid content types, which gave users a clear signal their spec was broken. Now image/png;;invalid silently produces parsed output.

For a generator, failing loudly on a bad spec seems safer than continuing quietly.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@InjunPark-sap InjunPark-sap left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 nits that I am wondering about

…rn/main/multi-4f2a9f8c10

* origin/main:
  chore(deps): bump fast-xml-parser from 5.9.2 to 5.9.3 (#6700)
  chore(deps): bump semver from 7.8.4 to 7.8.5 (#6696)
  chore(deps): bump yargs from 17.7.2 to 17.7.3 (#6697)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants