Bump http-proxy-middleware from 2.0.10 to 4.2.0 by dependabot[bot] · Pull Request #5957 · DSpace/dspace-angular

dependabot · 2026-07-14T17:58:09Z

Bumps http-proxy-middleware from 2.0.10 to 4.2.0.

Release notes

Sourced from http-proxy-middleware's releases.

v4.2.0

What's Changed

feat(types): export OnProxyEvent type by @Netail in chimurai/http-proxy-middleware#1263

refactor(errors): use HttpProxyMiddlewareError class by @chimurai in chimurai/http-proxy-middleware#1264

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1265

test(e2e): add HttpAgent keepAlive test (#472) by @chimurai in chimurai/http-proxy-middleware#1267

test(e2e): assert invalid multipart error log by @chimurai in chimurai/http-proxy-middleware#1272

feat(debug-proxy-errors-plugin): diagnostic message for POST + bodyParser + ECONNRESET error by @chimurai in chimurai/http-proxy-middleware#1273

chore(debug-proxy-errors-plugin): fix BODY_PARSER_ERROR_MESSAGE formatting by @chimurai in chimurai/http-proxy-middleware#1274

chore(package.json): update dependencies by @chimurai in chimurai/http-proxy-middleware#1275

chore(package.json): v4.2.0 by @chimurai in chimurai/http-proxy-middleware#1276

New Contributors

@Netail made their first contribution in chimurai/http-proxy-middleware#1263

Full Changelog: chimurai/http-proxy-middleware@v4.1.1...v4.2.0

v4.1.1

What's Changed

fix(fixRequestBody): harden form-data stringification by @chimurai in chimurai/http-proxy-middleware#1260

chore(package.json): v4.1.1 by @chimurai in chimurai/http-proxy-middleware#1262

Full Changelog: chimurai/http-proxy-middleware@v4.1.0...v4.1.1

v4.1.0

What's Changed

docs(MIGRATION.md): restore MIGRATION.md by @chimurai in chimurai/http-proxy-middleware#1226

ci(ci.yml): add permissions by @chimurai in chimurai/http-proxy-middleware#1227

test: add http2 tests by @chimurai in chimurai/http-proxy-middleware#1228

feat(definePlugin): helper function to create plugins by @chimurai in chimurai/http-proxy-middleware#1229

docs: improve jsdoc for responseInterceptor and fixRequestBody by @chimurai in chimurai/http-proxy-middleware#1230

chore(package.json): update dev deps by @chimurai in chimurai/http-proxy-middleware#1231

fix(types): widen Filter callback return type by @Mallikarjun-0 in chimurai/http-proxy-middleware#1232

chore(package.json): update to httpxy@0.5.3 by @chimurai in chimurai/http-proxy-middleware#1234

test(logger): add e2e test for ENOTFOUND error log by @chimurai in chimurai/http-proxy-middleware#1233

fix(response-interceptor): reduce responseInterceptor buffer churn by @chimurai in chimurai/http-proxy-middleware#1236

fix(ws): handle multi-server upgrade subscription and safe proxy shutdown by @chimurai in chimurai/http-proxy-middleware#1237

test(ws): add tests docs by @chimurai in chimurai/http-proxy-middleware#1238

ci(publish.yml): npm stage publish by @chimurai in chimurai/http-proxy-middleware#1239

chore(package.json): v4.1.0-beta.0 by @chimurai in chimurai/http-proxy-middleware#1240

ci(publish.yml): unpin npm version by @chimurai in chimurai/http-proxy-middleware#1241

chore(package.json): v4.1.0-beta.1 by @chimurai in chimurai/http-proxy-middleware#1242

test(ws): on error event with unreachable websocket target by @chimurai in chimurai/http-proxy-middleware#1243

feat(router): add 'res' and 'options' to router function by @chimurai in chimurai/http-proxy-middleware#1244

test(http2): improve test by @chimurai in chimurai/http-proxy-middleware#1245

test(router): add dynamic agent test by @chimurai in chimurai/http-proxy-middleware#1246

feat(pathRewrite): add 'res' and 'options' to custom pathRewrite function by @chimurai in chimurai/http-proxy-middleware#1247

docs: fix documentation drift by @chimurai in chimurai/http-proxy-middleware#1248

fix(responseInterceptor): prevent trailer/content-length conflict by @chimurai in chimurai/http-proxy-middleware#1249

... (truncated)

Changelog

Sourced from http-proxy-middleware's changelog.

v4.2.0

feat(types): export OnProxyEvent type

feat(debug-proxy-errors-plugin): diagnostic message for POST + bodyParser + ECONNRESET error

chore(package.json): update to httpxy v0.5.4

v4.1.1

fix(fixRequestBody): harden form-data stringification

v4.1.0

feat(definePlugin): helper function to create plugins

chore(package.json): update to httpxy@0.5.3

fix(ipv6): preserve credentials when normalizing bracketed IPv6 target string

fix(ipv6): unspecified IPv6 target hostname (::)

fix(response-interceptor): reduce responseInterceptor buffer churn

fix(ws): handle multi-server upgrade subscription and safe proxy shutdown

feat(router): add 'res' and 'options' to router function

feat(pathRewrite): add 'res' and 'options' to custom pathRewrite function

fix(responseInterceptor): prevent trailer/content-length conflict

feat(zstd): support zstd compression in responseInterceptor and fixRequestBody

fix(responseInterceptor): handle bodyless responses (HEAD/1xx/204/304) with content-encoding

fix(router): harden proxy-table matching

v4.0.0

fix(types): fix Logger type

fix(error-response-plugin): sanitize input

feat: drop node v14/v16/v18 [BREAKING CHANGE]

refactor: replace http-proxy w/ httpxy

chore: remove legacyCreateProxyMiddleware() [BREAKING CHANGE]

ci: migrate from jest to vitest

chore(package.json): esm only [BREAKING CHANGE]

chore(package.json): bump to httpxy 0.5.0 (#1183)

chore(package.json): drop node20 [BREAKING CHANGE] (#1179)

refactor: remove deprecated url.parse() (#1176)

fix(fixRequestBody): support content-encoding on request body (#1142)

fix: prevent TypeError when ws enabled but server is undefined (#1163)

fix: applyPathRewrite logs old req.url instead of rewritten path (#1157)

feat(hono): support for hono with createHonoProxyMiddleware

feat(ipv6): support literal IPv6 addresses in target and forward options (ie. "http://[::1]:8000")

chore(package.json): bump httpxy to ^0.5.1

fix(logger-plugin): support ipv6 host and handle undefined protocol/host

ci(publish.yml): pin github.triggering_actor

chore(package.json): node ^22.15.0 (#1218)

refactor(package): subpath 'http-proxy-middleware/hono' (#1220)

chore: node 26 support

v3.0.5

... (truncated)

Commits

4abb1ba chore(package.json): v4.2.0 (#1276)
d40ae3e chore(package.json): update dependencies (#1275)
89a78d0 chore(debug-proxy-errors-plugin): fix BODY_PARSER_ERROR_MESSAGE formatting (#...
7ba87a9 feat(debug-proxy-errors-plugin): debug message for bodyParser + ECONNRESET er...
006f1a4 test(e2e): assert invalid multipart error log (#1272)
22281bf test(e2e): add HttpAgent keepAlive test (#472) (#1267)
5b37301 chore(package.json): bump dev deps (#1265)
3695b93 refactor(errors): use HttpProxyMiddlewareError class (#1264)
b9242af feat(types): export OnProxyEvent type (#1263)
b3b98d2 chore(package.json): v4.1.1 (#1262)
Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
http-proxy-middleware	[>= 3.a, < 4]

tdonohue

👎 Tested locally & similar to prior version (#5860), this update breaks our Sitemaps. They no longer redirect properly from the frontend to the backend.

E.g. with Sitemaps enabled/generated, http://localhost:4000/sitemap_index.html should redirect to http://localhost:8080/server/sitemaps/sitemap_index.html. However, that redirect doesn't work with this PR in place...instead it appears to redirect to http://localhost:8080/server/sitemaps, which returns a 404.

This update may require additional code fixes/changes...so it likely needs to be done manually.

github-actions · 2026-07-14T21:32:32Z

Hi @dependabot,
Conflicts have been detected against the base branch.
Please resolve these conflicts as soon as you can. Thanks!

Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) from 2.0.10 to 4.2.0. - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/master/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.10...v4.2.0) --- updated-dependencies: - dependency-name: http-proxy-middleware dependency-version: 4.2.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

MMilosz · 2026-07-29T23:02:24Z

@tdonohue http-proxy-middleware v4 drops Node v20 support (only supports Node >=22.15, see the release notes). Since DSpace's frontend still supports Node 20+, it looks like bumping version is blocked for now

However, upgrading to v3 should be possible (see the v2->v3 migration guide)

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 14, 2026

dependabot Bot mentioned this pull request Jul 14, 2026

Bump http-proxy-middleware from 2.0.10 to 4.1.1 #5860

Closed

dependabot Bot assigned tdonohue Jul 14, 2026

tdonohue requested changes Jul 14, 2026

View reviewed changes

github-actions Bot added the merge conflict label Jul 14, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/http-proxy-middleware-4.2.0 branch from abe86b1 to 5b39192 Compare July 14, 2026 21:43

github-actions Bot removed the merge conflict label Jul 14, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump http-proxy-middleware from 2.0.10 to 4.2.0 - #5957

Bump http-proxy-middleware from 2.0.10 to 4.2.0#5957
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/http-proxy-middleware-4.2.0

dependabot Bot commented on behalf of github Jul 14, 2026 •

edited

Loading

Uh oh!

tdonohue left a comment

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

MMilosz commented Jul 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.2.0

What's Changed

New Contributors

v4.1.1

What's Changed

v4.1.0

What's Changed

v4.2.0

v4.1.1

v4.1.0

v4.0.0

v3.0.5

Uh oh!

tdonohue left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

MMilosz commented Jul 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Jul 14, 2026 •

edited

Loading