Skip to content

chore(deps): bump serve from 10.1.2 to 14.2.6#983

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/serve-14.2.6
Open

chore(deps): bump serve from 10.1.2 to 14.2.6#983
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/serve-14.2.6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Bumps serve from 10.1.2 to 14.2.6.

Release notes

Sourced from serve's releases.

v14.2.6

Patch Changes

  • 7fcb924: Bump ajv to 8.18.0
  • b3888f9: Update serve-handler to 6.1.7 to fix ReDoS vulnerabilities

v14.2.5

Patch Changes

  • f4b6fbd: Update compression to v1.8.1

14.2.4

Patches

  • Bump serve-handler, vitest, and `typescript: #812

14.2.3

Patches

  • Bump @zeit/schemas to 2.36.0: #803

14.2.2

Patches

  • fix: Update ajv from 8.11.0 to 8.12.0: #796

Credits

Huge thanks to @​legobeat for helping!

14.2.1

Patches

  • Set Access-Control-Allow-Headers: * default response header: #775

Credits

Huge thanks to @​hood for helping!

14.2.0

Minor Changes

  • Update CORS headers to support PNA spec: #753
  • Bump @zeit/schemas package: #756

Patches

  • Update the license year: #752

Credits

... (truncated)

Changelog

Sourced from serve's changelog.

14.2.6

Patch Changes

  • 7fcb924: Bump ajv to 8.18.0
  • b3888f9: Update serve-handler to 6.1.7 to fix ReDoS vulnerabilities

14.2.5

Patch Changes

  • f4b6fbd: Update compression to v1.8.1
Commits
Maintainer changes

This version was pushed to npm by vercel-release-bot, a new releaser for serve since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 22, 2026
@dependabot dependabot Bot temporarily deployed to development May 22, 2026 02:28 Inactive
Bumps [serve](https://github.com/vercel/serve) from 10.1.2 to 14.2.6.
- [Release notes](https://github.com/vercel/serve/releases)
- [Changelog](https://github.com/vercel/serve/blob/main/CHANGELOG.md)
- [Commits](vercel/serve@10.1.2...v14.2.6)

---
updated-dependencies:
- dependency-name: serve
  dependency-version: 14.2.6
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/serve-14.2.6 branch from 93a8f96 to aa516aa Compare May 30, 2026 00:29
@dependabot dependabot Bot temporarily deployed to development May 30, 2026 00:29 Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants