thanks!

Author: boutell

CHANGELOG.md

@@ -17,6 +17,12 @@
 * Let the `@apostrophecms/page:unpark` task unpark all parked pages with the given slug, not just the first one.
 * Exclude unknown page types from the page manager.
 
+
+### Security
+
+* Clear an npm audit warning by replacing `connect-multiparty` with `multer`. Thanks to [Radhakrishnan Mohan](https://github.com/RadhaKrishnan) for this contribution.
+* To be clear, this was never an actual security vulnerability. The CVE in question is disputed, and for good reasons. However, since `connect-multiparty` is no longer maintained, it makes sense to move to `multer`.
+
 ## 4.19.0 (2025-07-09)
 
 ### Adds

modules/@apostrophecms/area/ui/apos/components/AposAreaWidget.vue

@@ -26,8 +26,8 @@
         :class="labelsClasses"
       >
         <ol
-          @click="isSuppressingWidgetControls = false"
           class="apos-area-widget__breadcrumbs"
+          @click="isSuppressingWidgetControls = false"
         >
           <li
             class="

modules/@apostrophecms/attachment/index.js

@@ -159,7 +159,6 @@ module.exports = {
       post: {
         upload: [
           self.canUpload,
-          //In the existing code, we are reading the zeroth element from the files array object, which results in processing only a single file. Therefore, I am currently reading just one file from the Multer package.
           require('multer')({ dest: require('os').tmpdir() }).single('file'),
           async function (req) {
             try {
@@ -175,7 +174,6 @@ module.exports = {
 
               return attachment;
             } finally {
-              //Hence I am reading the single file from the upload and I am checking the condtion for the same
               if (req.file) {
                 try {
                   fs.unlinkSync(req.file.path);