chore(deps): bump formidable, serverless and supertest

[dependabot]

Bumps formidable to 3.5.4 and updates ancestor dependencies formidable, serverless and supertest. These dependencies need to be updated together.

Updates formidable from 1.2.2 to 3.5.4

Release notes

Sourced from formidable's releases.

v3.5.3

What's Changed

• Fix existing test failure by @​ryhmrt in node-formidable/formidable#990

• update Ryan Dahl x account link by @​moetezch in node-formidable/formidable#989

• update failing tests

• update CI/CD workflows and actions;

• update CodeQL github action for security analysis

• update readme, links and badges

• update to use cuid2 (battle-tested @paralleldrive/cuid2 package) for better random names - should not be breaking anything since it's still 25 characters long, but a lot safer and faster.

New Contributors

• @​ryhmrt made their first contribution in node-formidable/formidable#990
• @​moetezch made their first contribution in node-formidable/formidable#989

Full Changelog: node-formidable/formidable@v3.5.2...v3.5.3

v3.5.2

No release notes provided.

v3.2.5

No release notes provided.

3.2.4

No release notes provided.

3.1.4

https://github.com/node-formidable/formidable/blob/master/CHANGELOG.md

Changelog

Sourced from formidable's changelog.

3.5.4

• fix the os.machine breaking some dependents, fix #994
• add Node 16, 18, 20, 22 to CI/CD

3.5.3

• security report by ZAST.AI help for some vulnerabilities addressing (primarily the random names generation)
• update failing tests
• update CI/CD workflows and actions;
• update CodeQL github action for security analysis
• update readme, links and badges
• update to use cuid2 (battle-tested @paralleldrive/cuid2 package) for better random names - should not be breaking anything since it's still 25 characters long, but a lot safer and faster.

3.5.2

• fix: (#982) make it easier to import hexoid with webpack

3.5.1

• fix: (#945) multipart parser fix: flush or fail always (don't hang)

3.5.0

• feature: (#944) Dual package: Can be imported as ES module and required as commonjs module

3.4.0

• feature: (#940) form.parse returns a promise if no callback is provided
• it resolves with an array [fields, files]

3.3.2

• feature: (#855) add options.createDirsFromUploads, see README for usage
• form.parse is an async function (ignore the promise)
• benchmarks: add e2e becnhmark with as many request as possible per second
  • npm run to display all the commands
• mark as latest on npm

3.2.5

• fix: (#881) fail earlier when maxFiles is exceeded

3.2.4

• fix: (#857) improve keep extension
• The code from before 3.2.4 already removed some characters from the file extension. But not always. So it was inconsistent.

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by tunnckocore, a new releaser for formidable since your current version.

Updates serverless from 3.38.0 to 4.14.1

Release notes

Sourced from serverless's releases.

4.14.0

Features

• Serverless Framework
  • Support for Doppler secrets in Serverless Variables (docs)

service: my-service
provider:
  environment:
    DB_PASSWORD: ${doppler:my-project/DB_PASSWORD}

4.13.0

Features

• Serverless MCP Server

  • Intelligent Error Analysis

    • Introduces the errors-info tool for advanced error pattern detection across AWS services.
    • Automatically discovers and scans log groups from Lambda, API Gateway (REST & HTTP), and other CloudWatch log groups defined in the CFN Stack.
    • Groups similar logs using CloudWatch Logs Insights pattern command.
    • Extracts metadata including regex strings, pattern IDs, frequency ratios, and severity levels.
    • Displays representative examples of each pattern group to reduce noise and improve diagnostics.

  • Confirmation Handling for Queries

    • Adds robust safeguards against accidentally triggering large historical queries.
    • Requires explicit confirmation for:
      • Date ranges older than 1 month
      • Timeframes longer than 3 hours

  • Enhanced Logs Search

    • Improves the logs-search tool with more flexible search behavior.
    • Supports arrays of search terms with implicit OR logic.
    • Enables case-insensitive matching.

  • Integrated Documentation Tool

    • Adds support for browsing Serverless Framework and Serverless Container Framework documentation within the MCP server.
    • Serves markdown files directly - always up to date.
    • Documentation is always tied to the version you are using, ensuring accuracy and consistency with your environment.

  • General Tooling Improvements

    • Improved AWS Credential Error Handling

      • Detects and returns actionable messages for profile, role, or region misconfigurations in all tools.

    • Context Overflow Protection

      • Introduces caps to prevent overloading agents with excessive data:
        • Max log events
        • Max error patterns
        • Max metric datapoints
      • Dynamically adjusts metric periods for larger timeframes.

    • Optimized Lambda Logs Queries

      • Large timeframe metric queries now supported, but error pattern queries are limited to the past 7 days.

... (truncated)

Changelog

Sourced from serverless's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

Commits

• See full diff in compare view

Updates supertest from 6.1.6 to 7.1.0

Release notes

Sourced from supertest's releases.

v7.1.0

• Merge pull request #852 from alxndrsn/econnreset de045d4
• Merge pull request #845 from ikonst/master be0d5c7
• Merge pull request #854 from alxndrsn/commitlint 35ac86f
• fix(dev): commitlint dev dependency & config e67fcb2
• fix: avoid server re-use race conditions 96c06e3
• test: fix test failure due to localhost being also ipv6 92079a0

ladjs/supertest@v7.0.0...v7.1.0

v7.0.0

• Merge pull request #834 from Bruception/master 225118c
• Fix TestAgent not inheriting Agent properties f290431
• fix: bump deps, drop Node.js v<14.16.0 1e18c20

ladjs/supertest@v6.3.4...v7.0.0

v6.3.4

• chore: bump deps, remove yarn.lock bc4398a
• chore: bump deps c823515
• Merge pull request #811 from ladjs/dependabot/npm_and_yarn/cookiejar-2.1.4 37017b3
• Merge pull request #814 from siddtheone/patch-1 6b41374
• Merge pull request #828 from 9renpoto/9renpoto-patch-1 0ff9c02
• si/visionmedia/ladjs/ 2cba6d4
• Update package.json 79a69b6
• Merge pull request #821 from yunnysunny/feature/ci-fix c1b8f9d
• ci: fix broken github action cache saving 5d48749
• Merge pull request #818 from lamweili/patch-1 25920e7
• docs: fixed links (for #621) 3767f9e
• Update README.md b81d3a4
• Removing unused import 4b372eb
• chore(deps): bump cookiejar from 2.1.3 to 2.1.4 ac9327f
• Merge pull request #646 from dtom90/patch-1 44d5d72
• Merge pull request #621 from RichieRunner/patch-1 d91ff37
• Update index.js function definition 9ee6a1b
• Update README.md 13a2b44

ladjs/supertest@v6.3.3...v6.3.4

v6.3.3

• chore: bump deps 2910f73

ladjs/supertest@v6.3.2...v6.3.3

v6.3.2

• docs: added maintainer note e24875d
• docs: fixed links 5b59ddc

ladjs/supertest@v6.3.1...v6.3.2

... (truncated)

Commits

• 359bc52 7.1.0
• de045d4 Merge pull request #852 from alxndrsn/econnreset
• be0d5c7 Merge pull request #845 from ikonst/master
• 35ac86f Merge pull request #854 from alxndrsn/commitlint
• e67fcb2 fix(dev): commitlint dev dependency & config
• 96c06e3 fix: avoid server re-use race conditions
• 92079a0 test: fix test failure due to localhost being also ipv6
• 2ae1c36 7.0.0
• 225118c Merge pull request #834 from Bruception/master
• f290431 Fix TestAgent not inheriting Agent properties
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by titanism, a new releaser for supertest since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.