#37 build(deps): bump multer from 2.2.0 to 2.3.0

[Anonymous]

Originally created by: dependabot[bot]

Bumps multer from 2.2.0 to 2.3.0.

Release notes

Sourced from multer's releases.

v2.3.0

Important

• Fix CVE-2026-77078 (GHSA-wc9g-mqfw-jrwm)
• Fix CVE-2026-77037 (GHSA-qfvm-cv95-jqjf)
• Fix CVE-2026-77063 (GHSA-qvfw-j98x-7q72)
• Fix CVE-2026-82333 (GHSA-535w-7cp7-47q4)

What's Changed

• Update busboy link pointing to nonexistent section by @​krzysdz in expressjs/multer#1447](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1447">expressjs/multer/issues/1447)
• Update outdated links to Express error handling guide by @​krzysdz in expressjs/multer#1405](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1405">expressjs/multer/issues/1405)
• chore(deps): bump GitHub Actions and dev dependencies by @​sheplu in expressjs/multer#1445](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1445">expressjs/multer/issues/1445)
• chore(ci): npm-publish via reusable workflows by @​sheplu in expressjs/multer#1364](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1364">expressjs/multer/issues/1364)
• fix(tests): keep Git from rewriting fixture line endings on Windows by @​MohammedAlkindi in expressjs/multer#1450](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1450">expressjs/multer/issues/1450)
• docs: correct fieldNameSize default in limits table by @​UlisesGascon in expressjs/multer#1432](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1432">expressjs/multer/issues/1432)
• feat: normalize package.json by @​UlisesGascon in expressjs/multer#1322](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1322">expressjs/multer/issues/1322)
• fix(test): use path.sep for cross-platform path assertions by @​kilisamemarisaaa in expressjs/multer#1452](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1452">expressjs/multer/issues/1452)
• docs(changelog): fix typo 'comaptible' to 'compatible' by @​ayushshukla1807 in expressjs/multer#1383](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1383">expressjs/multer/issues/1383)
• doc: adds context for link to Chinese README by @​sunsheeppoplar in expressjs/multer#1369](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1369">expressjs/multer/issues/1369)
• docs: use crypto.randomBytes in diskStorage README example by @​Hashim1999164 in expressjs/multer#1436](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1436">expressjs/multer/issues/1436)
• docs: clarify preservePath behavior by @​vibhor-aggr in expressjs/multer#1414](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1414">expressjs/multer/issues/1414)
• docs: clarify parts limit behavior by @​vibhor-aggr in expressjs/multer#1430](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1430">expressjs/multer/issues/1430)
• chore: increase test coverage by @​wojtekmaj in expressjs/multer#1355](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1355">expressjs/multer/issues/1355)
• chore: drop deep-equal devDependency by @​wojtekmaj in expressjs/multer#1353](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1353">expressjs/multer/issues/1353)
• docs: fix Chinese README translation by @​vibhor-aggr in expressjs/multer#1429](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1429">expressjs/multer/issues/1429)
• Test: Enhance cross-platform test reliability and update CI workflow by @​ShubhamOulkar in expressjs/multer#1334](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1334">expressjs/multer/issues/1334)
• fix: fallback to error code when no message mapping exists by @​sahilraut191685 in expressjs/multer#1448](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1448">expressjs/multer/issues/1448)
• test: add coverage for preservePath by @​kory-kaai in expressjs/multer#1454](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1454">expressjs/multer/issues/1454)
• fix: prevent process crash when fileFilter calls its callback more than once by @​spokodev in expressjs/multer#1427](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1427">expressjs/multer/issues/1427)
• fix: preserve async hooks context in supported environments by @​ajhyndman in expressjs/multer#1124](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1124">expressjs/multer/issues/1124)
• fix: allow files at exact fileSize limit by @​raashish1601 in expressjs/multer#1407](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1407">expressjs/multer/issues/1407)
• fix: decode WHATWG-escaped characters in file originalname by @​webdevelopersrinu in expressjs/multer#1421](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1421">expressjs/multer/issues/1421)
• docs: add Indonesian translation for README by @​Derylfabiensyah in expressjs/multer#1431](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1431">expressjs/multer/issues/1431)
• test: accept files exactly at fileSize limit by @​abhu85 in expressjs/multer#1382](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1382">expressjs/multer/issues/1382)
• docs: add Japanese translation to README by @​noritaka1166 in expressjs/multer#1354](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1354">expressjs/multer/issues/1354)
• Update 'README-zh-cn.md' up to now by @​pbstar in expressjs/multer#1264](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1264">expressjs/multer/issues/1264)
• feat: add an opt-in fieldArrayIndexLimit by @​arpitjain099 in expressjs/multer#1438](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1438">expressjs/multer/issues/1438)
• docs: refresh all README translations by @​UlisesGascon in expressjs/multer#1462](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1462">expressjs/multer/issues/1462)
• 2.3.0 by @​UlisesGascon in expressjs/multer#1455](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1455">expressjs/multer/issues/1455)

New Contributors

• @​krzysdz made their first contribution in expressjs/multer#1447](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1447">expressjs/multer/issues/1447)
• @​sheplu made their first contribution in expressjs/multer#1445](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1445">expressjs/multer/issues/1445)
• @​MohammedAlkindi made their first contribution in expressjs/multer#1450](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1450">expressjs/multer/issues/1450)
• @​kilisamemarisaaa made their first contribution in expressjs/multer#1452](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1452">expressjs/multer/issues/1452)
• @​ayushshukla1807 made their first contribution in expressjs/multer#1383](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1383">expressjs/multer/issues/1383)
• @​sunsheeppoplar made their first contribution in expressjs/multer#1369](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1369">expressjs/multer/issues/1369)
• @​Hashim1999164 made their first contribution in expressjs/multer#1436](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1436">expressjs/multer/issues/1436)
• @​vibhor-aggr made their first contribution in expressjs/multer#1414](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1414">expressjs/multer/issues/1414)
• @​sahilraut191685 made their first contribution in expressjs/multer#1448](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1448">expressjs/multer/issues/1448)

... (truncated)

Changelog

Sourced from multer's changelog.

2.3.0

• Fix CVE-2026-77078 (GHSA-wc9g-mqfw-jrwm)
• Fix CVE-2026-77037 (GHSA-qfvm-cv95-jqjf)
• Fix CVE-2026-77063 (GHSA-qvfw-j98x-7q72)
• Fix CVE-2026-82333 (GHSA-535w-7cp7-47q4)
• Add MulterError codes INVALID_FIELD_NAME and STREAM_DESTROYED
• Add opt-in limits.fieldArrayIndexLimit to bound numeric array indexes in field names (#1438](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1438">/issues/1438))
• Accept files whose size is exactly limits.fileSize (#1407](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1407">/issues/1407))
• Preserve the caller's async context (AsyncLocalStorage) when calling next() (#1124](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1124">/issues/1124))
• Decode WHATWG-escaped characters (%0A, %0D, %22) in file.originalname (#1421](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1421">/issues/1421))
• Do not crash when fileFilter invokes its callback more than once (#1427](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1427">/issues/1427))
• Use a fallback message for MulterError codes without a mapping (#1448](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1448">/issues/1448))
• Docs: clarify preservePath and parts, use crypto.randomBytes in the DiskStorage example (#1414](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1414">/issues/1414), #1430](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1430">/issues/1430), #1436](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1436">/issues/1436))
• Docs: add Indonesian, Japanese and Tamil translations and refresh all translations from the current README (#1431](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1431">/issues/1431), #1354](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1354">/issues/1354), #1462](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1462">/issues/1462))
• Internal: run the test suite on Windows (#1334](https://github.com/href="https://redirect.github.com/expressjs/multer/pull/1334">/issues/1334))

Commits

• 4e8edf5 2.3.0 (#1455](https://github.com/href="https://redirect.github.com/expressjs/multer/issues/1455">/issues/1455))
• 87a584e fix: reject invalid field names instead of crashing on append-field errors
• ab6aeae fix: enforce file size limit with async fileFilter
• eef7444 fix: destroy disk write stream on aborted uploads to prevent fd leak
• 25ec9bb docs: refresh all README translations (#1462](https://github.com/href="https://redirect.github.com/expressjs/multer/issues/1462">/issues/1462))
• 73c1759 feat: add an opt-in fieldArrayIndexLimit (#1438](https://github.com/href="https://redirect.github.com/expressjs/multer/issues/1438">/issues/1438))
• ece6735 Update 'README-zh-cn.md' up to now (#1264](https://github.com/href="https://redirect.github.com/expressjs/multer/issues/1264">/issues/1264))
• 3278e1b docs: add Japanese translation to README (#1354](https://github.com/href="https://redirect.github.com/expressjs/multer/issues/1354">/issues/1354))
• 3c0bc5e test: accept files exactly at fileSize limit (#1382](https://github.com/href="https://redirect.github.com/expressjs/multer/issues/1382">/issues/1382))
• b6d84b0 docs: add Indonesian translation for README (#1431](https://github.com/href="https://redirect.github.com/expressjs/multer/issues/1431">/issues/1431))
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for multer since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name=""> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/xvertere-org/Solarch/network/alerts). </dependency>