Download Latest Version 7.7.0 source code.zip (2.3 MB)
Email in envelope

Get an email when there's a new version of Middy

Home / 7.6.8
Name Modified Size InfoDownloads / Week
Parent folder
7.6.8 source code.tar.gz 2026-06-19 1.9 MB
0
7.6.8 source code.zip 2026-06-19 2.3 MB
0
README.md 2026-06-19 1.2 kB
0
Totals: 3 Items   4.1 MB 0

What's Changed

Security hardening

  • http-response-serializer — caps media-type length at 128 chars and validates against a media-type grammar before reflecting into Content-Type. Stops ReDoS via attacker-supplied media types and prevents echoing

Bug fixes / edge cases

  • fix: add in missing defaults, plus small fixes across http-header-normalizer, http-multipart-body-parser, glue-schema-registry, validator, http-content-negotiation, event-batch-response, http-x402.

Performance

  • core/index.js reworked (~73 lines) across the standard/durable/streamify execution modes, plus two perf commits (fix: perf optimization, fix: small perf boost).

Tooling / CI (not user-facing)

  • Biome bumped to 2.5.0 + config migration (the lint fix from earlier in our session — preset: "recommended", SVG/proto/test overrides).
  • Fuzz-test fixes (event-normalizer), mutation-coverage improvements, provenance-attestation source fix.

Docs

  • Added a WAF alternative note; typo fixes.

Full Changelog: https://github.com/middyjs/middy/compare/7.6.7...7.6.8

Source: README.md, updated 2026-06-19