Skip to content

chore(deps-dev): bump basic-ftp from 5.0.5 to 5.2.2#42

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/basic-ftp-5.2.2
Open

chore(deps-dev): bump basic-ftp from 5.0.5 to 5.2.2#42
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/basic-ftp-5.2.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 10, 2026

Bumps basic-ftp from 5.0.5 to 5.2.2.

Release notes

Sourced from basic-ftp's releases.

5.2.2

5.2.1

5.2.0

  • Changed: Skip files with invalid name in downloadToDir.

5.1.0

  • Added: Add the option to prevent the use of separate transfer host IPs when using PASV. (#259)
Changelog

Sourced from basic-ftp's changelog.

5.2.2

5.2.1

5.2.0

5.1.0

  • Added: Add the option to prevent the use of separate transfer host IPs when using PASV. (#259)
Commits
  • e9d09d6 Bump version
  • 20327d3 Move prevention of control character injection to more central place
  • ba40f9d Update dev dependencies
  • 6b0008b Bump version
  • 2ecc8e2 Reject control character injection attempts using paths
  • 515d21f Update security policy and reporting instructions
  • 9744254 Link to security advisory
  • 5d41e45 Bump version
  • 49c2e73 Update dependencies
  • 2a2a0e6 Skip invalid filenames
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by patrickjuchli, a new releaser for basic-ftp since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 10, 2026
@alexcos20
Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.0.5 to 5.2.2.
- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)
- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)
- [Commits](patrickjuchli/basic-ftp@v5.0.5...v5.2.2)

---
updated-dependencies:
- dependency-name: basic-ftp
  dependency-version: 5.2.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/basic-ftp-5.2.2 branch from ecfbb1e to d05cc8c Compare April 15, 2026 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant