fix(deps): bump body-parser to resolve qs vulnerability warning (#39396)

serhalp · serhalp · commit 2569b3a7b5fd · 2026-01-22T18:17:35.000-05:00
fix(deps): bump `body-parser` to resolve `qs` vuln See GHSA-6rw7-vpxm-498p. Fixes #39394.
diff --git a/packages/gatsby-source-drupal/package.json b/packages/gatsby-source-drupal/package.json
@@ -11,7 +11,7 @@
     "@opentelemetry/semantic-conventions": "0.26.0",
     "agentkeepalive": "^4.5.0",
     "bluebird": "^3.7.2",
-    "body-parser": "^1.20.3",
+    "body-parser": "^2.2.2",
     "fastq": "^1.17.1",
     "gatsby-plugin-utils": "^4.17.0-next.0",
     "gatsby-source-filesystem": "^5.17.0-next.0",
diff --git a/packages/gatsby/package.json b/packages/gatsby/package.json
@@ -53,7 +53,7 @@
     "babel-preset-gatsby": "^3.17.0-next.0",
     "better-opn": "^2.1.1",
     "bluebird": "^3.7.2",
-    "body-parser": "1.20.3",
+    "body-parser": "^2.2.2",
     "browserslist": "^4.21.9",
     "cache-manager": "^2.11.1",
     "chalk": "^4.1.2",
diff --git a/yarn.lock b/yarn.lock
