Skip to content

Update dependency normalize-url to v8 #9167

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open

renovate wants to merge 1 commit into master

from renovate/normalize-url-8.x

Open

Update dependency normalize-url to v8 #9167

renovate wants to merge 1 commit into master from renovate/normalize-url-8.x

Conversation

Copy link

Contributor

@renovate renovate bot commented Jan 11, 2025 •

edited

Loading

This PR contains the following updates:

Package	Change	Age	Confidence
normalize-url	`^2.0.0` -> `^8.0.0`	age	confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

sindresorhus/normalize-url (normalize-url)

`v8.1.0`

Add removePath and transformPath option dfcfc06
Fix path-like query strings losing structure when sorting parameters 92eb703

`v8.0.2`

Fix handling of encoded backslash (#192) 07c9a7b

`v8.0.1`

Fix handling of protocol-less URLs with a port dec5dc6

`v8.0.0`

Breaking

Require Node.js 14 52f2290
Ignore URLs with custom protocols and just pass them through (#178) 882cb84
- By default, these protocols are supported: https, http, file, data.
- If you need support for a custom protocol that behaves like a HTTP URL, see #179.
ftp protocol is no longer normalized. It's just passed through.
Human-friendly URLs with basic auth is no longer handled as it conflicts with custom protocols
- Example: user:password@sindresorhus.com

Improvements

Make defaultProtocol option accept protocol without colon c7fd781
- You can still pass in a protocol with colon. However, if you use TypeScript, it enforces it without.

`v7.2.0`

Add removeExplicitPort option (#174) 192223b

`v7.1.0`

Add keepQueryParameters option (#173) 6e24307

`v7.0.3`

Fix encoding consistency with sorted and non-sorted URL parameters (#158) c42f53b

`v7.0.2`

Fix the removeDirectoryIndex option TypeScript type 4d35ea1

`v7.0.1`

Fix Safari compatibility (#148) d51cb50

`v7.0.0`

Breaking

Require Node.js 12.20 (#138) 9a44d07
This package is now pure ESM. Please read this.

`v6.1.0`

Accept a boolean for the removeQueryParameters option (#136) 6216336

`v6.0.1`

Fix ReDoS vulnerability for data URLs b1fdb51
- CVE-2021-33502

Also fixed for v5 in 5.3.1 and for v4 in 4.5.1. Versions below 4.3.0 are not affected by this.

`v6.0.0`

Breaking

Add stripTextFragment option (#130) 01a4a91
It should not affect most use-cases, but it is turned on by default and it does change the URL slightly, so it's marked as breaking just to be safe.

`v5.3.1`

`v5.3.0`

Throw a friendly error on view-source: input (#124) ddf2584

`v5.2.1`

Fix removeSingleSlash option adding slashes (#122) 1e06753

`v5.2.0`

Add removeSingleSlash option (#120) 18effbe

`v5.1.0`

Improve stripWWW logic (#117) 0ee9d94
Allow any protocol in the duplicate slashes normalization (#115) 14b79c6

`v5.0.0`

Note that if you're using normalize-url in the browser, you should probably stay on v4 as this version uses newer syntax not available in all browsers.

Breaking

Require Node.js 10 (#103) 7b4ad64

Breaking for TypeScript users

Only use a CommonJS export for the TypeScript definition
You need to change import normalizeUrl from 'normalize-url'; to import normalizeUrl = require('normalize-url');

Fixes

Don't throw if decoding the path fails (#104) 062b426

`v4.5.1`

`v4.5.0`

Strip default MIME type and charset in data URLs (#100) 308909b

`v4.4.1`

Fix data URL should not support query strings (#97) fb92bcb

`v4.4.0`

Add data URL support (#95) 7df5aff

`v4.3.0`

Refactor TypeScript definition to CommonJS compatible export (#93) 566d22f

`v4.2.0`

Add TypeScript definition (#88) 35ce2d4

`v4.1.0`

Remove multiple slashes if they are at the start of pathname (#78) a76edbd
Fix incorrect removal of trailing slash from a hash (#82) 191ad4b

`v4.0.0`

Breaking:

Require Node.js 8 ee7e2c5
Make stripHash option false by default 211322b
Hard-deprecate some deprecated options f066795
Add stripAuthentication option that is enabled by default f0f3e81

Other:

Add opt-in stripProtocol option 211322b

`v3.3.0`

`v3.2.0`

`v3.1.0`

`v3.0.1`

`v3.0.0`

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/normalize-url-8.x branch from d502904 to bce9f8a Compare

August 10, 2025 13:56


 Update dependency normalize-url to v8

35cd3bc

@renovate renovate bot force-pushed the renovate/normalize-url-8.x branch from bce9f8a to 35cd3bc Compare

September 10, 2025 08:50

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment