Skip to content

chore(deps-dev): bump serve-index from 1.9.1 to 1.9.2#937

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/serve-index-1.9.2
Open

chore(deps-dev): bump serve-index from 1.9.1 to 1.9.2#937
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/serve-index-1.9.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Bumps serve-index from 1.9.1 to 1.9.2.

Release notes

Sourced from serve-index's releases.

1.9.2

What's Changed

🐞 Bug fixes

  • Icons for MIME types containing "+" were not displayed correctly - by @​dougwilson in 4e7785c

    fixed where file icons with MIME types containing the "+" character (such as image/svg+xml) were not displayed correctly. The bug occurred during the conversion of the MIME type to a CSS class name, since the "+" symbol is not valid in class names.

  • Improved error handling for malformed URIs by @​rjoonas in #85

    The HTTP response status code has been fixed for cases where the server receives a URI that cannot be properly decoded. It now returns a 400 (Bad Request) error instead of a 500 (Internal Server Error), more accurately reflecting that the issue is with the client’s request rather than the server itself.

🚀 Improvements

  • Sorting in text/plain and application/json responses by @​dougwilson in 002a251

  • Show font icon for more font types - by @​dougwilson in 9d29665

    Support has been expanded to display the font icon in directory listings. Now all font file formats will automatically show the corresponding icon, instead of only a few specific formats as before.

PRs

New Contributors

... (truncated)

Changelog

Sourced from serve-index's changelog.

1.9.2

==========

  • Fix icons for MIME types with +
  • Fix text and json responses to match html sorting
  • Show font icon for more font types
  • Use 400 error on URI decode failure instead of 500
  • deps: accepts@~1.3.8
    • deps: mime-types@~2.1.24
    • deps: negotiator@0.6.3
  • deps: http-errors@~1.8.0
    • Set constructor name when possible
    • deps: depd@~1.1.2
    • deps: inherits@2.0.4
    • deps: setprototypeof@1.2.0
    • deps: statuses@'>= 1.5.0 < 2'
  • deps: mime-types@~2.1.35
    • Add new mime types
    • deps: mime-db@~1.52.0
  • deps: parseurl@~1.3.3
Commits
  • 6f86a18 1.9.2 (#148)
  • 308f620 build(deps): bump step-security/harden-runner from 2.13.0 to 2.13.1 (#139)
  • 8d0f6c0 build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#140)
  • 0fd8187 build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#137)
  • a945556 build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#135)
  • ab32a73 deps: update accepts and mime-types dependencies to latest versions (#147)
  • 54ed028 ci: downgrade to supertest@6.3.4 and remove --bail option from test scrip...
  • 0171e95 doc(package): remove history.md and add readme.md to published files (#143)
  • 364e273 build(deps): bump github/codeql-action from 3.28.19 to 3.29.5 (#133)
  • c4cde95 build(deps): bump step-security/harden-runner from 2.12.0 to 2.13.0 (#132)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for serve-index since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps-dev): bump serve-index from 1.9.1 to 1.9.2
d01b65b 
Bumps [serve-index](https://github.com/expressjs/serve-index) from 1.9.1 to 1.9.2.
- [Release notes](https://github.com/expressjs/serve-index/releases)
- [Changelog](https://github.com/expressjs/serve-index/blob/master/HISTORY.md)
- [Commits](expressjs/serve-index@v1.9.1...v1.9.2)

---
updated-dependencies:
- dependency-name: serve-index
  dependency-version: 1.9.2
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants