chore(deps): bump koa-body from 7.0.1 to 8.0.0

[dependabot]

Bumps koa-body from 7.0.1 to 8.0.0.

Release notes

Sourced from koa-body's releases.

v8.0.0

Major Changes

• f858724 Thanks @​TheDadi! - Drop support for Node.js 18 and 20, both of which are past end-of-life (Node 18 EOL April 2025, Node 20 EOL April 2026).

  The minimum supported version is now Node.js 22. CI is tested against Node 22 (Maintenance LTS), 24 (Active LTS), and 26 (Current).

  If you are on Node 18 or 20, upgrade to Node 22+ before updating koa-body. No source-level API changes accompany this bump — it reflects the supported runtime floor only.

Minor Changes

• 9b3b5b6 Thanks @​TheDadi! - Add configurable body-type matchers: jsonTypes, urlencodedTypes, textTypes, and multipartTypes.

  These options let callers customize which Content-Type values are parsed as which body kind, without patching the middleware internals. Each accepts an array of types passed directly to Koa's ctx.is(...), so the standard mime patterns (e.g. urlencoded, multipart, text/*, application/vnd.custom+json) all work.

  Defaults preserve the previous behavior:

  • jsonTypes: application/json, application/json-patch+json, application/vnd.api+json, application/csp-report, application/reports+json
  • urlencodedTypes: urlencoded
  • textTypes: text/*
  • multipartTypes: multipart

  Example — parse a vendor JSON type and a custom multipart type:

  app.use(
    koaBody({
      jsonTypes: ["application/json", "application/vnd.custom+json"],
      multipart: true,
      multipartTypes: ["multipart", "application/x-custom-multipart"],
    })
  );

Changelog

Sourced from koa-body's changelog.

8.0.0

Major Changes

• f858724 Thanks @​TheDadi! - Drop support for Node.js 18 and 20, both of which are past end-of-life (Node 18 EOL April 2025, Node 20 EOL April 2026).

  The minimum supported version is now Node.js 22. CI is tested against Node 22 (Maintenance LTS), 24 (Active LTS), and 26 (Current).

  If you are on Node 18 or 20, upgrade to Node 22+ before updating koa-body. No source-level API changes accompany this bump — it reflects the supported runtime floor only.

Minor Changes

• 9b3b5b6 Thanks @​TheDadi! - Add configurable body-type matchers: jsonTypes, urlencodedTypes, textTypes, and multipartTypes.

  These options let callers customize which Content-Type values are parsed as which body kind, without patching the middleware internals. Each accepts an array of types passed directly to Koa's ctx.is(...), so the standard mime patterns (e.g. urlencoded, multipart, text/*, application/vnd.custom+json) all work.

  Defaults preserve the previous behavior:

  • jsonTypes: application/json, application/json-patch+json, application/vnd.api+json, application/csp-report, application/reports+json
  • urlencodedTypes: urlencoded
  • textTypes: text/*
  • multipartTypes: multipart

  Example — parse a vendor JSON type and a custom multipart type:

  app.use(
    koaBody({
      jsonTypes: ["application/json", "application/vnd.custom+json"],
      multipart: true,
      multipartTypes: ["multipart", "application/x-custom-multipart"],
    })
  );

Commits

• 03dd105 Merge pull request #252 from koajs/changeset-release/master
• 7f74e5d Version Packages
• f858724 docs(changeset): add major-bump changeset for dropping Node 18 and 20
• e385846 ci: drop Node 18 and 20 from test matrix, add Node 26
• 9b3b5b6 docs(changeset): add changeset for configurable body-type matchers
• 6d91592 chore(deps): bump pnpm/action-setup from 5 to 6
• bd89197 chore: bump dependencies, Node to v24.15.0, pnpm to 11.1.1, and add pnpm-work...
• 148e554 feat: add configurable jsonTypes, urlencodedTypes, textTypes, and multipartTy...
• ba680ba chore(deps): bump all dependencies
• 443663f Merge pull request #249 from koajs/dependabot/github_actions/pnpm/action-setup-5
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)