Skip to content

chore(deps): bump eventsource-parser from 3.1.1 to 4.1.1 - #328

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eventsource-parser-4.1.1
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eventsource-parser-4.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026 •

Copy link
Copy Markdown
Contributor

Bumps eventsource-parser from 3.1.1 to 4.1.1.

Release notes

Sourced from eventsource-parser's releases.

v4.1.1

Patch Changes

  • #41 dd82654 Thanks @​sahiinthehood! - Handle leading byte-order marks across empty input chunks and split raw UTF-8 BOM chunks so the first event is not dropped.

v4.1.0

Minor Changes

  • #39 0482048 Thanks @​rexxars! - Added an onId callback that reports ID fields when an event block ends, including blocks without data.

v4.0.0

Major Changes

  • #33 39cf365 Thanks @​rexxars! - Require Node.js 22.12 or higher, drop the CommonJS build, and discard invalid lines instead of buffering them

    Breaking changes

    • Node.js 18 and 20 are no longer supported. engines now requires >=22.12, and the browserslist target moved from node >= 18 to node >= 22.12. Older versions may keep working, but they are no longer tested or guaranteed.
    • The CommonJS build has been removed. The main field and the require export conditions are gone, so the package resolves to ./dist/index.js and ./dist/stream.js only. Node 22.12 and above supports require(esm) transparently, so require('eventsource-parser') continues to work there.
    • The root stream.js file has been removed. It re-exported ./dist/stream.cjs for React Native and other bundlers without package exports support. Import eventsource-parser/stream instead, and make sure your bundler resolves the exports field.
    • Invalid lines are now discarded as soon as the parser can tell they cannot become a valid SSE field, rather than being buffered until the line terminator arrives. onError is not called for these, and no line, field, or value is retained. Only lines that are complete when found to be invalid still produce a ParseError with type: 'unknown-field'. This also means reset({consume: true}) no longer reports pending data that was already discarded.
    • Partial comment lines (starting with :) are only buffered when an onComment callback is configured. Without one, they are discarded like any other line the parser has no use for.

    Other changes

    • A leading byte order mark is now stripped whether it arrives as a decoded U+FEFF (for example from a TextDecoder created with ignoreBOM) or as the raw three byte 0xEF 0xBB 0xBF sequence. Previously only the raw form was handled.
    • The README documented an invalid-field error type that the parser never emitted. The ErrorType union is unchanged; the documentation now correctly refers to unknown-field.
Changelog

Sourced from eventsource-parser's changelog.

4.1.1

Patch Changes

  • #41 dd82654 Thanks @​sahiinthehood! - Handle leading byte-order marks across empty input chunks and split raw UTF-8 BOM chunks so the first event is not dropped.

4.1.0

Minor Changes

  • #39 0482048 Thanks @​rexxars! - Added an onId callback that reports ID fields when an event block ends, including blocks without data.

4.0.0

Major Changes

  • #33 39cf365 Thanks @​rexxars! - Require Node.js 22.12 or higher, drop the CommonJS build, and discard invalid lines instead of buffering them

    Breaking changes

    • Node.js 18 and 20 are no longer supported. engines now requires >=22.12, and the browserslist target moved from node >= 18 to node >= 22.12. Older versions may keep working, but they are no longer tested or guaranteed.
    • The CommonJS build has been removed. The main field and the require export conditions are gone, so the package resolves to ./dist/index.js and ./dist/stream.js only. Node 22.12 and above supports require(esm) transparently, so require('eventsource-parser') continues to work there.
    • The root stream.js file has been removed. It re-exported ./dist/stream.cjs for React Native and other bundlers without package exports support. Import eventsource-parser/stream instead, and make sure your bundler resolves the exports field.
    • Invalid lines are now discarded as soon as the parser can tell they cannot become a valid SSE field, rather than being buffered until the line terminator arrives. onError is not called for these, and no line, field, or value is retained. Only lines that are complete when found to be invalid still produce a ParseError with type: 'unknown-field'. This also means reset({consume: true}) no longer reports pending data that was already discarded.
    • Partial comment lines (starting with :) are only buffered when an onComment callback is configured. Without one, they are discarded like any other line the parser has no use for.

    Other changes

    • A leading byte order mark is now stripped whether it arrives as a decoded U+FEFF (for example from a TextDecoder created with ignoreBOM) or as the raw three byte 0xEF 0xBB 0xBF sequence. Previously only the raw form was handled.
    • The README documented an invalid-field error type that the parser never emitted. The ErrorType union is unchanged; the documentation now correctly refers to unknown-field.
Commits
  • a7885df chore: version packages (#43)
  • c372920 refactor: handle BOM over multiple leading chunks
  • dd82654 fix: preserve leading BOM after empty input chunks
  • 6519a0f chore: version packages (#40)
  • f54bf65 docs: clarify eventsource being cross-runtime, not node.js exclusive
  • 0482048 feat: add an onId callback (#39)
  • 202c19e chore: version packages (#36)
  • fde4ca2 ci: use a conventional commit subject for the version pull request (#38)
  • f32fda2 ci: generate changesets from conventional commit PR titles (#37)
  • c8cd582 chore: add changeset for #33
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eventsource-parser-4.1.1 branch from 7dcda10 to 19711a6 Compare September 23, 2026 16:32
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eventsource-parser-4.1.1 branch from 19711a6 to 0d1e8dd Compare September 30, 2026 16:33
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eventsource-parser-4.1.1 branch from 0d1e8dd to f3aeacd Compare October 7, 2026 16:33
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eventsource-parser-4.1.1 branch from f3aeacd to 560a499 Compare October 14, 2026 21:02
Bumps [eventsource-parser](https://github.com/rexxars/eventsource-parser) from 3.1.1 to 4.1.1.
- [Release notes](https://github.com/rexxars/eventsource-parser/releases)
- [Changelog](https://github.com/rexxars/eventsource-parser/blob/main/CHANGELOG.md)
- [Commits](rexxars/eventsource-parser@v3.1.1...v4.1.1)

---
updated-dependencies:
- dependency-name: eventsource-parser
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eventsource-parser-4.1.1 branch from 560a499 to 55bc2ef Compare October 14, 2026 21:33
@dependabot @github

dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #406.

@dependabot dependabot Bot closed this Oct 21, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/eventsource-parser-4.1.1 branch October 21, 2026 16:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants