Skip to content

chore(deps): bump eventsource-parser from 3.1.1 to 4.1.2 - #406

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eventsource-parser-4.1.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eventsource-parser-4.1.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps eventsource-parser from 3.1.1 to 4.1.2.

Release notes

Sourced from eventsource-parser's releases.

v4.1.2

Patch Changes

v4.1.1

Patch Changes

  • #41 dd82654 Thanks @​sahiinthehood! - Handle leading byte-order marks across empty input chunks and split raw UTF-8 BOM chunks so the first event is not dropped.

v4.1.0

Minor Changes

  • #39 0482048 Thanks @​rexxars! - Added an onId callback that reports ID fields when an event block ends, including blocks without data.

v4.0.0

Major Changes

  • #33 39cf365 Thanks @​rexxars! - Require Node.js 22.12 or higher, drop the CommonJS build, and discard invalid lines instead of buffering them

    Breaking changes

    • Node.js 18 and 20 are no longer supported. engines now requires >=22.12, and the browserslist target moved from node >= 18 to node >= 22.12. Older versions may keep working, but they are no longer tested or guaranteed.
    • The CommonJS build has been removed. The main field and the require export conditions are gone, so the package resolves to ./dist/index.js and ./dist/stream.js only. Node 22.12 and above supports require(esm) transparently, so require('eventsource-parser') continues to work there.
    • The root stream.js file has been removed. It re-exported ./dist/stream.cjs for React Native and other bundlers without package exports support. Import eventsource-parser/stream instead, and make sure your bundler resolves the exports field.
    • Invalid lines are now discarded as soon as the parser can tell they cannot become a valid SSE field, rather than being buffered until the line terminator arrives. onError is not called for these, and no line, field, or value is retained. Only lines that are complete when found to be invalid still produce a ParseError with type: 'unknown-field'. This also means reset({consume: true}) no longer reports pending data that was already discarded.
    • Partial comment lines (starting with :) are only buffered when an onComment callback is configured. Without one, they are discarded like any other line the parser has no use for.

    Other changes

    • A leading byte order mark is now stripped whether it arrives as a decoded U+FEFF (for example from a TextDecoder created with ignoreBOM) or as the raw three byte 0xEF 0xBB 0xBF sequence. Previously only the raw form was handled.
    • The README documented an invalid-field error type that the parser never emitted. The ErrorType union is unchanged; the documentation now correctly refers to unknown-field.
Changelog

Sourced from eventsource-parser's changelog.

4.1.2

Patch Changes

4.1.1

Patch Changes

  • #41 dd82654 Thanks @​sahiinthehood! - Handle leading byte-order marks across empty input chunks and split raw UTF-8 BOM chunks so the first event is not dropped.

4.1.0

Minor Changes

  • #39 0482048 Thanks @​rexxars! - Added an onId callback that reports ID fields when an event block ends, including blocks without data.

4.0.0

Major Changes

  • #33 39cf365 Thanks @​rexxars! - Require Node.js 22.12 or higher, drop the CommonJS build, and discard invalid lines instead of buffering them

    Breaking changes

    • Node.js 18 and 20 are no longer supported. engines now requires >=22.12, and the browserslist target moved from node >= 18 to node >= 22.12. Older versions may keep working, but they are no longer tested or guaranteed.
    • The CommonJS build has been removed. The main field and the require export conditions are gone, so the package resolves to ./dist/index.js and ./dist/stream.js only. Node 22.12 and above supports require(esm) transparently, so require('eventsource-parser') continues to work there.
    • The root stream.js file has been removed. It re-exported ./dist/stream.cjs for React Native and other bundlers without package exports support. Import eventsource-parser/stream instead, and make sure your bundler resolves the exports field.
    • Invalid lines are now discarded as soon as the parser can tell they cannot become a valid SSE field, rather than being buffered until the line terminator arrives. onError is not called for these, and no line, field, or value is retained. Only lines that are complete when found to be invalid still produce a ParseError with type: 'unknown-field'. This also means reset({consume: true}) no longer reports pending data that was already discarded.
    • Partial comment lines (starting with :) are only buffered when an onComment callback is configured. Without one, they are discarded like any other line the parser has no use for.

    Other changes

    • A leading byte order mark is now stripped whether it arrives as a decoded U+FEFF (for example from a TextDecoder created with ignoreBOM) or as the raw three byte 0xEF 0xBB 0xBF sequence. Previously only the raw form was handled.
    • The README documented an invalid-field error type that the parser never emitted. The ErrorType union is unchanged; the documentation now correctly refers to unknown-field.
Commits
  • dd51dd3 chore: version packages (#45)
  • 12fc382 fix: enforce buffer limits while processing a chunk (#44)
  • 1115b1c docs: improve constrast on readme badges
  • a7885df chore: version packages (#43)
  • c372920 refactor: handle BOM over multiple leading chunks
  • dd82654 fix: preserve leading BOM after empty input chunks
  • 6519a0f chore: version packages (#40)
  • f54bf65 docs: clarify eventsource being cross-runtime, not node.js exclusive
  • 0482048 feat: add an onId callback (#39)
  • 202c19e chore: version packages (#36)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eventsource-parser-4.1.2 branch from 46d90a7 to 7875c57 Compare October 21, 2026 16:32
Bumps [eventsource-parser](https://github.com/rexxars/eventsource-parser) from 3.1.1 to 4.1.2.
- [Release notes](https://github.com/rexxars/eventsource-parser/releases)
- [Changelog](https://github.com/rexxars/eventsource-parser/blob/main/CHANGELOG.md)
- [Commits](rexxars/eventsource-parser@v3.1.1...v4.1.2)

---
updated-dependencies:
- dependency-name: eventsource-parser
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/eventsource-parser-4.1.2 branch from 7875c57 to f69edb8 Compare October 21, 2026 17:02

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants