Update dependency normalize-url to v8 #9167

renovate · 2025-01-11T20:13:45Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
normalize-url	`^2.0.0` -> `^8.0.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

sindresorhus/normalize-url (normalize-url)

`v8.0.1`

Compare Source

Fix handling of protocol-less URLs with a port dec5dc6

`v8.0.0`

Compare Source

Breaking

Require Node.js 14 52f2290
Ignore URLs with custom protocols and just pass them through (#178) 882cb84
- By default, these protocols are supported: https, http, file, data.
- If you need support for a custom protocol that behaves like a HTTP URL, see https://github.com/sindresorhus/normalize-url/issues/179.
ftp protocol is no longer normalized. It's just passed through.
Human-friendly URLs with basic auth is no longer handled as it conflicts with custom protocols
- Example: user:[email protected]

Improvements

Make defaultProtocol option accept protocol without colon c7fd781
- You can still pass in a protocol with colon. However, if you use TypeScript, it enforces it without.

Fix encoding consistency with sorted and non-sorted URL parameters (#158) c42f53b

`v7.0.2`

Compare Source

Fix the removeDirectoryIndex option TypeScript type 4d35ea1

`v7.0.1`

Compare Source

Fix Safari compatibility (#148) d51cb50

`v7.0.0`

Compare Source

Breaking

Require Node.js 12.20 (#138) 9a44d07
This package is now pure ESM. Please read this.

`v6.1.0`

Compare Source

Accept a boolean for the removeQueryParameters option (#136) 6216336

`v6.0.1`

Compare Source

Fix ReDoS vulnerability for data URLs b1fdb51
- CVE-2021-33502

Also fixed for v5 in 5.3.1 and for v4 in 4.5.1. Versions below 4.3.0 are not affected by this.

`v6.0.0`

Compare Source

Breaking

Add stripTextFragment option (#130) 01a4a91
It should not affect most use-cases, but it is turned on by default and it does change the URL slightly, so it's marked as breaking just to be safe.

`v5.3.1`

Compare Source

`v5.3.0`

Compare Source

Throw a friendly error on view-source: input (#124) ddf2584

`v5.2.1`

Compare Source

Fix removeSingleSlash option adding slashes (#122) 1e06753

`v5.2.0`

Compare Source

Add removeSingleSlash option (#120) 18effbe

`v5.1.0`

Compare Source

Improve stripWWW logic (#117) 0ee9d94
Allow any protocol in the duplicate slashes normalization (#115) 14b79c6

`v5.0.0`

Compare Source

Note that if you're using normalize-url in the browser, you should probably stay on v4 as this version uses newer syntax not available in all browsers.

Breaking

Require Node.js 10 (#103) 7b4ad64

Breaking for TypeScript users

Only use a CommonJS export for the TypeScript definition
You need to change import normalizeUrl from 'normalize-url'; to import normalizeUrl = require('normalize-url');