[Snyk] Upgrade normalize-url from 7.0.3 to 8.0.2

[snyk-io]

Snyk has created this PR to upgrade normalize-url from 7.0.3 to 8.0.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 5 versions ahead of your current version.

• The recommended version was released 2 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Excessive Platform Resource Consumption within a Loop SNYK-JS-BRACES-6838727	57	Proof of Concept
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	57	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	57	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	57	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-ROLLUP-8073097	57	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	57	Proof of Concept

Release notes

Package name: normalize-url

• 8.0.2 - 2025-06-09
  
  • Fix handling of encoded backslash (#192) 07c9a7b

  ---

  v8.0.1...v8.0.2

• 8.0.1 - 2024-03-10
  
  • Fix handling of protocol-less URLs with a port dec5dc6

  v8.0.0...v8.0.1

• 8.0.0 - 2022-11-04
  

  Breaking

  • Require Node.js 14 52f2290
  • Ignore URLs with custom protocols and just pass them through (#178) 882cb84
    • By default, these protocols are supported: https, http, file, data.
    • If you need support for a custom protocol that behaves like a HTTP URL, see #179.
  • ftp protocol is no longer normalized. It's just passed through.
  • Human-friendly URLs with basic auth is no longer handled as it conflicts with custom protocols
    • Example: user:password@sindresorhus.com

  Improvements

  • Make defaultProtocol option accept protocol without colon c7fd781
    • You can still pass in a protocol with colon. However, if you use TypeScript, it enforces it without.

  v7.2.0...v8.0.0

• 7.2.0 - 2022-09-27
  
  • Add removeExplicitPort option (#174) 192223b

  v7.1.0...v7.2.0

• 7.1.0 - 2022-09-01
  
  • Add keepQueryParameters option (#173) 6e24307

  v7.0.3...v7.1.0

• 7.0.3 - 2022-01-18
  
  • Fix encoding consistency with sorted and non-sorted URL parameters (#158) c42f53b

  v7.0.2...v7.0.3

from normalize-url GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
package.json	0% smaller

[snyk-io]

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)