Release: 2.2.1

[UlisesGascon]

• closes Release Proposal 2.2.1 #644

What's included in the HISTORY.md

* Security fix for [GHSA-wqch-xfxh-vrr4](https://github.com/expressjs/body-parser/security/advisories/GHSA-wqch-xfxh-vrr4)
* refactor: move common request validation to read function
* deps: 
  * type-is@^2.0.1
  * iconv-lite@^0.7.0
    * Handle split surrogate pairs when encoding UTF-8
    * Avoid false positives in `encodingExists` by using prototype-less objects 
  * raw-body@^3.0.1
  * debug@^4.4.3

What's Changed

• ci: add dependabot by @Phillip9587 in ci: add dependabot #593
• ci: use full SHAs for github action versions by @Phillip9587 in ci: use full SHAs for github action versions #594
• deps: type-is@^2.0.1 by @Phillip9587 in deps: type-is@^2.0.1 #599
• build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 #609
• build(deps): bump github/codeql-action from 3.28.13 to 3.28.15 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.28.13 to 3.28.15 #610
• build(deps-dev): bump eslint-plugin-promise from 6.1.1 to 6.6.0 by @dependabot[bot] in build(deps-dev): bump eslint-plugin-promise from 6.1.1 to 6.6.0 #611
• build(deps-dev): bump eslint-plugin-import from 2.27.5 to 2.31.0 by @dependabot[bot] in build(deps-dev): bump eslint-plugin-import from 2.27.5 to 2.31.0 #613
• build(deps-dev): bump eslint-plugin-markdown from 3.0.0 to 3.0.1 by @dependabot[bot] in build(deps-dev): bump eslint-plugin-markdown from 3.0.0 to 3.0.1 #612
• ci: add codeql github workflows scanning by @Phillip9587 in ci: add codeql github workflows scanning #614
• ci: update CodeQL config to ignore the test directory by @Phillip9587 in ci: update CodeQL config to ignore the test directory #615
• build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 #620
• build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 #619
• chore(deps): unpin devDependencies by @Phillip9587 in chore(deps): unpin devDependencies #616
• ci: add node.js 24 to test matrix by @Phillip9587 in ci: add node.js 24 to test matrix #621
• build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 #623
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 #624
• chore: add funding to package.json by @Phillip9587 in chore: add funding to package.json #617
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 #625
• build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 #630
• refactor: move common request validation to read function by @Phillip9587 in refactor: move common request validation to read function #600
• deps: bump iconv-lite by @bjohansebas in deps: bump iconv-lite #631
• doc: pull beta changelog forward into 2.0.0 by @jonchurch in doc: pull beta changelog forward into 2.0.0 #629
• refactor: optimize raw and text parsers with shared passthrough function by @Phillip9587 in refactor: optimize raw and text parsers with shared passthrough function #634
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in build(deps): bump actions/checkout from 4.2.2 to 5.0.0 #640
• build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 #639
• build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by @dependabot[bot] in build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 #636
• build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by @dependabot[bot] in build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 #637
• build(deps): bump github/codeql-action from 3.29.7 to 3.30.5 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.29.7 to 3.30.5 #638
• deps: raw-body@^3.0.1 by @Phillip9587 in deps: raw-body@^3.0.1 #641
• deps: debug@^4.4.3 by @Phillip9587 in deps: debug@^4.4.3 #642
• docs: add iconv-lite 0.7.0 changes to history entry by @Phillip9587 in docs: add iconv-lite 0.7.0 changes to history entry #645
• ci: add node.js 25 to test matrix by @Phillip9587 in ci: add node.js 25 to test matrix #650
• perf: move read options outside parser middlewares by @Phillip9587 in perf: move read options outside parser middlewares #648
• test(json): add RFC 7159 whitespace edge cases by @Ayoub-Mabrouk in test(json): add RFC 7159 whitespace edge cases #653
• test: add test for urlencoded invalid defaultCharset by @Phillip9587 in test: add test for urlencoded invalid defaultCharset #643
• build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 #657
• build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 #656
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 #655
• build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 #654
• ci: also test on first supported node.js version by @Phillip9587 in ci: also test on first supported node.js version #646
• chore: switch badges from badgen.net to shields.io by @Phillip9587 in chore: switch badges from badgen.net to shields.io #661
• Remove history.md from being packaged on publish by @bjohansebas in Remove history.md from being packaged on publish #660

New Contributors

• @dependabot[bot] made their first contribution in build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 #609
• @jonchurch made their first contribution in doc: pull beta changelog forward into 2.0.0 #629
• @Ayoub-Mabrouk made their first contribution in test(json): add RFC 7159 whitespace edge cases #653

Full Changelog: v2.2.0...master

[UlisesGascon]

Ideally we can target to next Monday, but we depend on external factors as mentioned in expressjs/discussions#380

[Phillip9587]

@UlisesGascon Please include the 2 latest commits.

[UlisesGascon]

Updated! Also added reference to the advisory and target the release for Monday 🤞

[bjohansebas]

LGTM

[Phillip9587]

LGTM! Just one comment