@octokit/request

10.0.16 · 30 Aug 2026MIT52M / weekRepository Homepage npm Atom feed

Upgrading @octokit/request From 4.0.2 to 8.4.1

Same major only

67 releases in betweennotes for 42

6.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.

Counted from 42 of 67 release notes. Advisories are counted from the advisory database, in full.

Tick each one off as you go

types: remove redirect option
breaking8.0.4
Remove data argument
breaking8.0.2
Replace support for Node.js http(s) Agents with documentation on using fetch dispatchers instead
breaking8.0.0
Remove ability to pass custom request options, except from method, headers, body, signal, data
breaking8.0.0
Drop support for NodeJS v14, v16
breaking7.0.0
Remove node-fetch in favor of global
breaking7.0.0
options.request.hook’s signature is now (request, endpointOptions)
breaking5.0.0

Fixes 1 advisory affecting 4.0.2

8.4.1
Security fix15 Feb 2025
- security
  ReDos regex vulnerability, reported
8.4.0
9 Apr 20241 new
- new
  re-add redirect request option (#636) (abc4955), closes #599
8.3.1
5 Apr 20241 fix
- fixed
  Upgrade @octokit/endpoint
8.3.0
5 Apr 20241 new · 1 fix
- new
  security: Add provenance
- fixed
  Upgrade @octokit/types
8.2.0
9 Feb 20241 new
- new
  Add documentation link in error message
8.1.6
22 Nov 20231 fix
- fixed
  Integrate isPlainObject
8.1.5
9 Nov 20231 fix
- fixed
  Avoid Unexpected end of JSON input when response body is empty (#648) (819cc3f), closes #649
8.1.4
9 Oct 20231 fix
- fixed
  error.cause from undici may be instance of Error

8 internal lines (docs, tests, tooling) left out.

npm install @octokit/request@8.4.1

Reading 8.4.1's manifest…

Check against your package.json

Which of your other dependencies stand in the way of 8.4.1. Read once, not stored.