Update dependency body-parser to v1.20.6

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
body-parser	dependencies	patch	1.20.4 → 1.20.6

By merging this PR, the issue #36 will be automatically resolved and closed:

Severity	CVSS Score	Vulnerability
Medium	5.3	CVE-2026-8723
Low	3.7	CVE-2026-12590

---

Release Notes

expressjs/body-parser (body-parser)

v1.20.6

Compare Source

Important: Security

• Security fix for CVE-2026-12590 (GHSA-v422-hmwv-36x6)

What's Changed

• fix: improve limit option validation by @​Phillip9587 in #​741

Full Changelog: expressjs/body-parser@1.20.5...1.20.6

v1.20.5

Compare Source

What's Changed

The reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (> 100) on qs@​6.14.2+. (#​716)

• refactor(json): simplify strict mode error string construction by @​jonchurch in #​692
• fix: correct off-by-one error in parameterCount by @​abhu85 in #​716
• deps(qs): bump qs to 6.15.1 by @​jonchurch in #​722
• Release: 1.20.5 by @​jonchurch in #​721

New Contributors

• @​abhu85 made their first contribution in #​716

Special thanks to triager @​krzysdz for keeping this on our radar and effectively triaging the specific issue!

Full Changelog: expressjs/body-parser@1.20.4...1.20.5

---

• If you want to rebase/retry this PR, check this box