refactor: Bump form-data from 2.5.5 to 2.5.6

[dependabot]

Bumps form-data from 2.5.5 to 2.5.6.

Changelog

Sourced from form-data's changelog.

v2.5.6 - 2026-06-12

Commits

• [Fix] escape CR, LF, and " in field names and filenames b620316
• [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape 12be578
• [Dev Deps] update js-randomness-predictor 46cfd23
• [Tests] use safe-buffer so the header-injection test runs on node < 4 633044a
• [Deps] update hasown e3b96ee

Commits

• c713349 v2.5.6
• 46cfd23 [Dev Deps] update js-randomness-predictor
• 633044a [Tests] use safe-buffer so the header-injection test runs on node < 4
• e3b96ee [Deps] update hasown
• 12be578 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape
• b620316 [Fix] escape CR, LF, and " in field names and filenames
• See full diff in compare view

Summary by CodeRabbit

• Chores
  • Updated bundled dependency versions and lockfile metadata.
  • Included the latest compatible nested dependency resolution.

[mtrezza]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

📝 Walkthrough

Walkthrough

The lockfile updates form-data from 2.5.5 to 2.5.6 and updates its nested hasown dependency from 2.0.2-compatible metadata to version 2.0.4.

Changes

Dependency lock update

Layer / File(s)	Summary
Update form-data and nested hasown locks package-lock.json	Refreshes form-data package metadata and adds or updates the nested hasown@2.0.4 lock entry.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: semantic-release-bot, mtrezza, parseplatformorg, moumouls, dblythy

---

Caution

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

• Ignore

❌ Failed checks (1 error, 1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❌ Error	The description covers the dependency bump and changelog, but it misses the required Issue, Approach, and Tasks sections from the template.	Add the template sections with the linked issue, a brief approach summary, and the task checklist items or mark them as not applicable.
Engage In Review Feedback	❓ Inconclusive	Repo shows only a lockfile-bump commit and no review-thread artifacts, so review-feedback engagement can’t be verified here.	Provide PR comment history or discussion links showing the feedback was discussed and then either addressed in a commit or explicitly retracted.

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title matches the change and uses an allowed prefix with a clear version bump summary.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Security Check	✅ Passed	PASS — only package-lock bumped form-data to 2.5.6 and hasown to 2.0.4; GitHub advisory for form-data's boundary bug is fixed in 2.5.4+, so no vuln introduced.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/npm_and_yarn/form-data-2.5.6

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[parseplatformorg]

🎉 This change has been released in version 9.2.1-alpha.1