fix(deps): update dependency http-proxy-middleware to v3.0.5 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
http-proxy-middleware	3.0.3 -> 3.0.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

GitHub Vulnerability Alerts

CVE-2025-32996

In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used.

CVE-2025-32997

In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.

---

Release Notes

chimurai/http-proxy-middleware (http-proxy-middleware)

v3.0.5

Compare Source

• fix(fixRequestBody): check readableLength (#​1096)

v3.0.4

Compare Source

• fix(fixRequestBody): handle invalid request (#​1092)
• fix(fixRequestBody): prevent multiple .write() calls (#​1089)
• fix(websocket): handle errors in handleUpgrade (#​823)
• ci(package): patch http-proxy (#​1084)
• fix(fixRequestBody): support multipart/form-data (#​896)
• feat(types): export Plugin type (#​1071)

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.