Patch Changes

• #7666 53686ee Thanks @dependabot! - Bump multer from 2.2.0 to 2.4.0, which fixes CVE-2026-88932 and the four CVEs fixed in 2.3.0.

  Uploads behave the same. Both adapters accept one file in the file field and read directory from the body. The behaviour changes in 2.3 and 2.4 cover upload limits, which neither adapter sets, and escaped characters in field names.

• Updated dependencies [7998180, 15818bc, 12cdee6, 4f2758e]:

  • tinacms@3.14.4

Last Edited: October 12, 2026