All notable changes to the convertapi npm package. Versions follow Semantic Versioning;
each one is a GitHub Release v{version} (see RELEASING.md).
The first release from the new pipeline. v1.15.1 was tagged but never reached npm: its publish workflow
passed the tarball as out/..., which npm reads as a GitHub repository.
- Require axios 1.20.0 or later (was 1.6.2), which pulls in fixed follow-redirects and form-data. This
closes the high and critical advisories in what
npm install convertapiresolves, among them GHSA-jqh4-m9w3-8hp9, GHSA-fjxv-7rqg-78g4 and GHSA-r4q5-vmmm-2653. - The examples and README use an API token (
API_TOKEN) instead of the retired secret and API key. - The PDF thumbnail example converts the first page straight to JPG (
PageRange: 1), sincepdf → extractis now the data-extraction converter and returns JSON. package.jsonpoints at the renamed repository, https://github.com/ConvertAPI/convertapi-library-node.- Published from GitHub Actions with npm provenance. Tested on Node.js 20, 22 and 24.
- Authenticate with the
Authorizationheader. - Remove alternative converter support.
- axios 1.7.4, follow-redirects 1.15.9.
- Keep-alive connections (
keepAliveoption, on by default).