Bump the npm_and_yarn group across 1 directory with 14 updates #61
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=80&v=4){kind=small}
Bumps the npm_and_yarn group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [debug](https://github.com/debug-js/debug) | `2.2.0` | `2.6.9` | | [ejs](https://github.com/mde/ejs) | `2.7.4` | `3.1.10` | | [express](https://github.com/expressjs/express) | `4.13.4` | `4.19.2` | | [log4js](https://github.com/log4js-node/log4js-node) | `0.6.38` | `6.4.0` | | [morgan](https://github.com/expressjs/morgan) | `1.6.1` | `1.9.1` | | [ms](https://github.com/vercel/ms) | `0.7.1` | `2.1.1` | | [body-parser](https://github.com/expressjs/body-parser) | `1.13.3` | `1.20.2` | | [serve-favicon](https://github.com/expressjs/serve-favicon) | `2.3.2` | `2.5.0` | | [semver](https://github.com/npm/node-semver) | `4.3.2` | `removed` | | [pg-promise](https://github.com/vitaly-t/pg-promise) | `4.8.1` | `11.8.0` | Updates `debug` from 2.2.0 to 2.6.9 - [Release notes](https://github.com/debug-js/debug/releases) - [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md) - [Commits](debug-js/debug@2.2.0...2.6.9) Updates `ejs` from 2.7.4 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v2.7.4...v3.1.10) Updates `express` from 4.13.4 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.13.4...4.19.2) Updates `log4js` from 0.6.38 to 6.4.0 - [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md) - [Commits](log4js-node/log4js-node@v0.6.38...v6.4.0) Updates `morgan` from 1.6.1 to 1.9.1 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.6.1...1.9.1) Updates `ms` from 0.7.1 to 2.1.1 - [Release notes](https://github.com/vercel/ms/releases) - [Commits](vercel/ms@0.7.1...2.1.1) Updates `body-parser` from 1.13.3 to 1.20.2 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.13.3...1.20.2) Updates `serve-favicon` from 2.3.2 to 2.5.0 - [Release notes](https://github.com/expressjs/serve-favicon/releases) - [Changelog](https://github.com/expressjs/serve-favicon/blob/master/HISTORY.md) - [Commits](expressjs/serve-favicon@v2.3.2...2.5.0) Updates `fresh` from 0.3.0 to 0.5.2 - [Changelog](https://github.com/jshttp/fresh/blob/master/HISTORY.md) - [Commits](jshttp/fresh@v0.3.0...v0.5.2) Updates `mime` from 1.3.4 to 1.6.0 - [Changelog](https://github.com/broofa/mime/blob/v1.6.0/CHANGELOG.md) - [Commits](broofa/mime@v1.3.4...v1.6.0) Updates `negotiator` from 0.5.3 to 0.6.3 - [Release notes](https://github.com/jshttp/negotiator/releases) - [Changelog](https://github.com/jshttp/negotiator/blob/master/HISTORY.md) - [Commits](jshttp/negotiator@0.5.3...0.6.3) Removes `semver` Updates `pg-promise` from 4.8.1 to 11.8.0 - [Release notes](https://github.com/vitaly-t/pg-promise/releases) - [Commits](vitaly-t/pg-promise@v.4.8.1...11.8.0) Updates `qs` from 4.0.0 to 6.11.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v4.0.0...v6.11.0) --- updated-dependencies: - dependency-name: debug dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: log4js dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: morgan dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ms dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: serve-favicon dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: fresh dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mime dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: negotiator dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pg-promise dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
This was referenced Jun 14, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 10 updates in the / directory:
2.2.02.6.92.7.43.1.104.13.44.19.20.6.386.4.01.6.11.9.10.7.12.1.11.13.31.20.22.3.22.5.04.3.2removed4.8.111.8.0Updates
debugfrom 2.2.0 to 2.6.9Release notes
Sourced from debug's releases.
... (truncated)
Changelog
Sourced from debug's changelog.
... (truncated)
Commits
13abeaeRelease 2.6.9f53962eremove ReDoS regexp in %o formatter (#504)52e1f21Release 2.6.82482e08Check for undefined on browser globals (#462)6bb07f7release 2.6.715850cbFix Regular Expression Denial of Service (ReDoS)4a6c85cupdate "debug" to v1.0.0 (#454)b68dbf8Fix typo (#455)1351d2fInline extend function in node implementation (#452)c211947update version for componentUpdates
ejsfrom 2.7.4 to 3.1.10Release notes
Sourced from ejs's releases.
Commits
d3f807dVersion 3.1.109ee26ddMocha TDDe469741Basic pollution protection715e950Merge pull request #756 from Jeffrey-mu/maincabe314Include advanced usage examples29b076cAdded header11503c7Merge branch 'main' of github.com:mde/ejs into main7690404Added security banner to READMEf47d7aeUpdate SECURITY.md828cea1Update SECURITY.mdUpdates
expressfrom 4.13.4 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
log4jsfrom 0.6.38 to 6.4.0Changelog
Sourced from log4js's changelog.
... (truncated)
Commits
9fdbed56.4.0788c7a8Merge pull request #1150 from log4js-node/update-changelog7fdb141chore: updated changelog for 6.4.0e6bd888Merge pull request #1151 from log4js-node/feat-zero-backupac599e4allow for zero backup - in sync with https://github.com/log4js-node/streamrol...53248cdMerge pull request #1149 from log4js-node/migrate-daysToKeep-to-numBackups436d9b4Merge pull request #1148 from log4js-node/update-docsd6b017echore(docs): updated fileSync.md and misc commentsd4617a7chore(deps): migrated from daysToKeep to numBackups due to streamroller@^3.0.00ad0133Merge pull request #1147 from log4js-node/update-depsMaintainer changes
This version was pushed to npm by csausdev, a new releaser for log4js since your current version.
Updates
morganfrom 1.6.1 to 1.9.1Release notes
Sourced from morgan's releases.
Changelog
Sourced from morgan's changelog.
... (truncated)
Commits
572dd931.9.1e02de38lint: apply standard 12 stylee329663Fix using special characters in formateb1968atests: use strict equality checks310b206build: use yaml eslint configuration5810937build: [email protected]f60afd5build: [email protected]5295b0cbuild: [email protected]178daafbuild: [email protected]7b08641build: [email protected]Updates
msfrom 0.7.1 to 2.1.1Release notes
Sourced from ms's releases.
... (truncated)
Commits
fe0bae32.1.17437f92Add full support for negative numbers (#104)845c3022.1.017d719fBumped dev depdenencies to the latest version2425ebdLockfile addedf0bc0a2Fixed match regex to support negative numbers (#96)a2caeadAdd "week" / "w" supporte359eeeAdd reference to ms.macro (#99)fa0947fFixed spelling of “millisecond” in description (#95)826e137updated package husky from 0.13.3 to 0.13.4 (#94)Maintainer changes
This version was pushed to npm by leo, a new releaser for ms since your current version.
Updates
body-parserfrom 1.13.3 to 1.20.2Release notes
Sourced from body-parser's releases.
... (truncated)
Changelog
Sourced from body-parser's changelog.
... (truncated)
Commits
ee913741.20.2368a93aFix strict json error message on Node.js 19+0385872deps: [email protected]2c35b41build: [email protected]f0646c2build: [email protected]f345fb1build: [email protected]6842efcdeps: content-type@~1.0.55af7315build: [email protected]8e605b3build: [email protected]cba6e77build: [email protected]Updates
serve-faviconfrom 2.3.2 to 2.5.0Release notes
Sourced from serve-favicon's releases.
Changelog
Sourced from serve-favicon's changelog.
... (truncated)
Commits
266aba12.5.0a047336build: [email protected]83fee9cbuild: [email protected]5457281build: [email protected]3a93328lint: apply standard 11 style06e69b1Ignore requests without "url" property061f378build: support Node.js 9.x669c1a1build: [email protected]233027ebuild: [email protected]31d2028build: [email protected]Updates
freshfrom 0.3.0 to 0.5.2Changelog
Sourced from fresh's changelog.
Commits
02df6300.5.237cd4a2build: [email protected]731c0ebbuild: [email protected]21a0f0cperf: improve If-None-Match token parsingff5f257Fix regression matching multiple ETags in If-None-Matche8a4aaf0.5.17015bceperf: improve ETag match loop7a2b460Fix handling of modified headers with invalid dates1599530bench: add simple benchmarks74793d9build: [email protected]Updates
mimefrom 1.3.4 to 1.6.0Changelog
Sourced from mime's changelog.
... (truncated)
Commits
87b396e1.6.04db5125changelog3668c6bUse mime-score module to resolve extension conflicts. Fixes #183949b4511.5.085672d3application/font-woff -> font/woff1f6281dchmod cli.jsc0853d2update to [email protected]3004636Generate CHANGELOG.md via github-release-noteseb24bae1.4.1855d0c4Fix #167Updates
negotiatorfrom 0.5.3 to 0.6.3Release notes
Sourced from negotiator's releases.
Changelog
Sourced from negotiator's changelog.
Commits
40a5acb0.6.3438a9bcRevert "Lazy-load modules from main entry point"6e155ddbuild: [email protected]13be933build: support Node.js 17.x