nestia
nestia copied to clipboard
Published
20 hours ago •
samchon
samchon
Bump send, @nestjs/platform-express and express in /packages/migrate
Bumps send to 0.19.0 and updates ancestor dependencies send, @nestjs/platform-express and express. These dependencies need to be updated together.
Updates send from 0.18.0 to 0.19.0
Release notes
Sourced from send's releases.
0.19.0
What's Changed
- Remove link renderization in html while redirecting (pillarjs/send#235)
New Contributors
@UlisesGasconmade their first contribution in pillarjs/send#235Full Changelog: https://github.com/pillarjs/send/compare/0.18.0...0.19.0
Changelog
Sourced from send's changelog.
0.19.0 / 2024-09-10
- Remove link renderization in html while redirecting
Commits
9d2db990.19.0ae4f298Merge commit from fork- See full diff in compare view
Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for send since your current version.
Updates @nestjs/platform-express from 10.4.1 to 10.4.5
Release notes
Sourced from @nestjs/platform-express's releases.
v10.4.5 (2024-10-16)
Dependencies
platform-express- Other
- #13903 chore(deps): bump ws and
@nestjs/graphqlin /sample/31-graphql-federation-code-first/posts-application (@dependabot[bot])- #13917 chore(deps): bump micromatch from 4.0.4 to 4.0.8 in /sample/32-graphql-federation-schema-first/posts-application (
@dependabot[bot])- #14015 chore(deps): bump find-my-way from 8.1.0 to 8.2.2 in /sample/10-fastify (
@dependabot[bot])- #14039 chore(deps): bump serve-static, express and
@nestjs/platform-expressin /sample/23-graphql-code-first (@dependabot[bot])- #14040 chore(deps): bump send,
@nestjs/platform-expressand express in /sample/24-serve-static (@dependabot[bot])- #14034 chore(deps): bump serve-static and
@nestjs/platform-expressin /sample/28-sse (@dependabot[bot])- #14035 chore(deps): bump send and
@nestjs/platform-expressin /sample/28-sse (@dependabot[bot])- #14030 chore(deps): bump send and
@nestjs/platform-expressin /sample/25-dynamic-modules (@dependabot[bot])- #14031 chore(deps): bump serve-static and
@nestjs/platform-expressin /sample/25-dynamic-modules (@dependabot[bot])- #14026 chore(deps): bump serve-static and
@nestjs/platform-expressin /sample/26-queues (@dependabot[bot])- #14025 chore(deps): bump send and
@nestjs/platform-expressin /sample/26-queues (@dependabot[bot])platform-fastify
- #14064 build(fastify): upgrade light-my-request to 6.1.0 (
@PattyTrish)Committers: 5
- Eduard Zintz (
@ezintz)- Fernando Vargas (
@frndvrgs)- Micael Levi L. Cavalcante (
@micalevisk)- Patricia Ahern (
@PattyTrish)- Rick Dutour Geerling (
@tuxmachine)v10.4.2 (2024-09-16)
Dependencies
common,core,microservices,platform-express,platform-fastify,platform-socket.io,platform-ws,testing,websockets
- #13911 chore(deps): bump tslib from 2.6.3 to 2.7.0 (
@dependabot[bot])platform-fastify
- #13938 chore(deps): bump light-my-request from 5.13.0 to 6.0.0 (
@dependabot[bot])- Other
- #13936 chore(deps-dev): bump lint-staged from 15.2.9 to 15.2.10 (
@dependabot[bot])- #13946 chore(deps): bump webpack and
@nestjs/cliin /sample/02-gateways (@dependabot[bot])- #13947 chore(deps-dev): bump webpack from 5.91.0 to 5.94.0 (
@dependabot[bot])- #13966 chore(deps): bump dset from 3.1.2 to 3.1.4 in /sample/32-graphql-federation-schema-first/gateway (
@dependabot[bot])- #13967 chore(deps): bump dset from 3.1.3 to 3.1.4 (
@dependabot[bot])- #13968 chore(deps-dev): bump
@commitlint/clifrom 19.4.0 to 19.5.0 (@dependabot[bot])- #13969 chore(deps-dev): bump mongoose from 8.6.0 to 8.6.2 (
@dependabot[bot])- #13973 chore(deps-dev): bump
@types/nodefrom 22.5.1 to 22.5.5 (@dependabot[bot])- #13922 chore(deps): bump
@apollo/gatewayfrom 2.2.3 to 2.9.0 in /sample/31-graphql-federation-code-first/users-application (@dependabot[bot])- #13921 chore(deps): bump
@apollo/query-plannerfrom 2.4.8 to 2.9.0 in /sample/31-graphql-federation-code-first/posts-application (@dependabot[bot])- #13926 chore(deps-dev): bump mongoose from 8.5.3 to 8.6.0 (
@dependabot[bot])- #13928 chore(deps-dev): bump
@types/nodefrom 22.5.0 to 22.5.1 (@dependabot[bot])- #13929 chore(deps-dev): bump
@commitlint/config-angularfrom 19.3.0 to 19.4.1 (@dependabot[bot])- #13893 chore(deps-dev): bump
@typescript-eslint/eslint-pluginfrom 7.18.0 to 8.2.0 (@dependabot[bot])- #13896 chore(deps-dev): bump husky from 9.1.4 to 9.1.5 (
@dependabot[bot])
... (truncated)
Commits
ed644e9chore(@nestjs) publish v10.4.5 release160c3b3build(express): upgrade to express 4.2.15ae7e0fchore(@nestjs) publish v10.4.4 release3c24de6chore: update readmes2fb629echore(@nestjs) publish v10.4.3 released3dd896chore: update readme696b441chore(@nestjs) publish v10.4.2 releasefff4b96chore(deps): bump tslib from 2.6.3 to 2.7.0e0d2ba6chore(core,express,fastify): fix deps with security issues- See full diff in compare view
Updates express from 4.20.0 to 4.21.1
Release notes
Sourced from express's releases.
4.21.1
What's Changed
- Backport a fix for CVE-2024-47764 to the 4.x branch by
@joshbukerin expressjs/express#6029- Release: 4.21.1 by
@UlisesGasconin expressjs/express#6031Full Changelog: https://github.com/expressjs/express/compare/4.21.0...4.21.1
4.21.0
What's Changed
- Deprecate
"back"magic string in redirects by@blakeembreyin expressjs/express#5935- [email protected] by
@wesleytoddin expressjs/express#5954- fix(deps): [email protected] by
@wesleytoddin expressjs/express#5951- Upgraded dependency qs to 6.13.0 to match qs in body-parser by
@agadzinski93in expressjs/express#5946New Contributors
@agadzinski93made their first contribution in expressjs/express#5946Full Changelog: https://github.com/expressjs/express/compare/4.20.0...4.21.0
Changelog
Sourced from express's changelog.
4.21.1 / 2024-10-08
- Backported a fix for CVE-2024-47764
4.21.0 / 2024-09-11
- Deprecate
res.location("back")andres.redirect("back")magic string- deps: [email protected]
- includes [email protected]
- deps: [email protected]
- deps: [email protected]
Commits
8e229f94.21.1a024c8afix(deps): [email protected]7e562c64.21.01bcde96fix(deps): [email protected] (#5946)7d36477fix(deps): [email protected] (#5951)40d2d8ffix(deps): [email protected]77ada90Deprecate"back"magic string in redirects (#5935)- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "Published by a pub.dev verified publisher"){kind=small}
Removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/@nestjs/[email protected], npm/@samchon/[email protected], npm/[email protected], npm/[email protected]
![socket-security[bot] avatar](https://avatars.githubusercontent.com/in/156372?v=4 "Published by a pub.dev verified publisher"){kind=small}
Looks like these dependencies are updatable in another way, so this is no longer needed.