chore(deps): bump express and umi

[dependabot[bot]]

trafficstars

Bumps express to 4.18.2 and updates ancestor dependency umi. These dependencies need to be updated together.

Updates express from 4.17.1 to 4.18.2

Release notes

Sourced from express's releases.

4.18.2

• Fix regression routing a large stack in a single route
• deps: [email protected]
  • deps: [email protected]
  • perf: remove unnecessary object clone
• deps: [email protected]

4.18.1

• Fix hanging on large stack of sync routes

4.18.0

• Add "root" option to res.download
• Allow options without filename in res.download
• Deprecate string and non-integer arguments to res.status
• Fix behavior of null/undefined as maxAge in res.cookie
• Fix handling very large stacks of sync middleware
• Ignore Object.prototype values in settings through app.set/app.get
• Invoke default with same arguments as types in res.format
• Support proper 205 responses using res.send
• Use http-errors for res.format error
• deps: [email protected]
  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
  • Add priority option
  • Fix expires option to reject invalid dates
• deps: [email protected]
  • Replace internal eval usage with Function constructor
  • Use instance methods on process to check for listeners
• deps: [email protected]
  • Remove set content headers that break response
  • deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
  • Prevent loss of async hooks context
• deps: [email protected]
• deps: [email protected]
  • Fix emitted 416 error missing headers property
  • Limit the headers removed for 304 response
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]

... (truncated)

Changelog

Sourced from express's changelog.

4.18.2 / 2022-10-08

• Fix regression routing a large stack in a single route
• deps: [email protected]
  • deps: [email protected]
  • perf: remove unnecessary object clone
• deps: [email protected]

4.18.1 / 2022-04-29

• Fix hanging on large stack of sync routes

4.18.0 / 2022-04-25

• Add "root" option to res.download
• Allow options without filename in res.download
• Deprecate string and non-integer arguments to res.status
• Fix behavior of null/undefined as maxAge in res.cookie
• Fix handling very large stacks of sync middleware
• Ignore Object.prototype values in settings through app.set/app.get
• Invoke default with same arguments as types in res.format
• Support proper 205 responses using res.send
• Use http-errors for res.format error
• deps: [email protected]
  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
  • Add priority option
  • Fix expires option to reject invalid dates
• deps: [email protected]
  • Replace internal eval usage with Function constructor
  • Use instance methods on process to check for listeners
• deps: [email protected]
  • Remove set content headers that break response
  • deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
  • Prevent loss of async hooks context
• deps: [email protected]
• deps: [email protected]

... (truncated)

Commits

• 8368dc1 4.18.2
• 61f4049 docs: replace Freenode with Libera Chat
• bb7907b build: [email protected]
• f56ce73 build: [email protected]
• 24b3dc5 deps: [email protected]
• 689d175 deps: [email protected]
• 340be0f build: [email protected]
• 33e8dc3 docs: use Node.js name style
• 644f646 build: [email protected]
• ecd7572 build: [email protected]
• Additional commits viewable in compare view

Updates umi from 2.12.8 to 4.0.36

Release notes

Sourced from umi's releases.

v4.0.36

What's Changed

• 修复 webpack chunks 提取逻辑和 mpa 场景冲突的问题 by @​sorrycc in umijs/umi#10005

Full Changelog: https://github.com/umijs/umi/compare/v4.0.35...v4.0.36

v4.0.35

What's Changed

• 新增 valtio 通过配置开启 (❗️breaking change) by @​sorrycc in umijs/umi#9971
• 新增 styled-components 插件 by @​sorrycc in umijs/umi#9970
• 新增 styled-components 插件 dev 开启 babel-plugin-styled-components by @​sorrycc in umijs/umi#9999
• 新增 MFSU eager 模式支持 esbuild 构建 by @​stormslowly in umijs/umi#9919
• 新增 codeSplitting 支持 auto load chunk by @​xierenyuan in umijs/umi#9859
• 新增 webpack analyze 配置项 by @​fz6m in umijs/umi#9941
• 新增 useSelectedRoutes API 文档 by @​fz6m in umijs/umi#9975
• 新增 routes 配置修改不重启 dev 服务 by @​xierenyuan in umijs/umi#9873
• 新增 valtio 插件导出 derive by @​sorrycc in umijs/umi#9951
• 新增 valtio 插件导出 underive 和 subscribeKey by @​sorrycc in umijs/umi#9998
• 修复 plug-model model 文件加载顺序避免初始化失败 @​elivoa in umijs/umi#9846
• 修复 乾坤父应用同时存在重定向根路由时，父应用layout不会包裹子应用的bug by @​HiLanXiao in umijs/umi#9829
• 修复 plugin API onGenerateFiles 类型问题 by @​mysteryven in umijs/umi#9880
• 修复 配置 test:false 关闭 测试 by @​fz6m in umijs/umi#9870
• 修复 MFSU 独立使用是 支持 entry 相对路径 by @​mysteryven in umijs/umi#9800
• 新增 create-umi 新增 Antd 版本选功能 by @​mysteryven in umijs/umi#9918
• 修复 process.env.PORT 可能取不到正确的端口的问题 by @​acg-developer in umijs/umi#9952
• 修复 qiankun 子应用 history 参数获取错误问题 by @​PeachScript in umijs/umi#9953
• 修复 MFSU 解析依赖到 node 构建产物的问题 by @​stormslowly in umijs/umi#9976
• 修复 render 运行时配置中 history undefined 问题 by @​xiaohuoni in umijs/umi#9871
• 文档 更正国际化(多语言)链接 by @​FriedRiceNoodles in umijs/umi#9866
• 文档 修改 clientloader 实例代码 by @​chenyanggis in umijs/umi#9934
• 文档 更正 qiankun 运行时说明 by @​kuitos in umijs/umi#9981

New Contributors

• @​elivoa made their first contribution in umijs/umi#9846
• @​FriedRiceNoodles made their first contribution in umijs/umi#9866
• @​chenyanggis made their first contribution in umijs/umi#9934
• @​acg-developer made their first contribution in umijs/umi#9952

Full Changelog: https://github.com/umijs/umi/compare/v4.0.34...v4.0.35

4.0.34

What's Changed

• 修复给 qiankun 子应用传递字符串类型的 history 无法正常工作的问题 by @​PeachScript in umijs/umi#9860
• 修复 precommit generator 在 Windows 系统下执行 chmod 导致报错的问题 by @​wyy0512 in umijs/umi#9879
• 修复 SPEED_MEASURE 启用时 mini-css-extract-plugin 无法正常工作的问题 by @​fz6m in umijs/umi#9907
• 修复 MFSU eager 在使用 APP_ROOT 时编译不正常的问题 by @​stormslowly in umijs/umi#9884 umijs/umi#9885

... (truncated)

Commits

• 609c04b release: 4.0.36
• f55514a fix(mpa): conflicts with webpack plugin (#10005)
• c70a8c9 release: 4.0.35
• c4465e0 fix: history is undefined on render (#9871)
• 34d223a release: 4.0.0-canary.20221208.1
• bd4ddfe feat(plugins/styled-components): enable babel-plugin-styled-components for de...
• af538e7 fix: 🐛 前端模块 和 node 模块分开解析 (#9976)
• 5407aa9 chore: fix break change in tsx (#9992)
• 5c3cb97 feat(plugins/valtio): export underive and subscribeKey (#9998)
• eb15c69 test(boilerplate-vue): set both retries and timeout (#9990)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.