fix(deps): update dependency express to v5
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| express (source) | 4.21.1 -> 5.1.0 |
Release Notes
expressjs/express (express)
v5.1.0
========================
- Add support for
Uint8Arrayinres.send() - Add support for ETag option in
res.sendFile() - Add support for multiple links with the same rel in
res.links() - Add funding field to package.json
- perf: use loop for acceptParams
- refactor: prefix built-in node module imports
- deps: remove
setprototypeof - deps: remove
safe-buffer - deps: remove
utils-merge - deps: remove
methods - deps: remove
depd - deps:
debug@^4.4.0 - deps:
body-parser@^2.2.0 - deps:
router@^2.2.0 - deps:
content-type@^1.0.5 - deps:
finalhandler@^2.1.0 - deps:
qs@^6.14.0 - deps:
[email protected] - deps:
[email protected]
v5.0.1
==========
- Update
cookiesemver lock to address CVE-2024-47764
v5.0.0
=========================
- remove:
path-is-absolutedependency - usepath.isAbsoluteinstead
- breaking:
res.status()accepts only integers, and input must be greater than 99 and less than 1000- will throw a
RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.for inputs outside this range - will throw a
TypeError: Invalid status code: ${code}. Status code must be an integer.for non integer inputs
- will throw a
- deps: [email protected]
res.redirect('back')andres.location('back')is no longer a supported magic string, explicitly usereq.get('Referrer') || '/'.
- change:
res.clearCookiewill ignore user providedmaxAgeandexpiresoptions
- deps: cookie-signature@^1.2.1
- deps: [email protected]
- deps: merge-descriptors@^2.0.0
- deps: serve-static@^2.1.0
- deps: [email protected]
- deps: accepts@^2.0.0
- deps: mime-types@^3.0.0
application/javascript=>text/javascript
- deps: type-is@^2.0.0
- deps: content-disposition@^1.0.0
- deps: finalhandler@^2.0.0
- deps: fresh@^2.0.0
- deps: body-parser@^2.0.1
- deps: send@^1.1.0
v4.21.2
What's Changed
- Add funding field (v4) by @bjohansebas in https://github.com/expressjs/express/pull/6065
- deps: [email protected] by @blakeembrey in https://github.com/expressjs/express/pull/5956
- deps: bump [email protected] by @jonchurch in https://github.com/expressjs/express/pull/6209
- Release: 4.21.2 by @UlisesGascon in https://github.com/expressjs/express/pull/6094
Full Changelog: https://github.com/expressjs/express/compare/4.21.1...4.21.2
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.