code-server
code-server copied to clipboard
chore: bump express from 5.0.0-beta.3 to 5.0.0
Bumps express from 5.0.0-beta.3 to 5.0.0.
Release notes
Sourced from express's releases.
5.0.0
What's Changed
- 4.19.2 Staging by
@wesleytoddin expressjs/express#5561- remove duplicate location test for data uri by
@wesleytoddin expressjs/express#5562- feat: document beta releases expectations by
@marco-ippolitoin expressjs/express#5565- Cut down on duplicated CI runs by
@jonchurchin expressjs/express#5564- Add a Threat Model by
@UlisesGasconin expressjs/express#5526- Assign captain of encodeurl by
@blakeembreyin expressjs/express#5579- Nominate jonchurch as repo captain for
http-errors,expressjs.com,morgan,cors,body-parserby@jonchurchin expressjs/express#5587- docs: update Security.md by
@inigomarquinezin expressjs/express#5590- docs: update triage nomination policy by
@UlisesGasconin expressjs/express#5600- Add CodeQL (SAST) by
@UlisesGasconin expressjs/express#5433- docs: add UlisesGascon as triage initiative captain by
@UlisesGasconin expressjs/express#5605- Use object with null prototype for various app properties by
@EvanHahnin expressjs/express#4861- deps: encodeurl@~2.0.0 by
@blakeembreyin expressjs/express#5569- skip QUERY method test by
@jonchurchin expressjs/express#5628- ignore ETAG query test on 21 and 22, reuse skip util by
@jonchurchin expressjs/express#5639- add support Node.js@22 in the CI by
@mertcanaltinin expressjs/express#5627- doc: add table of contents, tc/triager lists to readme by
@mertcanaltinin expressjs/express#5619- List and sort all projects, add captains by
@blakeembreyin expressjs/express#5653- Call callback once on listen error by
@wesleytoddin expressjs/express#3216- docs: add
@UlisesGasconas captain for cookie-parser by@UlisesGasconin expressjs/express#5666- ✨ bring back query tests for node 21 by
@ctcpipin expressjs/express#5690- [v4] Deprecate
res.clearCookieacceptingoptions.maxAgeandoptions.expiresby@jonchurchin expressjs/express#5672- skip QUERY tests for Node 21 only, still not supported by
@jonchurchin expressjs/express#5695- 📝 update people, add ctcpip to TC by
@ctcpipin expressjs/express#5683- remove minor version pinning from ci by
@jonchurchin expressjs/express#5722- Fix link variable use in attribution section of CODE OF CONDUCT by
@IamLizuin expressjs/express#5762- Replace Appveyor windows testing with GHA by
@jonchurchin expressjs/express#5599- Add OSSF Scorecard badge by
@UlisesGasconin expressjs/express#5436- Throw on invalid status codes by
@jonchurchin expressjs/express#4212- Use Array.flat instead of array-flatten by
@almicin expressjs/express#5677- Adopt Node@18 as the minimum supported version by
@UlisesGasconin expressjs/express#5803- Ignore
expiresandmaxAgeinres.clearCookie()by@jonchurchin expressjs/express#5792- [email protected] by
@wesleytoddin expressjs/express#5786- chore: upgrade
debugdep from 3.10 to 4.3.6 by@carpassein expressjs/express#5829- refactor: replace 'path-is-absolute' dep with node:path isAbsolute method by
@carpassein expressjs/express#5830- update scorecard link by
@bjohansebasin expressjs/express#5814- Nominate
@IamLizuto the triage team by@UlisesGasconin expressjs/express#5836- deps: [email protected] by
@blakeembreyin expressjs/express#5603- docs: specify new instructions for
questionanddiscussby@IamLizuin expressjs/express#5835- 5.x: Upgrading
merge-descriptorswith allowing minors by@RobinTailin expressjs/express#5782- 4.x: Upgrade
merge-descriptorsdependency by@RobinTailin expressjs/express#5781- WIP: serve-static@2 by
@wesleytoddin expressjs/express#5790- chore: upgrade qs dp from 6.11.0 to 6.13.0 by
@carpassein expressjs/express#5847- Upgrade cookie signature by
@IamLizuin expressjs/express#5833- accepts@2 by
@wesleytoddin expressjs/express#5881- mime-types@3 by
@wesleytoddin expressjs/express#5882- type-is@^2.0.0 by
@wesleytoddin expressjs/express#5883- content-disposition@^1.0.0 by
@wesleytoddin expressjs/express#5884
... (truncated)
Changelog
Sourced from express's changelog.
5.0.0 / 2024-09-10
- remove:
path-is-absolutedependency - usepath.isAbsoluteinstead- breaking:
res.status()accepts only integers, and input must be greater than 99 and less than 1000
- will throw a
RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.for inputs outside this range- will throw a
TypeError: Invalid status code: ${code}. Status code must be an integer.for non integer inputs- deps: [email protected]
res.redirect('back')andres.location('back')is no longer a supported magic string, explicitly usereq.get('Referrer') || '/'.- change:
res.clearCookiewill ignore user providedmaxAgeandexpiresoptions- deps: cookie-signature@^1.2.1
- deps: [email protected]
- deps: merge-descriptors@^2.0.0
- deps: serve-static@^2.1.0
- deps: [email protected]
- deps: accepts@^2.0.0
- deps: mime-types@^3.0.0
application/javascript=>text/javascript- deps: type-is@^2.0.0
- deps: content-disposition@^1.0.0
- deps: finalhandler@^2.0.0
- deps: fresh@^2.0.0
- deps: body-parser@^2.0.1
- deps: send@^1.1.0
Commits
344b0225.0.00c49926fix(deps): send@^1.1.0b3906cbfix(deps): serve-static@^2.1.0fed8c2afix(deps): body-parser@^2.0.1bdd81f8Deletebackas a magic string (#5933)6c98f80🔧 update CI, remove unsupported versions, clean upf9256efMerge branch '5.0' into 5-mergee5feb9fMerge tag '4.20.0' into 5.021df4214.20.04c9ddc1feat: upgrade to [email protected]- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.