ocean
ocean copied to clipboard
[Docs] Bump the npm_and_yarn group across 1 directory with 2 updates
Bumps the npm_and_yarn group with 2 updates in the /docs/framework-guides directory: path-to-regexp and express.
Updates path-to-regexp from 0.1.10 to 1.9.0
Release notes
Sourced from path-to-regexp's releases.
Fix backtracking in 1.x
Fixed
- Add backtrack protection to 1.x release (#320) 925ac8e
- Fix
re.exec(&[#39](https://github.com/pillarjs/path-to-regexp/issues/39);/test/route&[#39](https://github.com/pillarjs/path-to-regexp/issues/39);)result (#267) 32a14b0https://github.com/pillarjs/path-to-regexp/compare/v1.8.0...v1.9.0
Backport token to function options
Added
- Backport
TokensToFunctionOptionsFix backtracking (again)
Fixed
- Improved backtracking protection for 0.1.x, will break some previously valid paths (see previous advisory: https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j)
https://github.com/pillarjs/path-to-regexp/compare/v0.1.11...v0.1.12
Error on bad input
Changed
- Add error on bad input values 8f09549
https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.11
Changelog
Sourced from path-to-regexp's changelog.
Moved to GitHub Releases
3.0.0 / 2019-01-13
- Always use prefix character as delimiter token, allowing any character to be a delimiter (e.g.
/:att1-:att2-:att3-:att4-:att5)- Remove
partialsupport, prefer escaping the prefix delimiter explicitly (e.g.\\/(apple-)?icon-:res(\\d+).png)2.4.0 / 2018-08-26
- Support
startoption to disable anchoring from beginning of the string2.3.0 / 2018-08-20
- Use
delimiterwhen processing repeated matching groups (e.g.foo/barhas no prefix, but has a delimiter)2.2.1 / 2018-04-24
- Allow empty string with
end: falseto match both relative and absolute paths2.2.0 / 2018-03-06
- Pass
tokenas second argument toencodeoption (e.g.encode(value, token))2.1.0 / 2017-10-20
- Handle non-ending paths where the final character is a delimiter
- E.g.
/foo/before required either/foo/or/foo//to match in non-ending mode2.0.0 / 2017-08-23
- New option! Ability to set
endsWithto match paths like/test?query=stringup to the query string- New option! Set
delimitersfor specific characters to be treated as parameter prefixes (e.g./:test)- Remove
isarraydependency- Explicitly handle trailing delimiters instead of trimming them (e.g.
/test/is now treated as/test/instead of/testwhen matching)- Remove overloaded
keysargument that acceptedoptions- Remove
keyslist attached to theRegExpoutput- Remove asterisk functionality (it's a real pain to properly encode)
- Change
tokensToFunction(e.g.compile) to accept anencodefunction for pretty encoding (e.g. pass your own implementation)1.7.0 / 2016-11-08
- Allow a
delimiteroption to be passed in withtokensToRegExpwhich will be used for "non-ending" token match situations1.6.0 / 2016-10-03
- Populate
RegExp.keyswhen using thetokensToRegExpmethod (making it consistent with the main export)- Allow a
delimiteroption to be passed in withparse- Updated TypeScript definition with
KeysandOptionsupdated1.5.3 / 2016-06-15
... (truncated)
Commits
c75eb101.9.0925ac8eAdd backtrack protection to 1.x release (#320)32a14b0Fixre.exec('/test/route')result (#267)79a5dcf1.8.01a47442feat: backport TokensToFunctionOptions to v1.x9c0550cUpdate history for1.7.0a99ec3cv1.7.069fb61bAllow delimiter to be set fortokensToRegExp1c2e8e4Update history for1.6.0bdf17dev1.6.0- Additional commits viewable in compare view
Updates express from 4.21.1 to 4.21.2
Release notes
Sourced from express's releases.
4.21.2
What's Changed
- Add funding field (v4) by
@​bjohansebasin expressjs/express#6065- deps: [email protected] by
@​blakeembreyin expressjs/express#5956- deps: bump [email protected] by
@​jonchurchin expressjs/express#6209- Release: 4.21.2 by
@​UlisesGasconin expressjs/express#6094Full Changelog: https://github.com/expressjs/express/compare/4.21.1...4.21.2
Changelog
Sourced from express's changelog.
4.21.2 / 2024-11-06
- deps: [email protected]
- Fix backtracking protection
- deps: [email protected]
- Throws an error on invalid path values
Commits
1faf2284.21.22e0fb64deps: bump [email protected] (#6209)59fc270deps: [email protected] (#5956)51fc39cdocs: add funding (#6065)- See full diff in compare view
Maintainer changes
This version was pushed to npm by jonchurch, a new releaser for express since your current version.
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the Security Alerts page.
Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.