Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump body-parser and express #105

Merged
merged 1 commit into from
Sep 14, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 14, 2024

Bumps body-parser and express. These dependencies needed to be updated together.
Updates body-parser from 1.20.2 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

New Contributors

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.


Updates express from 4.19.2 to 4.21.0

Release notes

Sourced from express's releases.

4.21.0

What's Changed

New Contributors

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.21.0 / 2024-09-11

  • Deprecate res.location("back") and res.redirect("back") magic string
  • deps: serve-static@1.16.2
    • includes send@0.19.0
  • deps: finalhandler@1.3.1
  • deps: qs@6.13.0

4.20.0 / 2024-09-10

  • deps: serve-static@0.16.0
    • Remove link renderization in html while redirecting
  • deps: send@0.19.0
    • Remove link renderization in html while redirecting
  • deps: body-parser@0.6.0
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: path-to-regexp@0.1.10
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [body-parser](https://github.com/expressjs/body-parser) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `body-parser` from 1.20.2 to 1.20.3
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.2...1.20.3)

Updates `express` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](expressjs/express@4.19.2...4.21.0)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-type: indirect
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 14, 2024
@josh-wong josh-wong merged commit 800dd75 into main Sep 14, 2024
1 check failed
@josh-wong josh-wong deleted the dependabot/npm_and_yarn/multi-9423f4c335 branch September 14, 2024 09:00
josh-wong added a commit that referenced this pull request Sep 19, 2024
commit 0998ff6
Author: Josh Wong <joshuarwong@gmail.com>
Date:   Thu Sep 19 01:20:19 2024 +0900

    Add support for 360-degree images (#112)

    * Add `@photo-sphere-viewer/core` and dependencies

    * Create Image360Viewer.js

commit 03a9228
Author: Josh Wong <joshuarwong@gmail.com>
Date:   Mon Sep 16 18:20:48 2024 +0900

    Update announcement bar to promote Baird beer quadrants and experimental AI chatbot (#111)

    * Update announcement bar

    Change the announcement bar from promoting passGen 3.4 to promoting the Baird beer profile quadrants and AI chatbot.

    * Change icon in label in dropdown

    * Test; will revert

    * Revert "Test; will revert"

    This reverts commit 45a4b75.

    * Test; will revert

    * Revert "Test; will revert"

    This reverts commit 5d7e43b.

    * Test; will revert

    * Revert "Test; will revert"

    This reverts commit 151d341.

    * Revert "Update test-deploy.yml"

    This reverts commit fd25fb6.

    * Test; will revert

    * Revert "Test; will revert"

    This reverts commit d8b5be5.

    * Update index.mdx

commit fd25fb6
Author: Josh Wong <joshuarwong@outlook.com>
Date:   Mon Sep 16 17:44:23 2024 +0900

    Update test-deploy.yml

commit 61298c0
Author: Josh Wong <joshuarwong@gmail.com>
Date:   Sun Sep 15 16:05:36 2024 +0900

    Fix vulnerabilities related to `path-to-regexp` (#108)

commit 63fe106
Author: Josh Wong <joshuarwong@gmail.com>
Date:   Sun Sep 15 16:01:39 2024 +0900

    Fix issue where workflows don't appear in PRs (#110)

    * Add `github.ref ` to `concurrency`

    * Add `github.ref ` to `concurrency`

commit 2de2e76
Author: Josh Wong <joshuarwong@gmail.com>
Date:   Sun Sep 15 15:39:53 2024 +0900

    Revert "Add feature to run recently queued PR checklist-checking workflow onl…" (#109)

    This reverts commit f0511ca.

commit 1010394
Author: Josh Wong <joshuarwong@outlook.com>
Date:   Sun Sep 15 15:12:17 2024 +0900

    Revert "Fix vulnerability"

    This reverts commit 351ce60.

commit 351ce60
Author: Josh Wong <joshuarwong@outlook.com>
Date:   Sun Sep 15 15:07:51 2024 +0900

    Fix vulnerability

commit 7450f94
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Sat Sep 14 18:01:32 2024 +0900

    Bump send and express (#104)

commit 800dd75
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Sat Sep 14 18:00:46 2024 +0900

    Bump body-parser and express (#105)

commit f0511ca
Author: Josh Wong <joshuarwong@gmail.com>
Date:   Sat Sep 14 17:45:44 2024 +0900

    Add feature to run recently queued PR checklist-checking workflow only (#103)

    * Fix punctuation

    * Cancel only other checklist-checking jobs

    * Remove fix implemented in #101

commit 4998ad0
Author: Josh Wong <joshuarwong@gmail.com>
Date:   Sun Sep 8 23:54:45 2024 +0900

    Change `portfolio` wording and navigation to `projects` (#100)

    * Move file

    * Remove file

    * Rename portfolio to projects

    * Fix links

commit 6fd8ade
Author: Josh Wong <joshuarwong@gmail.com>
Date:   Sun Sep 8 23:50:01 2024 +0900

    Add trigger to run after PR checklist checker job (#101)

commit 8f188ab
Merge: 0401216 06cc28b
Author: Josh Wong <joshuarwong@outlook.com>
Date:   Sun Sep 8 22:32:48 2024 +0900

    Merge branch 'main' of https://github.com/josh-wong/josh-wong.github.io

commit 0401216
Author: Josh Wong <joshuarwong@outlook.com>
Date:   Sun Sep 8 22:18:51 2024 +0900

    Comment our `to` or portfolio dropdown

commit 06cc28b
Author: Josh Wong <joshuarwong@outlook.com>
Date:   Sun Sep 8 22:18:51 2024 +0900

    Remove `/` from `routeBasePath`

commit 8ad33e7
Author: Josh Wong <joshuarwong@gmail.com>
Date:   Sun Sep 8 22:03:28 2024 +0900

    Add component for unofficial Baird beer chatbot (#98)

    * Create _baird-beer-chatbot.mdx

    * Add link to chatbot

commit c1c34b4
Author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Date:   Sun Sep 8 19:34:39 2024 +0900

    AUTO: Sync baird-beer-quadrants docs to personal site (#97)

    Co-authored-by: josh-wong <joshuarwong@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant