refactor: Upgrade path-to-regexp from 6.2.2 to 8.2.0 #9424
Closed
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade path-to-regexp from 6.2.2 to 8.2.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 7 versions ahead of your current version.
The recommended version was released on a month ago.
Issues fixed by the recommended upgrade:
SNYK-JS-PATHTOREGEXP-7925106
Release notes
Package name: path-to-regexp
Fixed
path-to-regexp
to run on older browsers by targeting ES2015s
flag from regexp 51dbd45v8.1.0...v8.2.0
Added
pathToRegexp
method back for generating a regexstringify
method for convertingTokenData
into a path stringv8.0.0...v8.1.0
Heads up! This is a fairly large change (again) and I need to apologize in advance. If I foresaw what this version would have ended up being I would not have released version 7. A longer blog post and explanation will be incoming this week, but the pivot has been due to work on Express.js v5 and this will the finalized syntax used in Express moving forward.
Edit: The post is out - https://blakeembrey.com/posts/2024-09-web-redos/
Added
*name
syntax, aligns with:
behavior but using an asterisk insteadChanged
?
,+
, and*
- only optional exists moving forward (use wildcards for+
,{*foo}
for*
)Added
:"foo-bar"
string | TokenData | Array<string | TokenData>
Removed
loose
modev7.1.0...v8.0.0
Added
match
andpathToRegexp
3fdd88fv7.1.0...v7.2.0
Fixed
v6.2.2...v6.3.0
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:![](https://camo.githubusercontent.com/cc290346e0df0e2b89541a0a84e2e06a63fc10c3ee76fa4aea3836f470d170ad/68747470733a2f2f6170692e7365676d656e742e696f2f76312f706978656c2f747261636b3f646174613d65794a33636d6c305a55746c65534936496e4a79576d785a634564485932527954485a7362306c596430645563566734576b4652546e4e434f5545774969776959573576626e6c746233567a535751694f694a6d5a54686d5a4467774d5330304e6d46694c54526b4e7a5574595451325a53307a596a59784d445931597a5531593255694c434a6c646d567564434936496c425349485a705a58646c5a434973496e42796233426c636e52705a584d694f6e736963484a4a5a434936496d5a6c4f475a6b4f4441784c545132595749744e4751334e5331684e445a6c4c544e694e6a45774e6a566a4e54566a5a534a3966513d3d)