[Snyk] Upgrade helmet from 4.1.1 to 4.3.1

[wpf500]

Snyk has created this PR to upgrade helmet from 4.1.1 to 4.3.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.
• The recommended version was released a month ago, on 2020-12-27.

Release notes

Package name: helmet

• 4.3.1 - 2020-12-27
  

  4.3.1

• 4.3.0 - 2020-12-27
  

  4.3.0

• 4.2.0 - 2020-11-01
  

  4.2.0

• 4.1.1 - 2020-09-10
  

  4.1.1

from helmet GitHub release notes

Commit messages

Package name: helmet

• 042ee40 4.3.1
• 41e0947 Update changelog for 4.3.1 release
• 5ca9792 Content-Security-Policy 3.3.1
• f1afeb9 Fix TypeScript error
• 08b5f46 Stop double-running CI jobs
• 4a721ec 4.3.0
• 471400a Update changelog for 4.3.0 release
• c6f4ba5 Content-Security-Policy 3.3.0
• f4520bb Switch to GitHub Actions for CI
• e1c989e Update devDependencies to latest versions
• b7f841c npm run clean: avoid deprecation error
• 90da643 Add comma in SECURITY.md
• 6fd0fbd X-Frame-Options: use `switch` for clarity
• 383e83b Expect-CT: minor shortening of directive computation
• cbc8bb6 Expect-CT and Strict-Transport-Security: shorten `maxAge` parsing
• b05f151 Remove duplicate test for hidePoweredBy
• 74aa032 Remove verbosity comment
• 814055a Remove unnecessary undefined checks
• 0f9c53d Content-Security-Policy: allow `default-src` to be disabled
• a0d5fc8 Content-Security-Policy: allow `default-src` to be disabled
• 05cb9fa Content-Security-Policy: mark an internal argument as Readonly
• 8c25dd0 Add noUncheckedIndexedAccess flag
• 1a2e828 Update devDependencies to latest versions
• 43d7a14 X-Frame-Options 4.0.0

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs