chore(deps): bump the dependencies group across 1 directory with 8 updates #5296

dependabot · 2024-09-16T02:10:15Z

Bumps the dependencies group with 7 updates in the / directory:

Package	From	To
express	`4.19.2`	`4.21.0`
@commitlint/cli	`19.4.1`	`19.5.0`
@commitlint/config-conventional	`19.4.1`	`19.5.0`
@types/node	`22.5.4`	`22.5.5`
hono	`4.5.11`	`4.6.1`
husky	`9.1.5`	`9.1.6`
typescript	`5.5.4`	`5.6.2`

Updates express from 4.19.2 to 4.21.0

Release notes

Sourced from express's releases.

4.21.0

What's Changed

Deprecate "back" magic string in redirects by @blakeembrey in expressjs/express#5935

finalhandler@1.3.1 by @wesleytodd in expressjs/express#5954

fix(deps): serve-static@1.16.2 by @wesleytodd in expressjs/express#5951

Upgraded dependency qs to 6.13.0 to match qs in body-parser by @agadzinski93 in expressjs/express#5946

New Contributors

@agadzinski93 made their first contribution in expressjs/express#5946

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

Other Changes

4.19.2 Staging by @wesleytodd in expressjs/express#5561

remove duplicate location test for data uri by @wesleytodd in expressjs/express#5562

feat: document beta releases expectations by @marco-ippolito in expressjs/express#5565

Cut down on duplicated CI runs by @jonchurch in expressjs/express#5564

Add a Threat Model by @UlisesGascon in expressjs/express#5526

Assign captain of encodeurl by @blakeembrey in expressjs/express#5579

Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in expressjs/express#5587

docs: update Security.md by @inigomarquinez in expressjs/express#5590

docs: update triage nomination policy by @UlisesGascon in expressjs/express#5600

Add CodeQL (SAST) by @UlisesGascon in expressjs/express#5433

docs: add UlisesGascon as triage initiative captain by @UlisesGascon in expressjs/express#5605

deps: encodeurl@~2.0.0 by @blakeembrey in expressjs/express#5569

skip QUERY method test by @jonchurch in expressjs/express#5628

ignore ETAG query test on 21 and 22, reuse skip util by @jonchurch in expressjs/express#5639

add support Node.js@22 in the CI by @mertcanaltin in expressjs/express#5627

doc: add table of contents, tc/triager lists to readme by @mertcanaltin in expressjs/express#5619

List and sort all projects, add captains by @blakeembrey in expressjs/express#5653

docs: add @UlisesGascon as captain for cookie-parser by @UlisesGascon in expressjs/express#5666

✨ bring back query tests for node 21 by @ctcpip in expressjs/express#5690

[v4] Deprecate res.clearCookie accepting options.maxAge and options.expires by @jonchurch in expressjs/express#5672

skip QUERY tests for Node 21 only, still not supported by @jonchurch in expressjs/express#5695

📝 update people, add ctcpip to TC by @ctcpip in expressjs/express#5683

remove minor version pinning from ci by @jonchurch in expressjs/express#5722

Fix link variable use in attribution section of CODE OF CONDUCT by @IamLizu in expressjs/express#5762

Replace Appveyor windows testing with GHA by @jonchurch in expressjs/express#5599

Add OSSF Scorecard badge by @UlisesGascon in expressjs/express#5436

update scorecard link by @bjohansebas in expressjs/express#5814

Nominate @IamLizu to the triage team by @UlisesGascon in expressjs/express#5836

deps: path-to-regexp@0.1.8 by @blakeembrey in expressjs/express#5603

... (truncated)

Changelog

Sourced from express's changelog.

4.21.0 / 2024-09-11

Deprecate res.location("back") and res.redirect("back") magic string

deps: serve-static@1.16.2

includes send@0.19.0

deps: finalhandler@1.3.1

deps: qs@6.13.0

4.20.0 / 2024-09-10

deps: serve-static@0.16.0

Remove link renderization in html while redirecting

deps: send@0.19.0

Remove link renderization in html while redirecting

deps: body-parser@0.6.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

deps: path-to-regexp@0.1.10

Adds support for named matching groups in the routes using a regex

Adds backtracking protection to parameters without regexes defined

deps: encodeurl@~2.0.0

Removes encoding of \, |, and ^ to align better with URL spec

Deprecate passing options.maxAge and options.expires to res.clearCookie

Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

Commits

7e562c6 4.21.0
1bcde96 fix(deps): qs@6.13.0 (#5946)
7d36477 fix(deps): serve-static@1.16.2 (#5951)
40d2d8f fix(deps): finalhandler@1.3.1
77ada90 Deprecate "back" magic string in redirects (#5935)
21df421 4.20.0
4c9ddc1 feat: upgrade to serve-static@0.16.0
9ebe5d5 feat: upgrade to send@0.19.0 (#5928)
ec4a01b feat: upgrade to body-parser@1.20.3 (#5926)
54271f6 fix: don't render redirect values in anchor href
Additional commits viewable in compare view

Updates @commitlint/cli from 19.4.1 to 19.5.0

Release notes

Sourced from @commitlint/cli's releases.

v19.5.0

19.5.0 (2024-09-11)

Features

feat(cli): use special errorCode for missing rules/config #4142 by @escapedcat in conventional-changelog/commitlint#4143

Chore

chore: replace execa with tinyexec and Node's child_process.spawnSync by @ziebam in conventional-changelog/commitlint#4134

New Contributors

@ziebam made their first contribution in conventional-changelog/commitlint#4134

Full Changelog: conventional-changelog/commitlint@v19.4.1...v19.5.0

Changelog

Sourced from @commitlint/cli's changelog.

19.5.0 (2024-09-11)

Features

cli: use special errorCode for missing rules/config #4142 (#4143) (d7070d8)

Commits

7e79af1 v19.5.0
d7070d8 feat(cli): use special errorCode for missing rules/config #4142 (#4143)
3c4b0fd chore: replace execa with tinyexec and Node's child_process.spawnSync (...
See full diff in compare view

Updates @commitlint/config-conventional from 19.4.1 to 19.5.0

Release notes

Sourced from @commitlint/config-conventional's releases.

v19.5.0

19.5.0 (2024-09-11)

Features

feat(cli): use special errorCode for missing rules/config #4142 by @escapedcat in conventional-changelog/commitlint#4143

Chore

chore: replace execa with tinyexec and Node's child_process.spawnSync by @ziebam in conventional-changelog/commitlint#4134

New Contributors

@ziebam made their first contribution in conventional-changelog/commitlint#4134

Full Changelog: conventional-changelog/commitlint@v19.4.1...v19.5.0

Changelog

Sourced from @commitlint/config-conventional's changelog.

19.5.0 (2024-09-11)

Note: Version bump only for package @commitlint/config-conventional

Commits

7e79af1 v19.5.0
See full diff in compare view

Updates @types/node from 22.5.4 to 22.5.5

Commits

See full diff in compare view

Updates body-parser from 1.20.2 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/body-parser#522

ci: fix errors in ci github action for node 8 and 9 by @inigomarquinez in expressjs/body-parser#523

fix: pin to node@22.4.1 by @wesleytodd in expressjs/body-parser#527

deps: qs@6.12.3 by @melikhov-dev in expressjs/body-parser#521

Add OSSF Scorecard badge by @bjohansebas in expressjs/body-parser#531

Linter by @UlisesGascon in expressjs/body-parser#534

Release: 1.20.3 by @UlisesGascon in expressjs/body-parser#535

New Contributors

@inigomarquinez made their first contribution in expressjs/body-parser#522

@melikhov-dev made their first contribution in expressjs/body-parser#521

@bjohansebas made their first contribution in expressjs/body-parser#531

@UlisesGascon made their first contribution in expressjs/body-parser#534

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Commits

1752951 1.20.3
39744cf chore: linter (#534)
b2695c4 Merge commit from fork
ade0f3f add scorecard to readme (#531)
99a1bd6 deps: qs@6.12.3 (#521)
9478591 fix: pin to node@22.4.1
83db46a ci: fix errors in ci github action for node 8 and 9 (#523)
9d4e212 chore: add support for OSSF scorecard reporting (#522)
See full diff in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.

Updates hono from 4.5.11 to 4.6.1

Release notes

Sourced from hono's releases.

v4.6.1

What's Changed

fix(build): improve addExtension esbuild plugin by @kt3k in honojs/hono#3405

New Contributors

@kt3k made their first contribution in honojs/hono#3405

Full Changelog: honojs/hono@v4.6.0...v4.6.1

v4.6.0

Hono v4.6.0 is now available!

One of the highlights of this release is the Context Storage Middleware. Let's introduce it.

Context Storage Middleware

Many users may have been waiting for this feature. The Context Storage Middleware uses AsyncLocalStorage to allow handling of the current Context object even outside of handlers.

For example, let’s define a Hono app with a variable message: string.
type Env = {
  Variables: {
    message: string
  }
}
const app = new Hono<Env>()
To enable Context Storage Middleware, register contextStorage() as middleware at the top and set the message value.
import { contextStorage } from 'hono/context-storage'
//...
app.use(contextStorage())
app.use(async (c, next) => {
c.set('message', 'Hello!')
await next()
})
getContext() returns the current Context object, allowing you to get the value of the message variable outside the handler.
import { getContext } from 'hono/context-storage'
</tr></table>

... (truncated)

Commits

e0d17a3 v4.6.1
85c7dc6 fix(build): improve addExtension esbuild plugin (#3405)
73ff6c0 v4.6.0
2da003b Merge pull request #3394 from honojs/next
743f66c fix(bearer-auth): typo (#3404)
c240ea5 feat(bearer-auth): added custom response message options (#3372)
c50be25 feat(basic-auth): added custom response message option (#3371)
a86f3ce feat(serve-static): add onFound option (#3396)
3c4d4c2 fix(secure-headers): optimize getPermissionsPolicyDirectives function (#3398)
c2b0de4 feat(context): make fetch Response headers mutable (#3318)
Additional commits viewable in compare view

Updates husky from 9.1.5 to 9.1.6

Release notes

Sourced from husky's releases.

v9.1.6

What's Changed

Fix issue where example pre-commit file is generated incorrectly by @dexmlee in typicode/husky#1519

New Contributors

@OlegKipchatov made their first contribution in typicode/husky#1495

@Byron2016 made their first contribution in typicode/husky#1499

@dexmlee made their first contribution in typicode/husky#1519

Full Changelog: typicode/husky@v9.1.5...v9.1.6

Commits

a2d942a 9.1.6
b4465ed fix: add parens around the null coalescing operator to fix issues when npm_co...
3b3e7f1 docs(spanish): improve spanish translation (#1504)
dcf3aed dosc: repair support Spanish sponsors links (#1500)
c3afd5f docs: support Spanish documentation (#1499)
c5f4f48 docs: support Russian documentation (#1495)
See full diff in compare view

Updates typescript from 5.5.4 to 5.6.2

Release notes

Sourced from typescript's releases.

TypeScript 5.6

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

fixed issues query for Typescript 5.6.0 (Beta).

fixed issues query for Typescript 5.6.1 (RC).

fixed issues query for Typescript 5.6.2 (Stable).

Downloads are available on:

npm

NuGet package

TypeScript 5.6 RC

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

fixed issues query for TypeScript v5.6.1 (RC).

fixed issues query for TypeScript v5.6.0 (Beta).

Downloads are available on:

npm

TypeScript 5.6 Beta

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

fixed issues query for Typescript 5.6.0 (Beta).

Downloads are available on:

npm

NuGet package

Commits

a7e3374 Bump version to 5.6.2 and LKG
2063357 🤖 Pick PR #59708 (LEGO: Pull request from lego/hb_537...) into release-5.6 (#...
4fe7e41 🤖 Pick PR #59670 (fix(59649): ts Move to a new file d...) into release-5.6 (#...
1a03e53 🤖 Pick PR #59761 (this can be nullish) into release-5.6 (#59762)
6212132 Update LKG
bbb5faf 🤖 Pick PR #59542 (Fixing delay caused in vscode due t...) into release-5.6 (#...
e6914a5 Bump version to 5.6.1-rc and LKG
34121c4 Update LKG
2a30c2a Merge remote-tracking branch 'origin/main' into release-5.6
936a79b Expose TypeChecker. getAwaitedType to public (#59268)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [express](https://github.com/expressjs/express) | `4.19.2` | `4.21.0` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `19.4.1` | `19.5.0` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `19.4.1` | `19.5.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.5.4` | `22.5.5` | | [hono](https://github.com/honojs/hono) | `4.5.11` | `4.6.1` | | [husky](https://github.com/typicode/husky) | `9.1.5` | `9.1.6` | | [typescript](https://github.com/microsoft/TypeScript) | `5.5.4` | `5.6.2` | Updates `express` from 4.19.2 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.19.2...4.21.0) Updates `@commitlint/cli` from 19.4.1 to 19.5.0 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v19.5.0/@commitlint/cli) Updates `@commitlint/config-conventional` from 19.4.1 to 19.5.0 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v19.5.0/@commitlint/config-conventional) Updates `@types/node` from 22.5.4 to 22.5.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `body-parser` from 1.20.2 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.2...1.20.3) Updates `hono` from 4.5.11 to 4.6.1 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.5.11...v4.6.1) Updates `husky` from 9.1.5 to 9.1.6 - [Release notes](https://github.com/typicode/husky/releases) - [Commits](typicode/husky@v9.1.5...v9.1.6) Updates `typescript` from 5.5.4 to 5.6.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml) - [Commits](microsoft/TypeScript@v5.5.4...v5.6.2) --- updated-dependencies: - dependency-name: express dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@commitlint/cli" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@commitlint/config-conventional" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: body-parser dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: hono dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: husky dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: typescript dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2024-09-17T03:01:04Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot requested review from alexander-akait, anshumanv, hiroppy and snitin315 as code owners September 16, 2024 02:10

dependabot bot added the dependencies Pull requests that update a dependency file label Sep 16, 2024

dependabot bot closed this Sep 17, 2024

dependabot bot deleted the dependabot/npm_and_yarn/dependencies-b9f667203b branch September 17, 2024 03:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 8 updates #5296

chore(deps): bump the dependencies group across 1 directory with 8 updates #5296

Uh oh!

dependabot bot commented on behalf of github Sep 16, 2024 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Sep 17, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 8 updates #5296

chore(deps): bump the dependencies group across 1 directory with 8 updates #5296

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 16, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.21.0

What's Changed

New Contributors

4.20.0

What's Changed

Important

Other Changes

4.21.0 / 2024-09-11

4.20.0 / 2024-09-10

v19.5.0

19.5.0 (2024-09-11)

Features

Chore

New Contributors

19.5.0 (2024-09-11)

Features

v19.5.0

19.5.0 (2024-09-11)

Features

Chore

New Contributors

19.5.0 (2024-09-11)

1.20.3

What's Changed

Important

Other changes

New Contributors

1.20.3 / 2024-09-10

v4.6.1

What's Changed

New Contributors

v4.6.0

Context Storage Middleware

v9.1.6

What's Changed

New Contributors

TypeScript 5.6

TypeScript 5.6 RC

TypeScript 5.6 Beta

Uh oh!

dependabot bot commented on behalf of github Sep 17, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Sep 16, 2024 •

edited

Loading