Bump express from 4.17.1 to 4.17.2 #266

Merged
dependabot[bot] merged 1 commits from dependabot/npm_and_yarn/express-4.17.2 into main 2021-12-17 11:42:01 +00:00
dependabot[bot] commented 2021-12-17 07:05:10 +00:00 (Migrated from github.com)

Bumps express from 4.17.1 to 4.17.2.

Release notes

Sourced from express's releases.

4.17.2

  • Fix handling of undefined in res.jsonp
  • Fix handling of undefined when "json escape" is enabled
  • Fix incorrect middleware execution with unanchored RegExps
  • Fix res.jsonp(obj, status) deprecation message
  • Fix typo in res.is JSDoc
  • deps: body-parser@1.19.1
    • deps: bytes@3.1.1
    • deps: http-errors@1.8.1
    • deps: qs@6.9.6
    • deps: raw-body@2.4.2
    • deps: safe-buffer@5.2.1
    • deps: type-is@~1.6.18
  • deps: content-disposition@0.5.4
    • deps: safe-buffer@5.2.1
  • deps: cookie@0.4.1
    • Fix maxAge option to reject invalid values
  • deps: proxy-addr@~2.0.7
    • Use req.socket over deprecated req.connection
    • deps: forwarded@0.2.0
    • deps: ipaddr.js@1.9.1
  • deps: qs@6.9.6
  • deps: safe-buffer@5.2.1
  • deps: send@0.17.2
    • deps: http-errors@1.8.1
    • deps: ms@2.1.3
    • pref: ignore empty http tokens
  • deps: serve-static@1.14.2
  • deps: setprototypeof@1.2.0
Changelog

Sourced from express's changelog.

4.17.2 / 2021-12-16

  • Fix handling of undefined in res.jsonp
  • Fix handling of undefined when "json escape" is enabled
  • Fix incorrect middleware execution with unanchored RegExps
  • Fix res.jsonp(obj, status) deprecation message
  • Fix typo in res.is JSDoc
  • deps: body-parser@1.19.1
    • deps: bytes@3.1.1
    • deps: http-errors@1.8.1
    • deps: qs@6.9.6
    • deps: raw-body@2.4.2
    • deps: safe-buffer@5.2.1
    • deps: type-is@~1.6.18
  • deps: content-disposition@0.5.4
    • deps: safe-buffer@5.2.1
  • deps: cookie@0.4.1
    • Fix maxAge option to reject invalid values
  • deps: proxy-addr@~2.0.7
    • Use req.socket over deprecated req.connection
    • deps: forwarded@0.2.0
    • deps: ipaddr.js@1.9.1
  • deps: qs@6.9.6
  • deps: safe-buffer@5.2.1
  • deps: send@0.17.2
    • deps: http-errors@1.8.1
    • deps: ms@2.1.3
    • pref: ignore empty http tokens
  • deps: serve-static@1.14.2
  • deps: setprototypeof@1.2.0
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [express](https://github.com/expressjs/express) from 4.17.1 to 4.17.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p> <blockquote> <h2>4.17.2</h2> <ul> <li>Fix handling of <code>undefined</code> in <code>res.jsonp</code></li> <li>Fix handling of <code>undefined</code> when <code>&quot;json escape&quot;</code> is enabled</li> <li>Fix incorrect middleware execution with unanchored <code>RegExp</code>s</li> <li>Fix <code>res.jsonp(obj, status)</code> deprecation message</li> <li>Fix typo in <code>res.is</code> JSDoc</li> <li>deps: body-parser@1.19.1 <ul> <li>deps: bytes@3.1.1</li> <li>deps: http-errors@1.8.1</li> <li>deps: qs@6.9.6</li> <li>deps: raw-body@2.4.2</li> <li>deps: safe-buffer@5.2.1</li> <li>deps: type-is@~1.6.18</li> </ul> </li> <li>deps: content-disposition@0.5.4 <ul> <li>deps: safe-buffer@5.2.1</li> </ul> </li> <li>deps: cookie@0.4.1 <ul> <li>Fix <code>maxAge</code> option to reject invalid values</li> </ul> </li> <li>deps: proxy-addr@~2.0.7 <ul> <li>Use <code>req.socket</code> over deprecated <code>req.connection</code></li> <li>deps: forwarded@0.2.0</li> <li>deps: ipaddr.js@1.9.1</li> </ul> </li> <li>deps: qs@6.9.6</li> <li>deps: safe-buffer@5.2.1</li> <li>deps: send@0.17.2 <ul> <li>deps: http-errors@1.8.1</li> <li>deps: ms@2.1.3</li> <li>pref: ignore empty http tokens</li> </ul> </li> <li>deps: serve-static@1.14.2 <ul> <li>deps: send@0.17.2</li> </ul> </li> <li>deps: setprototypeof@1.2.0</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p> <blockquote> <h1>4.17.2 / 2021-12-16</h1> <ul> <li>Fix handling of <code>undefined</code> in <code>res.jsonp</code></li> <li>Fix handling of <code>undefined</code> when <code>&quot;json escape&quot;</code> is enabled</li> <li>Fix incorrect middleware execution with unanchored <code>RegExp</code>s</li> <li>Fix <code>res.jsonp(obj, status)</code> deprecation message</li> <li>Fix typo in <code>res.is</code> JSDoc</li> <li>deps: body-parser@1.19.1 <ul> <li>deps: bytes@3.1.1</li> <li>deps: http-errors@1.8.1</li> <li>deps: qs@6.9.6</li> <li>deps: raw-body@2.4.2</li> <li>deps: safe-buffer@5.2.1</li> <li>deps: type-is@~1.6.18</li> </ul> </li> <li>deps: content-disposition@0.5.4 <ul> <li>deps: safe-buffer@5.2.1</li> </ul> </li> <li>deps: cookie@0.4.1 <ul> <li>Fix <code>maxAge</code> option to reject invalid values</li> </ul> </li> <li>deps: proxy-addr@~2.0.7 <ul> <li>Use <code>req.socket</code> over deprecated <code>req.connection</code></li> <li>deps: forwarded@0.2.0</li> <li>deps: ipaddr.js@1.9.1</li> </ul> </li> <li>deps: qs@6.9.6</li> <li>deps: safe-buffer@5.2.1</li> <li>deps: send@0.17.2 <ul> <li>deps: http-errors@1.8.1</li> <li>deps: ms@2.1.3</li> <li>pref: ignore empty http tokens</li> </ul> </li> <li>deps: serve-static@1.14.2 <ul> <li>deps: send@0.17.2</li> </ul> </li> <li>deps: setprototypeof@1.2.0</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/express/commit/ea537d907d61dc693587fd41aab024e9df2e14b1"><code>ea537d9</code></a> 4.17.2</li> <li><a href="https://github.com/expressjs/express/commit/eee93a2760de89e8103737c2d097f20464a3c3f0"><code>eee93a2</code></a> build: update example dependencies</li> <li><a href="https://github.com/expressjs/express/commit/b35773cf19127e3392f5f908b3a4bea1410fd30a"><code>b35773c</code></a> build: eslint@7.32.0</li> <li><a href="https://github.com/expressjs/express/commit/c8a42006b84d56bc5d1dd7e1e9a6ad00c1a1d389"><code>c8a4200</code></a> build: mocha@9.1.3</li> <li><a href="https://github.com/expressjs/express/commit/21cf522dcd94ac2af6898ca81df02b373362bf24"><code>21cf522</code></a> examples: improve 404 message wording</li> <li><a href="https://github.com/expressjs/express/commit/a24f27aba7e61ed5a22ba37ab4260fba1b2151f5"><code>a24f27a</code></a> deps: serve-static@1.14.2</li> <li><a href="https://github.com/expressjs/express/commit/a33266a206f3d259007a43a6b0235978ec98e8ad"><code>a33266a</code></a> build: support Node.js 14.x</li> <li><a href="https://github.com/expressjs/express/commit/6fe271e8aadfe3e67bd5b01714cc0f18bc27914d"><code>6fe271e</code></a> build: support Node.js 13.x</li> <li><a href="https://github.com/expressjs/express/commit/cbe25d66b3ad397c52c6a66b77f18b483f8ed47e"><code>cbe25d6</code></a> deps: setprototypeof@1.2.0</li> <li><a href="https://github.com/expressjs/express/commit/3bb6d96ba9f386d8b328605ba762656cc759104b"><code>3bb6d96</code></a> examples: demonstrate sub directory download</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.17.1...4.17.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=express&package-manager=npm_and_yarn&previous-version=4.17.1&new-version=4.17.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
This repo is archived. You cannot comment on pull requests.
No Reviewers
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: go-bds/Maneger#266
No description provided.