Skip to content

Update dependency express to ~4.21.0#73

Open
mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/express-4.x
Open

Update dependency express to ~4.21.0#73
mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/express-4.x

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented Oct 3, 2024

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
express (source) dependencies minor ~4.19.2~4.21.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability
High High 7.5 CVE-2024-45296
High High 7.5 CVE-2024-52798
Medium Medium 5.3 CVE-2024-47764
Medium Medium 5.0 CVE-2024-43796
Medium Medium 5.0 CVE-2024-43799
Medium Medium 5.0 CVE-2024-43800

Release Notes

expressjs/express (express)

v4.21.1

Compare Source

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

v4.21.0

Compare Source

What's Changed

New Contributors

Full Changelog: expressjs/express@4.20.0...4.21.0

v4.20.0

Compare Source

==========

  • deps: serve-static@​0.16.0
    • Remove link renderization in html while redirecting
  • deps: send@​0.19.0
    • Remove link renderization in html while redirecting
  • deps: body-parser@​0.6.0
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: path-to-regexp@​0.1.10
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by Mend label Oct 3, 2024
@mend-for-github-com

mend-for-github-com Bot commented Oct 3, 2024

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm WARN ERESOLVE overriding peer dependency
npm WARN While resolving: @fimbul/bifrost@0.21.0
npm WARN Found: tslint@6.1.3
npm WARN node_modules/tslint
npm WARN   dev tslint@"^6.1.3" from the root project
npm WARN 
npm WARN Could not resolve dependency:
npm WARN peer tslint@"^5.0.0" from @fimbul/bifrost@0.21.0
npm WARN node_modules/@fimbul/bifrost
npm WARN   @fimbul/bifrost@"^0.21.0" from tslint-consistent-codestyle@1.16.0
npm WARN   node_modules/tslint-consistent-codestyle
npm WARN 
npm WARN Conflicting peer dependency: tslint@5.20.1
npm WARN node_modules/tslint
npm WARN   peer tslint@"^5.0.0" from @fimbul/bifrost@0.21.0
npm WARN   node_modules/@fimbul/bifrost
npm WARN     @fimbul/bifrost@"^0.21.0" from tslint-consistent-codestyle@1.16.0
npm WARN     node_modules/tslint-consistent-codestyle
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: tslint-consistent-codestyle@1.16.0
npm ERR! Found: tslint@6.1.3
npm ERR! node_modules/tslint
npm ERR!   dev tslint@"^6.1.3" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer tslint@"^5.0.0" from tslint-consistent-codestyle@1.16.0
npm ERR! node_modules/tslint-consistent-codestyle
npm ERR!   dev tslint-consistent-codestyle@"^1.16.0" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: tslint@5.20.1
npm ERR! node_modules/tslint
npm ERR!   peer tslint@"^5.0.0" from tslint-consistent-codestyle@1.16.0
npm ERR!   node_modules/tslint-consistent-codestyle
npm ERR!     dev tslint-consistent-codestyle@"^1.16.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2025-04-29T15_26_40_049Z-debug-0.log

@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/express-4.x branch from e1af4c3 to 36365b9 Compare January 3, 2025 00:36
@mend-for-github-com mend-for-github-com Bot changed the title Update dependency express to ~4.20.0 Update dependency express to ~4.21.0 Jan 3, 2025
@mend-for-github-com mend-for-github-com Bot changed the title Update dependency express to ~4.21.0 Update dependency express to ~4.20.0 Mar 30, 2025
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/express-4.x branch from 36365b9 to e8c0003 Compare March 30, 2025 12:02
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/express-4.x branch from e8c0003 to fd65445 Compare April 29, 2025 15:26
@mend-for-github-com mend-for-github-com Bot changed the title Update dependency express to ~4.20.0 Update dependency express to ~4.21.0 Apr 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Development

Successfully merging this pull request may close these issues.

0 participants