cameronghe / npm-project

0 stars 0 forks source link

Update dependency helmet to v8 #11

Open cameron-mend-ghe[bot] opened 23 hours ago

cameron-mend-ghe[bot] commented 23 hours ago

This PR contains the following updates:

Package Type Update Change
helmet (source) dependencies major 7.1.0 -> 8.0.0

[!WARNING] Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

helmetjs/helmet (helmet) ### [`v8.0.0`](https://redirect.github.com/helmetjs/helmet/blob/HEAD/CHANGELOG.md#800) [Compare Source](https://redirect.github.com/helmetjs/helmet/compare/v7.2.0...v8.0.0) ##### Changed - **Breaking:** `Strict-Transport-Security` now has a max-age of 365 days, up from 180 - **Breaking:** `Content-Security-Policy` middleware now throws an error if a directive should have quotes but does not, such as `self` instead of `'self'`. See [#​454](https://redirect.github.com/helmetjs/helmet/issues/454) - **Breaking:** `Content-Security-Policy`'s `getDefaultDirectives` now returns a deep copy. This only affects users who were mutating the result - **Breaking:** `Strict-Transport-Security` now throws an error when "includeSubDomains" option is misspelled. This was previously a warning ##### Removed - **Breaking:** Drop support for Node 16 and 17. Node 18+ is now required ### [`v7.2.0`](https://redirect.github.com/helmetjs/helmet/blob/HEAD/CHANGELOG.md#720---2024-09-28) [Compare Source](https://redirect.github.com/helmetjs/helmet/compare/v7.1.0...v7.2.0) ##### Changed - `Content-Security-Policy` middleware now warns if a directive should have quotes but does not, such as `self` instead of `'self'`. This will be an error in future versions. See [#​454](https://redirect.github.com/helmetjs/helmet/issues/454)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


cameron-mend-ghe[bot] commented 23 hours ago

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: package-lock.json
npm ERR! code E404
npm ERR! 404 Not Found - GET https://registry.npmjs.org/neyrelle - Not found
npm ERR! 404 
npm ERR! 404  'neyrelle@99.99.99' is not in this registry.
npm ERR! 404 
npm ERR! 404 Note that you can also install from a
npm ERR! 404 tarball, folder, http url, or git url.

npm ERR! A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2024-10-22T21_01_40_479Z-debug-0.log