socket-security[bot]
commented
6 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/concurrently@7.6.0 | environment, filesystem | +1 |
119 kB | gustavohenke |
| npm/connect-mongo@3.2.0 | None | 0 |
41 kB | mingchuno |
| npm/express-session@1.18.0 | environment | +2 |
114 kB | dougwilson |
| npm/express@4.18.3 | environment, filesystem, network Transitive: eval, unsafe | +68 |
2.31 MB | ulisesgascon |
| npm/express@5.0.0-beta.1 | environment, filesystem, network Transitive: eval | +10 |
558 kB | dougwilson |
| npm/socket.io@4.7.2 | filesystem, network Transitive: environment | +12 |
5.79 MB | darrachequesne |
🚮 Removed packages: npm/ejs@3.1.9, npm/express@4.17.3, npm/express@4.18.2
This PR contains the following updates:
4.18.2->4.18.34.17.3->4.18.3Release Notes
expressjs/express (express)
### [`v4.18.3`](https://togithub.com/expressjs/express/blob/HEAD/History.md#4183--2024-02-26) [Compare Source](https://togithub.com/expressjs/express/compare/4.18.2...4.18.3) \========== - Fix routing requests without method - deps: body-parser@1.20.2 - Fix strict json error message on Node.js 19+ - deps: content-type@~1.0.5 - deps: raw-body@2.5.2Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate. View repository job log here.