helmetjs/helmet
### [`v5.0.2`](https://togithub.com/helmetjs/helmet/blob/HEAD/CHANGELOG.md#502---2022-01-22)
[Compare Source](https://togithub.com/helmetjs/helmet/compare/v5.0.1...v5.0.2)
##### Changed
- Improve imports for CommonJS and ECMAScript modules. See [#345](https://togithub.com/helmetjs/helmet/pull/345)
- Fixed some documentation
### [`v5.0.1`](https://togithub.com/helmetjs/helmet/blob/HEAD/CHANGELOG.md#501---2022-01-03)
[Compare Source](https://togithub.com/helmetjs/helmet/compare/v5.0.0...v5.0.1)
##### Changed
- Fixed some documentation
##### Removed
- Removed some unused internal code
### [`v5.0.0`](https://togithub.com/helmetjs/helmet/blob/HEAD/CHANGELOG.md#500---2022-01-02)
[Compare Source](https://togithub.com/helmetjs/helmet/compare/v4.6.0...v5.0.0)
##### Added
- ECMAScript module imports (i.e., `import helmet from "helmet"` and `import { frameguard } from "helmet"`). See [#320](https://togithub.com/helmetjs/helmet/issues/320)
##### Changed
- **Breaking:** `helmet.contentSecurityPolicy`: `useDefaults` option now defaults to `true`
- **Breaking:** `helmet.contentSecurityPolicy`: `form-action` directive is now set to `'self'` by default
- **Breaking:** `helmet.crossOriginEmbedderPolicy` is enabled by default
- **Breaking:** `helmet.crossOriginOpenerPolicy` is enabled by default
- **Breaking:** `helmet.crossOriginResourcePolicy` is enabled by default
- **Breaking:** `helmet.originAgentCluster` is enabled by default
- `helmet.frameguard`: add TypeScript editor autocomplete. See [#322](https://togithub.com/helmetjs/helmet/pull/322)
- Top-level `helmet()` function is slightly faster
##### Removed
- **Breaking:** Drop support for Node 10 and 11. Node 12+ is now required
Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, click this checkbox.
This PR contains the following updates:
^4.5.0
->^5.0.0
Release Notes
helmetjs/helmet
### [`v5.0.2`](https://togithub.com/helmetjs/helmet/blob/HEAD/CHANGELOG.md#502---2022-01-22) [Compare Source](https://togithub.com/helmetjs/helmet/compare/v5.0.1...v5.0.2) ##### Changed - Improve imports for CommonJS and ECMAScript modules. See [#345](https://togithub.com/helmetjs/helmet/pull/345) - Fixed some documentation ### [`v5.0.1`](https://togithub.com/helmetjs/helmet/blob/HEAD/CHANGELOG.md#501---2022-01-03) [Compare Source](https://togithub.com/helmetjs/helmet/compare/v5.0.0...v5.0.1) ##### Changed - Fixed some documentation ##### Removed - Removed some unused internal code ### [`v5.0.0`](https://togithub.com/helmetjs/helmet/blob/HEAD/CHANGELOG.md#500---2022-01-02) [Compare Source](https://togithub.com/helmetjs/helmet/compare/v4.6.0...v5.0.0) ##### Added - ECMAScript module imports (i.e., `import helmet from "helmet"` and `import { frameguard } from "helmet"`). See [#320](https://togithub.com/helmetjs/helmet/issues/320) ##### Changed - **Breaking:** `helmet.contentSecurityPolicy`: `useDefaults` option now defaults to `true` - **Breaking:** `helmet.contentSecurityPolicy`: `form-action` directive is now set to `'self'` by default - **Breaking:** `helmet.crossOriginEmbedderPolicy` is enabled by default - **Breaking:** `helmet.crossOriginOpenerPolicy` is enabled by default - **Breaking:** `helmet.crossOriginResourcePolicy` is enabled by default - **Breaking:** `helmet.originAgentCluster` is enabled by default - `helmet.frameguard`: add TypeScript editor autocomplete. See [#322](https://togithub.com/helmetjs/helmet/pull/322) - Top-level `helmet()` function is slightly faster ##### Removed - **Breaking:** Drop support for Node 10 and 11. Node 12+ is now requiredConfiguration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.