oookoook / spider-trait-database

Spider trait database
GNU General Public License v3.0
3 stars 0 forks source link

Bump got and express-openid-connect in /backend #38

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps got to 11.8.6 and updates ancestor dependency express-openid-connect. These dependencies need to be updated together.

Updates got from 9.6.0 to 11.8.6

Release notes

Sourced from got's releases.

v11.8.6

  • Destroy request object after successful response

https://github.com/sindresorhus/got/compare/v11.8.5...v11.8.6

v11.8.5

https://github.com/sindresorhus/got/compare/v11.8.4...v11.8.5

v11.8.3

  • Bump cacheable-request dependency (#1921) 9463bb6
  • Fix HTTPError missing .code property (#1739) 0e167b8

https://github.com/sindresorhus/got/compare/v11.8.2...v11.8.3

v11.8.2

  • Make the dnsCache option lazy (#1529) 3bd245f This slightly improves Got startup performance and fixes an issue with Jest.

https://github.com/sindresorhus/got/compare/v11.8.1...v11.8.2

v11.8.1

  • Do not throw on custom stack traces (#1491) 4c815c3a609eb74d0eb139414d9996b4f65dc3c0

v11.8.0

  • Fix for sending files with size 0 on stat (#1488) 7acd380
  • beforeRetry allows stream body if different from original (#1501) 3dd2273
  • Set default value for an options object (#1495) 390b145

https://github.com/sindresorhus/got/compare/v11.7.0...v11.8.0

v11.7.0

Improvements

  • Add pfx HTTPS option (#1364) c33df7f
  • Update body after beforeRequest (#1453) e1c1844
  • Don't allocate buffer twice (#1403) 7bc69d9

Fixes

  • Fix a regression where body was sent after redirect 88b32ea
  • Fix destructure error on promise.json() c97ce7c
  • Do not ignore userinfo on a redirect to the same origin 52de13b

https://github.com/sindresorhus/got/compare/v11.6.2...v11.7.0

v11.6.2

Bug fixes

... (truncated)

Commits


Updates express-openid-connect from 1.0.2 to 2.12.0

Release notes

Sourced from express-openid-connect's releases.

v2.12.0

Added

Fixed

v2.11.0

Added

Fixed

v2.10.0

Added

v2.9.0

Added

v2.8.0

Added

v2.7.3

Fixed

v2.7.2

Security

... (truncated)

Changelog

Sourced from express-openid-connect's changelog.

v2.12.0 (2023-01-24)

Full Changelog

Added

  • [SDK-3911] Add support for providing a custom callback route #438 (ewanharris)

Fixed

v2.11.0 (2022-12-08)

Full Changelog

Added

Fixed

v2.10.0 (2022-11-11)

Full Changelog

Added

v2.9.0 (2022-10-17)

Full Changelog

Added

  • [SDK-3717] Add cookie prop to support more express-session stores #395 (adamjmcgrath)

v2.8.0 (2022-07-20)

Full Changelog

Added

v2.7.3 (2022-06-29)

Full Changelog

Fixed

v2.7.2 (2022-03-29)

Full Changelog

Security

  • URL Redirection to Untrusted Site ('Open Redirect') in express-openid-connect GHSA-7p99-3798-f85c

v2.7.1 (2022-02-24)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by auth0-oss, a new releaser for express-openid-connect since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/oookoook/spider-trait-database/network/alerts).
dependabot[bot] commented 1 year ago

Looks like these dependencies are up-to-date now, so this is no longer needed.