rsoreq / zenbot

Zenbot is a command-line cryptocurrency trading bot using Node.js and MongoDB.
MIT License
0 stars 0 forks source link

[NEUTRAL] Update dependency express-rate-limit to v7 #896

Open mend-for-github-com[bot] opened 8 months ago

mend-for-github-com[bot] commented 8 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
express-rate-limit ^5.1.3 -> ^7.0.0 age adoption passing confidence

Release Notes

express-rate-limit/express-rate-limit (express-rate-limit) ### [`v7.3.1`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.3.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v7.3.0...v7.3.1) ##### Fixed - Changed error displayed for the `creationStack` validation check when a store with `localKeys` set to false is used. - Improved documentation for the `creationStack` check. *** You can view the full changelog [here](https://express-rate-limit.mintlify.app/reference/changelog). ### [`v7.3.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.3.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v7.2.0...v7.3.0) ##### Added - Added a new `unsharedStore` validation check that identifies cases where a single store instance is shared across multiple limiters. *** You can view the full changelog [here](https://express-rate-limit.mintlify.app/reference/changelog). ### [`v7.2.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.2.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v7.1.5...v7.2.0) ##### Added - Added a new `creationStack` validation check that looks for instances created in a request handler. *** You can view the full changelog [here](https://express-rate-limit.mintlify.app/reference/changelog). ### [`v7.1.5`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.1.5) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v7.1.4...v7.1.5) ##### Fixed - Enable `async` `requestWasSuccessful` methods to work as documented. *** You can view the full changelog [here](https://express-rate-limit.mintlify.app/reference/changelog). ### [`v7.1.4`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.1.4) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v7.1.3...v7.1.4) ##### Fixed - Ensure header values are strings rather than numbers, for compatibility with [Bun](https://bun.sh/). *** You can view the full changelog [here](https://express-rate-limit.mintlify.app/reference/changelog). ### [`v7.1.3`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.1.3) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v7.1.2...v7.1.3) ##### Changed - Loosened peer dependencies to explicitly allow the Express 5 beta. (See [#​415](https://togithub.com/express-rate-limit/express-rate-limit/issues/415)) *** You can view the full changelog [here](https://express-rate-limit.mintlify.app/reference/changelog). ### [`v7.1.2`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.1.2) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v7.1.1...v7.1.2) ##### Changed - Re-organized documentation from readme into docs/ folder and added documentation website. *** You can view the full changelog [here](https://express-rate-limit.mintlify.app/reference/changelog). ### [`v7.1.1`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.1.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v7.1.0...v7.1.1) ##### Misc - Enabled provenance statement generation, see https://github.com/express-rate-limit/express-rate-limit#406. *** You can view the full changelog [here](https://togithub.com/express-rate-limit/express-rate-limit/blob/main/changelog.md). ### [`v7.1.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.1.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v7.0.2...v7.1.0) ##### Changed - The `getKey` method is now always defined. If the store does not have the required `get` method, `getKey` will throw an error explaining this. *** You can view the full changelog [here](https://express-rate-limit.mintlify.app/reference/changelog). ### [`v7.0.2`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.0.2) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v7.0.1...v7.0.2) ##### Added - Added `cluster-memory-store` to the readme and made a couple of other minor clarifications. *** You can view the full changelog [here](https://express-rate-limit.mintlify.app/reference/changelog). ### [`v7.0.1`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.0.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v7.0.0...v7.0.1) ##### Added - Added `rate-limit-postgresql` to the `stores` list in the readme. *** You can view the full changelog [here](https://express-rate-limit.mintlify.app/reference/changelog). ### [`v7.0.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v7.0.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.11.2...v7.0.0) ##### Breaking - Changed behavior when `max` is set to 0: - Previously, `max: 0` was treated as a 'disable' flag and would allow all requests through. - Starting with v7, all requests will be blocked when max is set to 0. - To replicate the old behavior, use the [skip](https://togithub.com/express-rate-limit/express-rate-limit#skip) function instead. - Renamed `req.rateLimit.current` to `req.rateLimit.used`. - `current` is now a hidden getter that will return the `used` value, but it will not appear when iterating over the keys or calling `JSON.stringify()`. - Changed the minimum required Node version from v14 to v16. - `express-rate-limit` now targets `es2022` in TypeScript/ESBuild. - Bumped TypeScript from v4 to v5 and `dts-bundle-generator` from v7 to v8. ##### Deprecated - Removed the `draft_polli_ratelimit_headers` option (it was deprecated in v6). - Use `standardHeaders: 'draft-6'` instead. - Removed the `onLimitReached` option (it was deprecated in v6). - [This](\(https://github.com/express-rate-limit/express-rate-limit/wiki/Error-Codes#wrn_erl_deprecated_on_limit_reached\)) is an example of how to replicate it's behavior with a custom `handler` option. ##### Changed - The `MemoryStore` now uses precise, per-user reset times rather than a global window that resets all users at once. - The `limit` configuration option is now prefered to `max`. - It still shows the same behavior, and `max` is still supported. The change was made to better align with terminology used in the IETF standard drafts. ##### Added - The `validate` config option can now be an object with keys to enable or disable specific validation checks. For more information, see [this](https://togithub.com/express-rate-limit/express-rate-limit#validate). ### [`v6.11.2`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.11.2) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.11.1...v6.11.2) ##### Fixed - Restored `IncrementResponse` TypeScript type (See [#​397](https://togithub.com/express-rate-limit/express-rate-limit/pull/397)) ### [`v6.11.1`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.11.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.11.0...v6.11.1) ##### Fixed - Check for prefixed keys when validating that the stores have single counted keys (See [#​395](https://togithub.com/express-rate-limit/express-rate-limit/issues/395)). ### [`v6.11.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.11.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.10.0...v6.11.0) ##### Added - Support for retrieving the current hit count and reset time for a given key from a store (See [#​390](https://togithub.com/express-rate-limit/express-rate-limit/issues/389)). ### [`v6.10.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.10.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.9.0...v6.10.0) ##### Added - Support for combined `RateLimit` header from the [RateLimit header fields for HTTP standardization draft](https://togithub.com/ietf-wg-httpapi/ratelimit-headers) adopted by the IETF. Enable by setting `standardHeaders: 'draft-7'` - New `standardHeaders: 'draft-6'` option, treated equivalent to `standardHeaders: true` from previous releases. (`true` and `false` are still supported.) - New `RateLimit-Policy` header added when `standardHeaders` is set to `'draft-6'`, `'draft-7'`, or `true` - Warning when using deprecated `draft_polli_ratelimit_headers` option - Warning when using deprecated `onLimitReached` option - Warning when `totalHits` value returned from Store is invalid ### [`v6.9.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.9.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.8.1...v6.9.0) ##### Added - New validaion check for double-counted requests - Added help link to each `ValidationError`, directing users to the appropriate wiki page for more info ##### Changed - Miscaleanous documenation improvements You can view the full changelog [here](https://togithub.com/nfriedly/express-rate-limit/blob/master/changelog.md). ### [`v6.8.1`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.8.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.8.0...v6.8.1) ##### Changed - Revert 6.7.1 change that bumped typescript from 5.x to 4.x and dts-bundle-generator from 8.x to 7.x (See [#​360](https://togithub.com/express-rate-limit/express-rate-limit/issues/360)) You can view the full changelog [here](https://togithub.com/nfriedly/express-rate-limit/blob/master/changelog.md). ### [`v6.8.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.8.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.7.2...v6.8.0) ##### Added - Added a set of validation checks that will log an error if failed. See https://github.com/express-rate-limit/express-rate-limit/wiki/Error-Codes for a list of potential errors. Can be disabled by setting `validate: false` in the configuration. Automatically disables after the first request. (See [#​358](https://togithub.com/express-rate-limit/express-rate-limit/issues/358)) You can view the changelog [here](https://togithub.com/nfriedly/express-rate-limit/blob/master/changelog.md). ### [`v6.7.2`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.7.2) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.7.1...v6.7.2) (Backport of v6.8.1) You can view the full changelog [here](https://togithub.com/nfriedly/express-rate-limit/blob/master/changelog.md). ### [`v6.7.1`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.7.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.7.0...v6.7.1) ##### Fixed - Fixed compatibility with TypeScript's TypeScript new `node16` module resolution strategy (See [#​355](https://togithub.com/express-rate-limit/express-rate-limit/issues/355)) ##### Changed - Bumped development dependencies. - Added `node` 20 to list of versions the CI jobs run on. No functional changes. You can view the changelog [here](https://togithub.com/nfriedly/express-rate-limit/blob/master/changelog.md). ### [`v6.7.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.7.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.6.0...v6.7.0) > No functional changes. ##### Changed - Updated links to point to the new `express-rate-limit` organization on GitHub. - Added advertisement to `readme.md` for project sponsor [Zuplo](https://zuplo.link/express-rate-limit). - Updated to `typescript` version 5 and bumped other dependencies. - Dropped `node` 12, and added `node` 19 to the list of versions the CI jobs run on. You can view the changelog [here](https://togithub.com/nfriedly/express-rate-limit/blob/master/changelog.md). ### [`v6.6.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.6.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.5.2...v6.6.0) ##### Added - Added `shutdown` method to the Store interface and the MemoryStore. ([#​322](https://togithub.com/express-rate-limit/express-rate-limit/issues/322)) You can view the full changelog [here](https://togithub.com/nfriedly/express-rate-limit/blob/master/changelog.md). ### [`v6.5.2`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.5.2) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.5.1...v6.5.2) ##### Fixed - Fixed an issue with missing types in ESM monorepos. ([#​321](https://togithub.com/express-rate-limit/express-rate-limit/issues/321)) You can view the changelog [here](https://togithub.com/nfriedly/express-rate-limit/blob/master/changelog.md). ### [`v6.5.1`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.5.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.4.0...v6.5.1) #### Changed - The message option can now be a (sync/asynx) function that returns a value ([#​311](https://togithub.com/express-rate-limit/express-rate-limit/issues/311)) - Updated all dependencies ### [`v6.4.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.4.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.3.0...v6.4.0) #### Added - Adds Express 5 (`5.0.0-beta.1`) as a supported peer dependency ([#​304](https://togithub.com/express-rate-limit/express-rate-limit/issues/304)) #### Changed - Tests are now run on Node 12, 14, 16 and 18 on CI ([#​305](https://togithub.com/express-rate-limit/express-rate-limit/issues/305)) - Updated all development dependencies ([#​306](https://togithub.com/express-rate-limit/express-rate-limit/issues/306)) ### [`v6.3.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.3.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.2.1...v6.3.0) ##### Changed - Changes the build target to `es2019` so that ESBuild outputs code that can run with Node 12. - Changes the minimum required Node version to 12.9.0. ### [`v6.2.1`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.2.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.2.0...v6.2.1) ##### Fixed - Use the default value for an option when `undefined` is passed to the rate limiter. ### [`v6.2.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.2.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.1.0...v6.2.0) ##### Added - Export the `MemoryStore`, so it can now be imported as a named import (`import { MemoryStore } from 'express-rate-limit'`). ##### Fixed - Deprecate the `onLimitReached` option (this was supposed to be deprecated in v6.0.0 itself); developers should use a custom handler function that checks if the rate limit has been exceeded instead. ### [`v6.1.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.1.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.0.5...v6.1.0) ##### Added - Added a named export `rateLimit` in case the default import does not work. ##### Fixed - Added a named export `default`, so Typescript CommonJS developers can default-import the library (`import rateLimit from 'express-rate-limit'`). ### [`v6.0.5`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.0.5) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.0.4...v6.0.5) ##### Fixed - Use named imports for ExpressJS types so users do not need to enable the `esModuleInterop` flag in their Typescript compiler configuration. ### [`v6.0.4`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.0.4) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.0.3...v6.0.4) ##### Fixed - Upload the built package as a `.tgz` to GitHub releases. ##### Changed - Add ` main ` and `module` fields to `package.json`. This helps tools such as ESLint that do not yet support the `exports` field. - Bumped the minimum node.js version in `package-lock.json` to match `package.json` ### [`v6.0.3`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.0.3) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.0.2...v6.0.3) ##### Changed - Bumped minimum Node version from 12.9 to 14.5 because the transpiled output uses the nullish coalescing operator (`??`), which [isn't supported in Node prior to 14.x](https://node.green/#ES2020-features--nullish-coalescing-operator-----). ### [`v6.0.2`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.0.2) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.0.1...v6.0.2) ##### Fixed - Ensure CommonJS projects can import the module. ##### Added - Add additional tests that test: - importing the library in `js-cjs`, `js-esm`, `ts-cjs`, `ts-esm` environments. - usage of the library with external stores (`redis`, `mongo`, `memcached`, `precise`). ##### Changed - Use [`esbuild`](https://esbuild.github.io/) to generate ESM and CJS output. This reduces the size of the built package from 138 kb to 13kb and build time to 4 ms! :rocket: - Use [`dts-bundle-generator`](https://togithub.com/timocov/dts-bundle-generator) to generate a single Typescript declaration file. ### [`v6.0.1`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.0.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v6.0.0...v6.0.1) ##### Fixed - Ensure CommonJS projects can import the module. ### [`v6.0.0`](https://togithub.com/express-rate-limit/express-rate-limit/releases/tag/v6.0.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.5.1...v6.0.0) ##### Added - `express` 4.x as a peer dependency. - Better Typescript support (the library was rewritten in Typescript). - Export the package as both ESM and CJS. - Publish the built package (`.tgz` file) on GitHub releases as well as the npm registry. - Issue and PR templates. - A contributing guide. - A changelog. ##### Changed - Rename the `draft_polli_ratelimit_headers` option to `standardHeaders`. - Rename the `headers` option to `legacyHeaders`. - `Retry-After` header is now sent if either `legacyHeaders` or `standardHeaders` is set. - Allow `keyGenerator` to be an async function/return a promise. - Change the way custom stores are defined. - Add the `init` method for stores to set themselves up using options passed to the middleware. - Rename the `incr` method to `increment`. - Allow the `increment`, `decrement`, `resetKey` and `resetAll` methods to return a promise. - Old stores will automatically be promisified and used. - The package can now only be used with NodeJS version 12.9.0 or greater. - The `onLimitReached` configuration option is now deprecated. Replace it with a custom `handler` that checks the number of hits. ##### Removed - Remove the deprecated `limiter.resetIp` method (use the `limiter.resetKey` method instead). - Remove the deprecated options `delayMs`, `delayAfter` (the delay functionality was moved to the [`express-slow-down`](https://togithub.com/nfriedly/express-slow-down) package) and `global` (use a key generator that returns a constant value). ### [`v5.5.1`](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.5.0...v5.5.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.5.0...v5.5.1) ### [`v5.5.0`](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.4.1...v5.5.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.4.1...v5.5.0) ### [`v5.4.1`](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.4.0...v5.4.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.4.0...v5.4.1) ### [`v5.4.0`](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.3.0...v5.4.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.3.0...v5.4.0) ### [`v5.3.0`](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.2.6...v5.3.0) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.2.6...v5.3.0) ### [`v5.2.6`](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.2.5...v5.2.6) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.2.5...v5.2.6) ### [`v5.2.5`](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.2.3...v5.2.5) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.2.3...v5.2.5) ### [`v5.2.3`](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.2.2...v5.2.3) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.2.2...v5.2.3) ### [`v5.2.2`](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.2.1...v5.2.2) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.2.1...v5.2.2) ### [`v5.2.1`](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.1.3...v5.2.1) [Compare Source](https://togithub.com/express-rate-limit/express-rate-limit/compare/v5.1.3...v5.2.1)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


mend-for-github-com[bot] commented 8 months ago

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: zenbot4@4.1.0
npm ERR! Found: webpack@4.47.0
npm ERR! node_modules/webpack
npm ERR!   webpack@"^4.44.1" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer webpack@"^5.0.0" from postcss-loader@5.3.0
npm ERR! node_modules/postcss-loader
npm ERR!   postcss-loader@"^5.0.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2023-11-02T02_09_09_973Z-debug-0.log