srijanone / vega

Vega (वेग) is a project scaffolding tool to speed up development process.
Apache License 2.0
9 stars 7 forks source link

[Snyk] Upgrade express from 4.16.4 to 4.17.1 #152

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade express from 4.16.4 to 4.17.1.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Release notes
Package name: express
  • 4.17.1 - 2019-05-26
    • Revert "Improve error message for null/undefined to res.status"
  • 4.17.0 - 2019-05-17
    • Add express.raw to parse bodies into Buffer
    • Add express.text to parse bodies into string
    • Improve error message for non-strings to res.sendFile
    • Improve error message for null/undefined to res.status
    • Support multiple hosts in X-Forwarded-Host
    • deps: accepts@~1.3.7
    • deps: body-parser@1.19.0
      • Add encoding MIK
      • Add petabyte (pb) support
      • Fix parsing array brackets after index
      • deps: bytes@3.1.0
      • deps: http-errors@1.7.2
      • deps: iconv-lite@0.4.24
      • deps: qs@6.7.0
      • deps: raw-body@2.4.0
      • deps: type-is@~1.6.17
    • deps: content-disposition@0.5.3
    • deps: cookie@0.4.0
      • Add SameSite=None support
    • deps: finalhandler@~1.1.2
      • Set stricter Content-Security-Policy header
      • deps: parseurl@~1.3.3
      • deps: statuses@~1.5.0
    • deps: parseurl@~1.3.3
    • deps: proxy-addr@~2.0.5
      • deps: ipaddr.js@1.9.0
    • deps: qs@6.7.0
      • Fix parsing array brackets after index
    • deps: range-parser@~1.2.1
    • deps: send@0.17.1
      • Set stricter CSP header in redirect & error responses
      • deps: http-errors@~1.7.2
      • deps: mime@1.6.0
      • deps: ms@2.1.1
      • deps: range-parser@~1.2.1
      • deps: statuses@~1.5.0
      • perf: remove redundant path.normalize call
    • deps: serve-static@1.14.1
      • Set stricter CSP header in redirect response
      • deps: parseurl@~1.3.3
      • deps: send@0.17.1
    • deps: setprototypeof@1.1.1
    • deps: statuses@~1.5.0
      • Add 103 Early Hints
    • deps: type-is@~1.6.18
      • deps: mime-types@~2.1.24
      • perf: prevent internal throw on invalid type
  • 4.16.4 - 2018-10-11
    • Fix issue where "Request aborted" may be logged in res.sendfile
    • Fix JSDoc for Router constructor
    • deps: body-parser@1.18.3
      • Fix deprecation warnings on Node.js 10+
      • Fix stack trace for strict json parse error
      • deps: depd@~1.1.2
      • deps: http-errors@~1.6.3
      • deps: iconv-lite@0.4.23
      • deps: qs@6.5.2
      • deps: raw-body@2.3.3
      • deps: type-is@~1.6.16
    • deps: proxy-addr@~2.0.4
      • deps: ipaddr.js@1.8.0
    • deps: qs@6.5.2
    • deps: safe-buffer@5.1.2
from express GitHub release notes
Commit messages
Package name: express
  • e1b45eb 4.17.1
  • 0a48e18 Revert "Improve error message for null/undefined to res.status"
  • eed05a1 build: Node.js@12.3
  • 10c7756 4.17.0
  • 9dadca2 docs: remove Gratipay links
  • b8e5056 tests: ignore unreachable line
  • 94e48a1 build: update example dependencies
  • efcb17d deps: cookie@0.4.0
  • b9ecb9a build: support Node.js 12.x
  • 5266f3a build: test against Node.js 13.x nightly
  • e502dde build: Node.js@10.15
  • da6f701 deps: range-parser@~1.2.1
  • 88f9733 deps: serve-static@1.14.1
  • 8267c4b deps: send@0.17.1
  • bc07a41 deps: finalhandler@~1.1.2
  • c754c8a build: support Node.js 11.x
  • e917028 build: Node.js@8.16
  • 7b076bd build: Node.js@6.17
  • bb5211f tests: add express.text test suite
  • 7f4e37f Add express.text to parse bodies into string
  • 11192bd tests: add express.raw test suite
  • 0bcdd88 Add express.raw to parse bodies into Buffer
  • 60aacac deps: serve-static@1.14.0
  • 70a1947 deps: send@0.17.0
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs