[Snyk] Upgrade express from 4.16.4 to 4.17.1

[snyk-bot]

Snyk has created this PR to upgrade express from 4.16.4 to 4.17.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 2 years ago, on 2019-05-26.

Release notes

Package name: express

• 4.17.1 - 2019-05-26
  
  • Revert "Improve error message for null/undefined to res.status"
• 4.17.0 - 2019-05-17
  
  • Add express.raw to parse bodies into Buffer
  • Add express.text to parse bodies into string
  • Improve error message for non-strings to res.sendFile
  • Improve error message for null/undefined to res.status
  • Support multiple hosts in X-Forwarded-Host
  • deps: accepts@~1.3.7
  • deps: body-parser@1.19.0
    • Add encoding MIK
    • Add petabyte (pb) support
    • Fix parsing array brackets after index
    • deps: bytes@3.1.0
    • deps: http-errors@1.7.2
    • deps: iconv-lite@0.4.24
    • deps: qs@6.7.0
    • deps: raw-body@2.4.0
    • deps: type-is@~1.6.17
  • deps: content-disposition@0.5.3
  • deps: cookie@0.4.0
    • Add SameSite=None support
  • deps: finalhandler@~1.1.2
    • Set stricter Content-Security-Policy header
    • deps: parseurl@~1.3.3
    • deps: statuses@~1.5.0
  • deps: parseurl@~1.3.3
  • deps: proxy-addr@~2.0.5
    • deps: ipaddr.js@1.9.0
  • deps: qs@6.7.0
    • Fix parsing array brackets after index
  • deps: range-parser@~1.2.1
  • deps: send@0.17.1
    • Set stricter CSP header in redirect & error responses
    • deps: http-errors@~1.7.2
    • deps: mime@1.6.0
    • deps: ms@2.1.1
    • deps: range-parser@~1.2.1
    • deps: statuses@~1.5.0
    • perf: remove redundant path.normalize call
  • deps: serve-static@1.14.1
    • Set stricter CSP header in redirect response
    • deps: parseurl@~1.3.3
    • deps: send@0.17.1
  • deps: setprototypeof@1.1.1
  • deps: statuses@~1.5.0
    • Add 103 Early Hints
  • deps: type-is@~1.6.18
    • deps: mime-types@~2.1.24
    • perf: prevent internal throw on invalid type
• 4.16.4 - 2018-10-11
  
  • Fix issue where "Request aborted" may be logged in res.sendfile
  • Fix JSDoc for Router constructor
  • deps: body-parser@1.18.3
    • Fix deprecation warnings on Node.js 10+
    • Fix stack trace for strict json parse error
    • deps: depd@~1.1.2
    • deps: http-errors@~1.6.3
    • deps: iconv-lite@0.4.23
    • deps: qs@6.5.2
    • deps: raw-body@2.3.3
    • deps: type-is@~1.6.16
  • deps: proxy-addr@~2.0.4
    • deps: ipaddr.js@1.8.0
  • deps: qs@6.5.2
  • deps: safe-buffer@5.1.2

from express GitHub release notes

Commit messages

Package name: express

• e1b45eb 4.17.1
• 0a48e18 Revert "Improve error message for null/undefined to res.status"
• eed05a1 build: Node.js@12.3
• 10c7756 4.17.0
• 9dadca2 docs: remove Gratipay links
• b8e5056 tests: ignore unreachable line
• 94e48a1 build: update example dependencies
• efcb17d deps: cookie@0.4.0
• b9ecb9a build: support Node.js 12.x
• 5266f3a build: test against Node.js 13.x nightly
• e502dde build: Node.js@10.15
• da6f701 deps: range-parser@~1.2.1
• 88f9733 deps: serve-static@1.14.1
• 8267c4b deps: send@0.17.1
• bc07a41 deps: finalhandler@~1.1.2
• c754c8a build: support Node.js 11.x
• e917028 build: Node.js@8.16
• 7b076bd build: Node.js@6.17
• bb5211f tests: add express.text test suite
• 7f4e37f Add express.text to parse bodies into string
• 11192bd tests: add express.raw test suite
• 0bcdd88 Add express.raw to parse bodies into Buffer
• 60aacac deps: serve-static@1.14.0
• 70a1947 deps: send@0.17.0

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs