-
Notifications
You must be signed in to change notification settings - Fork 40
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(api-node): update dependency express to v5.0.1 #19804
Conversation
45f6d20
to
3a2a215
Compare
Quality Gate passedIssues Measures |
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
This PR contains the following updates:
5.0.0-beta.3
->5.0.1
4.17.21
->5.0.0
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
expressjs/express (express)
v5.0.1
Compare Source
==========
cookie
semver lock to address CVE-2024-47764v5.0.0
Compare Source
=========================
path-is-absolute
dependency - usepath.isAbsolute
insteadres.status()
accepts only integers, and input must be greater than 99 and less than 1000RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.
for inputs outside this rangeTypeError: Invalid status code: ${code}. Status code must be an integer.
for non integer inputsres.redirect('back')
andres.location('back')
is no longer a supported magic string, explicitly usereq.get('Referrer') || '/'
.res.clearCookie
will ignore user providedmaxAge
andexpires
optionsapplication/javascript
=>text/javascript
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.