Bump express from 4.17.1 to 4.18.2 by dependabot[bot] · Pull Request #107 · HSLdevcom/hsl-map-publisher-ui

dependabot · 2022-12-10T20:30:59Z

Bumps express from 4.17.1 to 4.18.2.

Release notes

4.18.2

Fix regression routing a large stack in a single route

deps: body-parser@1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

deps: qs@6.11.0

4.18.1

Fix hanging on large stack of sync routes

4.18.0

Add "root" option to res.download

Allow options without filename in res.download

Deprecate string and non-integer arguments to res.status

Fix behavior of null/undefined as maxAge in res.cookie

Fix handling very large stacks of sync middleware

Ignore Object.prototype values in settings through app.set/app.get

Invoke default with same arguments as types in res.format

Support proper 205 responses using res.send

Use http-errors for res.format error

deps: body-parser@1.20.0

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: depd@2.0.0

deps: http-errors@2.0.0

deps: on-finished@2.4.1

deps: qs@6.10.3

deps: raw-body@2.5.1

deps: cookie@0.5.0

Add priority option

Fix expires option to reject invalid dates

deps: depd@2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: finalhandler@1.2.0

Remove set content headers that break response

deps: on-finished@2.4.1

deps: statuses@2.0.1

deps: on-finished@2.4.1

Prevent loss of async hooks context

deps: qs@6.10.3

deps: send@0.18.0

Fix emitted 416 error missing headers property

Limit the headers removed for 304 response

deps: depd@2.0.0

deps: destroy@1.2.0

deps: http-errors@2.0.0

deps: on-finished@2.4.1

... (truncated)

Changelog

Sourced from express's changelog.

4.18.2 / 2022-10-08

Fix regression routing a large stack in a single route

deps: body-parser@1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

deps: qs@6.11.0

4.18.1 / 2022-04-29

Fix hanging on large stack of sync routes

4.18.0 / 2022-04-25

Add "root" option to res.download

Allow options without filename in res.download

Deprecate string and non-integer arguments to res.status

Fix behavior of null/undefined as maxAge in res.cookie

Fix handling very large stacks of sync middleware

Ignore Object.prototype values in settings through app.set/app.get

Invoke default with same arguments as types in res.format

Support proper 205 responses using res.send

Use http-errors for res.format error

deps: body-parser@1.20.0

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: depd@2.0.0

deps: http-errors@2.0.0

deps: on-finished@2.4.1

deps: qs@6.10.3

deps: raw-body@2.5.1

deps: cookie@0.5.0

Add priority option

Fix expires option to reject invalid dates

deps: depd@2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: finalhandler@1.2.0

Remove set content headers that break response

deps: on-finished@2.4.1

deps: statuses@2.0.1

deps: on-finished@2.4.1

Prevent loss of async hooks context

deps: qs@6.10.3

deps: send@0.18.0

... (truncated)

Commits

8368dc1 4.18.2
61f4049 docs: replace Freenode with Libera Chat
bb7907b build: Node.js@18.10
f56ce73 build: supertest@6.3.0
24b3dc5 deps: qs@6.11.0
689d175 deps: body-parser@1.20.1
340be0f build: eslint@8.24.0
33e8dc3 docs: use Node.js name style
644f646 build: supertest@6.2.4
ecd7572 build: Node.js@14.20
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

* Revert "Fix login url to prevent redirect" This reverts commit 7127c16. * Show prompt when template isn't selected instead of generating (#109) * AB#32667: Add smaller TerminalPoster variant (#110) * AB#32085: Add UI for testing line timetable generation (#111) * Ab#32085: Prevent LineTimetable generation without dates (#112) * AB#32085: Add UI for testing line timetable generation * AB#32085: Disable linetimetable generation without dates * AB#32085: Improve search UX, generate multiple line timetables at once (#113) * AB#32085: Improve search UX, add capability to generate multiple line timetables at once * Sort search results by lineId * Shorten train IDs so they display correctly * AB#32085: Print LineTimetable as A5 (#114) * AB#46862: Tweak placeholder texts for route filtering (#115) * Add local env * AB#48698: Add option for printing out the cover page for timetables (#118) * AB#48698: Add option for printing out the cover page for timetables * Add per-build cover page * Update button disabling logic * AB#53258: Fix map-publisher showing up in google search results (#119) * AB#55632: Kilvitysohje UI first version (#121) * AB#55632: First draft of kilvitysohje UI * AB#55632: Add support for multiple file types * AB#55632: Show stop mode filter * AB#55632: Add line mode colors to multi-select labels * Fix bug with opening empty build id * Change date range picker title for StopRoutePlate * AB#57920: Add line query mode for StopRoutePlate component (#123) * AB#57920: Add line query mode for StopRoutePlate component * Add styling to StopRoutePlate line query option * Add error checking and clearing selected lines after generating starts * AB#56573: Add version numbering and PR check against prod version (#124) * AB#56573: Add version numbering and PR check against prod version * AB#56568: Change license to AGPL-3.0-only (#125) * AB#57970: Switch to configurable ID provider, change prod ID provider (#122) * AB#57970: Switch to configurable ID provider, change prod ID provider and client ID * v1.1.0 --------- Co-authored-by: Juho Hänninen <juho.hanninen@cgi.com>

e-halinen · 2025-08-04T10:31:20Z

@dependabot rebase

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) --- updated-dependencies: - dependency-name: decode-uri-component dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

This reverts commit 43d2c9a.

e-halinen · 2025-08-04T15:10:52Z

@dependabot rebase

Bumps [express](https://github.com/expressjs/express) from 4.17.1 to 4.18.2. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.1...4.18.2) --- updated-dependencies: - dependency-name: express dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

* Production release (#126) * Revert "Fix login url to prevent redirect" This reverts commit 7127c16. * Show prompt when template isn't selected instead of generating (#109) * AB#32667: Add smaller TerminalPoster variant (#110) * AB#32085: Add UI for testing line timetable generation (#111) * Ab#32085: Prevent LineTimetable generation without dates (#112) * AB#32085: Add UI for testing line timetable generation * AB#32085: Disable linetimetable generation without dates * AB#32085: Improve search UX, generate multiple line timetables at once (#113) * AB#32085: Improve search UX, add capability to generate multiple line timetables at once * Sort search results by lineId * Shorten train IDs so they display correctly * AB#32085: Print LineTimetable as A5 (#114) * AB#46862: Tweak placeholder texts for route filtering (#115) * Add local env * AB#48698: Add option for printing out the cover page for timetables (#118) * AB#48698: Add option for printing out the cover page for timetables * Add per-build cover page * Update button disabling logic * AB#53258: Fix map-publisher showing up in google search results (#119) * AB#55632: Kilvitysohje UI first version (#121) * AB#55632: First draft of kilvitysohje UI * AB#55632: Add support for multiple file types * AB#55632: Show stop mode filter * AB#55632: Add line mode colors to multi-select labels * Fix bug with opening empty build id * Change date range picker title for StopRoutePlate * AB#57920: Add line query mode for StopRoutePlate component (#123) * AB#57920: Add line query mode for StopRoutePlate component * Add styling to StopRoutePlate line query option * Add error checking and clearing selected lines after generating starts * AB#56573: Add version numbering and PR check against prod version (#124) * AB#56573: Add version numbering and PR check against prod version * AB#56568: Change license to AGPL-3.0-only (#125) * AB#57970: Switch to configurable ID provider, change prod ID provider (#122) * AB#57970: Switch to configurable ID provider, change prod ID provider and client ID * v1.1.0 --------- Co-authored-by: Juho Hänninen <juho.hanninen@cgi.com> * Bump decode-uri-component from 0.2.0 to 0.2.2 (#105) Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) --- updated-dependencies: - dependency-name: decode-uri-component dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Revert "Bump decode-uri-component from 0.2.0 to 0.2.2 (#105)" (#127) This reverts commit 43d2c9a. * Bump express from 4.17.1 to 4.18.2 Bumps [express](https://github.com/expressjs/express) from 4.17.1 to 4.18.2. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.1...4.18.2) --- updated-dependencies: - dependency-name: express dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: e-halinen <54105602+e-halinen@users.noreply.github.com> Co-authored-by: Juho Hänninen <juho.hanninen@cgi.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Dec 10, 2022

e-halinen changed the base branch from master to development August 4, 2025 10:31

dependabot bot changed the base branch from development to master August 4, 2025 10:33

dependabot bot force-pushed the dependabot/npm_and_yarn/express-4.18.2 branch from cefcd27 to 38ce10d Compare August 4, 2025 10:33

dependabot bot and others added 2 commits August 4, 2025 18:10

Revert "Bump decode-uri-component from 0.2.0 to 0.2.2 (#105)" (#127)

d4d3851

This reverts commit 43d2c9a.

e-halinen changed the base branch from master to development August 4, 2025 15:10

dependabot bot changed the base branch from development to master August 4, 2025 15:12

dependabot bot force-pushed the dependabot/npm_and_yarn/express-4.18.2 branch from 38ce10d to 74d0180 Compare August 4, 2025 15:12

e-halinen changed the base branch from master to development August 4, 2025 15:14

Merge branch 'development' into dependabot/npm_and_yarn/express-4.18.2

bb1c87d

e-halinen merged commit 741f716 into development Aug 4, 2025
1 of 2 checks passed

dependabot bot deleted the dependabot/npm_and_yarn/express-4.18.2 branch August 4, 2025 15:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump express from 4.17.1 to 4.18.2#107

Bump express from 4.17.1 to 4.18.2#107
e-halinen merged 5 commits intodevelopmentfrom
dependabot/npm_and_yarn/express-4.18.2

dependabot bot commented on behalf of github Dec 10, 2022 •

edited

Loading

Uh oh!

e-halinen commented Aug 4, 2025

Uh oh!

e-halinen commented Aug 4, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Dec 10, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.18.2

4.18.1

4.18.0

4.18.2 / 2022-10-08

4.18.1 / 2022-04-29

4.18.0 / 2022-04-25

Uh oh!

e-halinen commented Aug 4, 2025

Uh oh!

e-halinen commented Aug 4, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Dec 10, 2022 •

edited

Loading