Update dependency express to v5 by renovate[bot] · Pull Request #17 · freifunk/videoodyssee-api

renovate · 2025-06-29T17:45:45Z

This PR contains the following updates:

Package	Change	Age	Confidence
express (source)	`^4.18.1` → `^5.0.0`

Release Notes

expressjs/express (express)

`v5.2.1`

Compare Source

=======================

Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
- The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

`v5.2.0`

Compare Source

========================

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
deps: body-parser@^2.2.1
A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

`v5.1.0`

Compare Source

========================

Add support for Uint8Array in res.send()
Add support for ETag option in res.sendFile()
Add support for multiple links with the same rel in res.links()
Add funding field to package.json
perf: use loop for acceptParams
refactor: prefix built-in node module imports
deps: remove setprototypeof
deps: remove safe-buffer
deps: remove utils-merge
deps: remove methods
deps: remove depd
deps: debug@^4.4.0
deps: body-parser@^2.2.0
deps: router@^2.2.0
deps: content-type@^1.0.5
deps: finalhandler@^2.1.0
deps: qs@^6.14.0
deps: server-static@2.2.0
deps: type-is@2.0.1

`v5.0.1`

Compare Source

==========

Update cookie semver lock to address CVE-2024-47764

`v5.0.0`

Compare Source

=========================

remove:
- path-is-absolute dependency - use path.isAbsolute instead
breaking:
- res.status() accepts only integers, and input must be greater than 99 and less than 1000
  - will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range
  - will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs
- deps: send@1.0.0
- res.redirect('back') and res.location('back') is no longer a supported magic string, explicitly use req.get('Referrer') || '/'.
change:
- res.clearCookie will ignore user provided maxAge and expires options
deps: cookie-signature@^1.2.1
deps: debug@4.3.6
deps: merge-descriptors@^2.0.0
deps: serve-static@^2.1.0
deps: qs@6.13.0
deps: accepts@^2.0.0
deps: mime-types@^3.0.0
- application/javascript => text/javascript
deps: type-is@^2.0.0
deps: content-disposition@^1.0.0
deps: finalhandler@^2.0.0
deps: fresh@^2.0.0
deps: body-parser@^2.0.1
deps: send@^1.1.0

`v4.22.2`

Compare Source

What's Changed

fix: restore >20 array parsing for req.query repeated keys (8d09bfe6)
- This also unifies array-cap behavior across notations. Indexed notation (a[0]=...) was historically capped at qs's default arrayLimit of 20 even in older qs versions; after this change it also allows up to 1000 items.
deps: qs@~6.15.1
deps: body-parser@~1.20.5

New Contributors

@suuuuuuminnnnnn made their first contribution in #7021
@SAY-5 made their first contribution in #7181

Full Changelog: expressjs/express@v4.22.1...v4.22.2

`v4.22.1`

Compare Source

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Release: 4.22.1 by @UlisesGascon in #6934

Full Changelog: expressjs/express@4.22.0...v4.22.1

`v4.22.0`

Compare Source

Important: Security

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

What's Changed

Refactor: improve readability by @sazk07 in #6190
ci: add support for Node.js@23.0 by @UlisesGascon in #6080
Method functions with no path should error by @wesleytodd in #5957
ci: updated github actions ci workflow by @Phillip9587 in #6323
ci: reorder npm i steps to fix ci for older node versions by @Phillip9587 in #6336
Backport: ci: add node.js 24 to test matrix by @Phillip9587 in #6506
chore(4.x): wider range for query test skip by @jonchurch in #6513
use tilde notation for certain dependencies by @UlisesGascon in #6905
deps: qs@6.14.0 by @UlisesGascon in #6909
deps: use tilde notation for qs by @Phillip9587 in #6919
Release: 4.22.0 by @UlisesGascon in #6921

Full Changelog: expressjs/express@4.21.2...4.22.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-07-02T06:30:31Z

Coverage Report (Node 20.x)

Coverage after merging renovate/express-5.x into main will be

89.38%

Coverage Report

File	Stmts	Branches	Funcs	Lines	Uncovered Lines
server.js	85.37%	70%	75%	92.59%	23, 37, 42–44
db
db.js	78.95%	100%	60%	85.71%	17, 30
db/models
user.js	100%	100%	100%	100%
video.js	100%	100%	100%	100%
routes
auth-routes.js	100%	100%	100%	100%
pipeline-routes.js	94.29%	90.91%	100%	95.65%	26–27
video-routes.js	96.25%	95.65%	100%	96.23%	45, 63–64
utils
funcs.js	79.41%	72.41%	77.78%	82.81%	22–23, 23, 23–24, 24, 24–26, 26, 26–27, 27, 27–28, 30–33
logger.js	65.79%	40%	66.67%	76%	103, 33, 55, 64, 64, 64, 66, 74, 89, 89, 96–97

github-actions · 2025-08-10T15:01:33Z

Coverage Report (Node 20.x)

Coverage after merging renovate/express-5.x into main will be

89.38%

Coverage Report

File	Stmts	Branches	Funcs	Lines	Uncovered Lines
server.js	85.37%	70%	75%	92.59%	23, 37, 42–44
db
db.js	78.95%	100%	60%	85.71%	17, 30
db/models
user.js	100%	100%	100%	100%
video.js	100%	100%	100%	100%
routes
auth-routes.js	100%	100%	100%	100%
pipeline-routes.js	94.29%	90.91%	100%	95.65%	26–27
video-routes.js	96.25%	95.65%	100%	96.23%	45, 63–64
utils
funcs.js	79.41%	72.41%	77.78%	82.81%	22–23, 23, 23–24, 24, 24–26, 26, 26–27, 27, 27–28, 30–33
logger.js	65.79%	40%	66.67%	76%	103, 33, 55, 64, 64, 64, 66, 74, 89, 89, 96–97

github-actions · 2025-09-25T14:57:03Z

Coverage Report (Node 20.x)

Coverage after merging renovate/express-5.x into main will be

89.38%

Coverage Report

File	Stmts	Branches	Funcs	Lines	Uncovered Lines
server.js	85.37%	70%	75%	92.59%	23, 37, 42–44
db
db.js	78.95%	100%	60%	85.71%	17, 30
db/models
user.js	100%	100%	100%	100%
video.js	100%	100%	100%	100%
routes
auth-routes.js	100%	100%	100%	100%
pipeline-routes.js	94.29%	90.91%	100%	95.65%	26–27
video-routes.js	96.25%	95.65%	100%	96.23%	45, 63–64
utils
funcs.js	79.41%	72.41%	77.78%	82.81%	22–23, 23, 23–24, 24, 24–26, 26, 26–27, 27, 27–28, 30–33
logger.js	65.79%	40%	66.67%	76%	103, 33, 55, 64, 64, 64, 66, 74, 89, 89, 96–97

github-actions · 2025-12-01T19:12:52Z

Coverage Report (Node 20.x)

Coverage after merging renovate/express-5.x into main will be

89.38%

Coverage Report

File	Stmts	Branches	Funcs	Lines	Uncovered Lines
server.js	85.37%	70%	75%	92.59%	23, 37, 42–44
db
db.js	78.95%	100%	60%	85.71%	17, 30
db/models
user.js	100%	100%	100%	100%
video.js	100%	100%	100%	100%
routes
auth-routes.js	100%	100%	100%	100%
pipeline-routes.js	94.29%	90.91%	100%	95.65%	26–27
video-routes.js	96.25%	95.65%	100%	96.23%	45, 63–64
utils
funcs.js	79.41%	72.41%	77.78%	82.81%	22–23, 23, 23–24, 24, 24–26, 26, 26–27, 27, 27–28, 30–33
logger.js	65.79%	40%	66.67%	76%	103, 33, 55, 64, 64, 64, 66, 74, 89, 89, 96–97

github-actions · 2025-12-01T22:01:57Z

Coverage Report (Node 20.x)

Coverage after merging renovate/express-5.x into main will be

89.38%

Coverage Report

File	Stmts	Branches	Funcs	Lines	Uncovered Lines
server.js	85.37%	70%	75%	92.59%	23, 37, 42–44
db
db.js	78.95%	100%	60%	85.71%	17, 30
db/models
user.js	100%	100%	100%	100%
video.js	100%	100%	100%	100%
routes
auth-routes.js	100%	100%	100%	100%
pipeline-routes.js	94.29%	90.91%	100%	95.65%	26–27
video-routes.js	96.25%	95.65%	100%	96.23%	45, 63–64
utils
funcs.js	79.41%	72.41%	77.78%	82.81%	22–23, 23, 23–24, 24, 24–26, 26, 26–27, 27, 27–28, 30–33
logger.js	65.79%	40%	66.67%	76%	103, 33, 55, 64, 64, 64, 66, 74, 89, 89, 96–97

github-actions · 2025-12-31T16:57:00Z

Coverage Report (Node 20.x)

Coverage after merging renovate/express-5.x into main will be

89.38%

Coverage Report

File	Stmts	Branches	Funcs	Lines	Uncovered Lines
server.js	85.37%	70%	75%	92.59%	23, 37, 42–44
db
db.js	78.95%	100%	60%	85.71%	17, 30
db/models
user.js	100%	100%	100%	100%
video.js	100%	100%	100%	100%
routes
auth-routes.js	100%	100%	100%	100%
pipeline-routes.js	94.29%	90.91%	100%	95.65%	26–27
video-routes.js	96.25%	95.65%	100%	96.23%	45, 63–64
utils
funcs.js	79.41%	72.41%	77.78%	82.81%	22–23, 23, 23–24, 24, 24–26, 26, 26–27, 27, 27–28, 30–33
logger.js	65.79%	40%	66.67%	76%	103, 33, 55, 64, 64, 64, 66, 74, 89, 89, 96–97

github-actions · 2026-01-08T19:39:15Z

Coverage Report (Node 20.x)

Coverage after merging renovate/express-5.x into main will be

89.38%

Coverage Report

File	Stmts	Branches	Funcs	Lines	Uncovered Lines
server.js	85.37%	70%	75%	92.59%	23, 37, 42–44
db
db.js	78.95%	100%	60%	85.71%	17, 30
db/models
user.js	100%	100%	100%	100%
video.js	100%	100%	100%	100%
routes
auth-routes.js	100%	100%	100%	100%
pipeline-routes.js	94.29%	90.91%	100%	95.65%	26–27
video-routes.js	96.25%	95.65%	100%	96.23%	45, 63–64
utils
funcs.js	79.41%	72.41%	77.78%	82.81%	22–23, 23, 23–24, 24, 24–26, 26, 26–27, 27, 27–28, 30–33
logger.js	65.79%	40%	66.67%	76%	103, 33, 55, 64, 64, 64, 66, 74, 89, 89, 96–97

github-actions · 2026-02-17T15:46:01Z

Coverage Report (Node 20.x)

Coverage after merging renovate/express-5.x into main will be

89.38%

Coverage Report

File	Stmts	Branches	Funcs	Lines	Uncovered Lines
server.js	85.37%	70%	75%	92.59%	23, 37, 42–44
db
db.js	78.95%	100%	60%	85.71%	17, 30
db/models
user.js	100%	100%	100%	100%
video.js	100%	100%	100%	100%
routes
auth-routes.js	100%	100%	100%	100%
pipeline-routes.js	94.29%	90.91%	100%	95.65%	26–27
video-routes.js	96.25%	95.65%	100%	96.23%	45, 63–64
utils
funcs.js	79.41%	72.41%	77.78%	82.81%	22–23, 23, 23–24, 24, 24–26, 26, 26–27, 27, 27–28, 30–33
logger.js	65.79%	40%	66.67%	76%	103, 33, 55, 64, 64, 64, 66, 74, 89, 89, 96–97

github-actions · 2026-03-27T13:32:13Z

Coverage Report (Node 20.x)

Coverage after merging renovate/express-5.x into main will be

89.38%

Coverage Report

File	Stmts	Branches	Funcs	Lines	Uncovered Lines
server.js	85.37%	70%	75%	92.59%	23, 37, 42–44
db
db.js	78.95%	100%	60%	85.71%	17, 30
db/models
user.js	100%	100%	100%	100%
video.js	100%	100%	100%	100%
routes
auth-routes.js	100%	100%	100%	100%
pipeline-routes.js	94.29%	90.91%	100%	95.65%	26–27
video-routes.js	96.25%	95.65%	100%	96.23%	45, 63–64
utils
funcs.js	79.41%	72.41%	77.78%	82.81%	22–23, 23, 23–24, 24, 24–26, 26, 26–27, 27, 27–28, 30–33
logger.js	65.79%	40%	66.67%	76%	103, 33, 55, 64, 64, 64, 66, 74, 89, 89, 96–97

github-actions · 2026-04-01T16:41:23Z

Coverage Report (Node 20.x)

Coverage after merging renovate/express-5.x into main will be

89.38%

Coverage Report

File	Stmts	Branches	Funcs	Lines	Uncovered Lines
server.js	85.37%	70%	75%	92.59%	23, 37, 42–44
db
db.js	78.95%	100%	60%	85.71%	17, 30
db/models
user.js	100%	100%	100%	100%
video.js	100%	100%	100%	100%
routes
auth-routes.js	100%	100%	100%	100%
pipeline-routes.js	94.29%	90.91%	100%	95.65%	26–27
video-routes.js	96.25%	95.65%	100%	96.23%	45, 63–64
utils
funcs.js	79.41%	72.41%	77.78%	82.81%	22–23, 23, 23–24, 24, 24–26, 26, 26–27, 27, 27–28, 30–33
logger.js	65.79%	40%	66.67%	76%	103, 33, 55, 64, 64, 64, 66, 74, 89, 89, 96–97

github-actions · 2026-05-18T17:54:37Z

Coverage Report (Node 20.x)

Coverage after merging renovate/express-5.x into main will be

89.38%

Coverage Report

File	Stmts	Branches	Funcs	Lines	Uncovered Lines
server.js	85.37%	70%	75%	92.59%	23, 37, 42–44
db
db.js	78.95%	100%	60%	85.71%	17, 30
db/models
user.js	100%	100%	100%	100%
video.js	100%	100%	100%	100%
routes
auth-routes.js	100%	100%	100%	100%
pipeline-routes.js	94.29%	90.91%	100%	95.65%	26–27
video-routes.js	96.25%	95.65%	100%	96.23%	45, 63–64
utils
funcs.js	79.41%	72.41%	77.78%	82.81%	22–23, 23, 23–24, 24, 24–26, 26, 26–27, 27, 27–28, 30–33
logger.js	65.79%	40%	66.67%	76%	103, 33, 55, 64, 64, 64, 66, 74, 89, 89, 96–97

renovate Bot added the dependencies label Jun 29, 2025

renovate Bot force-pushed the renovate/express-5.x branch from a96bf05 to 6f63038 Compare July 2, 2025 06:30

renovate Bot force-pushed the renovate/express-5.x branch from 6f63038 to d5dd365 Compare August 10, 2025 15:01

renovate Bot force-pushed the renovate/express-5.x branch from d5dd365 to 9c3b0d7 Compare September 25, 2025 14:56

renovate Bot force-pushed the renovate/express-5.x branch from 9c3b0d7 to ba0df3d Compare November 18, 2025 16:09

renovate Bot force-pushed the renovate/express-5.x branch from ba0df3d to 2a5626b Compare December 1, 2025 19:12

renovate Bot force-pushed the renovate/express-5.x branch from 2a5626b to b7942b1 Compare December 1, 2025 22:01

renovate Bot force-pushed the renovate/express-5.x branch from b7942b1 to 2935765 Compare December 31, 2025 16:56

renovate Bot force-pushed the renovate/express-5.x branch from 2935765 to fd29ded Compare January 8, 2026 19:38

renovate Bot force-pushed the renovate/express-5.x branch 2 times, most recently from 65957e8 to 6d62d9e Compare February 17, 2026 15:45

renovate Bot force-pushed the renovate/express-5.x branch from 6d62d9e to bec01ea Compare March 27, 2026 13:31

renovate Bot force-pushed the renovate/express-5.x branch from bec01ea to e58d8cb Compare April 1, 2026 16:40

renovate Bot force-pushed the renovate/express-5.x branch from e58d8cb to fbf3d07 Compare April 8, 2026 18:44

renovate Bot force-pushed the renovate/express-5.x branch from fbf3d07 to 498e8ac Compare April 29, 2026 18:58

renovate Bot force-pushed the renovate/express-5.x branch from 498e8ac to bbdba13 Compare May 18, 2026 17:53

renovate Bot force-pushed the renovate/express-5.x branch from bbdba13 to b1ff96e Compare July 12, 2026 15:46

renovate Bot force-pushed the renovate/express-5.x branch from b1ff96e to 3885c89 Compare July 24, 2026 21:42

renovate Bot force-pushed the renovate/express-5.x branch from 3885c89 to b6e2aa3 Compare August 14, 2026 17:54

Update dependency express to v5

3a2d7ce

renovate Bot force-pushed the renovate/express-5.x branch from b6e2aa3 to 3a2d7ce Compare August 26, 2026 15:40

Navigation Menu

Uh oh!

Update dependency express to v5 - #17

Update dependency express to v5#17
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/express-5.x

renovate Bot commented Jun 29, 2025 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 2, 2025

Uh oh!

github-actions Bot commented Aug 10, 2025

Uh oh!

github-actions Bot commented Sep 25, 2025

Uh oh!

github-actions Bot commented Dec 1, 2025

Uh oh!

github-actions Bot commented Dec 1, 2025

Uh oh!

github-actions Bot commented Dec 31, 2025

Uh oh!

github-actions Bot commented Jan 8, 2026

Uh oh!

github-actions Bot commented Feb 17, 2026

Uh oh!

github-actions Bot commented Mar 27, 2026

Uh oh!

github-actions Bot commented Apr 1, 2026

Uh oh!

github-actions Bot commented May 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jun 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

Important: Security

What's Changed

Configuration

Uh oh!

github-actions Bot commented Jul 2, 2025

Coverage Report (Node 20.x)

Uh oh!

github-actions Bot commented Aug 10, 2025

Coverage Report (Node 20.x)

Uh oh!

github-actions Bot commented Sep 25, 2025

Coverage Report (Node 20.x)

Uh oh!

github-actions Bot commented Dec 1, 2025

Coverage Report (Node 20.x)

Uh oh!

github-actions Bot commented Dec 1, 2025

Coverage Report (Node 20.x)

Uh oh!

github-actions Bot commented Dec 31, 2025

Coverage Report (Node 20.x)

Uh oh!

github-actions Bot commented Jan 8, 2026

Coverage Report (Node 20.x)

Uh oh!

github-actions Bot commented Feb 17, 2026

Coverage Report (Node 20.x)

Uh oh!

github-actions Bot commented Mar 27, 2026

Coverage Report (Node 20.x)

Uh oh!

github-actions Bot commented Apr 1, 2026

Coverage Report (Node 20.x)

Uh oh!

github-actions Bot commented May 18, 2026

Coverage Report (Node 20.x)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jun 29, 2025 •

edited

Loading