Skip to content

Commit 0f1584e

Browse files
Bump express from 4.21.2 to 5.1.0 (#481)
Bumps [express](https://github.com/expressjs/express) from 4.21.2 to 5.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p> <blockquote> <h2>v5.1.0</h2> <h2>What's Changed</h2> <ul> <li>Update captains by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6027">expressjs/express#6027</a></li> <li>build: Node.js 23.0 by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6075">expressjs/express#6075</a></li> <li>Add funding field (v5) by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6064">expressjs/express#6064</a></li> <li>✅ add discarded middleware test by <a href="https://github.com/ctcpip"><code>@​ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5819">expressjs/express#5819</a></li> <li>update homepage link http to https by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5920">expressjs/express#5920</a></li> <li>Improve readme by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5994">expressjs/express#5994</a></li> <li>Add bjohansebas as repo captain for expressjs.com by <a href="https://github.com/crandmck"><code>@​crandmck</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6058">expressjs/express#6058</a></li> <li>Remove Object.setPrototypeOf polyfill by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6081">expressjs/express#6081</a></li> <li>fix(buffer): use node:buffer instead of safe-buffer by <a href="https://github.com/bhavya3024"><code>@​bhavya3024</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6071">expressjs/express#6071</a></li> <li>docs: Add DCO by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6048">expressjs/express#6048</a></li> <li>cleanup: remove promise support check from tests by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6148">expressjs/express#6148</a></li> <li>Use loop for acceptParams by <a href="https://github.com/blakeembrey"><code>@​blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6066">expressjs/express#6066</a></li> <li>Improve documentation step in release process by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6150">expressjs/express#6150</a></li> <li>cleanup: remove unnecessary require for global Buffer by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6146">expressjs/express#6146</a></li> <li>cleanup: remove AsyncLocalStorage check by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6147">expressjs/express#6147</a></li> <li>update history.md for acceptParams change by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6177">expressjs/express#6177</a></li> <li>docs: add <a href="https://github.com/rxmarbles"><code>@​rxmarbles</code></a> to the triage team by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6151">expressjs/express#6151</a></li> <li>refactor: improve readability by <a href="https://github.com/sazk07"><code>@​sazk07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6173">expressjs/express#6173</a></li> <li>docs: clarify the security process in the triage role by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6217">expressjs/express#6217</a></li> <li>chore: replace <code>methods</code> dependency with standard library by <a href="https://github.com/jonkoops"><code>@​jonkoops</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6196">expressjs/express#6196</a></li> <li>Remove <code>utils-merge</code> dependency - use spread syntax instead by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6091">expressjs/express#6091</a></li> <li>fix(securite): fix vulnerabilities by <a href="https://github.com/Abdel-Monaam-Aouini"><code>@​Abdel-Monaam-Aouini</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6211">expressjs/express#6211</a></li> <li>refactor: prefix built-in node module imports by <a href="https://github.com/slagiewka"><code>@​slagiewka</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6236">expressjs/express#6236</a></li> <li>fix: remove download size badges by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6266">expressjs/express#6266</a></li> <li>Remove unused <code>depd</code> dependency by <a href="https://github.com/jonkoops"><code>@​jonkoops</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6197">expressjs/express#6197</a></li> <li>fix: usage of <code>Invalid action input 'persist-credentials'</code> for <code>actions/setup-node@v4</code> in <code>ci.yml</code> by <a href="https://github.com/hamirmahal"><code>@​hamirmahal</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6256">expressjs/express#6256</a></li> <li>Add support for OSSF scorecard reporting by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5431">expressjs/express#5431</a></li> <li>docs: add <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> to the triage team by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6276">expressjs/express#6276</a></li> <li>fix: added a missing semicolon in css styles in examples/auth by <a href="https://github.com/pr4j3sh"><code>@​pr4j3sh</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6297">expressjs/express#6297</a></li> <li>docs: include team email in the security policy by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6278">expressjs/express#6278</a></li> <li>refactor: simplify <code>normalizeTypes</code> function by <a href="https://github.com/Ayoub-Mabrouk"><code>@​Ayoub-Mabrouk</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6097">expressjs/express#6097</a></li> <li>ci: updated github actions ci workflow by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6314">expressjs/express#6314</a></li> <li>ci: fix npm install --include typo by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6324">expressjs/express#6324</a></li> <li>ci: updated scorecard actions by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6322">expressjs/express#6322</a></li> <li>build(deps): use carat notation for dependency versions by <a href="https://github.com/dpopp07"><code>@​dpopp07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6317">expressjs/express#6317</a></li> <li>chore(deps): update <code>debug</code> to ^4.4.0 by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6313">expressjs/express#6313</a></li> <li>docs: retroactively note 5.0.0-beta.1 api change in history file by <a href="https://github.com/dpopp07"><code>@​dpopp07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6333">expressjs/express#6333</a></li> <li>feat(deps): body-parser@^2.1.0 by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6332">expressjs/express#6332</a></li> <li>feat(deps): router@^2.1.0 by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6331">expressjs/express#6331</a></li> <li>Update repo captains by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6234">expressjs/express#6234</a></li> <li>deps: upgrade nyc by <a href="https://github.com/agungjati"><code>@​agungjati</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6122">expressjs/express#6122</a></li> <li>fix (deps): update deps by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6337">expressjs/express#6337</a></li> <li>response: add support for ETag option in res.sendFile by <a href="https://github.com/juanarbol"><code>@​juanarbol</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6073">expressjs/express#6073</a></li> <li>Update multiple links to use <code>https</code> instead of <code>http</code> by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6338">expressjs/express#6338</a></li> <li>Extend res.links() to allow adding multiple links with the same rel <a href="https://redirect.github.com/expressjs/express/issues/2729">#2729</a> by <a href="https://github.com/andvea"><code>@​andvea</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/4885">expressjs/express#4885</a></li> <li>docs: update emeritus triagers by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6345">expressjs/express#6345</a></li> <li>docs: update guidance for triager nominations by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6349">expressjs/express#6349</a></li> <li>docs: clarify guidelines for becoming a committer by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6364">expressjs/express#6364</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p> <blockquote> <h1>5.1.0 / 2025-03-31</h1> <ul> <li>Add support for <code>Uint8Array</code> in <code>res.send()</code></li> <li>Add support for ETag option in <code>res.sendFile()</code></li> <li>Add support for multiple links with the same rel in <code>res.links()</code></li> <li>Add funding field to package.json</li> <li>perf: use loop for acceptParams</li> <li>refactor: prefix built-in node module imports</li> <li>deps: remove <code>setprototypeof</code></li> <li>deps: remove <code>safe-buffer</code></li> <li>deps: remove <code>utils-merge</code></li> <li>deps: remove <code>methods</code></li> <li>deps: remove <code>depd</code></li> <li>deps: <code>debug@^4.4.0</code></li> <li>deps: <code>body-parser@^2.2.0</code></li> <li>deps: <code>router@^2.2.0</code></li> <li>deps: <code>content-type@^1.0.5</code></li> <li>deps: <code>finalhandler@^2.1.0</code></li> <li>deps: <code>qs@^6.14.0</code></li> <li>deps: <code>[email protected]</code></li> <li>deps: <code>[email protected]</code></li> </ul> <h1>5.0.1 / 2024-10-08</h1> <ul> <li>Update <code>cookie</code> semver lock to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-47764">CVE-2024-47764</a></li> </ul> <h1>5.0.0 / 2024-09-10</h1> <ul> <li>remove: <ul> <li><code>path-is-absolute</code> dependency - use <code>path.isAbsolute</code> instead</li> </ul> </li> <li>breaking: <ul> <li><code>res.status()</code> accepts only integers, and input must be greater than 99 and less than 1000 <ul> <li>will throw a <code>RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.</code> for inputs outside this range</li> <li>will throw a <code>TypeError: Invalid status code: ${code}. Status code must be an integer.</code> for non integer inputs</li> </ul> </li> <li>deps: [email protected]</li> <li><code>res.redirect('back')</code> and <code>res.location('back')</code> is no longer a supported magic string, explicitly use <code>req.get('Referrer') || '/'</code>.</li> </ul> </li> <li>change: <ul> <li><code>res.clearCookie</code> will ignore user provided <code>maxAge</code> and <code>expires</code> options</li> </ul> </li> <li>deps: cookie-signature@^1.2.1</li> <li>deps: [email protected]</li> <li>deps: merge-descriptors@^2.0.0</li> <li>deps: serve-static@^2.1.0</li> <li>deps: [email protected]</li> <li>deps: accepts@^2.0.0</li> <li>deps: mime-types@^3.0.0 <ul> <li><code>application/javascript</code> =&gt; <code>text/javascript</code></li> </ul> </li> <li>deps: type-is@^2.0.0</li> <li>deps: content-disposition@^1.0.0</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/express/commit/cd7d4397c398a3f3ecadeaf9ef6ac1377bd414c4"><code>cd7d439</code></a> 5.1.0</li> <li><a href="https://github.com/expressjs/express/commit/4c4f3ea1059319d217dbb8177dfec902d2917424"><code>4c4f3ea</code></a> fix(deps): serve-static@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6418">#6418</a>)</li> <li><a href="https://github.com/expressjs/express/commit/cb4c56e9a7ebc208730886e010b75475bf816fd9"><code>cb4c56e</code></a> fix(docs): remove <a href="https://github.com/mertcanaltin"><code>@​mertcanaltin</code></a> from Triagers (<a href="https://redirect.github.com/expressjs/express/issues/6408">#6408</a>)</li> <li><a href="https://github.com/expressjs/express/commit/7b44e1d8501d7b8a15de5bbee7d10a67d86f2630"><code>7b44e1d</code></a> ci: use full SHAs for github action versions</li> <li><a href="https://github.com/expressjs/express/commit/eb6d12587a2fdb907bd91cbedcd3b92f434fadd0"><code>eb6d125</code></a> deps: router@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6417">#6417</a>)</li> <li><a href="https://github.com/expressjs/express/commit/f1a2dc884de77fe9e84cdc8807407bd57a2e1008"><code>f1a2dc8</code></a> deps: type-is@^2.0.1 (<a href="https://redirect.github.com/expressjs/express/issues/6420">#6420</a>)</li> <li><a href="https://github.com/expressjs/express/commit/6b51e8ef979d0aa6dc42ee0d61c8eb4c3e3196df"><code>6b51e8e</code></a> deps: body-parser@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6419">#6419</a>)</li> <li><a href="https://github.com/expressjs/express/commit/1f311c59d4b9cb94562ae0dd9917351e556f1602"><code>1f311c5</code></a> build(deps-dev): bump cookie-session from 2.0.0 to 2.1.0 (<a href="https://redirect.github.com/expressjs/express/issues/6399">#6399</a>)</li> <li><a href="https://github.com/expressjs/express/commit/9e97144222cb4c29df0a96b689781e87fc3e781c"><code>9e97144</code></a> feat(deps): [email protected] (<a href="https://redirect.github.com/expressjs/express/issues/6373">#6373</a>)</li> <li><a href="https://github.com/expressjs/express/commit/29d09803c11641d910107793947cefe4c0133358"><code>29d0980</code></a> build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (<a href="https://redirect.github.com/expressjs/express/issues/6397">#6397</a>)</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.21.2...v5.1.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=express&package-manager=npm_and_yarn&previous-version=4.21.2&new-version=5.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
1 parent 4dbb4d0 commit 0f1584e

File tree

2 files changed

+267
-240
lines changed

2 files changed

+267
-240
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@
2828
"ajv": "^8.17.1",
2929
"ajv-formats": "^3.0.1",
3030
"camelcase-keys": "^9.1.3",
31-
"express": "^4.21.2",
31+
"express": "^5.1.0",
3232
"fetch-retry": "^5.0.6",
3333
"form-data": "^4.0.2",
3434
"fs-extra": "^11.3.0",

0 commit comments

Comments
 (0)