Commit 5efe08e
authored
Bump express from 4.19.2 to 4.20.0 (#382)
Bumps [express](https://github.com/expressjs/express) from 4.19.2 to 4.20.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p>
<blockquote>
<h2>4.20.0</h2>
<h2>What's Changed</h2>
<h3>Important</h3>
<ul>
<li>IMPORTANT: The default <code>depth</code> level for parsing URL-encoded data is now <code>32</code> (previously was <code>Infinity</code>)</li>
<li>Remove link renderization in html while using <code>res.redirect</code></li>
</ul>
<h3>Other Changes</h3>
<ul>
<li>4.19.2 Staging by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5561">expressjs/express#5561</a></li>
<li>remove duplicate location test for data uri by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5562">expressjs/express#5562</a></li>
<li>feat: document beta releases expectations by <a href="https://github.com/marco-ippolito"><code>@marco-ippolito</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5565">expressjs/express#5565</a></li>
<li>Cut down on duplicated CI runs by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5564">expressjs/express#5564</a></li>
<li>Add a Threat Model by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5526">expressjs/express#5526</a></li>
<li>Assign captain of encodeurl by <a href="https://github.com/blakeembrey"><code>@blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5579">expressjs/express#5579</a></li>
<li>Nominate jonchurch as repo captain for <code>http-errors</code>, <code>expressjs.com</code>, <code>morgan</code>, <code>cors</code>, <code>body-parser</code> by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5587">expressjs/express#5587</a></li>
<li>docs: update Security.md by <a href="https://github.com/inigomarquinez"><code>@inigomarquinez</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5590">expressjs/express#5590</a></li>
<li>docs: update triage nomination policy by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5600">expressjs/express#5600</a></li>
<li>Add CodeQL (SAST) by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5433">expressjs/express#5433</a></li>
<li>docs: add UlisesGascon as triage initiative captain by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5605">expressjs/express#5605</a></li>
<li>deps: encodeurl@~2.0.0 by <a href="https://github.com/blakeembrey"><code>@blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5569">expressjs/express#5569</a></li>
<li>skip QUERY method test by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5628">expressjs/express#5628</a></li>
<li>ignore ETAG query test on 21 and 22, reuse skip util by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5639">expressjs/express#5639</a></li>
<li>add support Node.js@22 in the CI by <a href="https://github.com/mertcanaltin"><code>@mertcanaltin</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5627">expressjs/express#5627</a></li>
<li>doc: add table of contents, tc/triager lists to readme by <a href="https://github.com/mertcanaltin"><code>@mertcanaltin</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5619">expressjs/express#5619</a></li>
<li>List and sort all projects, add captains by <a href="https://github.com/blakeembrey"><code>@blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5653">expressjs/express#5653</a></li>
<li>docs: add <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> as captain for cookie-parser by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5666">expressjs/express#5666</a></li>
<li>✨ bring back query tests for node 21 by <a href="https://github.com/ctcpip"><code>@ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5690">expressjs/express#5690</a></li>
<li>[v4] Deprecate <code>res.clearCookie</code> accepting <code>options.maxAge</code> and <code>options.expires</code> by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5672">expressjs/express#5672</a></li>
<li>skip QUERY tests for Node 21 only, still not supported by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5695">expressjs/express#5695</a></li>
<li>📝 update people, add ctcpip to TC by <a href="https://github.com/ctcpip"><code>@ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5683">expressjs/express#5683</a></li>
<li>remove minor version pinning from ci by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5722">expressjs/express#5722</a></li>
<li>Fix link variable use in attribution section of CODE OF CONDUCT by <a href="https://github.com/IamLizu"><code>@IamLizu</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5762">expressjs/express#5762</a></li>
<li>Replace Appveyor windows testing with GHA by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5599">expressjs/express#5599</a></li>
<li>Add OSSF Scorecard badge by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5436">expressjs/express#5436</a></li>
<li>update scorecard link by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5814">expressjs/express#5814</a></li>
<li>Nominate <a href="https://github.com/IamLizu"><code>@IamLizu</code></a> to the triage team by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5836">expressjs/express#5836</a></li>
<li>deps: [email protected] by <a href="https://github.com/blakeembrey"><code>@blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5603">expressjs/express#5603</a></li>
<li>docs: specify new instructions for <code>question</code> and <code>discuss</code> by <a href="https://github.com/IamLizu"><code>@IamLizu</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5835">expressjs/express#5835</a></li>
<li>4.x: Upgrade <code>merge-descriptors</code> dependency by <a href="https://github.com/RobinTail"><code>@RobinTail</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5781">expressjs/express#5781</a></li>
<li>[email protected] by <a href="https://github.com/blakeembrey"><code>@blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5902">expressjs/express#5902</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/marco-ippolito"><code>@marco-ippolito</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/express/pull/5565">expressjs/express#5565</a></li>
<li><a href="https://github.com/inigomarquinez"><code>@inigomarquinez</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/express/pull/5590">expressjs/express#5590</a></li>
<li><a href="https://github.com/mertcanaltin"><code>@mertcanaltin</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/express/pull/5627">expressjs/express#5627</a></li>
<li><a href="https://github.com/ctcpip"><code>@ctcpip</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/express/pull/5690">expressjs/express#5690</a></li>
<li><a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/express/pull/5814">expressjs/express#5814</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/4.19.1...4.20.0">https://github.com/expressjs/express/compare/4.19.1...4.20.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p>
<blockquote>
<h1>4.20.0 / 2024-09-10</h1>
<ul>
<li>deps: [email protected]
<ul>
<li>Remove link renderization in html while redirecting</li>
</ul>
</li>
<li>deps: [email protected]
<ul>
<li>Remove link renderization in html while redirecting</li>
</ul>
</li>
<li>deps: [email protected]
<ul>
<li>add <code>depth</code> option to customize the depth level in the parser</li>
<li>IMPORTANT: The default <code>depth</code> level for parsing URL-encoded data is now <code>32</code> (previously was <code>Infinity</code>)</li>
</ul>
</li>
<li>Remove link renderization in html while using <code>res.redirect</code></li>
<li>deps: [email protected]
<ul>
<li>Adds support for named matching groups in the routes using a regex</li>
<li>Adds backtracking protection to parameters without regexes defined</li>
</ul>
</li>
<li>deps: encodeurl@~2.0.0
<ul>
<li>Removes encoding of <code>\</code>, <code>|</code>, and <code>^</code> to align better with URL spec</li>
</ul>
</li>
<li>Deprecate passing <code>options.maxAge</code> and <code>options.expires</code> to <code>res.clearCookie</code>
<ul>
<li>Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/expressjs/express/commit/21df421ebc7a5249bb31101da666bbf22adc3f18"><code>21df421</code></a> 4.20.0</li>
<li><a href="https://github.com/expressjs/express/commit/4c9ddc1c47bf579e55c2fe837d76a952e9fd8959"><code>4c9ddc1</code></a> feat: upgrade to [email protected]</li>
<li><a href="https://github.com/expressjs/express/commit/9ebe5d500d22cbb2b8aaa73446866b084c747971"><code>9ebe5d5</code></a> feat: upgrade to [email protected] (<a href="https://redirect.github.com/expressjs/express/issues/5928">#5928</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/ec4a01b6b8814d7b007f36a3023f4dbafdbc3d09"><code>ec4a01b</code></a> feat: upgrade to [email protected] (<a href="https://redirect.github.com/expressjs/express/issues/5926">#5926</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553"><code>54271f6</code></a> fix: don't render redirect values in anchor href</li>
<li><a href="https://github.com/expressjs/express/commit/125bb742a38cd97938a3932b47cc301e41c31f5d"><code>125bb74</code></a> [email protected] (<a href="https://redirect.github.com/expressjs/express/issues/5902">#5902</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/2a980ad16052e53b398c9953fea50e3daa0b495c"><code>2a980ad</code></a> [email protected] (<a href="https://redirect.github.com/expressjs/express/issues/5781">#5781</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/a3e7e05e0a435b7b4be25bd38d8d0ca19a773ca9"><code>a3e7e05</code></a> docs: specify new instructions for <code>question</code> and <code>discuss</code></li>
<li><a href="https://github.com/expressjs/express/commit/c5addb9a17c5b4c9fccdd2c04153a30595e03385"><code>c5addb9</code></a> deps: [email protected] (<a href="https://redirect.github.com/expressjs/express/issues/5603">#5603</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/e35380a39d94937e3d0f7119e0efbc7cd69d003f"><code>e35380a</code></a> docs: add <a href="https://github.com/IamLizu"><code>@IamLizu</code></a> to the triage team (<a href="https://redirect.github.com/expressjs/express/issues/5836">#5836</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.19.2...4.20.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>1 parent e0b460e commit 5efe08e
2 files changed
+73
-44
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
28 | 28 | | |
29 | 29 | | |
30 | 30 | | |
31 | | - | |
| 31 | + | |
32 | 32 | | |
33 | 33 | | |
34 | 34 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2885 | 2885 | | |
2886 | 2886 | | |
2887 | 2887 | | |
2888 | | - | |
2889 | | - | |
2890 | | - | |
| 2888 | + | |
| 2889 | + | |
| 2890 | + | |
2891 | 2891 | | |
2892 | 2892 | | |
2893 | 2893 | | |
| |||
2897 | 2897 | | |
2898 | 2898 | | |
2899 | 2899 | | |
2900 | | - | |
| 2900 | + | |
2901 | 2901 | | |
2902 | 2902 | | |
2903 | 2903 | | |
2904 | | - | |
| 2904 | + | |
2905 | 2905 | | |
2906 | 2906 | | |
2907 | 2907 | | |
| |||
2990 | 2990 | | |
2991 | 2991 | | |
2992 | 2992 | | |
2993 | | - | |
| 2993 | + | |
2994 | 2994 | | |
2995 | 2995 | | |
2996 | 2996 | | |
| |||
3666 | 3666 | | |
3667 | 3667 | | |
3668 | 3668 | | |
| 3669 | + | |
| 3670 | + | |
| 3671 | + | |
| 3672 | + | |
| 3673 | + | |
| 3674 | + | |
| 3675 | + | |
3669 | 3676 | | |
3670 | 3677 | | |
3671 | 3678 | | |
| |||
4168 | 4175 | | |
4169 | 4176 | | |
4170 | 4177 | | |
4171 | | - | |
4172 | | - | |
4173 | | - | |
| 4178 | + | |
| 4179 | + | |
| 4180 | + | |
4174 | 4181 | | |
4175 | 4182 | | |
4176 | 4183 | | |
4177 | | - | |
| 4184 | + | |
4178 | 4185 | | |
4179 | 4186 | | |
4180 | 4187 | | |
4181 | 4188 | | |
4182 | 4189 | | |
4183 | 4190 | | |
4184 | | - | |
| 4191 | + | |
4185 | 4192 | | |
4186 | 4193 | | |
4187 | 4194 | | |
4188 | 4195 | | |
4189 | 4196 | | |
4190 | | - | |
| 4197 | + | |
4191 | 4198 | | |
4192 | 4199 | | |
4193 | 4200 | | |
4194 | | - | |
| 4201 | + | |
4195 | 4202 | | |
4196 | 4203 | | |
4197 | 4204 | | |
4198 | 4205 | | |
4199 | | - | |
4200 | | - | |
| 4206 | + | |
| 4207 | + | |
4201 | 4208 | | |
4202 | 4209 | | |
4203 | 4210 | | |
4204 | 4211 | | |
4205 | 4212 | | |
4206 | | - | |
| 4213 | + | |
4207 | 4214 | | |
4208 | 4215 | | |
4209 | 4216 | | |
| |||
4575 | 4582 | | |
4576 | 4583 | | |
4577 | 4584 | | |
4578 | | - | |
| 4585 | + | |
4579 | 4586 | | |
4580 | 4587 | | |
4581 | 4588 | | |
| |||
5974 | 5981 | | |
5975 | 5982 | | |
5976 | 5983 | | |
5977 | | - | |
| 5984 | + | |
5978 | 5985 | | |
5979 | 5986 | | |
5980 | 5987 | | |
| |||
6179 | 6186 | | |
6180 | 6187 | | |
6181 | 6188 | | |
6182 | | - | |
6183 | | - | |
6184 | | - | |
6185 | | - | |
| 6189 | + | |
| 6190 | + | |
| 6191 | + | |
| 6192 | + | |
6186 | 6193 | | |
6187 | 6194 | | |
6188 | 6195 | | |
| |||
6564 | 6571 | | |
6565 | 6572 | | |
6566 | 6573 | | |
6567 | | - | |
| 6574 | + | |
6568 | 6575 | | |
6569 | 6576 | | |
6570 | 6577 | | |
| |||
6808 | 6815 | | |
6809 | 6816 | | |
6810 | 6817 | | |
6811 | | - | |
6812 | | - | |
6813 | | - | |
6814 | | - | |
| 6818 | + | |
| 6819 | + | |
| 6820 | + | |
| 6821 | + | |
6815 | 6822 | | |
6816 | 6823 | | |
6817 | 6824 | | |
| |||
6990 | 6997 | | |
6991 | 6998 | | |
6992 | 6999 | | |
6993 | | - | |
6994 | | - | |
6995 | | - | |
| 7000 | + | |
| 7001 | + | |
| 7002 | + | |
6996 | 7003 | | |
6997 | | - | |
6998 | | - | |
| 7004 | + | |
| 7005 | + | |
6999 | 7006 | | |
7000 | 7007 | | |
7001 | 7008 | | |
| |||
7372 | 7379 | | |
7373 | 7380 | | |
7374 | 7381 | | |
7375 | | - | |
7376 | | - | |
7377 | | - | |
| 7382 | + | |
| 7383 | + | |
| 7384 | + | |
| 7385 | + | |
| 7386 | + | |
| 7387 | + | |
| 7388 | + | |
| 7389 | + | |
| 7390 | + | |
| 7391 | + | |
| 7392 | + | |
| 7393 | + | |
| 7394 | + | |
| 7395 | + | |
| 7396 | + | |
| 7397 | + | |
| 7398 | + | |
| 7399 | + | |
| 7400 | + | |
| 7401 | + | |
| 7402 | + | |
| 7403 | + | |
| 7404 | + | |
| 7405 | + | |
7378 | 7406 | | |
7379 | 7407 | | |
7380 | 7408 | | |
7381 | 7409 | | |
7382 | 7410 | | |
7383 | | - | |
| 7411 | + | |
7384 | 7412 | | |
7385 | 7413 | | |
7386 | 7414 | | |
| |||
7433 | 7461 | | |
7434 | 7462 | | |
7435 | 7463 | | |
7436 | | - | |
7437 | | - | |
7438 | | - | |
| 7464 | + | |
| 7465 | + | |
| 7466 | + | |
7439 | 7467 | | |
7440 | | - | |
7441 | | - | |
7442 | | - | |
7443 | | - | |
| 7468 | + | |
| 7469 | + | |
| 7470 | + | |
| 7471 | + | |
| 7472 | + | |
7444 | 7473 | | |
7445 | 7474 | | |
7446 | 7475 | | |
| |||
0 commit comments