Bump the npm_and_yarn group across 1 directory with 35 updates
Open
Number: #1
Type: Pull Request
State: Open
Type: Pull Request
State: Open
Author:
![dependabot[bot]](https://github.com/dependabot.png)
dependabot[bot]
Association: None
Comments: 0
dependabot[bot]Association: None
Comments: 0
Created:
August 27, 2025 at 12:44 AM UTC
(13 days ago)
(13 days ago)
Updated:
August 27, 2025 at 12:44 AM UTC
(13 days ago)
(13 days ago)
Labels:
dependencies javascript
dependencies javascript
Description:
Bumps the npm_and_yarn group with 31 updates in the / directory:
| Package | From | To |
|---|---|---|
| @babel/helpers | 7.17.9 |
7.28.3 |
| @babel/runtime-corejs3 | 7.17.9 |
7.28.3 |
| @babel/runtime | 7.17.9 |
7.28.3 |
| @babel/traverse | 7.17.9 |
7.28.3 |
| body-parser | 1.20.0 |
1.20.3 |
| express | 4.18.0 |
4.21.2 |
| brace-expansion | 1.1.11 |
1.1.12 |
| braces | 3.0.2 |
3.0.3 |
| cross-spawn | 7.0.3 |
7.0.6 |
| decode-uri-component | 0.2.0 |
0.2.2 |
| ejs | 3.1.7 |
3.1.10 |
| follow-redirects | 1.14.9 |
1.15.11 |
| form-data | 3.0.1 |
3.0.4 |
| http-proxy-middleware | 2.0.6 |
2.0.9 |
| json5 | 1.0.1 |
1.0.2 |
| loader-utils | 2.0.2 |
2.0.4 |
| loader-utils | 3.2.0 |
3.3.1 |
| micromatch | 4.0.5 |
4.0.8 |
| minimatch | 3.0.4 |
3.1.2 |
| recursive-readdir | 2.2.2 |
2.2.3 |
| nanoid | 3.3.3 |
3.3.11 |
| on-headers | 1.0.2 |
1.1.0 |
| compression | 1.7.4 |
1.8.1 |
| rollup | 2.70.2 |
2.79.2 |
| semver | 6.3.0 |
6.3.1 |
| serialize-javascript | 6.0.0 |
6.0.2 |
| terser | 5.12.1 |
5.43.1 |
| tough-cookie | 4.0.0 |
4.1.4 |
| webpack-dev-middleware | 5.3.1 |
5.3.4 |
| webpack | 5.72.0 |
5.101.3 |
| word-wrap | 1.2.3 |
1.2.5 |
| ws | 8.5.0 |
8.18.3 |
| ws | 7.5.7 |
7.5.10 |
Updates @babel/helpers from 7.17.9 to 7.28.3
Release notes
Sourced from @babel/helpers's releases.
v7.28.3 (2025-08-14)
:eyeglasses: Spec Compliance
babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,babel-plugin-transform-class-static-block,babel-preset-env
- #17443 [static blocks] Do not inject new static fields after static code (
@nicolo-ribaudo):bug: Bug Fix
babel-parser:nail_care: Polish
babel-plugin-transform-regenerator,babel-plugin-transform-runtime
- #17363 Do not save last yield in call in temp var (
@nicolo-ribaudo):memo: Documentation
:house: Internal
:microscope: Output optimization
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressionsCommitters: 5
- Babel Bot (
@babel-bot)- Huáng Jùnliàng (
@JLHwung)- Jam Balaya (
@JamBalaya56562)- Nicolò Ribaudo (
@nicolo-ribaudo)- easrng (
@easrng)v7.28.2 (2025-07-24)
Thanks
@souhailaSfor your first PR!:bug: Bug Fix
babel-types
- #17445 [babel 7] Make
operatorparam int.tsTypeOperatoroptional (@nicolo-ribaudo)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17441 fix:
regeneratorDefinecompatibility with es5 strict mode (@liuxingbaoyu)Committers: 4
- Babel Bot (
@babel-bot)- Nicolò Ribaudo (
@nicolo-ribaudo)- SOUHAILA SERBOUT (
@souhailaS)@liuxingbaoyuv7.28.1 (2025-07-12)
... (truncated)
Changelog
Sourced from @babel/helpers's changelog.
v7.28.3 (2025-08-14)
:eyeglasses: Spec Compliance
babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,babel-plugin-transform-class-static-block,babel-preset-env
- #17443 [static blocks] Do not inject new static fields after static code (
@nicolo-ribaudo):bug: Bug Fix
babel-parser:nail_care: Polish
babel-plugin-transform-regenerator,babel-plugin-transform-runtime
- #17363 Do not save last yield in call in temp var (
@nicolo-ribaudo):memo: Documentation
:house: Internal
:microscope: Output optimization
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressionsv7.28.2 (2025-07-24)
:bug: Bug Fix
babel-types
- #17445 [babel 7] Make
operatorparam int.tsTypeOperatoroptional (@nicolo-ribaudo)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17441 fix:
regeneratorDefinecompatibility with es5 strict mode (@liuxingbaoyu)v7.28.1 (2025-07-12)
:bug: Bug Fix
babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator
- #17426 fix:
regeneratorcorrectly handlesthrowoutside oftry(@liuxingbaoyu):memo: Documentation
:leftwards_arrow_with_hook: Revert
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-typesv7.28.0 (2025-07-02)
:rocket: New Feature
babel-node
- #17147 Support top level await in node repl (
@liuxingbaoyu)babel-types
... (truncated)
Commits
ef155f5v7.28.3741cbd2chore: fix various typos across codebase (#17476)cac0ff4v7.28.2f743094fix:regeneratorDefinecompatibility with es5 strict mode (#17441)baa4cb8v7.27.6fdbf1b3fix:finallycauses unexpected return value (#17366)7d06930v7.27.45b9468dReduceregeneratorsize more (#17287)cb78b5b[babel 8] Do not replace globalregeneratorRuntimereferences in regenerato...49c0dbbFix iterator compatibility ofregeneratorValues(#17335)- Additional commits viewable in compare view
Updates @babel/runtime-corejs3 from 7.17.9 to 7.28.3
Release notes
Sourced from @babel/runtime-corejs3's releases.
v7.28.3 (2025-08-14)
:eyeglasses: Spec Compliance
babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,babel-plugin-transform-class-static-block,babel-preset-env
- #17443 [static blocks] Do not inject new static fields after static code (
@nicolo-ribaudo):bug: Bug Fix
babel-parser:nail_care: Polish
babel-plugin-transform-regenerator,babel-plugin-transform-runtime
- #17363 Do not save last yield in call in temp var (
@nicolo-ribaudo):memo: Documentation
:house: Internal
:microscope: Output optimization
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressionsCommitters: 5
- Babel Bot (
@babel-bot)- Huáng Jùnliàng (
@JLHwung)- Jam Balaya (
@JamBalaya56562)- Nicolò Ribaudo (
@nicolo-ribaudo)- easrng (
@easrng)v7.28.2 (2025-07-24)
Thanks
@souhailaSfor your first PR!:bug: Bug Fix
babel-types
- #17445 [babel 7] Make
operatorparam int.tsTypeOperatoroptional (@nicolo-ribaudo)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17441 fix:
regeneratorDefinecompatibility with es5 strict mode (@liuxingbaoyu)Committers: 4
- Babel Bot (
@babel-bot)- Nicolò Ribaudo (
@nicolo-ribaudo)- SOUHAILA SERBOUT (
@souhailaS)@liuxingbaoyuv7.28.1 (2025-07-12)
... (truncated)
Changelog
Sourced from @babel/runtime-corejs3's changelog.
v7.28.3 (2025-08-14)
:eyeglasses: Spec Compliance
babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,babel-plugin-transform-class-static-block,babel-preset-env
- #17443 [static blocks] Do not inject new static fields after static code (
@nicolo-ribaudo):bug: Bug Fix
babel-parser:nail_care: Polish
babel-plugin-transform-regenerator,babel-plugin-transform-runtime
- #17363 Do not save last yield in call in temp var (
@nicolo-ribaudo):memo: Documentation
:house: Internal
:microscope: Output optimization
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressionsv7.28.2 (2025-07-24)
:bug: Bug Fix
babel-types
- #17445 [babel 7] Make
operatorparam int.tsTypeOperatoroptional (@nicolo-ribaudo)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17441 fix:
regeneratorDefinecompatibility with es5 strict mode (@liuxingbaoyu)v7.28.1 (2025-07-12)
:bug: Bug Fix
babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator
- #17426 fix:
regeneratorcorrectly handlesthrowoutside oftry(@liuxingbaoyu):memo: Documentation
:leftwards_arrow_with_hook: Revert
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-typesv7.28.0 (2025-07-02)
:rocket: New Feature
babel-node
- #17147 Support top level await in node repl (
@liuxingbaoyu)babel-types
... (truncated)
Commits
ef155f5v7.28.3cac0ff4v7.28.2f743094fix:regeneratorDefinecompatibility with es5 strict mode (#17441)ccc5faev7.28.0cd0de90Updatebabel-polyfillpackages (#17403)baa4cb8v7.27.6fdbf1b3fix:finallycauses unexpected return value (#17366)7d06930v7.27.45b9468dReduceregeneratorsize more (#17287)cb78b5b[babel 8] Do not replace globalregeneratorRuntimereferences in regenerato...- Additional commits viewable in compare view
Updates @babel/runtime from 7.17.9 to 7.28.3
Release notes
Sourced from @babel/runtime's releases.
v7.28.3 (2025-08-14)
:eyeglasses: Spec Compliance
babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,babel-plugin-transform-class-static-block,babel-preset-env
- #17443 [static blocks] Do not inject new static fields after static code (
@nicolo-ribaudo):bug: Bug Fix
babel-parser:nail_care: Polish
babel-plugin-transform-regenerator,babel-plugin-transform-runtime
- #17363 Do not save last yield in call in temp var (
@nicolo-ribaudo):memo: Documentation
:house: Internal
:microscope: Output optimization
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressionsCommitters: 5
- Babel Bot (
@babel-bot)- Huáng Jùnliàng (
@JLHwung)- Jam Balaya (
@JamBalaya56562)- Nicolò Ribaudo (
@nicolo-ribaudo)- easrng (
@easrng)v7.28.2 (2025-07-24)
Thanks
@souhailaSfor your first PR!:bug: Bug Fix
babel-types
- #17445 [babel 7] Make
operatorparam int.tsTypeOperatoroptional (@nicolo-ribaudo)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17441 fix:
regeneratorDefinecompatibility with es5 strict mode (@liuxingbaoyu)Committers: 4
- Babel Bot (
@babel-bot)- Nicolò Ribaudo (
@nicolo-ribaudo)- SOUHAILA SERBOUT (
@souhailaS)@liuxingbaoyuv7.28.1 (2025-07-12)
... (truncated)
Changelog
Sourced from @babel/runtime's changelog.
v7.28.3 (2025-08-14)
:eyeglasses: Spec Compliance
babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,babel-plugin-transform-class-static-block,babel-preset-env
- #17443 [static blocks] Do not inject new static fields after static code (
@nicolo-ribaudo):bug: Bug Fix
babel-parser:nail_care: Polish
babel-plugin-transform-regenerator,babel-plugin-transform-runtime
- #17363 Do not save last yield in call in temp var (
@nicolo-ribaudo):memo: Documentation
:house: Internal
:microscope: Output optimization
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressionsv7.28.2 (2025-07-24)
:bug: Bug Fix
babel-types
- #17445 [babel 7] Make
operatorparam int.tsTypeOperatoroptional (@nicolo-ribaudo)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17441 fix:
regeneratorDefinecompatibility with es5 strict mode (@liuxingbaoyu)v7.28.1 (2025-07-12)
:bug: Bug Fix
babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator
- #17426 fix:
regeneratorcorrectly handlesthrowoutside oftry(@liuxingbaoyu):memo: Documentation
:leftwards_arrow_with_hook: Revert
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-typesv7.28.0 (2025-07-02)
:rocket: New Feature
babel-node
- #17147 Support top level await in node repl (
@liuxingbaoyu)babel-types
... (truncated)
Commits
ef155f5v7.28.3cac0ff4v7.28.2f68ac51chore: Avoid CITGM errors (#17382)baa4cb8v7.27.67d06930v7.27.45b9468dReduceregeneratorsize more (#17287)cb78b5b[babel 8] Do not replace globalregeneratorRuntimereferences in regenerato...a0690e3SplitregeneratorRuntimeinto multiple helpers (#17238)da5e371v7.27.3eebd3a0v7.27.1- Additional commits viewable in compare view
Updates @babel/traverse from 7.17.9 to 7.28.3
Release notes
Sourced from @babel/traverse's releases.
v7.28.3 (2025-08-14)
:eyeglasses: Spec Compliance
babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,babel-plugin-transform-class-static-block,babel-preset-env
- #17443 [static blocks] Do not inject new static fields after static code (
@nicolo-ribaudo):bug: Bug Fix
babel-parser:nail_care: Polish
babel-plugin-transform-regenerator,babel-plugin-transform-runtime
- #17363 Do not save last yield in call in temp var (
@nicolo-ribaudo):memo: Documentation
:house: Internal
:microscope: Output optimization
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressionsCommitters: 5
- Babel Bot (
@babel-bot)- Huáng Jùnliàng (
@JLHwung)- Jam Balaya (
@JamBalaya56562)- Nicolò Ribaudo (
@nicolo-ribaudo)- easrng (
@easrng)v7.28.2 (2025-07-24)
Thanks
@souhailaSfor your first PR!:bug: Bug Fix
babel-types
- #17445 [babel 7] Make
operatorparam int.tsTypeOperatoroptional (@nicolo-ribaudo)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17441 fix:
regeneratorDefinecompatibility with es5 strict mode (@liuxingbaoyu)Committers: 4
- Babel Bot (
@babel-bot)- Nicolò Ribaudo (
@nicolo-ribaudo)- SOUHAILA SERBOUT (
@souhailaS)@liuxingbaoyuv7.28.1 (2025-07-12)
... (truncated)
Changelog
Sourced from @babel/traverse's changelog.
v7.28.3 (2025-08-14)
:eyeglasses: Spec Compliance
babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,babel-plugin-transform-class-static-block,babel-preset-env
- #17443 [static blocks] Do not inject new static fields after static code (
@nicolo-ribaudo):bug: Bug Fix
babel-parser:nail_care: Polish
babel-plugin-transform-regenerator,babel-plugin-transform-runtime
- #17363 Do not save last yield in call in temp var (
@nicolo-ribaudo):memo: Documentation
:house: Internal
:microscope: Output optimization
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressionsv7.28.2 (2025-07-24)
:bug: Bug Fix
babel-types
- #17445 [babel 7] Make
operatorparam int.tsTypeOperatoroptional (@nicolo-ribaudo)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17441 fix:
regeneratorDefinecompatibility with es5 strict mode (@liuxingbaoyu)v7.28.1 (2025-07-12)
:bug: Bug Fix
babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator
- #17426 fix:
regeneratorcorrectly handlesthrowoutside oftry(@liuxingbaoyu):memo: Documentation
:leftwards_arrow_with_hook: Revert
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-typesv7.28.0 (2025-07-02)
:rocket: New Feature
babel-node
- #17147 Support top level await in node repl (
@liuxingbaoyu)babel-types
... (truncated)
Commits
ef155f5v7.28.3741cbd2chore: fix various typos across codebase (#17476)5051613Type-check.d.tsfile withstrict: true(#17461)ccc5faev7.28.04b4e7e2Create babel-helper-globals (#17297)cf5ae03LVal coverage updates (Part 2) (#17391)6ca9df4Accept bigints int.bigIntLiteralfactory (#17378)75f0140Parse discard binding (#17163)4ce7dfdv7.27.76c8faf1add generateUidBasedOnNode test cases (#17381)- Additional commits viewable in compare view
Updates body-parser from 1.20.0 to 1.20.3
Release notes
Sourced from body-parser's releases.
1.20.3
What's Changed
Important
- deps: qs@6.13.0
- add
depthoption to customize the depth level in the parser- IMPORTANT: The default
depthlevel for parsing URL-encoded data is now32(previously wasInfinity). DocumentationOther changes
- chore: add support for OSSF scorecard reporting by
@inigomarquinezin expressjs/body-parser#522- ci: fix errors in ci github action for node 8 and 9 by
@inigomarquinezin expressjs/body-parser#523- fix: pin to node@22.4.1 by
@wesleytoddin expressjs/body-parser#527- deps: qs@6.12.3 by
@melikhov-devin expressjs/body-parser#521- Add OSSF Scorecard badge by
@bjohansebasin expressjs/body-parser#531- Linter by
@UlisesGasconin expressjs/body-parser#534- Release: 1.20.3 by
@UlisesGasconin expressjs/body-parser#535New Contributors
@inigomarquinezmade their first contribution in expressjs/body-parser#522@melikhov-devmade their first contribution in expressjs/body-parser#521@bjohansebasmade their first contribution in expressjs/body-parser#531@UlisesGasconmade their first contribution in expressjs/body-parser#534Full Changelog: https://github.com/expressjs/body-parser/compare/1.20.2...1.20.3
1.20.2
- Fix strict json error message on Node.js 19+
- deps: content-type@~1.0.5
- perf: skip value escaping when unnecessary
- deps: raw-body@2.5.2
1.20.1
- deps: qs@6.11.0
- perf: remove unnecessary object clone
Changelog
Sourced from body-parser's changelog.
1.20.3 / 2024-09-10
- deps: qs@6.13.0
- add
depthoption to customize the depth level in the parser- IMPORTANT: The default
depthlevel for parsing URL-encoded data is now32(previously wasInfinity)1.20.2 / 2023-02-21
- Fix strict json error message on Node.js 19+
- deps: content-type@~1.0.5
- perf: skip value escaping when unnecessary
- deps: raw-body@2.5.2
1.20.1 / 2022-10-06
- deps: qs@6.11.0
- perf: remove unnecessary object clone
Commits
17529511.20.339744cfchore: linter (#534)b2695c4Merge commit from forkade0f3fadd scorecard to readme (#531)99a1bd6deps: qs@6.12.3 (#521)9478591fix: pin to node@22.4.183db46aci: fix errors in ci github action for node 8 and 9 (#523)9d4e212chore: add support for OSSF scorecard reporting (#522)ee913741.20.2368a93aFix strict json error message on Node.js 19+- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.
Updates express from 4.18.0 to 4.21.2
Release notes
Sourced from express's releases.
4.21.2
What's Changed
- Add funding field (v4) by
@bjohansebasin expressjs/express#6065- deps: path-to-regexp@0.1.11 by
@blakeembreyin expressjs/express#5956- deps: bump path-to-regexp@0.1.12 by
@jonchurchin expressjs/express#6209- Release: 4.21.2 by
@UlisesGasconin expressjs/express#6094Full Changelog: https://github.com/expressjs/express/compare/4.21.1...4.21.2
4.21.1
What's Changed
- Backport a fix for CVE-2024-47764 to the 4.x branch by
@joshbukerin expressjs/express#6029- Release: 4.21.1 by
@UlisesGasconin expressjs/express#6031Full Changelog: https://github.com/expressjs/express/compare/4.21.0...4.21.1
4.21.0
What's Changed
- Deprecate
"back"magic string in redirects by@blakeembreyin expressjs/express#5935- finalhandler@1.3.1 by
@wesleytoddin expressjs/express#5954- fix(deps): serve-static@1.16.2 by
@wesleytoddin expressjs/express#5951- Upgraded dependency qs to 6.13.0 to match qs in body-parser by
@agadzinski93in expressjs/express#5946New Contributors
@agadzinski93made their first contribution in expressjs/express#5946Full Changelog: https://github.com/expressjs/express/compare/4.20.0...4.21.0
4.20.0
What's Changed
Important
- IMPORTANT: The default
depthlevel for parsing URL-encoded data is now32(previously wasInfinity)- Remove link renderization in html while using
res.redirectOther Changes
- 4.19.2 Staging by
@wesleytoddin expressjs/express#5561- remove duplicate location test for data uri by
@wesleytoddin expressjs/express#5562- feat: document beta releases expectations by
@marco-ippolitoin expressjs/express#5565- Cut down on duplicated CI runs by
@jonchurchin expressjs/express#5564- Add a Threat Model by
@UlisesGasconin expressjs/express#5526- Assign captain of encodeurl by
@blakeembreyin expressjs/express#5579- Nominate jonchurch as repo captain for
http-errors,expressjs.com,morgan,cors,body-parserby@jonchurchin expressjs/express#5587- docs: update Security.md by
@inigomarquinezin expressjs/express#5590- docs: update triage nomination policy by
@UlisesGasconin expressjs/express#5600- Add CodeQL (SAST) by
@UlisesGasconin expressjs/express#5433- docs: add UlisesGascon as triage initiative captain by
@UlisesGasconin expressjs/express#5605
... (truncated)
Changelog
Sourced from express's changelog.
4.21.2 / 2024-11-06
- deps: path-to-regexp@0.1.12
- Fix backtracking protection
- deps: path-to-regexp@0.1.11
- Throws an error on invalid path values
4.21.1 / 2024-10-08
- Backported a fix for CVE-2024-47764
4.21.0 / 2024-09-11
- Deprecate
res.location("back")andres.redirect("back")magic string- deps: serve-static@1.16.2
- includes send@0.19.0
- deps: finalhandler@1.3.1
- deps: qs@6.13.0
4.20.0 / 2024-09-10
- deps: serve-static@0.16.0
- Remove link renderization in html while redirecting
- deps: send@0.19.0
- Remove link renderization in html while redirecting
- deps: body-parser@0.6.0
- add
depthoption to customize the depth level in the parser- IMPORTANT: The default
depthlevel for parsing URL-encoded data is now32(previously wasInfinity)- Remove link renderization in html while using
res.redirect- deps: path-to-regexp@0.1.10
- Adds support for named matching groups in the routes using a regex
- Adds backtracking protection to parameters without regexes defined
- deps: encodeurl@~2.0.0
- Removes encoding of
\,|, and^to align better with URL spec- Deprecate passing
options.maxAgeandoptions.expirestores.clearCookie
- Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
4.19.2 / 2024-03-25
- Improved fix for open redirect allow list bypass
4.19.1 / 2024-03-20
- Allow passing non-strings to res.location with new encoding handling checks
... (truncated)
Commits
1faf2284.21.22e0fb64deps: bump path-to-regexp@0.1.12 (#6209)59fc270deps: path-to-regexp@0.1.11 (#5956)51fc39cdocs: add funding (#6065)8e229f94.21.1a024c8afix(deps): cookie@0.7.17e562c64.21.01bcde96fix(deps): qs@6.13.0 (#5946)-
Pull Request Statistics
Commits:
1Files Changed:
2Additions:
+2555Deletions:
-1828
Package Dependencies
Technical Details
| ID: | 5852283 |
| UUID: | 2776825499 |
| Node ID: | PR_kwDOPkatY86lgv6b |
| Host: | GitHub |
| Repository: | jord35/Debuggez-une-application-React.JS |
| Merge State: | Unknown |