Title: Bump express from 4.13.3 to 4.19.2 by dependabot[bot] · Pull Request #1 · forky-mcforkface/JavaScriptTraining · GitHub
Open Graph Title: Bump express from 4.13.3 to 4.19.2 by dependabot[bot] · Pull Request #1 · forky-mcforkface/JavaScriptTraining
X Title: Bump express from 4.13.3 to 4.19.2 by dependabot[bot] · Pull Request #1 · forky-mcforkface/JavaScriptTraining
Description: Bumps express from 4.13.3 to 4.19.2.
Release notes
Sourced from express's releases.
4.19.2
What's Changed
Improved fix for open redirect allow list bypass
Full Changelog: expressjs/express@4.19.1...4.19.2
4.19.1
What's Changed
Fix ci after location patch by @wesleytodd in expressjs/express#5552
fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556
Full Changelog: expressjs/express@4.19.0...4.19.1
4.19.0
What's Changed
fix typo in release date by @UlisesGascon in expressjs/express#5527
docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511
docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510
Add note on how to update docs for new release by @crandmck in expressjs/express#5541
Prevent open redirect allow list bypass due to encodeurl
Release 4.19.0 by @wesleytodd in expressjs/express#5551
New Contributors
@crandmck made their first contribution in expressjs/express#5541
Full Changelog: expressjs/express@4.18.3...4.19.0
4.18.3
Main Changes
Fix routing requests without method
deps: body-parser@1.20.2
Fix strict json error message on Node.js 19+
deps: content-type@~1.0.5
deps: raw-body@2.5.2
Other Changes
Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032
build: Node.js@16.18 and Node.js@18.12 by @abenhamdine in expressjs/express#5034
ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027
test: remove unused function arguments in params by @raksbisht in expressjs/express#5124
Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119
Fixed typos by @raksbisht in expressjs/express#5117
examples: remove unused params by @raksbisht in expressjs/express#5113
fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130
fix: typos in History.md by @raksbisht in expressjs/express#5131
build : add Node.js@19.7 by @abenhamdine in expressjs/express#5028
test: remove unused function arguments in params by @raksbisht in expressjs/express#5137
... (truncated)
Changelog
Sourced from express's changelog.
4.19.2 / 2024-03-25
Improved fix for open redirect allow list bypass
4.19.1 / 2024-03-20
Allow passing non-strings to res.location with new encoding handling checks
4.19.0 / 2024-03-20
Prevent open redirect allow list bypass due to encodeurl
deps: cookie@0.6.0
4.18.3 / 2024-02-29
Fix routing requests without method
deps: body-parser@1.20.2
Fix strict json error message on Node.js 19+
deps: content-type@~1.0.5
deps: raw-body@2.5.2
deps: cookie@0.6.0
Add partitioned option
4.18.2 / 2022-10-08
Fix regression routing a large stack in a single route
deps: body-parser@1.20.1
deps: qs@6.11.0
perf: remove unnecessary object clone
deps: qs@6.11.0
4.18.1 / 2022-04-29
Fix hanging on large stack of sync routes
4.18.0 / 2022-04-25
Add "root" option to res.download
Allow options without filename in res.download
Deprecate string and non-integer arguments to res.status
Fix behavior of null/undefined as maxAge in res.cookie
Fix handling very large stacks of sync middleware
Ignore Object.prototype values in settings through app.set/app.get
... (truncated)
Commits
04bc627 4.19.2
da4d763 Improved fix for open redirect allow list bypass
4f0f6cc 4.19.1
a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
a1fa90f fixed un-edited version in history.md for 4.19.0
11f2b1d build: fix build due to inconsistent supertest behavior in older versions
084e365 4.19.0
0867302 Prevent open redirect allow list bypass due to encodeurl
567c9c6 Add note on how to update docs for new release (#5541)
69a4cf2 deps: cookie@0.6.0
Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show
Open Graph Description: Bumps express from 4.13.3 to 4.19.2. Release notes Sourced from express's releases. 4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: expressjs/expr...
X Description: Bumps express from 4.13.3 to 4.19.2. Release notes Sourced from express's releases. 4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: expres...
Opengraph URL: https://github.com/forky-mcforkface/JavaScriptTraining/pull/1
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:db034c74-b0d7-7bdc-1d40-1347854cd6bf |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 8DD0:2088C9:2C83BDD:3DADBE7:6A6335F0 |
| html-safe-nonce | 3e818e75d3a6b265231cbc65478552301f8e47ad203374ba32d3c7077d3cdc90 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4REQwOjIwODhDOToyQzgzQkREOjNEQURCRTc6NkE2MzM1RjAiLCJ2aXNpdG9yX2lkIjoiNjY4NjM1MTc0MDQwODkwMzE1MiIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 30259e5ca9d2ae6efb199d3e68e6a1aab9fefab4f6e3d57c96500de0b6cdec11 |
| hovercard-subject-tag | pull_request:1790284959 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/forky-mcforkface/JavaScriptTraining/pull/1/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps express from 4.13.3 to 4.19.2. Release notes Sourced from express's releases. 4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: expressjs/expr... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 59e55daad7174ca59d63c6974d58276ccb5477442e550bebb3c035e1bef11c94 |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/forky-mcforkface/JavaScriptTraining git https://github.com/forky-mcforkface/JavaScriptTraining.git |
| octolytics-dimension-user_id | 111464788 |
| octolytics-dimension-user_login | forky-mcforkface |
| octolytics-dimension-repository_id | 525983081 |
| octolytics-dimension-repository_nwo | forky-mcforkface/JavaScriptTraining |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | true |
| octolytics-dimension-repository_parent_id | 12532579 |
| octolytics-dimension-repository_parent_nwo | mixi-inc/JavaScriptTraining |
| octolytics-dimension-repository_network_root_id | 12532579 |
| octolytics-dimension-repository_network_root_nwo | mixi-inc/JavaScriptTraining |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 990295d92a4cc7b63fbbd83a046217cd7d77d49c |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width