René's URL Explorer Experiment


Title: chore(deps): bump express from 4.18.2 to 4.20.0 by dependabot[bot] · Pull Request #366 · cameri/nostream · GitHub

Open Graph Title: chore(deps): bump express from 4.18.2 to 4.20.0 by dependabot[bot] · Pull Request #366 · cameri/nostream

X Title: chore(deps): bump express from 4.18.2 to 4.20.0 by dependabot[bot] · Pull Request #366 · cameri/nostream

Description: Bumps express from 4.18.2 to 4.20.0. Release notes Sourced from express's releases. 4.20.0 What's Changed Important IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity) Remove link renderization in html while using res.redirect Other Changes 4.19.2 Staging by @​wesleytodd in expressjs/express#5561 remove duplicate location test for data uri by @​wesleytodd in expressjs/express#5562 feat: document beta releases expectations by @​marco-ippolito in expressjs/express#5565 Cut down on duplicated CI runs by @​jonchurch in expressjs/express#5564 Add a Threat Model by @​UlisesGascon in expressjs/express#5526 Assign captain of encodeurl by @​blakeembrey in expressjs/express#5579 Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @​jonchurch in expressjs/express#5587 docs: update Security.md by @​inigomarquinez in expressjs/express#5590 docs: update triage nomination policy by @​UlisesGascon in expressjs/express#5600 Add CodeQL (SAST) by @​UlisesGascon in expressjs/express#5433 docs: add UlisesGascon as triage initiative captain by @​UlisesGascon in expressjs/express#5605 deps: encodeurl@~2.0.0 by @​blakeembrey in expressjs/express#5569 skip QUERY method test by @​jonchurch in expressjs/express#5628 ignore ETAG query test on 21 and 22, reuse skip util by @​jonchurch in expressjs/express#5639 add support Node.js@22 in the CI by @​mertcanaltin in expressjs/express#5627 doc: add table of contents, tc/triager lists to readme by @​mertcanaltin in expressjs/express#5619 List and sort all projects, add captains by @​blakeembrey in expressjs/express#5653 docs: add @​UlisesGascon as captain for cookie-parser by @​UlisesGascon in expressjs/express#5666 ✨ bring back query tests for node 21 by @​ctcpip in expressjs/express#5690 [v4] Deprecate res.clearCookie accepting options.maxAge and options.expires by @​jonchurch in expressjs/express#5672 skip QUERY tests for Node 21 only, still not supported by @​jonchurch in expressjs/express#5695 📝 update people, add ctcpip to TC by @​ctcpip in expressjs/express#5683 remove minor version pinning from ci by @​jonchurch in expressjs/express#5722 Fix link variable use in attribution section of CODE OF CONDUCT by @​IamLizu in expressjs/express#5762 Replace Appveyor windows testing with GHA by @​jonchurch in expressjs/express#5599 Add OSSF Scorecard badge by @​UlisesGascon in expressjs/express#5436 update scorecard link by @​bjohansebas in expressjs/express#5814 Nominate @​IamLizu to the triage team by @​UlisesGascon in expressjs/express#5836 deps: path-to-regexp@0.1.8 by @​blakeembrey in expressjs/express#5603 docs: specify new instructions for question and discuss by @​IamLizu in expressjs/express#5835 4.x: Upgrade merge-descriptors dependency by @​RobinTail in expressjs/express#5781 path-to-regexp@0.1.10 by @​blakeembrey in expressjs/express#5902 New Contributors @​marco-ippolito made their first contribution in expressjs/express#5565 @​inigomarquinez made their first contribution in expressjs/express#5590 @​mertcanaltin made their first contribution in expressjs/express#5627 @​ctcpip made their first contribution in expressjs/express#5690 @​bjohansebas made their first contribution in expressjs/express#5814 Full Changelog: expressjs/express@4.19.1...4.20.0 ... (truncated) Changelog Sourced from express's changelog. 4.20.0 / 2024-09-10 deps: serve-static@0.16.0 Remove link renderization in html while redirecting deps: send@0.19.0 Remove link renderization in html while redirecting deps: body-parser@0.6.0 add depth option to customize the depth level in the parser IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity) Remove link renderization in html while using res.redirect deps: path-to-regexp@0.1.10 Adds support for named matching groups in the routes using a regex Adds backtracking protection to parameters without regexes defined deps: encodeurl@~2.0.0 Removes encoding of \, |, and ^ to align better with URL spec Deprecate passing options.maxAge and options.expires to res.clearCookie Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie 4.19.2 / 2024-03-25 Improved fix for open redirect allow list bypass 4.19.1 / 2024-03-20 Allow passing non-strings to res.location with new encoding handling checks 4.19.0 / 2024-03-20 Prevent open redirect allow list bypass due to encodeurl deps: cookie@0.6.0 4.18.3 / 2024-02-29 Fix routing requests without method deps: body-parser@1.20.2 Fix strict json error message on Node.js 19+ deps: content-type@~1.0.5 deps: raw-body@2.5.2 deps: cookie@0.6.0 Add partitioned option Commits 21df421 4.20.0 4c9ddc1 feat: upgrade to serve-static@0.16.0 9ebe5d5 feat: upgrade to send@0.19.0 (#5928) ec4a01b feat: upgrade to body-parser@1.20.3 (#5926) 54271f6 fix: don't render redirect values in anchor href 125bb74 path-to-regexp@0.1.10 (#5902) 2a980ad merge-descriptors@1.0.3 (#5781) a3e7e05 docs: specify new instructions for question and discuss c5addb9 deps: path-to-regexp@0.1.8 (#5603) e35380a docs: add @​IamLizu to the triage team (#5836) Additional commits viewable in compare view Maintainer changes This version was pushed to npm by ulisesgascon, a new releaser for express since your current version. Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot show ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

Open Graph Description: Bumps express from 4.18.2 to 4.20.0. Release notes Sourced from express's releases. 4.20.0 What's Changed Important IMPORTANT: The default depth level for parsing URL-encoded data is now...

X Description: Bumps express from 4.18.2 to 4.20.0. Release notes Sourced from express's releases. 4.20.0 What's Changed Important IMPORTANT: The default depth level for parsing URL-encoded dat...

Opengraph URL: https://github.com/cameri/nostream/pull/366

X: @github

direct link

Domain: patch-diff.githubusercontent.com

route-pattern/:user_id/:repository/pull/:id/checks(.:format)
route-controllerpull_requests
route-actionchecks
fetch-noncev2:af7bf781-2322-b8b8-f4a4-1d08d18b3930
current-catalog-service-hash87dc3bc62d9b466312751bfd5f889726f4f1337bdff4e8be7da7c93d6c00a25a
request-idBA0E:184509:32C2085:424E139:697D7A6D
html-safe-nonced6a29076348658565f5a88c8ea464886a521510bd4f3d1f6272148b2e2d24867
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCQTBFOjE4NDUwOTozMkMyMDg1OjQyNEUxMzk6Njk3RDdBNkQiLCJ2aXNpdG9yX2lkIjoiNTkyODc1NDE0Mzk5NTcyMjM0OSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmace5a6c95b0d36bc2c2e01b9f8ea0650b11471f0111834dac6c63e711d47bb58a4
hovercard-subject-tagpull_request:2075090801
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,checks,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/checks
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/cameri/nostream/pull/366/checks
twitter:imagehttps://avatars.githubusercontent.com/in/29110?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/in/29110?s=400&v=4
og:image:altBumps express from 4.18.2 to 4.20.0. Release notes Sourced from express's releases. 4.20.0 What's Changed Important IMPORTANT: The default depth level for parsing URL-encoded data is now...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None60279d4097367e16897439d16d6bbe4180663db828c666eeed2656988ffe59f6
turbo-cache-controlno-preview
go-importgithub.com/cameri/nostream git https://github.com/cameri/nostream.git
octolytics-dimension-user_id378886
octolytics-dimension-user_logincameri
octolytics-dimension-repository_id482383845
octolytics-dimension-repository_nwocameri/nostream
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id482383845
octolytics-dimension-repository_network_root_nwocameri/nostream
turbo-body-classeslogged-out env-production page-responsive full-width full-width-p-0
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release7c85641c598ad130c74f7bcc27f58575cac69551
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://patch-diff.githubusercontent.com/cameri/nostream/pull/366/checks#start-of-content
https://patch-diff.githubusercontent.com/
Sign in https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2Fcameri%2Fnostream%2Fpull%2F366%2Fchecks
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub SparkBuild and deploy intelligent appshttps://github.com/features/spark
GitHub ModelsManage and compare promptshttps://github.com/features/models
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2Fcameri%2Fnostream%2Fpull%2F366%2Fchecks
Sign up https://patch-diff.githubusercontent.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Fchecks&source=header-repo&source_repo=cameri%2Fnostream
Reloadhttps://patch-diff.githubusercontent.com/cameri/nostream/pull/366/checks
Reloadhttps://patch-diff.githubusercontent.com/cameri/nostream/pull/366/checks
Reloadhttps://patch-diff.githubusercontent.com/cameri/nostream/pull/366/checks
cameri https://patch-diff.githubusercontent.com/cameri
nostreamhttps://patch-diff.githubusercontent.com/cameri/nostream
Notifications https://patch-diff.githubusercontent.com/login?return_to=%2Fcameri%2Fnostream
Fork 201 https://patch-diff.githubusercontent.com/login?return_to=%2Fcameri%2Fnostream
Star 807 https://patch-diff.githubusercontent.com/login?return_to=%2Fcameri%2Fnostream
Code https://patch-diff.githubusercontent.com/cameri/nostream
Issues 68 https://patch-diff.githubusercontent.com/cameri/nostream/issues
Pull requests 11 https://patch-diff.githubusercontent.com/cameri/nostream/pulls
Actions https://patch-diff.githubusercontent.com/cameri/nostream/actions
Security 0 https://patch-diff.githubusercontent.com/cameri/nostream/security
Insights https://patch-diff.githubusercontent.com/cameri/nostream/pulse
Code https://patch-diff.githubusercontent.com/cameri/nostream
Issues https://patch-diff.githubusercontent.com/cameri/nostream/issues
Pull requests https://patch-diff.githubusercontent.com/cameri/nostream/pulls
Actions https://patch-diff.githubusercontent.com/cameri/nostream/actions
Security https://patch-diff.githubusercontent.com/cameri/nostream/security
Insights https://patch-diff.githubusercontent.com/cameri/nostream/pulse
Sign up for GitHub https://patch-diff.githubusercontent.com/signup?return_to=%2Fcameri%2Fnostream%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://patch-diff.githubusercontent.com/login?return_to=%2Fcameri%2Fnostream%2Fissues%2Fnew%2Fchoose
dependabothttps://patch-diff.githubusercontent.com/apps/dependabot
mainhttps://patch-diff.githubusercontent.com/cameri/nostream/tree/main
dependabot/npm_and_yarn/express-4.20.0https://patch-diff.githubusercontent.com/cameri/nostream/tree/dependabot/npm_and_yarn/express-4.20.0
Conversation 3 https://patch-diff.githubusercontent.com/cameri/nostream/pull/366
Commits 1 https://patch-diff.githubusercontent.com/cameri/nostream/pull/366/commits
Checks 0 https://patch-diff.githubusercontent.com/cameri/nostream/pull/366/checks
Files changed https://patch-diff.githubusercontent.com/cameri/nostream/pull/366/files
Please reload this pagehttps://patch-diff.githubusercontent.com/cameri/nostream/pull/366/checks
Please reload this pagehttps://patch-diff.githubusercontent.com/cameri/nostream/pull/366/checks
chore(deps): bump express from 4.18.2 to 4.20.0 https://patch-diff.githubusercontent.com/cameri/nostream/pull/366/checks#top
Please reload this pagehttps://patch-diff.githubusercontent.com/cameri/nostream/pull/366/checks
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.