Update Mend: high confidence minor and patch dependency updates #1

mend-for-github-com · 2023-10-19T00:32:48Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
async (source)	`2.0.0-rc.4` -> `2.6.4`
body-parser	`1.15.1` -> `1.20.2`
express (source)	`4.13.4` -> `4.18.2`
express-session	`1.13.0` -> `1.17.3`
grunt (source)	`1.0.1` -> `1.6.1`
grunt-cli	`1.2.0` -> `1.4.3`
underscore (source)	`1.8.3` -> `1.13.6`

Release Notes

caolan/async

Updated lodash to prevent npm audit warnings. (#1532, #1533)
Made async-es more optimized for webpack users (#1517)
Fixed a stack overflow with large collections and a synchronous iterator (#1514)
Various small fixes/chores (#1505, #1511, #1527, #1530)

`v2.6.0`

Compare Source

Added missing aliases for many methods. Previously, you could not (e.g.) require('async/find') or use async.anyLimit. (#1483)
Improved queue performance. (#1448, #1454)
Add missing sourcemap (#1452, #1453)
Various doc updates (#1448, #1471, #1483)

`v2.5.0`

Compare Source

Added concatLimit, the Limit equivalent of concat (#1426, #1430)
concat improvements: it now preserves order, handles falsy values and the iteratee callback takes a variable number of arguments (#1437, #1436)
Fixed an issue in queue where there was a size discrepancy between workersList().length and running() (#1428, #1429)
Various doc fixes (#1422, #1424)

`v2.4.1`

Compare Source

Fixed a bug preventing functions wrapped with timeout() from being re-used. (#1418, #1419)

`v2.4.0`

Compare Source

Added tryEach, for running async functions in parallel, where you only expect one to succeed. (#1365, #687)
Improved performance, most notably in parallel and waterfall (#1395)
Added queue.remove(), for removing items in a queue (#1397, #1391)
Fixed using eval, preventing Async from running in pages with Content Security Policy (#1404, #1403)
Fixed errors thrown in an asyncifyed function's callback being caught by the underlying Promise (#1408)
Fixed timing of queue.empty() (#1367)
Various doc fixes (#1314, #1394, #1412)

`v2.3.0`

Compare Source

Added support for ES2017 async functions. Wherever you can pass a Node-style/CPS function that uses a callback, you can also pass an async function. Previously, you had to wrap async functions with asyncify. The caveat is that it will only work if async functions are supported natively in your environment, transpiled implementations can't be detected. (#1386, #1390)
Small doc fix (#1392)

`v2.2.0`

Compare Source

Added groupBy, and the Series/Limit equivalents, analogous to _.groupBy (#1364)
Fixed transform bug when callback was not passed (#1381)
Added note about reflect to parallel docs (#1385)

`v2.1.5`

Compare Source

Fix auto bug when function names collided with Array.prototype (#1358)
Improve some error messages (#1349)
Avoid stack overflow case in queue
Fixed an issue in some, every and find where processing would continue after the result was determined.
Cleanup implementations of some, every and find

`v2.1.4`

Compare Source

`v2.1.2`

Compare Source

Fixed a stackoverflow bug with detect, some, every on large inputs (#1293).

`v2.1.1`

Compare Source

`v2.1.0`

Compare Source

retry and retryable now support an optional errorFilter function that determines if the task should retry on the error (#1256, #1261)
Optimized array iteration in race, cargo, queue, and priorityQueue (#1253)
Added alias documentation to doc site (#1251, #1254)
Added BootStrap scrollspy to docs to highlight in the sidebar the current method being viewed (#1289, #1300)
Various minor doc fixes (#1263, #1264, #1271, #1278, #1280, #1282, #1302)

`v2.0.1`

Compare Source

Significantly optimized all iteration based collection methods such as each, map, filter, etc (#1245, #1246, #1247).

`v2.0.0`

Compare Source

Lots of changes here!

First and foremost, we have a slick new site for docs. Special thanks to @hargasinski for his work converting our old docs to jsdoc format and implementing the new website. Also huge ups to @ivanseidel for designing our new logo. It was a long process for both of these tasks, but I think these changes turned out extraordinary well.

The biggest feature is modularization. You can now require("async/series") to only require the series function. Every Async library function is available this way. You still can require("async") to require the entire library, like you could do before.

We also provide Async as a collection of ES2015 modules. You can now import {each} from 'async-es' or import waterfall from 'async-es/waterfall'. If you are using only a few Async functions, and are using a ES bundler such as Rollup, this can significantly lower your build size.

Major thanks to @Kikobeats, @aearly and @megawac for doing the majority of the modularization work, as well as @jdalton and @Rich-Harris for advisory work on the general modularization strategy.

Another one of the general themes of the 2.0 release is standardization of what an "async" function is. We are now more strictly following the node-style continuation passing style. That is, an async function is a function that:

Takes a variable number of arguments
The last argument is always a callback
The callback can accept any number of arguments
The first argument passed to the callback will be treated as an error result, if the argument is truthy
Any number of result arguments can be passed after the "error" argument
The callback is called once and exactly once, either on the same tick or later tick of the JavaScript event loop.

There were several cases where Async accepted some functions that did not strictly have these properties, most notably auto, every, some, filter, reject and detect.

Another theme is performance. We have eliminated internal deferrals in all cases where they make sense. For example, in waterfall and auto, there was a setImmediate between each task -- these deferrals have been removed. A setImmediate call can add up to 1ms of delay. This might not seem like a lot, but it can add up if you are using many Async functions in the course of processing a HTTP request, for example. Nearly all asynchronous functions that do I/O already have some sort of deferral built in, so the extra deferral is unnecessary. The trade-off of this change is removing our built-in stack-overflow defense. Many synchronous callback calls in series can quickly overflow the JS call stack. If you do have a function that is sometimes synchronous (calling its callback on the same tick), and are running into stack overflows, wrap it with async.ensureAsync().

Another big performance win has been re-implementing queue, cargo, and priorityQueue with doubly linked lists instead of arrays. This has lead to queues being an order of magnitude faster on large sets of tasks.

New Features

Async is now modularized. Individual functions can be require()d from the main package. (require('async/auto')) (#984, #996)
Async is also available as a collection of ES2015 modules in the new async-es package. (import {forEachSeries} from 'async-es') (#984, #996)
Added race, analogous to Promise.race(). It will run an array of async tasks in parallel and will call its callback with the result of the first task to respond. (#568, #1038)
Collection methods now accept ES2015 iterators. Maps, Sets, and anything that implements the iterator spec can now be passed directly to each, map, parallel, etc.. (#579, #839, #1074)
Added mapValues, for mapping over the properties of an object and returning an object with the same keys. (#1157, #1177)
Added timeout, a wrapper for an async function that will make the task time-out after the specified time. (#1007, #1027)
Added reflect and reflectAll, analagous to Promise.reflect(), a wrapper for async tasks that always succeeds, by gathering results and errors into an object. (#942, #1012, #1095)
constant supports dynamic arguments -- it will now always use its last argument as the callback. (#1016, #1052)
setImmediate and nextTick now support arguments to partially apply to the deferred function, like the node-native versions do. (#940, #1053)
auto now supports resolving cyclic dependencies using Kahn's algorithm (#1140).
Added autoInject, a relative of auto that automatically spreads a task's dependencies as arguments to the task function. (#608, #1055, #1099, #1100)
You can now limit the concurrency of auto tasks. (#635, #637)
Added retryable, a relative of retry that wraps an async function, making it retry when called. (#1058)
retry now supports specifying a function that determines the next time interval, useful for exponential backoff, logging and other retry strategies. (#1161)
retry will now pass all of the arguments the task function was resolved with to the callback (#1231).
Added q.unsaturated -- callback called when a queue's number of running workers falls below a threshold. (#868, #1030, #1033, #1034)
Added q.error -- a callback called whenever a queue task calls its callback with an error. (#1170)
applyEach and applyEachSeries now pass results to the final callback. (#1088)

Breaking changes

Calling a callback more than once is considered an error, and an error will be thrown. This had an explicit breaking change in waterfall. If you were relying on this behavior, you should more accurately represent your control flow as an event emitter or stream. (#814, #815, #1048, #1050)
auto task functions now always take the callback as the last argument. If a task has dependencies, the results object will be passed as the first argument. To migrate old task functions, wrap them with _.flip (#1036, #1042)
Internal setImmediate calls have been refactored away. This may make existing flows vulnerable to stack overflows if you use many synchronous functions in series. Use ensureAsync to work around this. (#696, #704, #1049, #1050)
map used to return an object when iterating over an object. map now always returns an array, like in other libraries. The previous object behavior has been split out into mapValues. (#1157, #1177)
filter, reject, some, every, detect and their families like {METHOD}Series and {METHOD}Limit now expect an error as the first callback argument, rather than just a simple boolean. Pass null as the first argument, or use fs.access instead of fs.exists. (#118, #774, #1028, #1041)
{METHOD} and {METHOD}Series are now implemented in terms of {METHOD}Limit. This is a major internal simplification, and is not expected to cause many problems, but it does subtly affect how functions execute internally. (#778, #847)
retry's callback is now optional. Previously, omitting the callback would partially apply the function, meaning it could be passed directly as a task to series or auto. The partially applied "control-flow" behavior has been separated out into retryable. (#1054, #1058)
The test function for whilst, until, and during used to be passed non-error args from the iteratee function's callback, but this led to weirdness where the first call of the test function would be passed no args. We have made it so the test function is never passed extra arguments, and only the doWhilst, doUntil, and doDuring functions pass iteratee callback arguments to the test function (#1217, #1224)
The q.tasks array has been renamed q._tasks and is now implemented as a doubly linked list (DLL). Any code that used to interact with this array will need to be updated to either use the provided helpers or support DLLs (#1205).
The timing of the q.saturated() callback in a queue has been modified to better reflect when tasks pushed to the queue will start queueing. (#724, #1078)
Removed iterator method in favour of ES2015 iterator protocol which natively supports arrays (#1237)
Dropped support for Component, Jam, SPM, and Volo (#1175, ##176)

Bug Fixes

Improved handling of no dependency cases in auto & autoInject (#1147).
Fixed a bug where the callback generated by asyncify with Promises could resolve twice (#1197).
Fixed several documented optional callbacks not actually being optional (#1223).

Other

Added someSeries and everySeries for symmetry, as well as a complete set of any/anyLimit/anySeries and all//allLmit/allSeries aliases.
Added find as an alias for detect. (as well as findLimitandfindSeries`).
Various doc fixes (#1005, #1008, #1010, #1015, #1021, #1037, #1039, #1051, #1102, #1107, #1121, #1123, #1129, #1135, #1138, #1141, #1153, #1216, #1217, #1232, #1233, #1236, #1238)

Thank you @aearly and @megawac for taking the lead on version 2 of async.

Fix strict json error message on Node.js 19+
deps: content-type@~1.0.5
- perf: skip value escaping when unnecessary
deps: [email protected]

`v1.20.1`

Compare Source

===================

deps: [email protected]
perf: remove unnecessary object clone

`v1.20.0`

Compare Source

===================

Fix error message for json parse whitespace in strict
Fix internal error when inflated body exceeds limit
Prevent loss of async hooks context
Prevent hanging when request already read
deps: [email protected]
- Replace internal eval usage with Function constructor
- Use instance methods on process to check for listeners
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
deps: [email protected]
deps: [email protected]
- deps: [email protected]

`v1.19.2`

Compare Source

===================

deps: [email protected]
deps: [email protected]
- Fix handling of __proto__ keys
deps: [email protected]
- deps: [email protected]

`v1.19.1`

Compare Source

===================

deps: [email protected]
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
deps: type-is@~1.6.18

`v1.19.0`

Compare Source

===================

deps: [email protected]
- Add petabyte (pb) support
deps: [email protected]
- Set constructor name when possible
- deps: [email protected]
- deps: statuses@'>= 1.5.0 < 2'
deps: [email protected]
- Added encoding MIK
deps: [email protected]
- Fix parsing array brackets after index
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: type-is@~1.6.17
- deps: mime-types@~2.1.24
- perf: prevent internal throw on invalid type

`v1.18.3`

Compare Source

===================

Fix stack trace for strict json parse error
deps: depd@~1.1.2
- perf: remove argument reassignment
deps: http-errors@~1.6.3
- deps: depd@~1.1.2
- deps: [email protected]
- deps: statuses@'>= 1.3.1 < 2'
deps: [email protected]
- Fix loading encoding with year appended
- Fix deprecation warnings on Node.js 10+
deps: [email protected]
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: type-is@~1.6.16
- deps: mime-types@~2.1.18

`v1.18.2`

Compare Source

===================

deps: [email protected]
perf: remove argument reassignment

`v1.18.1`

Compare Source

===================

deps: content-type@~1.0.4
- perf: remove argument reassignment
- perf: skip parameter parsing when no parameters
deps: [email protected]
- Fix ISO-8859-1 regression
- Update Windows-1255
deps: [email protected]
- Fix parsing & compacting very deep objects
deps: [email protected]
- deps: [email protected]

`v1.18.0`

Compare Source

===================

Fix JSON strict violation error to match native parse error
Include the body property on verify errors
Include the type property on all generated errors
Use http-errors to set status code on errors
deps: [email protected]
deps: [email protected]
deps: depd@~1.1.1
- Remove unnecessary Buffer loading
deps: http-errors@~1.6.2
- deps: [email protected]
deps: [email protected]
- Add support for React Native
- Add a warning if not loaded as utf-8
- Fix CESU-8 decoding in Node.js 8
- Improve speed of ISO-8859-1 encoding
deps: [email protected]
deps: [email protected]
- Use http-errors for standard emitted errors
- deps: [email protected]
- deps: [email protected]
- perf: skip buffer decoding on overage chunk
perf: prevent internal throw when missing charset

`v1.17.2`

Compare Source

===================

deps: [email protected]
- Fix DEBUG_MAX_ARRAY_LENGTH
- deps: [email protected]
deps: type-is@~1.6.15
- deps: mime-types@~2.1.15

`v1.17.1`

Compare Source

===================

deps: [email protected]
- Fix regression parsing keys starting with [

`v1.17.0`

Compare Source

===================

deps: http-errors@~1.6.1
- Make message property enumerable for HttpErrors
- deps: [email protected]
deps: [email protected]
- Fix compacting nested arrays

`v1.16.1`

Compare Source

===================

deps: [email protected]
- Fix deprecation messages in WebStorm and other editors
- Undeprecate DEBUG_FD set to 1 or 2

`v1.16.0`

Compare Source

===================

deps: [email protected]
- Allow colors in workers
- Deprecated DEBUG_FD environment variable
- Fix error when running under React Native
- Use same color for same namespace
- deps: [email protected]
deps: http-errors@~1.5.1
- deps: [email protected]
- deps: [email protected]
- deps: statuses@'>= 1.3.1 < 2'
deps: [email protected]
- Added encoding MS-31J
- Added encoding MS-932
- Added encoding MS-936
- Added encoding MS-949
- Added encoding MS-950
- Fix GBK/GB18030 handling of Euro character
deps: [email protected]
- Fix array parsing from skipping empty values
deps: raw-body@~2.2.0
- deps: [email protected]
deps: type-is@~1.6.14
- deps: mime-types@~2.1.13

`v1.15.2`

Compare Source

===================

deps: [email protected]
deps: content-type@~1.0.2
- perf: enable strict mode
deps: http-errors@~1.5.0
- Use setprototypeof module to replace __proto__ setting
- deps: statuses@'>= 1.3.0 < 2'
- perf: enable strict mode
deps: [email protected]
deps: raw-body@~2.1.7
- deps: [email protected]
- perf: remove double-cleanup on happy path
deps: type-is@~1.6.13
- deps: mime-types@~2.1.11

expressjs/express

`v4.18.2`

Compare Source

===================

Fix regression routing a large stack in a single route
deps: [email protected]
- deps: [email protected]
- perf: remove unnecessary object clone
deps: [email protected]

`v4.18.1`

Compare Source

===================

Fix hanging on large stack of sync routes

`v4.18.0`

Compare Source

===================

Add "root" option to res.download
Allow options without filename in res.download
Deprecate string and non-integer arguments to res.status
Fix behavior of null/undefined as maxAge in res.cookie
Fix handling very large stacks of sync middleware
Ignore Object.prototype values in settings through app.set/app.get
Invoke default with same arguments as types in res.format
Support proper 205 responses using res.send
Use http-errors for res.format error
deps: [email protected]
- Fix error message for json parse whitespace in strict
- Fix internal error when inflated body exceeds limit
- Prevent loss of async hooks context
- Prevent hanging when request already read
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
- Add priority option
- Fix expires option to reject invalid dates
deps: [email protected]
- Replace internal eval usage with Function constructor
- Use instance methods on process to check for listeners
deps: [email protected]
- Remove set content headers that break response
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
- Prevent loss of async hooks context
deps: [email protected]
deps: [email protected]
- Fix emitted 416 error missing headers property
- Limit the headers removed for 304 response
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
- deps: [email protected]
deps: [email protected]
- Remove code 306
- Rename 425 Unordered Collection to standard 425 Too Early

`v4.17.3`

Compare Source

===================

deps: accepts@~1.3.8
- deps: mime-types@~2.1.34
- deps: [email protected]
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
deps: [email protected]
- Fix handling of __proto__ keys
pref: remove unnecessary regexp for trust proxy

`v4.17.2`

Compare Source

===================

Fix handling of undefined in res.jsonp
Fix handling of undefined when "json escape" is enabled
Fix incorrect middleware execution with unanchored RegExps
Fix res.jsonp(obj, status) deprecation message
Fix typo in res.is JSDoc
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: type-is@~1.6.18
deps: [email protected]
- deps: [email protected]
deps: [email protected]
- Fix maxAge option to reject invalid values
deps: proxy-addr@~2.0.7
- Use req.socket over deprecated req.connection
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
deps: [email protected]
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- pref: ignore empty http tokens
deps: [email protected]
- deps: [email protected]
deps: [email protected]

`v4.17.1`

Compare Source

===================

Revert "Improve error message for null/undefined to res.status"

`v4.17.0`

Compare Source

===================

Add express.raw to parse bodies into Buffer
Add express.text to parse bodies into string
Improve error message for non-strings to res.sendFile
Improve error message for null/undefined to res.status
Support multiple hosts in X-Forwarded-Host
deps: accepts@~1.3.7
deps: [email protected]
- Add encoding MIK
- Add petabyte (pb) support
- Fix parsing array brackets after index
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: type-is@~1.6.17
deps: [email protected]
deps: [email protected]
- Add SameSite=None support
deps: finalhandler@~1.1.2
- Set stricter Content-Security-Policy header
- deps: parseurl@~1.3.3
- deps: statuses@~1.5.0
deps: parseurl@~1.3.3
deps: proxy-addr@~2.0.5
- deps: [email protected]
deps: [email protected]
- Fix parsing array brackets after index
deps: range-parser@~1.2.1
deps: [email protected]
- Set stricter CSP header in redirect & error responses
- deps: http-errors@~1.7.2
- deps: [email protected]
- deps: [email protected]
- deps: range-parser@~1.2.1
- deps: statuses@~1.5.0
- perf: remove redundant path.normalize call
deps: [email protected]
- Set stricter CSP header in redirect response
- deps: parseurl@~1.3.3
- deps: [email protected]
deps: [email protected]
deps: statuses@~1.5.0
- Add 103 Early Hints
deps: type-is@~1.6.18
- deps: mime-types@~2.1.24
- perf: prevent internal throw on invalid type

`v4.16.4`

Compare Source

===================

Fix issue where "Request aborted" may be logged in res.sendfile
Fix JSDoc for Router constructor
deps: [email protected]
- Fix deprecation warnings on Node.js 10+
- Fix stack trace for strict json parse error
- deps: depd@~1.1.2
- deps: http-errors@~1.6.3
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: type-is@~1.6.16
deps: proxy-addr@~2.0.4
- deps: [email protected]
deps: [email protected]
deps: [email protected]

`v4.16.3`

Compare Source

===================

deps: accepts@~1.3.5
- deps: mime-types@~2.1.18
deps: depd@~1.1.2
- perf: remove argument reassignment
deps: encodeurl@~1.0.2
- Fix encoding % as last character
deps: [email protected]
- Fix 404 output for bad / missing pathnames
- deps: encodeurl@~1.0.2
- deps: statuses@~1.4.0
deps: proxy-addr@~2.0.3
- deps: [email protected]
deps: [email protected]
- Fix incorrect end tag in default error & redirects
- deps: depd@~1.1.2
- deps: encodeurl@~1.0.2
- deps: statuses@~1.4.0
deps: [email protected]
- Fix incorrect end tag in redirects
- deps: encodeurl@~1.0.2
- deps: [email protected]
deps: statuses@~1.4.0
deps: type-is@~1.6.16
- deps: mime-types@~2.1.18

`v4.16.2`

Compare Source

===================

Fix TypeError in res.send when given Buffer and ETag header set
perf: skip parsing of entire X-Forwarded-Proto header

`v4.16.1`

Compare Source

===================

deps: [email protected]
deps: [email protected]
- Fix regression when root is incorrectly set to a file
- deps: [email protected]

`v4.16.0`

Compare Source

===================

Add "json escape" setting for res.json and res.jsonp
Add express.json and express.urlencoded to parse bodies
Add options argument to res.download
Improve error message when autoloading invalid view engine
Improve error messages when non-function provided as middleware
Skip Buffer encoding when not generating ETag for small response
Use safe-buffer for improved Buffer API
deps: accepts@~1.3.4
- deps: mime-types@~2.1.16
deps: content-type@~1.0.4
- perf: remove argument reassignment
- perf: skip parameter parsing when no parameters
deps: etag@~1.8.1
- perf: replace regular expression with substring
deps: [email protected]
- Use res.headersSent when available
deps: parseurl@~1.3.2
- perf: reduce overhead for full URLs
- perf: unroll the "fast-path" RegExp
deps: proxy-addr@~2.0.2
- Fix trimming leading / trailing OWS in X-Forwarded-For
- deps: forwarded@~0.1.2
- deps: [email protected]
- perf: reduce overhead when no X-Forwarded-For header
deps: [email protected]
- Fix parsing & compacting very deep objects
deps: [email protected]
- Add 70 new types for file extensions
- Add immutable option
- Fix missing </html> in default error & redirects
- Set charset as "UTF-8" for .js and .json
- Use instance methods on steam to check for listeners
- deps: [email protected]
- perf: improve path validation speed
deps: [email protected]
- Add 70 new types for file extensions
- Add immutable option
- Set charset as "UTF-8" for .js and .json
- deps: [email protected]
deps: [email protected]
deps: [email protected]
deps: vary@~1.1.2
- perf: improve header token parsing speed
perf: re-use options object when generating ETags
perf: remove dead .charset set in res.jsonp

`v4.15.5`

Compare Source

===================

deps: [email protected]
deps: finalhandler@~1.0.6
- deps: [email protected]
- deps: parseurl@~1.3.2
deps: [email protected]
- Fix handling of modified headers with invalid dates
- perf: improve ETag match loop
- perf: improve If-None-Match token parsing
deps: [email protected]
- Fix handling of modified headers with invalid dates
- deps: [email protected]
- deps: etag@~1.8.1
- deps: [email protected]
- perf: improve If-Match token parsing
deps: [email protected]
- deps: parseurl@~1.3.2
- deps: [email protected]
- perf: improve slash collapsing

`v4.15.4`

Compare Source

===================

deps: [email protected]
deps: depd@~1.1.1
- Remove unnecessary Buffer loading
deps: finalhandler@~1.0.4
- deps: [email protected]
deps: proxy-addr@~1.1.5
- Fix array argument being altered
- deps: [email protected]
deps: [email protected]
deps: [email protected]
- deps: [email protected]
- deps: depd@~1.1.1
- deps: http-errors@~1.6.2
deps: [email protected]
- deps: [email protected]

`v4.15.3`

Compare Source

===================

Fix error when res.set cannot add charset to Content-Type
deps: [email protected]
- Fix DEBUG_MAX_ARRAY_LENGTH
- deps: [email protected]
deps: finalhandler@~1.0.3
- Fix missing </html> in HTML document
- deps: [email protected]
deps: proxy-addr@~1.1.4
- deps: [email protected]
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
- deps: [email protected]
deps: type-is@~1.6.15
- deps: mime-types@~2.1.15
deps: vary@~1.1.1
- perf: hoist regular expression

`v4.15.2`

Compare Source

===================

deps: [email protected]
- Fix regression parsing keys starting with [

`v4.15.1`

Compare Source

===================

deps: [email protected]
- Fix issue when Date.parse does not return NaN on invalid date
- Fix strict violation in broken environments
deps: [email protected]
- Fix issue when Date.parse does not return NaN on invalid date
- deps: [email protected]

`v4.15.0`

Compare Source

===================

Add debug message when loading view engine
Add next("router") to exit from router
Fix case where router.use skipped requests routes did not
Remove usage of res._headers private field
- Improves compatibility with Node.js 8 nightly
Skip routing when req.url is not set
Use %o in path debug to tell types apart
Use Object.create to setup request & response prototypes
Use setprototypeof module to replace __proto__ setting
Use statuses instead of http module for status messages
deps: [email protected]
- Allow colors in workers
- Deprecated DEBUG_FD environment variable set to 3 or higher
- Fix error when running under React Native
- Use same color for same namespace
- deps: [email protected]
deps: etag@~1.8.0
- Use SHA1 instead of MD5 for ETag hashing
- Works with FIPS 140-2 OpenSSL configuration
deps: finalhandler@~1.0.0
- Fix exception when err cannot be converted to a string
- Fully URL-encode the pathname in the 404
- Only include the pathname in the 404 message
- Send complete HTML document
- Set Content-Security-Policy: default-src 'self' header
- deps: [email protected]
deps: [email protected]
- Fix false detection of no-cache request directive
- Fix incorrect result when If-None-Match has both * and ETags
- Fix weak ETag matching to match spec
- perf: delay reading header values until needed
- perf: enable strict mode
- perf: hoist regular expressions
- perf: remove duplicate conditional
- perf: remove unnecessary boolean coercions
- perf: skip checking modified time if ETag check failed
- perf: skip parsing If-None-Match when no ETag header
- perf: use Date.parse instead of new Date
deps: [email protected]
- Fix array parsing from skipping empty values
- Fix compacting nested arrays
deps: [email protected]
- Fix false detection of no-cache request directive
- Fix incorrect result when If-None-Match has both * and ETags
- Fix weak ETag matching to match spec
- Remove usage of res._headers private field
- Support If-Match and If-Unmodified-Since headers
- Use res.getHeaderNames() when available
- Use res.headersSent when available
- deps: [email protected]
- deps: etag@~1.8.0
- deps: [email protected]
- deps: http-errors@~1.6.1
deps: [email protected]
- Fix false detection of no-cache request directive
- Fix incorrect result when If-None-Match has both * and ETags
- Fix weak ETag matching to match spec
- Remove usage of res._headers private field
- Send complete HTML document in redirect response
- Set default CSP header in redirect response
- Support If-Match and If-Unmodified-Since headers
- Use res.getHeaderNames() when available
- Use res.headersSent when available
- deps: [email protected]
perf: add fast match path for * route
perf: improve req.ips performance

`v4.14.1`

Compare Source

===================

deps: [email protected]
deps: [email protected]
- Fix exception when err.headers is not an object
- deps: statuses@~1.3.1
- perf: hoist regular expressions
- perf: remove duplicate validation path
deps: proxy-addr@~1.1.3
- deps: [email protected]
deps: [email protected]
- deps: http-errors@~1.5.1
- deps: [email protected]
- deps: statuses@~1.3.1
deps: serve-static@~1.11.2
- deps: [email protected]
deps: type-is@~1.6.14
- deps: mime-types@~2.1.13

`v4.14.0`

Compare Source

===================

Add acceptRanges option to res.sendFile/res.sendfile
Add cacheControl option to res.sendFile/res.sendfile
Add options argument to req.range
- Includes the combine option
Encode URL in res.location/res.redirect if not already encoded
Fix some redirect handling in res.sendFile/res.sendfile
Fix Windows absolute path check using forward slashes
Improve error with invalid arguments to req.get()
Improve performance for res.json/res.jsonp in most cases
Improve Range header handling in res.sendFile/res.sendfile
deps: accepts@~1.3.3
- Fix including type extensions in parameters in Accept parsing
- Fix parsing Accept parameters with quoted equals
- Fix parsing Accept parameters with quoted semicolons
- Many performance improvements
- deps: mime-types@~2.1.11
- deps: [email protected]
deps: content-type@~1.0.2
- perf: enable strict mode
deps: [email protected]
- Add sameSite option
- Fix cookie Max-Age to never be a floating point number
- Improve error message when encode is not a function
- Improve error message when expires is not a Date
- Throw better error for invalid argument to parse
- Throw on invalid values provided to serialize
- perf: enable strict mode
- perf: hoist regular expression
- perf: use for loop in parse
- perf: use string concatenation for serialization
deps: [email protected]
- Change invalid or non-numeric status code to 500
- Overwrite status message to match set status code
- Prefer err.statusCode if err.status is invalid
- Set response headers from err.headers object
- Use statuses instead of http module for status messages
deps: proxy-addr@~1.1.2
- Fix accepting various invalid netmasks
- Fix IPv6-mapped IPv4 validation edge cases
- IPv4 netmasks must be contiguous
- IPv6 addresses cannot be used as a netmask
- deps: [email protected].

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

Update Mend: high confidence minor and patch dependency updates

853d69c

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update Mend: high confidence minor and patch dependency updates #1

Update Mend: high confidence minor and patch dependency updates #1

mend-for-github-com bot commented Oct 19, 2023

Update Mend: high confidence minor and patch dependency updates #1

Are you sure you want to change the base?

Update Mend: high confidence minor and patch dependency updates #1

Conversation

mend-for-github-com bot commented Oct 19, 2023

Release Notes

New Features

Breaking changes

Bug Fixes

Other

Configuration