Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Mar 5, 2023

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@types/node (source) 22.8.222.19.7 age confidence devDependencies minor
cors 2.8.52.8.6 age confidence dependencies patch
craicoverflow/install-git-chglog 6d338c1fd5ace9 action digest
express (source) 4.18.24.22.1 age confidence dependencies minor
node 16.3.016.20.2 age confidence uses-with minor
node 22.10.0-alpine22.22.0-alpine age confidence final minor
openapi-backend (source) 5.8.15.15.0 age confidence dependencies minor
peter-evans/create-pull-request (changelog) 432004122a9089 action digest
rlespinasse/github-slug-action 4bf56f06f7a8d2 action digest
semver 7.3.87.7.3 age confidence devDependencies minor
typescript (source) 5.0.25.9.3 age confidence devDependencies minor
wait-on 8.0.08.0.5 age confidence devDependencies patch
yargs (source) 17.7.117.7.2 age confidence dependencies patch

Release Notes

expressjs/cors (cors)

v2.8.6

Compare Source

==================

  • Improve documentation (API, context, examples...)
  • Remove additional markdown files from tarball
expressjs/express (express)

v4.22.1

Compare Source

v4.22.0

Compare Source

v4.21.2

Compare Source

What's Changed

Full Changelog: expressjs/express@4.21.1...4.21.2

v4.21.1

Compare Source

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

v4.21.0

Compare Source

What's Changed

New Contributors

Full Changelog: expressjs/express@4.20.0...4.21.0

v4.20.0

Compare Source

==========

  • deps: serve-static@​0.16.0
    • Remove link renderization in html while redirecting
  • deps: send@​0.19.0
    • Remove link renderization in html while redirecting
  • deps: body-parser@​0.6.0
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: path-to-regexp@​0.1.10
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

v4.19.2

Compare Source

==========

  • Improved fix for open redirect allow list bypass

v4.19.1

Compare Source

==========

  • Allow passing non-strings to res.location with new encoding handling checks

v4.19.0

Compare Source

==========

  • Prevent open redirect allow list bypass due to encodeurl
  • deps: cookie@​0.6.0

v4.18.3

Compare Source

==========

  • Fix routing requests without method
  • deps: body-parser@​1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@​2.5.2
  • deps: cookie@​0.6.0
    • Add partitioned option
actions/node-versions (node)

v16.20.2: 16.20.2

Compare Source

Node.js 16.20.2

v16.20.1: 16.20.1

Compare Source

Node.js 16.20.1

v16.20.0: 16.20.0

Compare Source

Node.js 16.20.0

v16.19.1: 16.19.1

Compare Source

Node.js 16.19.1

v16.19.0: 16.19.0

Compare Source

Node.js 16.19.0

v16.18.1: 16.18.1

Compare Source

Node.js 16.18.1

v16.18.0: 16.18.0

Compare Source

Node.js 16.18.0

v16.17.1: 16.17.1

Compare Source

Node.js 16.17.1

v16.17.0: 16.17.0

Compare Source

Node.js 16.17.0

v16.16.0: 16.16.0

Compare Source

Node.js 16.16.0

v16.15.1: 16.15.1

Compare Source

Node.js 16.15.1

v16.15.0: 16.15.0

Compare Source

Node.js 16.15.0

v16.14.2: 16.14.2

Compare Source

Node.js 16.14.2

v16.14.1: 16.14.1

Compare Source

Node.js 16.14.1

v16.14.0: 16.14.0

Compare Source

Node.js 16.14.0

v16.13.2: 16.13.2

Compare Source

Node.js 16.13.2

v16.13.1: 16.13.1

Compare Source

Node.js 16.13.1

v16.13.0: 16.13.0

Compare Source

Node.js 16.13.0

v16.12.0: 16.12.0

Compare Source

Node.js 16.12.0

v16.11.1: 16.11.1

Compare Source

Node.js 16.11.1

v16.11.0: 16.11.0

Compare Source

Node.js 16.11.0

v16.10.0: 16.10.0

Compare Source

Node.js 16.10.0

v16.9.1: 16.9.1

Compare Source

Node.js 16.9.1

v16.9.0: 16.9.0

Compare Source

Node.js 16.9.0

v16.8.0: 16.8.0

Compare Source

Node.js 16.8.0

v16.7.0: 16.7.0

Compare Source

Node.js 16.7.0

v16.6.2: 16.6.2

Compare Source

Node.js 16.6.2

v16.6.1: 16.6.1

Compare Source

Node.js 16.6.1

v16.6.0: 16.6.0

Compare Source

Node.js 16.6.0

v16.5.0: 16.5.0

Compare Source

Node.js 16.5.0

v16.4.2: 16.4.2

Compare Source

Node.js 16.4.2

v16.4.1: 16.4.1

Compare Source

Node.js 16.4.1

v16.4.0: 16.4.0

Compare Source

Node.js 16.4.0

nodejs/node (node)

v22.22.0: 2026-01-13, Version 22.22.0 'Jod' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes

lib:

  • (CVE-2025-59465) add TLSSocket default error handler
  • (CVE-2025-55132) disable futimes when permission model is enabled
    lib,permission:
  • (CVE-2025-55130) require full read and write to symlink APIs
    src:
  • (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks
    src,lib:
  • (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle
    tls:
  • (CVE-2026-21637) route callback exceptions through error handlers
Commits

v22.21.1: 2025-10-28, Version 22.21.1 'Jod' (LTS), @​aduh95

Compare Source

Commits

v22.21.0: 2025-10-20, Version 22.21.0 'Jod' (LTS), @​aduh95

Compare Source

Notable Changes
  • [1486fedea1] - (SEMVER-MINOR) cli: add --use-env-proxy (Joyee Cheung) #​59151
  • [bedaaa11fc] - (SEMVER-MINOR) http: support http proxy for fetch under NODE_USE_ENV_PROXY (Joyee Cheung) #​57165
  • [af8b5fa29d] - (SEMVER-MINOR) http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry) #​59824
  • [42102594b1] - (SEMVER-MINOR) http,https: add built-in proxy support in http/https.request and Agent (Joyee Cheung) #​58980
  • [686ac49b82] - (SEMVER-MINOR) src: add percentage support to --max-old-space-size (Asaf Federman) #​59082
Commits

v22.20.0: 2025-09-24, Version 22.20.0 'Jod' (LTS), @​richardlau

Compare Source

Notable Changes
OpenSSL updated to 3.5.2

For official Node.js builds, or builds using the default build configuration, Node.js now bundles OpenSSL 3.5.2. This update allows Node.js 22.x to be supported through to the planned End-of-Life date of 2027-04-30 as the previously bundled OpenSSL 3.0.x goes out of support in September 2026.

This change does not affect third-party builds of Node.js that link to an external OpenSSL (or OpenSSL-compatible) library.

Other notable changes
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/shared-components-packages branch from 5abdc36 to 0127713 Compare March 9, 2023 21:29
@renovate renovate bot changed the title fix(deps): update dependency openapi-backend to v5.9.1 chore(deps): update shared components packages Mar 9, 2023
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 7 times, most recently from e6b9d4e to d2f13ad Compare March 17, 2023 19:21
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 9 times, most recently from d2075e2 to 73c940f Compare March 26, 2023 03:11
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 5 times, most recently from f26d0f0 to 085ea1f Compare March 31, 2023 08:49
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 3 times, most recently from fade5a0 to 8d9f324 Compare April 11, 2023 00:26
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 4 times, most recently from c2c477c to bc2c4c9 Compare April 21, 2023 05:06
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 3 times, most recently from 5f3141b to 4f15805 Compare October 7, 2025 18:27
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 3 times, most recently from f56aeee to ddd36cb Compare October 11, 2025 16:33
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 5 times, most recently from e815c51 to bd0d54f Compare October 22, 2025 11:39
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 3 times, most recently from 1fb409f to c450a55 Compare November 3, 2025 01:59
@renovate renovate bot force-pushed the renovate/shared-components-packages branch from c450a55 to 485e9f5 Compare November 12, 2025 04:44
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 2 times, most recently from 3c8d97f to 8b86eab Compare November 26, 2025 00:58
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 4 times, most recently from 64bccec to 245e5a1 Compare December 5, 2025 21:51
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 2 times, most recently from 8c3892d to f3b1d3e Compare December 14, 2025 01:11
@renovate renovate bot force-pushed the renovate/shared-components-packages branch 5 times, most recently from 42cc1be to 8d7e761 Compare January 15, 2026 21:58
@renovate renovate bot force-pushed the renovate/shared-components-packages branch from 8d7e761 to c450092 Compare January 22, 2026 16:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants