ci: bump the npm_and_yarn group across 7 directories with 1 update by dependabot[bot] · Pull Request #717 · archetech/archon

dependabot · 2026-07-10T19:53:06Z

Bumps the npm_and_yarn group with 1 update in the /services/mediators/ethereum-wallet directory: morgan.
Bumps the npm_and_yarn group with 1 update in the /services/mediators/filecoin-wallet directory: morgan.
Bumps the npm_and_yarn group with 1 update in the /services/mediators/lightning directory: morgan.
Bumps the npm_and_yarn group with 1 update in the /services/mediators/satoshi-wallet directory: morgan.
Bumps the npm_and_yarn group with 1 update in the /services/mediators/solana-wallet directory: morgan.
Bumps the npm_and_yarn group with 1 update in the /services/mediators/zcash directory: morgan.
Bumps the npm_and_yarn group with 1 update in the /services/mediators/zcash-wallet directory: morgan.

Updates morgan from 1.10.1 to 1.11.0

Release notes

Sourced from morgan's releases.

1.11.0

What's Changed

feat: add :pid token by @ganesh3367 in expressjs/morgan#329

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

New Contributors

@inigomarquinez made their first contribution in expressjs/morgan#291

@jonchurch made their first contribution in expressjs/morgan#299

@bjohansebas made their first contribution in expressjs/morgan#301

@UlisesGascon made their first contribution in expressjs/morgan#300

@ctcpip made their first contribution in expressjs/morgan#319

@ganesh3367 made their first contribution in expressjs/morgan#329

Full Changelog: expressjs/morgan@1.10.0...1.11.0

Changelog

Sourced from morgan's changelog.

1.11.0 / 2026-06-02

add :pid token

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

Commits

e0e6f17 Release 1.11.0 (#350)
b3f5d9b Merge commit from fork
203c758 build(deps): bump github/codeql-action from 4.32.4 to 4.35.2 (#346)
002bc81 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#347)
561b0d7 build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 (#338)
2db705e build(deps): bump github/codeql-action from 3.29.7 to 4.32.4 (#337)
a373c5f build(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.3 (#327)
c8e72fa build(deps): bump actions/checkout from 4.1.1 to 6.0.1 (#324)
023300e build(deps): bump actions/upload-artifact from 4.3.1 to 4.6.2 (#307)
9d8d6c0 build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#306)
Additional commits viewable in compare view

Updates morgan from 1.10.1 to 1.11.0

Release notes

Sourced from morgan's releases.

1.11.0

What's Changed

feat: add :pid token by @ganesh3367 in expressjs/morgan#329

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

New Contributors

@inigomarquinez made their first contribution in expressjs/morgan#291

@jonchurch made their first contribution in expressjs/morgan#299

@bjohansebas made their first contribution in expressjs/morgan#301

@UlisesGascon made their first contribution in expressjs/morgan#300

@ctcpip made their first contribution in expressjs/morgan#319

@ganesh3367 made their first contribution in expressjs/morgan#329

Full Changelog: expressjs/morgan@1.10.0...1.11.0

Changelog

Sourced from morgan's changelog.

1.11.0 / 2026-06-02

add :pid token

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

Commits

e0e6f17 Release 1.11.0 (#350)
b3f5d9b Merge commit from fork
203c758 build(deps): bump github/codeql-action from 4.32.4 to 4.35.2 (#346)
002bc81 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#347)
561b0d7 build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 (#338)
2db705e build(deps): bump github/codeql-action from 3.29.7 to 4.32.4 (#337)
a373c5f build(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.3 (#327)
c8e72fa build(deps): bump actions/checkout from 4.1.1 to 6.0.1 (#324)
023300e build(deps): bump actions/upload-artifact from 4.3.1 to 4.6.2 (#307)
9d8d6c0 build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#306)
Additional commits viewable in compare view

Updates morgan from 1.10.1 to 1.11.0

Release notes

Sourced from morgan's releases.

1.11.0

What's Changed

feat: add :pid token by @ganesh3367 in expressjs/morgan#329

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

New Contributors

@inigomarquinez made their first contribution in expressjs/morgan#291

@jonchurch made their first contribution in expressjs/morgan#299

@bjohansebas made their first contribution in expressjs/morgan#301

@UlisesGascon made their first contribution in expressjs/morgan#300

@ctcpip made their first contribution in expressjs/morgan#319

@ganesh3367 made their first contribution in expressjs/morgan#329

Full Changelog: expressjs/morgan@1.10.0...1.11.0

Changelog

Sourced from morgan's changelog.

1.11.0 / 2026-06-02

add :pid token

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

Commits

e0e6f17 Release 1.11.0 (#350)
b3f5d9b Merge commit from fork
203c758 build(deps): bump github/codeql-action from 4.32.4 to 4.35.2 (#346)
002bc81 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#347)
561b0d7 build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 (#338)
2db705e build(deps): bump github/codeql-action from 3.29.7 to 4.32.4 (#337)
a373c5f build(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.3 (#327)
c8e72fa build(deps): bump actions/checkout from 4.1.1 to 6.0.1 (#324)
023300e build(deps): bump actions/upload-artifact from 4.3.1 to 4.6.2 (#307)
9d8d6c0 build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#306)
Additional commits viewable in compare view

Updates morgan from 1.10.1 to 1.11.0

Release notes

Sourced from morgan's releases.

1.11.0

What's Changed

feat: add :pid token by @ganesh3367 in expressjs/morgan#329

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

New Contributors

@inigomarquinez made their first contribution in expressjs/morgan#291

@jonchurch made their first contribution in expressjs/morgan#299

@bjohansebas made their first contribution in expressjs/morgan#301

@UlisesGascon made their first contribution in expressjs/morgan#300

@ctcpip made their first contribution in expressjs/morgan#319

@ganesh3367 made their first contribution in expressjs/morgan#329

Full Changelog: expressjs/morgan@1.10.0...1.11.0

Changelog

Sourced from morgan's changelog.

1.11.0 / 2026-06-02

add :pid token

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

Commits

e0e6f17 Release 1.11.0 (#350)
b3f5d9b Merge commit from fork
203c758 build(deps): bump github/codeql-action from 4.32.4 to 4.35.2 (#346)
002bc81 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#347)
561b0d7 build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 (#338)
2db705e build(deps): bump github/codeql-action from 3.29.7 to 4.32.4 (#337)
a373c5f build(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.3 (#327)
c8e72fa build(deps): bump actions/checkout from 4.1.1 to 6.0.1 (#324)
023300e build(deps): bump actions/upload-artifact from 4.3.1 to 4.6.2 (#307)
9d8d6c0 build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#306)
Additional commits viewable in compare view

Updates morgan from 1.10.1 to 1.11.0

Release notes

Sourced from morgan's releases.

1.11.0

What's Changed

feat: add :pid token by @ganesh3367 in expressjs/morgan#329

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

New Contributors

@inigomarquinez made their first contribution in expressjs/morgan#291

@jonchurch made their first contribution in expressjs/morgan#299

@bjohansebas made their first contribution in expressjs/morgan#301

@UlisesGascon made their first contribution in expressjs/morgan#300

@ctcpip made their first contribution in expressjs/morgan#319

@ganesh3367 made their first contribution in expressjs/morgan#329

Full Changelog: expressjs/morgan@1.10.0...1.11.0

Changelog

Sourced from morgan's changelog.

1.11.0 / 2026-06-02

add :pid token

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

Commits

e0e6f17 Release 1.11.0 (#350)
b3f5d9b Merge commit from fork
203c758 build(deps): bump github/codeql-action from 4.32.4 to 4.35.2 (#346)
002bc81 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#347)
561b0d7 build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 (#338)
2db705e build(deps): bump github/codeql-action from 3.29.7 to 4.32.4 (#337)
a373c5f build(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.3 (#327)
c8e72fa build(deps): bump actions/checkout from 4.1.1 to 6.0.1 (#324)
023300e build(deps): bump actions/upload-artifact from 4.3.1 to 4.6.2 (#307)
9d8d6c0 build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#306)
Additional commits viewable in compare view

Updates morgan from 1.10.1 to 1.11.0

Release notes

Sourced from morgan's releases.

1.11.0

What's Changed

feat: add :pid token by @ganesh3367 in expressjs/morgan#329

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

New Contributors

@inigomarquinez made their first contribution in expressjs/morgan#291

@jonchurch made their first contribution in expressjs/morgan#299

@bjohansebas made their first contribution in expressjs/morgan#301

@UlisesGascon made their first contribution in expressjs/morgan#300

@ctcpip made their first contribution in expressjs/morgan#319

@ganesh3367 made their first contribution in expressjs/morgan#329

Full Changelog: expressjs/morgan@1.10.0...1.11.0

Changelog

Sourced from morgan's changelog.

1.11.0 / 2026-06-02

add :pid token

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

Commits

e0e6f17 Release 1.11.0 (#350)
b3f5d9b Merge commit from fork
203c758 build(deps): bump github/codeql-action from 4.32.4 to 4.35.2 (#346)
002bc81 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#347)
561b0d7 build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 (#338)
2db705e build(deps): bump github/codeql-action from 3.29.7 to 4.32.4 (#337)
a373c5f build(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.3 (#327)
c8e72fa build(deps): bump actions/checkout from 4.1.1 to 6.0.1 (#324)
023300e build(deps): bump actions/upload-artifact from 4.3.1 to 4.6.2 (#307)
9d8d6c0 build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#306)
Additional commits viewable in compare view

Updates morgan from 1.10.1 to 1.11.0

Release notes

Sourced from morgan's releases.

1.11.0

What's Changed

feat: add :pid token by @ganesh3367 in expressjs/morgan#329

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

New Contributors

@inigomarquinez made their first contribution in expressjs/morgan#291

@jonchurch made their first contribution in expressjs/morgan#299

@bjohansebas made their first contribution in expressjs/morgan#301

@UlisesGascon made their first contribution in expressjs/morgan#300

@ctcpip made their first contribution in expressjs/morgan#319

@ganesh3367 made their first contribution in expressjs/morgan#329

Full Changelog: expressjs/morgan@1.10.0...1.11.0

Changelog

Sourced from morgan's changelog.

1.11.0 / 2026-06-02

add :pid token

Security Fix:

Escape control characters in :remote-user token to prevent log injection

Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

Commits

e0e6f17 Release 1.11.0 (#350)
b3f5d9b Merge commit from fork
203c758 build(deps): bump github/codeql-action from 4.32.4 to 4.35.2 (#346)
002bc81 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#347)
561b0d7 build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 (#338)
2db705e build(deps): bump github/codeql-action from 3.29.7 to 4.32.4 (#337)
a373c5f build(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.3 (#327)
c8e72fa build(deps): bump actions/checkout from 4.1.1 to 6.0.1 (#324)
023300e build(deps): bump actions/upload-artifact from 4.3.1 to 4.6.2 (#307)
9d8d6c0 build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#306)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 1 update in the /services/mediators/ethereum-wallet directory: [morgan](https://github.com/expressjs/morgan). Bumps the npm_and_yarn group with 1 update in the /services/mediators/filecoin-wallet directory: [morgan](https://github.com/expressjs/morgan). Bumps the npm_and_yarn group with 1 update in the /services/mediators/lightning directory: [morgan](https://github.com/expressjs/morgan). Bumps the npm_and_yarn group with 1 update in the /services/mediators/satoshi-wallet directory: [morgan](https://github.com/expressjs/morgan). Bumps the npm_and_yarn group with 1 update in the /services/mediators/solana-wallet directory: [morgan](https://github.com/expressjs/morgan). Bumps the npm_and_yarn group with 1 update in the /services/mediators/zcash directory: [morgan](https://github.com/expressjs/morgan). Bumps the npm_and_yarn group with 1 update in the /services/mediators/zcash-wallet directory: [morgan](https://github.com/expressjs/morgan). Updates `morgan` from 1.10.1 to 1.11.0 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.10.1...1.11.0) Updates `morgan` from 1.10.1 to 1.11.0 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.10.1...1.11.0) Updates `morgan` from 1.10.1 to 1.11.0 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.10.1...1.11.0) Updates `morgan` from 1.10.1 to 1.11.0 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.10.1...1.11.0) Updates `morgan` from 1.10.1 to 1.11.0 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.10.1...1.11.0) Updates `morgan` from 1.10.1 to 1.11.0 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.10.1...1.11.0) Updates `morgan` from 1.10.1 to 1.11.0 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.10.1...1.11.0) --- updated-dependencies: - dependency-name: morgan dependency-version: 1.11.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: morgan dependency-version: 1.11.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: morgan dependency-version: 1.11.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: morgan dependency-version: 1.11.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: morgan dependency-version: 1.11.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: morgan dependency-version: 1.11.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: morgan dependency-version: 1.11.0 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 10, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

ci: bump the npm_and_yarn group across 7 directories with 1 update#717

ci: bump the npm_and_yarn group across 7 directories with 1 update#717
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/services/mediators/ethereum-wallet/npm_and_yarn-4754a50eb2

dependabot Bot commented on behalf of github Jul 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 10, 2026

1.11.0

What's Changed

New Contributors

1.11.0 / 2026-06-02

1.11.0

What's Changed

New Contributors

1.11.0 / 2026-06-02

1.11.0

What's Changed

New Contributors

1.11.0 / 2026-06-02

1.11.0

What's Changed

New Contributors

1.11.0 / 2026-06-02

1.11.0

What's Changed

New Contributors

1.11.0 / 2026-06-02

1.11.0

What's Changed

New Contributors

1.11.0 / 2026-06-02

1.11.0

What's Changed

New Contributors

1.11.0 / 2026-06-02

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants