Skip to content

Bump send, cordova-browser and express in /UserApp#37

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/UserApp/multi-da59267678
Open

Bump send, cordova-browser and express in /UserApp#37
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/UserApp/multi-da59267678

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Sep 11, 2024 •
edited
Loading

Bumps send to 0.19.0 and updates ancestor dependencies send, cordova-browser and express. These dependencies need to be updated together.

Updates send from 0.16.2 to 0.19.0

Release notes

Sourced from send's releases.

0.19.0

What's Changed

New Contributors

Full Changelog: pillarjs/send@0.18.0...0.19.0

Changelog

Sourced from send's changelog.

0.19.0 / 2024-09-10

  • Remove link renderization in html while redirecting

0.18.0 / 2022-03-23

  • Fix emitted 416 error missing headers property
  • Limit the headers removed for 304 response
  • deps: depd@2.0.0
    • Replace internal eval usage with Function constructor
    • Use instance methods on process to check for listeners
  • deps: destroy@1.2.0
  • deps: http-errors@2.0.0
    • deps: depd@2.0.0
    • deps: statuses@2.0.1
  • deps: on-finished@2.4.1
  • deps: statuses@2.0.1

0.17.2 / 2021-12-11

  • pref: ignore empty http tokens
  • deps: http-errors@1.8.1
    • deps: inherits@2.0.4
    • deps: toidentifier@1.0.1
    • deps: setprototypeof@1.2.0
  • deps: ms@2.1.3

0.17.1 / 2019-05-10

  • Set stricter CSP header in redirect & error responses
  • deps: range-parser@~1.2.1

0.17.0 / 2019-05-03

  • deps: http-errors@~1.7.2
    • Set constructor name when possible
    • Use toidentifier module to make class names
    • deps: depd@~1.1.2
    • deps: setprototypeof@1.1.1
    • deps: statuses@'>= 1.5.0 < 2'
  • deps: mime@1.6.0
    • Add extensions for JPEG-2000 images
    • Add new font/* types from IANA
    • Add WASM mapping
    • Update .bdoc to application/bdoc

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for send since your current version.


Updates cordova-browser from 5.0.4 to 7.0.0

Changelog

Sourced from cordova-browser's changelog.

7.0.0 (May 13, 2023)

Breaking Changes

  • GH-121 Minimum NodeJS Required: 16.13.0
  • GH-115 Update ShellJS to 0.8.5.
  • GH-78 feat: Replace Q with native Promises.

Other Notable Changes

  • GH-117 Added .npmrc file to ensure the official NPM registry is used during development and deployments.
  • GH-107 Enabled package-lock.json file.
  • GH-119 Added NodeJS 20 to our test matrix.
  • GH-118 Updated ESLint config to match better match Apache Cordova's coding style standards.
  • GH-80 Enabled CodeCov test coverage
  • GH-113 Migrated to GitHub Action workflows for our testing CI.

For a full list of changes, see the commit history

6.0.0 (Feb 01, 2019)

  • GH-70 Browser Platform Release Preparation (Cordova 9)
  • GH-68 Copy node_modules if the directory exists
  • GH-63 Dependency bump cordova-common@^3.0.0
  • CB-13740 Return expected promise resolving with array
  • GH-59 Remove Bundled Dependencies
  • CB-14073 Browser: Drop Node 4, Added Node 10
  • CB-14252 Allow to send --silent arg to run command to disable output (#57)
  • CB-13999 (browser) - Reading config.xml respects base href (#52)
  • GH-50 corrected path for config.xml
  • CB-13689 Updated RELEASENOTES and Version for release 5.0.3

5.0.2 (Dec 18, 2017)

  • CB-13689: Updated checked-in node_modules
  • CB-13562: fixed asset tag when adding push plugin to Browser

5.0.1 (Oct 16, 2017)

  • CB-13444 Updated checked-in node_modules
  • CB-13435 fix merges directory support for Browser
  • CB-12895 ignoring cordova.js for eslint

5.0.0 (Aug 24, 2017)

  • CB-13214 Updated cordova-serve dependnecy to 2.0.0. cordova serve command now opens system default browser instead of a new instance of chrome. A specific target can still be passed in.
  • CB-13214 Updated checked-in node_modules
  • CB-13188 fixed issues with run and build scripts.
  • CB-12895: set up eslint and remove jshint
  • CB-11181 add default favicon
  • CB-11710 Add missing 'clean.bat' file
  • remove old xhr-activex Windows code, update to use pagevisibility instead of webkitpagevisibility
  • CB-12804: manifest.json added to Browser during create. Adding basic PWA support
  • CB-12762 Point repo items to github mirrors

... (truncated)

Commits
  • be3084d Curated 7.0.0 release notes
  • 4669c4d Set VERSION to 7.0.0 (via coho)
  • 29469f5 Update JS snapshot to version 7.0.0 (via coho)
  • f45ac8f dep!: bump all possible dependencies w/ node engine >=16.13.0 requirement (#121)
  • d9ded1c chore!: set node engine to >=16.0.0 (#120)
  • 492714a ci: Add NodeJS 20 to matrix. Dropped NodeJS 14. (#119)
  • 529aba2 refactor: @​cordova/eslint-config@^5.0.0 upgrade (#118)
  • 3966de3 chore: Added .npmrc (#117)
  • 4fe7e97 fix: update shelljs to 0.8.5 (#115)
  • 2218451 chore!: drop node 10 and node 12 support (#114)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by normanbreau, a new releaser for cordova-browser since your current version.


Updates express from 4.18.2 to 4.20.0

Release notes

Sourced from express's releases.

4.20.0

What's Changed

Important

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect

Other Changes

New Contributors

Full Changelog: expressjs/express@4.19.1...4.20.0

... (truncated)

Changelog

Sourced from express's changelog.

4.20.0 / 2024-09-10

  • deps: serve-static@0.16.0
    • Remove link renderization in html while redirecting
  • deps: send@0.19.0
    • Remove link renderization in html while redirecting
  • deps: body-parser@0.6.0
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: path-to-regexp@0.1.10
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

  • Prevent open redirect allow list bypass due to encodeurl
  • deps: cookie@0.6.0

4.18.3 / 2024-02-29

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2
  • deps: cookie@0.6.0
    • Add partitioned option
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for express since your current version.


You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot
Bump send, cordova-browser and express in /UserApp
0abf2b8 
Bumps [send](https://github.com/pillarjs/send) to 0.19.0 and updates ancestor dependencies [send](https://github.com/pillarjs/send), [cordova-browser](https://github.com/apache/cordova-browser) and [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `send` from 0.16.2 to 0.19.0
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.16.2...0.19.0)

Updates `cordova-browser` from 5.0.4 to 7.0.0
- [Changelog](https://github.com/apache/cordova-browser/blob/master/RELEASENOTES.md)
- [Commits](apache/cordova-browser@5.0.4...7.0.0)

Updates `express` from 4.18.2 to 4.20.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.18.2...4.20.0)

---
updated-dependencies:
- dependency-name: send
  dependency-type: indirect
- dependency-name: cordova-browser
  dependency-type: direct:production
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 11, 2024
@korbit-ai
Copy link
Copy Markdown

korbit-ai bot commented Sep 11, 2024

By default, I don't review pull requests opened by bots. If you would like me to review this pull request anyway, you can request a review via the /korbit-review command in a comment.

@trag-bot
Copy link
Copy Markdown

trag-bot bot commented Sep 11, 2024

https://app.usetrag.com/dashboard/prs/3b4be459-861e-41ee-a9c3-729c1e559389

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Sep 11, 2024

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

@trag-bot
Copy link
Copy Markdown

trag-bot bot commented Sep 11, 2024

@trag-bot didn't find any issues in the code! ✅✨

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Sep 11, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

@endorphinians endorphinians self-assigned this Oct 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@endorphinians endorphinians

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@endorphinians