Bump debug, express-session and pm2 #32

dependabot · 2023-04-13T19:52:56Z

Bumps debug to 2.6.9 and updates ancestor dependencies debug, express-session and pm2. These dependencies need to be updated together.

Updates debug from 2.1.3 to 2.6.9

Release notes

Sourced from debug's releases.

2.6.9

Patches

Remove ReDoS regexp in %o formatter: #504

Credits

Huge thanks to @zhuangya for their help!

release 2.6.7

No release notes provided.

release 2.6.6

No release notes provided.

release 2.6.5

No release notes provided.

release 2.6.4

No release notes provided.

release 2.6.3

No release notes provided.

release 2.6.2

No release notes provided.

release 2.6.1

No release notes provided.

release 2.6.0

No release notes provided.

release 2.5.2

No release notes provided.

release 2.5.1

No release notes provided.

release 2.4.5

No release notes provided.

release 2.4.4

No release notes provided.

release 2.4.3

No release notes provided.

release 2.4.2

No release notes provided.

... (truncated)

Changelog

Sourced from debug's changelog.

2.6.9 / 2017-09-22

remove ReDoS regexp in %o formatter (#504)

2.6.8 / 2017-05-18

Fix: Check for undefined on browser globals (#462, @marbemac)

2.6.7 / 2017-05-16

Fix: Update ms to 2.0.0 to fix regular expression denial of service vulnerability (#458, @hubdotcom)

Fix: Inline extend function in node implementation (#452, @dougwilson)

Docs: Fix typo (#455, @msasad)

2.6.5 / 2017-04-27

Fix: null reference check on window.documentElement.style.WebkitAppearance (#447, @thebigredgeek)

Misc: clean up browser reference checks (#447, @thebigredgeek)

Misc: add npm-debug.log to .gitignore (@thebigredgeek)

2.6.4 / 2017-04-20

Fix: bug that would occure if process.env.DEBUG is a non-string value. (#444, @LucianBuzzo)

Chore: ignore bower.json in npm installations. (#437, @joaovieira)

Misc: update "ms" to v0.7.3 (@tootallnate)

2.6.3 / 2017-03-13

Fix: Electron reference to process.env.DEBUG (#431, @paulcbetts)

Docs: Changelog fix (@thebigredgeek)

2.6.2 / 2017-03-10

Fix: DEBUG_MAX_ARRAY_LENGTH (#420, @slavaGanzin)

Docs: Add backers and sponsors from Open Collective (#422, @piamancini)

Docs: Add Slackin invite badge (@tootallnate)

2.6.1 / 2017-02-10

Fix: Module's export default syntax fix for IE8 Expected identifier error

Fix: Whitelist DEBUG_FD for values 1 and 2 only (#415, @pi0)

... (truncated)

Commits

13abeae Release 2.6.9
f53962e remove ReDoS regexp in %o formatter (#504)
52e1f21 Release 2.6.8
2482e08 Check for undefined on browser globals (#462)
6bb07f7 release 2.6.7
15850cb Fix Regular Expression Denial of Service (ReDoS)
4a6c85c update "debug" to v1.0.0 (#454)
b68dbf8 Fix typo (#455)
1351d2f Inline extend function in node implementation (#452)
c211947 update version for component
Additional commits viewable in compare view

Updates express-session from 1.9.3 to 1.17.3

Release notes

Sourced from express-session's releases.

1.17.3

Fix resaving already-saved new session at end of request

deps: cookie@0.4.2

1.17.2

Fix res.end patch to always commit headers

deps: cookie@0.4.1

deps: safe-buffer@5.2.1

1.17.1

Fix internal method wrapping error on failed reloads

1.17.0

deps: cookie@0.4.0

Add SameSite=None support

deps: safe-buffer@5.2.0

1.16.2

Fix restoring cookie.originalMaxAge when store returns Date

deps: parseurl@~1.3.3

1.16.1

Fix error passing data option to Cookie constructor

Fix uncaught error from bad session data

1.16.0

Catch invalid cookie.maxAge value earlier

Deprecate setting cookie.maxAge to a Date object

Fix issue where resave: false may not save altered sessions

Remove utils-merge dependency

Use safe-buffer for improved Buffer API

Use Set-Cookie as cookie header name for compatibility

deps: depd@~2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

perf: remove argument reassignment

deps: on-headers@~1.0.2

Fix res.writeHead patch missing return value

1.15.6

deps: debug@2.6.9

deps: parseurl@~1.3.2

perf: reduce overhead for full URLs

perf: unroll the "fast-path" RegExp

deps: uid-safe@~2.1.5

perf: remove only trailing =

deps: utils-merge@1.0.1

1.15.5

Fix TypeError when req.url is an empty string

... (truncated)

Changelog

Sourced from express-session's changelog.

1.17.3 / 2022-05-11

Fix resaving already-saved new session at end of request

deps: cookie@0.4.2

1.17.2 / 2021-05-19

Fix res.end patch to always commit headers

deps: cookie@0.4.1

deps: safe-buffer@5.2.1

1.17.1 / 2020-04-16

Fix internal method wrapping error on failed reloads

1.17.0 / 2019-10-10

deps: cookie@0.4.0

Add SameSite=None support

deps: safe-buffer@5.2.0

1.16.2 / 2019-06-12

Fix restoring cookie.originalMaxAge when store returns Date

deps: parseurl@~1.3.3

1.16.1 / 2019-04-11

Fix error passing data option to Cookie constructor

Fix uncaught error from bad session data

1.16.0 / 2019-04-10

Catch invalid cookie.maxAge value earlier

Deprecate setting cookie.maxAge to a Date object

Fix issue where resave: false may not save altered sessions

Remove utils-merge dependency

Use safe-buffer for improved Buffer API

Use Set-Cookie as cookie header name for compatibility

deps: depd@~2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

perf: remove argument reassignment

... (truncated)

Commits

1010fad 1.17.3
99d6cde Fix resaving already-saved new session at end of request
a06b0be build: remove unnecessary entry from package files
a1aebf2 build: mocha@10.0.0
08f5dca build: Node.js@16.15
86ed9f3 build: supertest@6.2.3
18a1011 build: support Node.js 18.x
78d1acd build: Node.js@17.9
0704929 docs: add user login example
5df613c docs: document default cookie.sameSite
Additional commits viewable in compare view

Updates pm2 from 1.1.3 to 5.3.0

Release notes

Sourced from pm2's releases.

5.3.0

fix: replace non-working condition that blocks flush from clearing the logs #5533 @Sailboat265

fix: ESM script loader #5524 @BlueWater86

5.2.2

fix cluster error avoiding process restart (#5396)

ensure increment_var value is a number (#5435)

update dependencies

add node latest to travis testing

5.2.0

replace node-cron by croner (#5183 #5035)

upgrade mocha deps

fix pm2 report when daemon not running

remove semver check for legacy node.js versions

update node version in setup.deb.sh by using lts (#5201) + openrc

replace legacy util._extend by Object.assign (#5239)

add missing start options types (#5242)

recursive detection of package.json (#5267)

make tarball module uninstall cross-platform (#5269)

Fix unnecessary "ENOENT" console.error when serving a spa (#5272)

fix: used env variable instead of hardcode datetime format (#5277)

copyright update (#5278)

fix: remove constants import from VersionCheck (not needed) (#5279)

Reduce async import (#5280)

5.1.2

cron-restart improvements

5.1.1

add back Node 10.x support

make pm2-sysmonit module optional

remove fast-printf and replace with sprintfjs

5.0.3

fixes for system monitoring

5.0.0

System Monitoring

A new local system monitoring feature has been added, allowing to monitor numerous vital server metrics.

Most important metrics will be displayed when doing a pm2 ls:
┌─────┬─────────────────┬─────────────┬─────────┬─────────┬──────────┬────────┬──────┬───────────┬──────────┬──────────┬──────────┬──────────┐
│ id  │ name            │ namespace   │ version │ mode    │ pid      │ uptime │ ↺    │ status    │ cpu      │ mem      │ user     │ watching │
├─────┼─────────────────┼─────────────┼─────────┼─────────┼──────────┼────────┼──────┼───────────┼──────────┼──────────┼──────────┼──────────┤
│ 4   │ app             │ default     │ 1.0.0   │ fork    │ 164618   │ 2s     │ 1670 │ online    │ 0%       │ 41.8mb   │ unitech  │ disabled │
└─────┴─────────────────┴─────────────┴─────────┴─────────┴──────────┴────────┴──────┴───────────┴──────────┴──────────┴──────────┴──────────┘
</tr></table> 

... (truncated)

Changelog

Sourced from pm2's changelog.

5.3.0

fix: replace non-working condition that blocks flush from clearing the logs #5533 @Sailboat265

fix: ESM script loader #5524 @BlueWater86

5.2.2

fix: correct pm2 ls display when there is a (very) long process id (@dko-slapdash)

typo: corrections

5.2.1

fix cluster error avoiding process restart (#5396)

ensure increment_var value is a number (#5435)

update dependencies

add node latest to travis testing

5.2.0

replace node-cron by croner (#5183 #5035)

upgrade mocha deps

fix pm2 report when daemon not running

remove semver check for legacy node.js versions

update node version in setup.deb.sh by using lts (#5201) + openrc

replace legacy util._extend by Object.assign (#5239)

add missing start options types (#5242)

recursive detection of package.json (#5267)

make tarball module uninstall cross-platform (#5269)

Fix unnecessary "ENOENT" console.error when serving a spa (#5272)

fix: used env variable instead of hardcode datetime format (#5277)

copyright update (#5278)

fix: remove constants import from VersionCheck (not needed) (#5279)

Reduce async import (#5280)

5.1.2

easily disable cron-restart strategy via $ pm2 restart --cron-restart 0

allow to update cron-restart on restart

5.1.1

remove fast-printf and replace with sprintfjs

5.1.0

add back Node 10.x support

make pm2-sysmonit module optional

5.0.3

... (truncated)

Commits

c7a84c2 pm2@5.3.0
d61f139 Merge branch 'development'
1b5e0ab Merge pull request #5533 from Sailboat265/development-flush-patch
4cabf82 Merge pull request #5524 from BlueWater86/development
3a6b48d hotfix: replace non-working if-else condition to use fs.existsSync while hand...
ca36f30 Update ProcessContainer.js
5dbb561 Update .travis.yml
5e70845 pm2@5.2.2
5278057 Merge pull request #5456 from dko-slapdash/fix-large-id-erasure-in-pm2-list
dcffe8d Merge branch 'development' of github.com:Unitech/pm2 into development
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [debug](https://github.com/debug-js/debug) to 2.6.9 and updates ancestor dependencies [debug](https://github.com/debug-js/debug), [express-session](https://github.com/expressjs/session) and [pm2](https://github.com/Unitech/pm2). These dependencies need to be updated together. Updates `debug` from 2.1.3 to 2.6.9 - [Release notes](https://github.com/debug-js/debug/releases) - [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md) - [Commits](debug-js/debug@2.1.3...2.6.9) Updates `express-session` from 1.9.3 to 1.17.3 - [Release notes](https://github.com/expressjs/session/releases) - [Changelog](https://github.com/expressjs/session/blob/master/HISTORY.md) - [Commits](expressjs/session@v1.9.3...v1.17.3) Updates `pm2` from 1.1.3 to 5.3.0 - [Release notes](https://github.com/Unitech/pm2/releases) - [Changelog](https://github.com/Unitech/pm2/blob/master/CHANGELOG.md) - [Commits](Unitech/pm2@1.1.3...5.3.0) --- updated-dependencies: - dependency-name: debug dependency-type: indirect - dependency-name: express-session dependency-type: direct:production - dependency-name: pm2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Apr 13, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump debug, express-session and pm2 #32

Bump debug, express-session and pm2 #32

dependabot bot commented on behalf of github Apr 13, 2023

Bump debug, express-session and pm2 #32

Are you sure you want to change the base?

Bump debug, express-session and pm2 #32

Conversation

dependabot bot commented on behalf of github Apr 13, 2023

2.6.9

Patches

Credits

release 2.6.7

release 2.6.6

release 2.6.5

release 2.6.4

release 2.6.3

release 2.6.2

release 2.6.1

release 2.6.0

release 2.5.2

release 2.5.1

release 2.4.5

release 2.4.4

release 2.4.3

release 2.4.2

2.6.9 / 2017-09-22

2.6.8 / 2017-05-18

2.6.7 / 2017-05-16

2.6.5 / 2017-04-27

2.6.4 / 2017-04-20

2.6.3 / 2017-03-13

2.6.2 / 2017-03-10

2.6.1 / 2017-02-10

1.17.3

1.17.2

1.17.1

1.17.0

1.16.2

1.16.1

1.16.0

1.15.6

1.15.5

1.17.3 / 2022-05-11

1.17.2 / 2021-05-19

1.17.1 / 2020-04-16

1.17.0 / 2019-10-10

1.16.2 / 2019-06-12

1.16.1 / 2019-04-11

1.16.0 / 2019-04-10

5.3.0

5.2.2

5.2.0

5.1.2

5.1.1

5.0.3

5.0.0

System Monitoring

5.3.0

5.2.2

5.2.1

5.2.0

5.1.2

5.1.1

5.1.0

5.0.3