{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":207409203,"defaultBranch":"master","name":"monolith-to-microservices","ownerLogin":"googlecodelabs","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2019-09-09T21:35:53.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/13681719?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1726157613.0","currentOid":""},"activityList":{"items":[{"before":"278f5ad34fad6a086ba091d05712cab77f7477a5","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/react-app/webpack-dev-middleware-5.3.4","pushedAt":"2024-09-12T16:13:33.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"}},{"before":"b26b43092becae998b1909ce46ca6cbfdb21be61","after":"91f541ce786a9cb85dba54872f0635bcf2b1cd8c","ref":"refs/heads/master","pushedAt":"2024-09-12T16:13:31.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"},"commit":{"message":"Bump webpack-dev-middleware from 5.3.0 to 5.3.4 in /react-app (#74)\n\nBumps\r\n[webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware)\r\nfrom 5.3.0 to 5.3.4.\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/releases\">webpack-dev-middleware's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>v5.3.4</h2>\r\n<h3><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/compare/v5.3.3...v5.3.4\">5.3.4</a>\r\n(2024-03-20)</h3>\r\n<h3>Bug Fixes</h3>\r\n<ul>\r\n<li><strong>security:</strong> do not allow to read files above (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1779\">#1779</a>)\r\n(<a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/189c4ac7d2344ec132a4689e74dc837ec5be0132\">189c4ac</a>)</li>\r\n</ul>\r\n<h2>v5.3.3</h2>\r\n<h3><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/compare/v5.3.2...v5.3.3\">5.3.3</a>\r\n(2022-05-18)</h3>\r\n<h3>Bug Fixes</h3>\r\n<ul>\r\n<li>types for <code>Request</code> and <code>Response</code> (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1271\">#1271</a>)\r\n(<a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/eeb8aa8b116038671b7436173fab1994d4645767\">eeb8aa8</a>)</li>\r\n</ul>\r\n<h2>v5.3.2</h2>\r\n<h3><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/compare/v5.3.1...v5.3.2\">5.3.2</a>\r\n(2022-05-17)</h3>\r\n<h3>Bug Fixes</h3>\r\n<ul>\r\n<li>node types (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1195\">#1195</a>)\r\n(<a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/d68ab3607a43288dbb6efd9ee748ad3e650625a1\">d68ab36</a>)</li>\r\n<li>compatibility with Node.js 18</li>\r\n</ul>\r\n<h2>v5.3.1</h2>\r\n<h3><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/compare/v5.3.0...v5.3.1\">5.3.1</a>\r\n(2022-02-01)</h3>\r\n<h3>Bug Fixes</h3>\r\n<ul>\r\n<li>types (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1187\">#1187</a>)\r\n(<a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/0f82e1d6ebb9e11c60dc8ee668dd6f953042ada8\">0f82e1d</a>)</li>\r\n</ul>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md\">webpack-dev-middleware's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h3><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/compare/v5.3.3...v5.3.4\">5.3.4</a>\r\n(2024-03-20)</h3>\r\n<h3>Bug Fixes</h3>\r\n<ul>\r\n<li><strong>security:</strong> do not allow to read files above (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1779\">#1779</a>)\r\n(<a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/189c4ac7d2344ec132a4689e74dc837ec5be0132\">189c4ac</a>)</li>\r\n</ul>\r\n<h3><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/compare/v5.3.2...v5.3.3\">5.3.3</a>\r\n(2022-05-18)</h3>\r\n<h3>Bug Fixes</h3>\r\n<ul>\r\n<li>types for <code>Request</code> and <code>Response</code> (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1271\">#1271</a>)\r\n(<a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/eeb8aa8b116038671b7436173fab1994d4645767\">eeb8aa8</a>)</li>\r\n</ul>\r\n<h3><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/compare/v5.3.1...v5.3.2\">5.3.2</a>\r\n(2022-05-17)</h3>\r\n<h3>Bug Fixes</h3>\r\n<ul>\r\n<li>node types (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1195\">#1195</a>)\r\n(<a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/d68ab3607a43288dbb6efd9ee748ad3e650625a1\">d68ab36</a>)</li>\r\n</ul>\r\n<h3><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/compare/v5.3.0...v5.3.1\">5.3.1</a>\r\n(2022-02-01)</h3>\r\n<h3>Bug Fixes</h3>\r\n<ul>\r\n<li>types (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1187\">#1187</a>)\r\n(<a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/0f82e1d6ebb9e11c60dc8ee668dd6f953042ada8\">0f82e1d</a>)</li>\r\n</ul>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/86071ead69e946ada25497d3e281923e885229a4\"><code>86071ea</code></a>\r\nchore(release): 5.3.4</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/189c4ac7d2344ec132a4689e74dc837ec5be0132\"><code>189c4ac</code></a>\r\nfix(security): do not allow to read files above (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1779\">#1779</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/f3c62b817614e95fd8caa6227ce0fbba8d8eaab3\"><code>f3c62b8</code></a>\r\nchore(release): 5.3.3</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/eeb8aa8b116038671b7436173fab1994d4645767\"><code>eeb8aa8</code></a>\r\nfix: types for <code>Request</code> and <code>Response</code> (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1271\">#1271</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/1a45388bcf2c90d9ea955af0a247b05f948b319e\"><code>1a45388</code></a>\r\nchore(release): 5.3.2</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/b8fb945b1b0b266bcdd5a6cfc0cd880d0c18574b\"><code>b8fb945</code></a>\r\nchore(deps): memfs force update (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1269\">#1269</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/f88067d31f7f639381cd3fcf6d7c2fd2f23d92f9\"><code>f88067d</code></a>\r\nchore: update deps and ci (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1260\">#1260</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/71863189d8d73ed459c1635293438288e2e144bc\"><code>7186318</code></a>\r\nchore(deps-dev): bump <code>@​commitlint/cli</code></li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/57c50ef1b60d5b1125f554e48d24dec3dc4d3485\"><code>57c50ef</code></a>\r\nci: update <code>checkout</code>, <code>setup-node</code>, and\r\n<code>codecov</code> actions (<a\r\nhref=\"https://redirect.github.com/webpack/webpack-dev-middleware/issues/1267\">#1267</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/commit/840146a50129db87f38cce702a1369a028bb77dd\"><code>840146a</code></a>\r\nchore(deps-dev): bump <code>@​babel/preset-env</code></li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/webpack/webpack-dev-middleware/compare/v5.3.0...v5.3.4\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<br />\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack-dev-middleware&package-manager=npm_and_yarn&previous-version=5.3.0&new-version=5.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/googlecodelabs/monolith-to-microservices/network/alerts).\r\n\r\n</details>\r\n\r\n> **Note**\r\n> Automatic rebases have been disabled on this pull request as it has\r\nbeen open for over 30 days.\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump webpack-dev-middleware from 5.3.0 to 5.3.4 in /react-app (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2203598815\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googlecodelabs/monolith-to-microservices/issues/74\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googlecodelabs/monolith-to-microservices/pull/74/hovercard\" href=\"https://github.com/googlecodelabs/monolith-to-microservices/pull/74\">#74</a>)"}},{"before":"7734b757e3d8021da3297dc167ce5ab6b5ec7f7b","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/react-app/ejs-3.1.10","pushedAt":"2024-09-12T16:13:15.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"}},{"before":"14c89d42c269e82853f3573bfc13bb9aecdd3e1d","after":"b26b43092becae998b1909ce46ca6cbfdb21be61","ref":"refs/heads/master","pushedAt":"2024-09-12T16:13:13.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"},"commit":{"message":"Bump ejs from 3.1.9 to 3.1.10 in /react-app (#81)\n\nBumps [ejs](https://github.com/mde/ejs) from 3.1.9 to 3.1.10.\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a href=\"https://github.com/mde/ejs/releases\">ejs's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>v3.1.10</h2>\r\n<p>Version 3.1.10</p>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/mde/ejs/commit/d3f807dea9ce904e20a47a661f2310ce9134dc2a\"><code>d3f807d</code></a>\r\nVersion 3.1.10</li>\r\n<li><a\r\nhref=\"https://github.com/mde/ejs/commit/9ee26dde5d7015d9c0e2ff87314cabeac5247c02\"><code>9ee26dd</code></a>\r\nMocha TDD</li>\r\n<li><a\r\nhref=\"https://github.com/mde/ejs/commit/e469741dca7df2eb400199e1cdb74621e3f89aa5\"><code>e469741</code></a>\r\nBasic pollution protection</li>\r\n<li><a\r\nhref=\"https://github.com/mde/ejs/commit/715e9507fa3e6122dc6430fe0f25a6e6ded300c1\"><code>715e950</code></a>\r\nMerge pull request <a\r\nhref=\"https://redirect.github.com/mde/ejs/issues/756\">#756</a> from\r\nJeffrey-mu/main</li>\r\n<li><a\r\nhref=\"https://github.com/mde/ejs/commit/cabe3146ad964a1e98db7742abf435906ca79406\"><code>cabe314</code></a>\r\nInclude advanced usage examples</li>\r\n<li><a\r\nhref=\"https://github.com/mde/ejs/commit/29b076cdbbf3eb1b4323b33299ab6d79391b2c33\"><code>29b076c</code></a>\r\nAdded header</li>\r\n<li><a\r\nhref=\"https://github.com/mde/ejs/commit/11503c79af882e3635b513d57c7f1813792eb127\"><code>11503c7</code></a>\r\nMerge branch 'main' of github.com:mde/ejs into main</li>\r\n<li><a\r\nhref=\"https://github.com/mde/ejs/commit/7690404e2fc1688756938e4d2fc19e0fac77d736\"><code>7690404</code></a>\r\nAdded security banner to README</li>\r\n<li><a\r\nhref=\"https://github.com/mde/ejs/commit/f47d7aedd51a983e4f73045f962b1209096b5800\"><code>f47d7ae</code></a>\r\nUpdate SECURITY.md</li>\r\n<li><a\r\nhref=\"https://github.com/mde/ejs/commit/828cea1687e3db459ab09d2f405d2444c7580b90\"><code>828cea1</code></a>\r\nUpdate SECURITY.md</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/mde/ejs/compare/v3.1.9...v3.1.10\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<br />\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ejs&package-manager=npm_and_yarn&previous-version=3.1.9&new-version=3.1.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/googlecodelabs/monolith-to-microservices/network/alerts).\r\n\r\n</details>\r\n\r\n> **Note**\r\n> Automatic rebases have been disabled on this pull request as it has\r\nbeen open for over 30 days.\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump ejs from 3.1.9 to 3.1.10 in /react-app (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2275029170\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googlecodelabs/monolith-to-microservices/issues/81\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googlecodelabs/monolith-to-microservices/pull/81/hovercard\" href=\"https://github.com/googlecodelabs/monolith-to-microservices/pull/81\">#81</a>)"}},{"before":"c42bb70c553b3c5a0663461534393ab66599ce86","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/microservices/src/products/express-4.20.0","pushedAt":"2024-09-12T16:12:48.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"}},{"before":"3978aef2eb44e1025dc2696bc414f975bc5790f4","after":"14c89d42c269e82853f3573bfc13bb9aecdd3e1d","ref":"refs/heads/master","pushedAt":"2024-09-12T16:12:46.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"},"commit":{"message":"Bump express from 4.17.1 to 4.20.0 in /microservices/src/products (#92)\n\nBumps [express](https://github.com/expressjs/express) from 4.17.1 to\r\n4.20.0.\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/releases\">express's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>4.20.0</h2>\r\n<h2>What's Changed</h2>\r\n<h3>Important</h3>\r\n<ul>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n</ul>\r\n<h3>Other Changes</h3>\r\n<ul>\r\n<li>4.19.2 Staging by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5561\">expressjs/express#5561</a></li>\r\n<li>remove duplicate location test for data uri by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5562\">expressjs/express#5562</a></li>\r\n<li>feat: document beta releases expectations by <a\r\nhref=\"https://github.com/marco-ippolito\"><code>@​marco-ippolito</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5565\">expressjs/express#5565</a></li>\r\n<li>Cut down on duplicated CI runs by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5564\">expressjs/express#5564</a></li>\r\n<li>Add a Threat Model by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5526\">expressjs/express#5526</a></li>\r\n<li>Assign captain of encodeurl by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5579\">expressjs/express#5579</a></li>\r\n<li>Nominate jonchurch as repo captain for <code>http-errors</code>,\r\n<code>expressjs.com</code>, <code>morgan</code>, <code>cors</code>,\r\n<code>body-parser</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5587\">expressjs/express#5587</a></li>\r\n<li>docs: update Security.md by <a\r\nhref=\"https://github.com/inigomarquinez\"><code>@​inigomarquinez</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5590\">expressjs/express#5590</a></li>\r\n<li>docs: update triage nomination policy by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5600\">expressjs/express#5600</a></li>\r\n<li>Add CodeQL (SAST) by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5433\">expressjs/express#5433</a></li>\r\n<li>docs: add UlisesGascon as triage initiative captain by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5605\">expressjs/express#5605</a></li>\r\n<li>deps: encodeurl@~2.0.0 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5569\">expressjs/express#5569</a></li>\r\n<li>skip QUERY method test by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5628\">expressjs/express#5628</a></li>\r\n<li>ignore ETAG query test on 21 and 22, reuse skip util by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5639\">expressjs/express#5639</a></li>\r\n<li>add support Node.js@22 in the CI by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5627\">expressjs/express#5627</a></li>\r\n<li>doc: add table of contents, tc/triager lists to readme by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5619\">expressjs/express#5619</a></li>\r\n<li>List and sort all projects, add captains by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5653\">expressjs/express#5653</a></li>\r\n<li>docs: add <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nas captain for cookie-parser by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5666\">expressjs/express#5666</a></li>\r\n<li>✨ bring back query tests for node 21 by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5690\">expressjs/express#5690</a></li>\r\n<li>[v4] Deprecate <code>res.clearCookie</code> accepting\r\n<code>options.maxAge</code> and <code>options.expires</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5672\">expressjs/express#5672</a></li>\r\n<li>skip QUERY tests for Node 21 only, still not supported by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5695\">expressjs/express#5695</a></li>\r\n<li>📝 update people, add ctcpip to TC by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5683\">expressjs/express#5683</a></li>\r\n<li>remove minor version pinning from ci by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5722\">expressjs/express#5722</a></li>\r\n<li>Fix link variable use in attribution section of CODE OF CONDUCT by\r\n<a href=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5762\">expressjs/express#5762</a></li>\r\n<li>Replace Appveyor windows testing with GHA by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5599\">expressjs/express#5599</a></li>\r\n<li>Add OSSF Scorecard badge by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5436\">expressjs/express#5436</a></li>\r\n<li>update scorecard link by <a\r\nhref=\"https://github.com/bjohansebas\"><code>@​bjohansebas</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5814\">expressjs/express#5814</a></li>\r\n<li>Nominate <a\r\nhref=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> to the\r\ntriage team by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5836\">expressjs/express#5836</a></li>\r\n<li>deps: path-to-regexp@0.1.8 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5603\">expressjs/express#5603</a></li>\r\n<li>docs: specify new instructions for <code>question</code> and\r\n<code>discuss</code> by <a\r\nhref=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5835\">expressjs/express#5835</a></li>\r\n<li>4.x: Upgrade <code>merge-descriptors</code> dependency by <a\r\nhref=\"https://github.com/RobinTail\"><code>@​RobinTail</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5781\">expressjs/express#5781</a></li>\r\n<li>path-to-regexp@0.1.10 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5902\">expressjs/express#5902</a></li>\r\n</ul>\r\n<h2>New Contributors</h2>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/marco-ippolito\"><code>@​marco-ippolito</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5565\">expressjs/express#5565</a></li>\r\n<li><a\r\nhref=\"https://github.com/inigomarquinez\"><code>@​inigomarquinez</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5590\">expressjs/express#5590</a></li>\r\n<li><a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5627\">expressjs/express#5627</a></li>\r\n<li><a href=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> made\r\ntheir first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5690\">expressjs/express#5690</a></li>\r\n<li><a\r\nhref=\"https://github.com/bjohansebas\"><code>@​bjohansebas</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5814\">expressjs/express#5814</a></li>\r\n</ul>\r\n<p><strong>Full Changelog</strong>: <a\r\nhref=\"https://github.com/expressjs/express/compare/4.19.1...4.20.0\">https://github.com/expressjs/express/compare/4.19.1...4.20.0</a></p>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/blob/master/History.md\">express's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h1>4.20.0 / 2024-09-10</h1>\r\n<ul>\r\n<li>deps: serve-static@0.16.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: send@0.19.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: body-parser@0.6.0\r\n<ul>\r\n<li>add <code>depth</code> option to customize the depth level in the\r\nparser</li>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n</ul>\r\n</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n<li>deps: path-to-regexp@0.1.10\r\n<ul>\r\n<li>Adds support for named matching groups in the routes using a\r\nregex</li>\r\n<li>Adds backtracking protection to parameters without regexes\r\ndefined</li>\r\n</ul>\r\n</li>\r\n<li>deps: encodeurl@~2.0.0\r\n<ul>\r\n<li>Removes encoding of <code>\\</code>, <code>|</code>, and\r\n<code>^</code> to align better with URL spec</li>\r\n</ul>\r\n</li>\r\n<li>Deprecate passing <code>options.maxAge</code> and\r\n<code>options.expires</code> to <code>res.clearCookie</code>\r\n<ul>\r\n<li>Will be ignored in v5, clearCookie will set a cookie with an expires\r\nin the past to instruct clients to delete the cookie</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<h1>4.19.2 / 2024-03-25</h1>\r\n<ul>\r\n<li>Improved fix for open redirect allow list bypass</li>\r\n</ul>\r\n<h1>4.19.1 / 2024-03-20</h1>\r\n<ul>\r\n<li>Allow passing non-strings to res.location with new encoding handling\r\nchecks</li>\r\n</ul>\r\n<h1>4.19.0 / 2024-03-20</h1>\r\n<ul>\r\n<li>Prevent open redirect allow list bypass due to encodeurl</li>\r\n<li>deps: cookie@0.6.0</li>\r\n</ul>\r\n<h1>4.18.3 / 2024-02-29</h1>\r\n<ul>\r\n<li>Fix routing requests without method</li>\r\n<li>deps: body-parser@1.20.2\r\n<ul>\r\n<li>Fix strict json error message on Node.js 19+</li>\r\n<li>deps: content-type@~1.0.5</li>\r\n<li>deps: raw-body@2.5.2</li>\r\n</ul>\r\n</li>\r\n<li>deps: cookie@0.6.0\r\n<ul>\r\n<li>Add <code>partitioned</code> option</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<h1>4.18.2 / 2022-10-08</h1>\r\n<ul>\r\n<li>Fix regression routing a large stack in a single route</li>\r\n<li>deps: body-parser@1.20.1</li>\r\n</ul>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/21df421ebc7a5249bb31101da666bbf22adc3f18\"><code>21df421</code></a>\r\n4.20.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/4c9ddc1c47bf579e55c2fe837d76a952e9fd8959\"><code>4c9ddc1</code></a>\r\nfeat: upgrade to serve-static@0.16.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/9ebe5d500d22cbb2b8aaa73446866b084c747971\"><code>9ebe5d5</code></a>\r\nfeat: upgrade to send@0.19.0 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5928\">#5928</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/ec4a01b6b8814d7b007f36a3023f4dbafdbc3d09\"><code>ec4a01b</code></a>\r\nfeat: upgrade to body-parser@1.20.3 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5926\">#5926</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553\"><code>54271f6</code></a>\r\nfix: don't render redirect values in anchor href</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/125bb742a38cd97938a3932b47cc301e41c31f5d\"><code>125bb74</code></a>\r\npath-to-regexp@0.1.10 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5902\">#5902</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/2a980ad16052e53b398c9953fea50e3daa0b495c\"><code>2a980ad</code></a>\r\nmerge-descriptors@1.0.3 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5781\">#5781</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/a3e7e05e0a435b7b4be25bd38d8d0ca19a773ca9\"><code>a3e7e05</code></a>\r\ndocs: specify new instructions for <code>question</code> and\r\n<code>discuss</code></li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/c5addb9a17c5b4c9fccdd2c04153a30595e03385\"><code>c5addb9</code></a>\r\ndeps: path-to-regexp@0.1.8 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5603\">#5603</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/e35380a39d94937e3d0f7119e0efbc7cd69d003f\"><code>e35380a</code></a>\r\ndocs: add <a\r\nhref=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> to the\r\ntriage team (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5836\">#5836</a>)</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/expressjs/express/compare/4.17.1...4.20.0\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<details>\r\n<summary>Maintainer changes</summary>\r\n<p>This version was pushed to npm by <a\r\nhref=\"https://www.npmjs.com/~ulisesgascon\">ulisesgascon</a>, a new\r\nreleaser for express since your current version.</p>\r\n</details>\r\n<br />\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=express&package-manager=npm_and_yarn&previous-version=4.17.1&new-version=4.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/googlecodelabs/monolith-to-microservices/network/alerts).\r\n\r\n</details>\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump express from 4.17.1 to 4.20.0 in /microservices/src/products (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2522817056\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googlecodelabs/monolith-to-microservices/issues/92\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googlecodelabs/monolith-to-microservices/pull/92/hovercard\" href=\"https://github.com/googlecodelabs/monolith-to-microservices/pull/92\">#92</a>)"}},{"before":null,"after":"c42bb70c553b3c5a0663461534393ab66599ce86","ref":"refs/heads/dependabot/npm_and_yarn/microservices/src/products/express-4.20.0","pushedAt":"2024-09-12T16:10:23.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump express from 4.17.1 to 4.20.0 in /microservices/src/products\n\nBumps [express](https://github.com/expressjs/express) from 4.17.1 to 4.20.0.\n- [Release notes](https://github.com/expressjs/express/releases)\n- [Changelog](https://github.com/expressjs/express/blob/master/History.md)\n- [Commits](https://github.com/expressjs/express/compare/4.17.1...4.20.0)\n\n---\nupdated-dependencies:\n- dependency-name: express\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"Bump express from 4.17.1 to 4.20.0 in /microservices/src/products"}},{"before":"8c25f3a3445823360e6e356e30bd25205656c374","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/react-app/braces-3.0.3","pushedAt":"2024-09-12T16:09:54.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"}},{"before":"a44724012a87b664c18c4ef47dac4f5451f65b35","after":"3978aef2eb44e1025dc2696bc414f975bc5790f4","ref":"refs/heads/master","pushedAt":"2024-09-12T16:09:52.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"},"commit":{"message":"Bump braces from 3.0.2 to 3.0.3 in /react-app (#82)\n\nBumps [braces](https://github.com/micromatch/braces) from 3.0.2 to\r\n3.0.3.\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/micromatch/braces/commit/74b2db2938fad48a2ea54a9c8bf27a37a62c350d\"><code>74b2db2</code></a>\r\n3.0.3</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/braces/commit/88f1429a0f47e1dd3813de35211fc97ffda27f9e\"><code>88f1429</code></a>\r\nupdate eslint. lint, fix unit tests.</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff\"><code>415d660</code></a>\r\nSnyk js braces 6838727 (<a\r\nhref=\"https://redirect.github.com/micromatch/braces/issues/40\">#40</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/braces/commit/190510f79db1adf21d92798b0bb6fccc1f72c9d6\"><code>190510f</code></a>\r\nfix tests, skip 1 test in test/braces.expand</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/braces/commit/716eb9f12d820b145a831ad678618731927e8856\"><code>716eb9f</code></a>\r\nreadme bump</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/braces/commit/a5851e57f45c3431a94d83fc565754bc10f5bbc3\"><code>a5851e5</code></a>\r\nMerge pull request <a\r\nhref=\"https://redirect.github.com/micromatch/braces/issues/37\">#37</a>\r\nfrom coderaiser/fix/vulnerability</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/braces/commit/2092bd1fb108d2c59bd62e243b70ad98db961538\"><code>2092bd1</code></a>\r\nfeature: braces: add maxSymbols (<a\r\nhref=\"https://github.com/micromatch/braces/issues/\">https://github.com/micromatch/braces/issues/</a>...</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/braces/commit/9f5b4cf47329351bcb64287223ffb6ecc9a5e6d3\"><code>9f5b4cf</code></a>\r\nfix: vulnerability (<a\r\nhref=\"https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727\">https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/braces/commit/98414f9f1fabe021736e26836d8306d5de747e0d\"><code>98414f9</code></a>\r\nremove funding file</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/braces/commit/665ab5d561c017a38ba7aafd92cc6655b91d8c14\"><code>665ab5d</code></a>\r\nupdate keepEscaping doc (<a\r\nhref=\"https://redirect.github.com/micromatch/braces/issues/27\">#27</a>)</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/micromatch/braces/compare/3.0.2...3.0.3\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<br />\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=braces&package-manager=npm_and_yarn&previous-version=3.0.2&new-version=3.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/googlecodelabs/monolith-to-microservices/network/alerts).\r\n\r\n</details>\r\n\r\n> **Note**\r\n> Automatic rebases have been disabled on this pull request as it has\r\nbeen open for over 30 days.\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump braces from 3.0.2 to 3.0.3 in /react-app (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2355631270\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googlecodelabs/monolith-to-microservices/issues/82\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googlecodelabs/monolith-to-microservices/pull/82/hovercard\" href=\"https://github.com/googlecodelabs/monolith-to-microservices/pull/82\">#82</a>)"}},{"before":"bab4bb69186c884d3bd1a37956e6607618f3b70d","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/react-app/webpack-5.94.0","pushedAt":"2024-09-12T16:09:38.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"}},{"before":"f58523f153e509a7cc2b3f2dbd3915160638e9b3","after":"a44724012a87b664c18c4ef47dac4f5451f65b35","ref":"refs/heads/master","pushedAt":"2024-09-12T16:09:36.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"},"commit":{"message":"Bump webpack from 5.76.2 to 5.94.0 in /react-app (#83)\n\nBumps [webpack](https://github.com/webpack/webpack) from 5.76.2 to\r\n5.94.0.\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/webpack/webpack/releases\">webpack's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>v5.94.0</h2>\r\n<h2>Bug Fixes</h2>\r\n<ul>\r\n<li>Added runtime condition for harmony reexport checked</li>\r\n<li>Handle properly\r\n<code>data</code>/<code>http</code>/<code>https</code> protocols in\r\nsource maps</li>\r\n<li>Make <code>bigint</code> optimistic when browserslist not found</li>\r\n<li>Move <code>@​types/eslint-scope</code> to dev deps</li>\r\n<li>Related in asset stats is now always an array when no related\r\nfound</li>\r\n<li>Handle ASI for export declarations</li>\r\n<li>Mangle destruction incorrect with export named default properly</li>\r\n<li>Fixed unexpected asi generation with sequence expression</li>\r\n<li>Fixed a lot of types</li>\r\n</ul>\r\n<h2>New Features</h2>\r\n<ul>\r\n<li>Added new external type &quot;module-import&quot;</li>\r\n<li>Support <code>webpackIgnore</code> for <code>new URL()</code>\r\nconstruction</li>\r\n<li>[CSS] <code>@import</code> pathinfo support</li>\r\n</ul>\r\n<h2>Security</h2>\r\n<ul>\r\n<li>Fixed DOM clobbering in auto public path</li>\r\n</ul>\r\n<h2>v5.93.0</h2>\r\n<h2>Bug Fixes</h2>\r\n<ul>\r\n<li>Generate correct relative path to runtime chunks</li>\r\n<li>Makes <code>DefinePlugin</code> quieter under default log level</li>\r\n<li>Fixed mangle destructuring default in namespace import</li>\r\n<li>Fixed consumption of eager shared modules for module federation</li>\r\n<li>Strip slash for pretty regexp</li>\r\n<li>Calculate correct contenthash for CSS generator options</li>\r\n</ul>\r\n<h2>New Features</h2>\r\n<ul>\r\n<li>Added the <code>binary</code> generator option for asset modules to\r\nexplicitly keep source maps produced by loaders</li>\r\n<li>Added the <code>modern-module</code> library value for tree shakable\r\noutput</li>\r\n<li>Added the <code>overrideStrict</code> option to override strict or\r\nnon-strict mode for javascript modules</li>\r\n</ul>\r\n<h2>v5.92.1</h2>\r\n<h2>Bug Fixes</h2>\r\n<ul>\r\n<li>Doesn't crash with an error when the css experiment is enabled and\r\ncontenthash is used</li>\r\n</ul>\r\n<h2>v5.92.0</h2>\r\n<h2>Bug Fixes</h2>\r\n<ul>\r\n<li>Correct tidle range's comutation for module federation</li>\r\n<li>Consider runtime for pure expression dependency update hash</li>\r\n<li>Return value in the <code>subtractRuntime</code> function for\r\nruntime logic</li>\r\n</ul>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack/commit/eabf85d8580dfcb876b56957ba5488222a4f7873\"><code>eabf85d</code></a>\r\nchore(release): 5.94.0</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack/commit/955e057abc6cc83cbc3fa1e1ef67a49758bf5a61\"><code>955e057</code></a>\r\nsecurity: fix DOM clobbering in auto public path</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack/commit/98223873625a029b9903d5ec6c0235b8f9fb5a66\"><code>9822387</code></a>\r\ntest: fix</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack/commit/cbb86ede32ab53d8eade6efee30da2463f0082ec\"><code>cbb86ed</code></a>\r\ntest: fix</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack/commit/5ac3d7f2cdce6da63a8dfb07e9dbbd95756bf7a2\"><code>5ac3d7f</code></a>\r\nfix: unexpected asi generation with sequence expression</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack/commit/2411661bd1bedf1b2efc23c76d595c189425d39f\"><code>2411661</code></a>\r\nsecurity: fix DOM clobbering in auto public path</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack/commit/b8c03d47726a57e0dc6ba58b4f96f0e81b168268\"><code>b8c03d4</code></a>\r\nfix: unexpected asi generation with sequence expression</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack/commit/f46a03ccbc2b96ff3552642fea0d7402f7880865\"><code>f46a03c</code></a>\r\nrevert: do not use heuristic fallback for &quot;module-import&quot;</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack/commit/60f189871a4cdc5d595663d6babadac74f2f6a7d\"><code>60f1898</code></a>\r\nfix: do not use heuristic fallback for &quot;module-import&quot;</li>\r\n<li><a\r\nhref=\"https://github.com/webpack/webpack/commit/66306aa45659ef4e8dac8226798931c228fdb204\"><code>66306aa</code></a>\r\nRevert &quot;fix: module-import get fallback from\r\nexternalsPresets&quot;</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/webpack/webpack/compare/v5.76.2...v5.94.0\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<br />\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack&package-manager=npm_and_yarn&previous-version=5.76.2&new-version=5.94.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/googlecodelabs/monolith-to-microservices/network/alerts).\r\n\r\n</details>\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump webpack from 5.76.2 to 5.94.0 in /react-app (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2497049025\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googlecodelabs/monolith-to-microservices/issues/83\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googlecodelabs/monolith-to-microservices/pull/83/hovercard\" href=\"https://github.com/googlecodelabs/monolith-to-microservices/pull/83\">#83</a>)"}},{"before":"43ff2e334d8990bcbff096fe45f595102e369db0","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/react-app/micromatch-4.0.8","pushedAt":"2024-09-12T16:09:25.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"}},{"before":"2c0b7ee795ed094c37cbd5b1c1f894daa90b79e6","after":"f58523f153e509a7cc2b3f2dbd3915160638e9b3","ref":"refs/heads/master","pushedAt":"2024-09-12T16:09:23.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"},"commit":{"message":"Bump micromatch from 4.0.4 to 4.0.8 in /react-app (#84)\n\nBumps [micromatch](https://github.com/micromatch/micromatch) from 4.0.4\r\nto 4.0.8.\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/micromatch/micromatch/releases\">micromatch's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>4.0.8</h2>\r\n<p>Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We\r\nconsider the issues low-priority, so even if you see automated scanners\r\nsaying otherwise, don't be scared.</p>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md\">micromatch's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h2>[4.0.8] - 2024-08-22</h2>\r\n<ul>\r\n<li>backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch</li>\r\n</ul>\r\n<h2>[4.0.7] - 2024-05-22</h2>\r\n<ul>\r\n<li>this is basically v4.0.5, with some README updates</li>\r\n<li><strong>it is vulnerable to CVE-2024-4067</strong></li>\r\n<li>Updated braces to v3.0.3 to avoid CVE-2024-4068</li>\r\n<li>does NOT break API compatibility</li>\r\n</ul>\r\n<h2>[4.0.6] - 2024-05-21</h2>\r\n<ul>\r\n<li>Added <code>hasBraces</code> to check if a pattern contains\r\nbraces.</li>\r\n<li>Fixes CVE-2024-4067</li>\r\n<li><strong>BREAKS API COMPATIBILITY</strong></li>\r\n<li>Should be labeled as a major release, but it's not.</li>\r\n</ul>\r\n<h2>[4.0.1 - 4.0.5]</h2>\r\n<h2>[4.0.0] - 2019-03-20</h2>\r\n<h3>Added</h3>\r\n<ul>\r\n<li>Adds support for <code>options.onMatch</code>. See the readme for\r\ndetails</li>\r\n<li>Adds support for <code>options.onIgnore</code>. See the readme for\r\ndetails</li>\r\n<li>Adds support for <code>options.onResult</code>. See the readme for\r\ndetails</li>\r\n</ul>\r\n<h3>Breaking changes</h3>\r\n<ul>\r\n<li>Require Node.js &gt;= 8.6</li>\r\n<li>Removed support for passing an array of brace patterns to\r\n<code>micromatch.braces()</code>.</li>\r\n<li>To strictly enforce closing brackets (for <code>{</code>,\r\n<code>[</code>, and <code>(</code>), you must now use\r\n<code>strictBrackets=true</code> instead of\r\n<code>strictErrors</code>.</li>\r\n<li><code>cache</code> - caching and all related options and methods\r\nhave been removed</li>\r\n<li><code>options.unixify</code> was renamed to\r\n<code>options.windows</code></li>\r\n<li><code>options.nodupes</code> Was removed. Duplicates are always\r\nremoved by default. You can override this with custom behavior by using\r\nthe <code>onMatch</code>, <code>onResult</code> and\r\n<code>onIgnore</code> functions.</li>\r\n<li><code>options.snapdragon</code> was removed, as snapdragon is no\r\nlonger used.</li>\r\n<li><code>options.sourcemap</code> was removed, as snapdragon is no\r\nlonger used, which provided sourcemap support.</li>\r\n</ul>\r\n<h2>[3.0.0] - 2017-04-11</h2>\r\n<p>Complete overhaul, with 36,000+ new unit tests validated against\r\nactual output generated by Bash and minimatch. More specifically,\r\n35,000+ of the tests:</p>\r\n<ul>\r\n<li>micromatch results are directly compared to bash results</li>\r\n<li>in rare cases, when micromatch and bash disagree, micromatch's\r\nresults are compared to minimatch's results</li>\r\n<li>micromatch is much more accurate than minimatch, so there were cases\r\nwhere I had to make assumptions. I'll try to document these.</li>\r\n</ul>\r\n<p>This refactor introduces a parser and compiler that are supersets of\r\nmore granular parsers and compilers from other sub-modules. Each of\r\nthese sub-modules has a singular responsibility and focuses on a certain\r\ntype of matching that aligns with a specific part of the Bash\r\n&quot;expansion&quot; API.</p>\r\n<p>These sub-modules work like plugins to seamlessly create the\r\nmicromatch parser/compiler, so that strings are parsed in one pass, an\r\n<a\r\nhref=\"https://gist.github.com/jonschlinkert/099c8914f56529f75bc757cc9e5e8e2a\">AST\r\nis created</a>, then a new string is generated by the compiler.</p>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/micromatch/micromatch/commit/8bd704ec0d9894693d35da425d827819916be920\"><code>8bd704e</code></a>\r\n4.0.8</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/micromatch/commit/a0e68416a44da10f3e4e30845ab95af4fd286d5a\"><code>a0e6841</code></a>\r\nrun verb to generate README documentation</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/micromatch/commit/4ec288484f6e8cccf597ad3d43529c31d0f7a02a\"><code>4ec2884</code></a>\r\nMerge branch 'v4' into hauserkristof-feature/v4.0.8</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade\"><code>03aa805</code></a>\r\nMerge pull request <a\r\nhref=\"https://redirect.github.com/micromatch/micromatch/issues/266\">#266</a>\r\nfrom hauserkristof/feature/v4.0.8</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/micromatch/commit/814f5f70efcd100ca9d29198867812a3d6ab91a8\"><code>814f5f7</code></a>\r\nlint</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/micromatch/commit/67fcce6a1077c2faf5ad0c5f998fa70202cc5dae\"><code>67fcce6</code></a>\r\nfix: CHANGELOG about braces &amp; CVE-2024-4068, v4.0.5</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/micromatch/commit/113f2e3fa7cb30b429eda7c4c38475a8e8ba1b30\"><code>113f2e3</code></a>\r\nfix: CVE numbers in CHANGELOG</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/micromatch/commit/d9dbd9a266686f44afb38da26fe016f96d1ec04f\"><code>d9dbd9a</code></a>\r\nfeat: updated CHANGELOG</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/micromatch/commit/2ab13157f416679f54e3a32b1425e184bd16749e\"><code>2ab1315</code></a>\r\nfix: use actions/setup-node@v4</li>\r\n<li><a\r\nhref=\"https://github.com/micromatch/micromatch/commit/1406ea38f3e24b29f4d4f46908d5cffcb3e6c4ce\"><code>1406ea3</code></a>\r\nfeat: rework test to work on macos with node 10,12 and 14</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/micromatch/micromatch/compare/4.0.4...4.0.8\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<br />\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=micromatch&package-manager=npm_and_yarn&previous-version=4.0.4&new-version=4.0.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/googlecodelabs/monolith-to-microservices/network/alerts).\r\n\r\n</details>\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump micromatch from 4.0.4 to 4.0.8 in /react-app (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2497227295\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googlecodelabs/monolith-to-microservices/issues/84\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googlecodelabs/monolith-to-microservices/pull/84/hovercard\" href=\"https://github.com/googlecodelabs/monolith-to-microservices/pull/84\">#84</a>)"}},{"before":"b454100d202f33a0e78eadd298d7127486a9519a","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/monolith/express-4.20.0","pushedAt":"2024-09-12T13:47:09.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"}},{"before":"d79b5a2bec9cdba5af398a002c22528c74dcd70e","after":"2c0b7ee795ed094c37cbd5b1c1f894daa90b79e6","ref":"refs/heads/master","pushedAt":"2024-09-12T13:47:08.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"},"commit":{"message":"Bump express from 4.18.2 to 4.20.0 in /monolith (#89)\n\nBumps [express](https://github.com/expressjs/express) from 4.18.2 to\r\n4.20.0.\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/releases\">express's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>4.20.0</h2>\r\n<h2>What's Changed</h2>\r\n<h3>Important</h3>\r\n<ul>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n</ul>\r\n<h3>Other Changes</h3>\r\n<ul>\r\n<li>4.19.2 Staging by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5561\">expressjs/express#5561</a></li>\r\n<li>remove duplicate location test for data uri by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5562\">expressjs/express#5562</a></li>\r\n<li>feat: document beta releases expectations by <a\r\nhref=\"https://github.com/marco-ippolito\"><code>@​marco-ippolito</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5565\">expressjs/express#5565</a></li>\r\n<li>Cut down on duplicated CI runs by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5564\">expressjs/express#5564</a></li>\r\n<li>Add a Threat Model by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5526\">expressjs/express#5526</a></li>\r\n<li>Assign captain of encodeurl by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5579\">expressjs/express#5579</a></li>\r\n<li>Nominate jonchurch as repo captain for <code>http-errors</code>,\r\n<code>expressjs.com</code>, <code>morgan</code>, <code>cors</code>,\r\n<code>body-parser</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5587\">expressjs/express#5587</a></li>\r\n<li>docs: update Security.md by <a\r\nhref=\"https://github.com/inigomarquinez\"><code>@​inigomarquinez</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5590\">expressjs/express#5590</a></li>\r\n<li>docs: update triage nomination policy by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5600\">expressjs/express#5600</a></li>\r\n<li>Add CodeQL (SAST) by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5433\">expressjs/express#5433</a></li>\r\n<li>docs: add UlisesGascon as triage initiative captain by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5605\">expressjs/express#5605</a></li>\r\n<li>deps: encodeurl@~2.0.0 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5569\">expressjs/express#5569</a></li>\r\n<li>skip QUERY method test by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5628\">expressjs/express#5628</a></li>\r\n<li>ignore ETAG query test on 21 and 22, reuse skip util by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5639\">expressjs/express#5639</a></li>\r\n<li>add support Node.js@22 in the CI by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5627\">expressjs/express#5627</a></li>\r\n<li>doc: add table of contents, tc/triager lists to readme by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5619\">expressjs/express#5619</a></li>\r\n<li>List and sort all projects, add captains by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5653\">expressjs/express#5653</a></li>\r\n<li>docs: add <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nas captain for cookie-parser by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5666\">expressjs/express#5666</a></li>\r\n<li>✨ bring back query tests for node 21 by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5690\">expressjs/express#5690</a></li>\r\n<li>[v4] Deprecate <code>res.clearCookie</code> accepting\r\n<code>options.maxAge</code> and <code>options.expires</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5672\">expressjs/express#5672</a></li>\r\n<li>skip QUERY tests for Node 21 only, still not supported by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5695\">expressjs/express#5695</a></li>\r\n<li>📝 update people, add ctcpip to TC by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5683\">expressjs/express#5683</a></li>\r\n<li>remove minor version pinning from ci by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5722\">expressjs/express#5722</a></li>\r\n<li>Fix link variable use in attribution section of CODE OF CONDUCT by\r\n<a href=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5762\">expressjs/express#5762</a></li>\r\n<li>Replace Appveyor windows testing with GHA by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5599\">expressjs/express#5599</a></li>\r\n<li>Add OSSF Scorecard badge by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5436\">expressjs/express#5436</a></li>\r\n<li>update scorecard link by <a\r\nhref=\"https://github.com/bjohansebas\"><code>@​bjohansebas</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5814\">expressjs/express#5814</a></li>\r\n<li>Nominate <a\r\nhref=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> to the\r\ntriage team by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5836\">expressjs/express#5836</a></li>\r\n<li>deps: path-to-regexp@0.1.8 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5603\">expressjs/express#5603</a></li>\r\n<li>docs: specify new instructions for <code>question</code> and\r\n<code>discuss</code> by <a\r\nhref=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5835\">expressjs/express#5835</a></li>\r\n<li>4.x: Upgrade <code>merge-descriptors</code> dependency by <a\r\nhref=\"https://github.com/RobinTail\"><code>@​RobinTail</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5781\">expressjs/express#5781</a></li>\r\n<li>path-to-regexp@0.1.10 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5902\">expressjs/express#5902</a></li>\r\n</ul>\r\n<h2>New Contributors</h2>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/marco-ippolito\"><code>@​marco-ippolito</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5565\">expressjs/express#5565</a></li>\r\n<li><a\r\nhref=\"https://github.com/inigomarquinez\"><code>@​inigomarquinez</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5590\">expressjs/express#5590</a></li>\r\n<li><a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5627\">expressjs/express#5627</a></li>\r\n<li><a href=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> made\r\ntheir first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5690\">expressjs/express#5690</a></li>\r\n<li><a\r\nhref=\"https://github.com/bjohansebas\"><code>@​bjohansebas</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5814\">expressjs/express#5814</a></li>\r\n</ul>\r\n<p><strong>Full Changelog</strong>: <a\r\nhref=\"https://github.com/expressjs/express/compare/4.19.1...4.20.0\">https://github.com/expressjs/express/compare/4.19.1...4.20.0</a></p>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/blob/master/History.md\">express's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h1>4.20.0 / 2024-09-10</h1>\r\n<ul>\r\n<li>deps: serve-static@0.16.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: send@0.19.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: body-parser@0.6.0\r\n<ul>\r\n<li>add <code>depth</code> option to customize the depth level in the\r\nparser</li>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n</ul>\r\n</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n<li>deps: path-to-regexp@0.1.10\r\n<ul>\r\n<li>Adds support for named matching groups in the routes using a\r\nregex</li>\r\n<li>Adds backtracking protection to parameters without regexes\r\ndefined</li>\r\n</ul>\r\n</li>\r\n<li>deps: encodeurl@~2.0.0\r\n<ul>\r\n<li>Removes encoding of <code>\\</code>, <code>|</code>, and\r\n<code>^</code> to align better with URL spec</li>\r\n</ul>\r\n</li>\r\n<li>Deprecate passing <code>options.maxAge</code> and\r\n<code>options.expires</code> to <code>res.clearCookie</code>\r\n<ul>\r\n<li>Will be ignored in v5, clearCookie will set a cookie with an expires\r\nin the past to instruct clients to delete the cookie</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<h1>4.19.2 / 2024-03-25</h1>\r\n<ul>\r\n<li>Improved fix for open redirect allow list bypass</li>\r\n</ul>\r\n<h1>4.19.1 / 2024-03-20</h1>\r\n<ul>\r\n<li>Allow passing non-strings to res.location with new encoding handling\r\nchecks</li>\r\n</ul>\r\n<h1>4.19.0 / 2024-03-20</h1>\r\n<ul>\r\n<li>Prevent open redirect allow list bypass due to encodeurl</li>\r\n<li>deps: cookie@0.6.0</li>\r\n</ul>\r\n<h1>4.18.3 / 2024-02-29</h1>\r\n<ul>\r\n<li>Fix routing requests without method</li>\r\n<li>deps: body-parser@1.20.2\r\n<ul>\r\n<li>Fix strict json error message on Node.js 19+</li>\r\n<li>deps: content-type@~1.0.5</li>\r\n<li>deps: raw-body@2.5.2</li>\r\n</ul>\r\n</li>\r\n<li>deps: cookie@0.6.0\r\n<ul>\r\n<li>Add <code>partitioned</code> option</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/21df421ebc7a5249bb31101da666bbf22adc3f18\"><code>21df421</code></a>\r\n4.20.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/4c9ddc1c47bf579e55c2fe837d76a952e9fd8959\"><code>4c9ddc1</code></a>\r\nfeat: upgrade to serve-static@0.16.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/9ebe5d500d22cbb2b8aaa73446866b084c747971\"><code>9ebe5d5</code></a>\r\nfeat: upgrade to send@0.19.0 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5928\">#5928</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/ec4a01b6b8814d7b007f36a3023f4dbafdbc3d09\"><code>ec4a01b</code></a>\r\nfeat: upgrade to body-parser@1.20.3 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5926\">#5926</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553\"><code>54271f6</code></a>\r\nfix: don't render redirect values in anchor href</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/125bb742a38cd97938a3932b47cc301e41c31f5d\"><code>125bb74</code></a>\r\npath-to-regexp@0.1.10 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5902\">#5902</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/2a980ad16052e53b398c9953fea50e3daa0b495c\"><code>2a980ad</code></a>\r\nmerge-descriptors@1.0.3 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5781\">#5781</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/a3e7e05e0a435b7b4be25bd38d8d0ca19a773ca9\"><code>a3e7e05</code></a>\r\ndocs: specify new instructions for <code>question</code> and\r\n<code>discuss</code></li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/c5addb9a17c5b4c9fccdd2c04153a30595e03385\"><code>c5addb9</code></a>\r\ndeps: path-to-regexp@0.1.8 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5603\">#5603</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/e35380a39d94937e3d0f7119e0efbc7cd69d003f\"><code>e35380a</code></a>\r\ndocs: add <a\r\nhref=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> to the\r\ntriage team (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5836\">#5836</a>)</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/expressjs/express/compare/4.18.2...4.20.0\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<details>\r\n<summary>Maintainer changes</summary>\r\n<p>This version was pushed to npm by <a\r\nhref=\"https://www.npmjs.com/~ulisesgascon\">ulisesgascon</a>, a new\r\nreleaser for express since your current version.</p>\r\n</details>\r\n<br />\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=express&package-manager=npm_and_yarn&previous-version=4.18.2&new-version=4.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/googlecodelabs/monolith-to-microservices/network/alerts).\r\n\r\n</details>\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump express from 4.18.2 to 4.20.0 in /monolith (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2522445582\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googlecodelabs/monolith-to-microservices/issues/89\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googlecodelabs/monolith-to-microservices/pull/89/hovercard\" href=\"https://github.com/googlecodelabs/monolith-to-microservices/pull/89\">#89</a>)"}},{"before":"a1a28211154d8b694c568bea26e384bdc6d6c05a","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/react-app/multi-d66d039ac5","pushedAt":"2024-09-12T13:46:51.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"}},{"before":"5b326316362663e4739986e90fccc904addf6008","after":"d79b5a2bec9cdba5af398a002c22528c74dcd70e","ref":"refs/heads/master","pushedAt":"2024-09-12T13:46:49.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"},"commit":{"message":"Bump serve-static and express in /react-app (#91)\n\nBumps [serve-static](https://github.com/expressjs/serve-static) to\r\n1.16.2 and updates ancestor dependency\r\n[express](https://github.com/expressjs/express). These dependencies need\r\nto be updated together.\r\n\r\nUpdates `serve-static` from 1.15.0 to 1.16.2\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/serve-static/releases\">serve-static's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>1.16.0</h2>\r\n<h2>What's Changed</h2>\r\n<ul>\r\n<li>Remove link renderization in html while redirecting (<a\r\nhref=\"https://redirect.github.com/expressjs/serve-static/pull/173\">expressjs/serve-static#173</a>)</li>\r\n</ul>\r\n<h2>New Contributors</h2>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/serve-static/pull/173\">expressjs/serve-static#173</a></li>\r\n</ul>\r\n<p><strong>Full Changelog</strong>: <a\r\nhref=\"https://github.com/expressjs/serve-static/compare/v1.15.0...1.16.0\">https://github.com/expressjs/serve-static/compare/v1.15.0...1.16.0</a></p>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md\">serve-static's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h1>1.16.2 / 2024-09-11</h1>\r\n<ul>\r\n<li>deps: encodeurl@~2.0.0</li>\r\n</ul>\r\n<h1>1.16.1 / 2024-09-11</h1>\r\n<ul>\r\n<li>deps: send@0.19.0</li>\r\n</ul>\r\n<h1>1.16.0 / 2024-09-10</h1>\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/ec9c5ecfb09368519e4698ffbbe1882de00d0ef2\"><code>ec9c5ec</code></a>\r\n1.16.2</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/f454d37c68fdad04b582cb9ac0cd165ab6d19114\"><code>f454d37</code></a>\r\nfix(deps): encodeurl@~2.0.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/77a8255688cc4affc70e6dc9aa02e3ced4957e77\"><code>77a8255</code></a>\r\n1.16.1</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/4263f496876980c165a3104d087c1ebaa046ad3d\"><code>4263f49</code></a>\r\nfix(deps): send@0.19.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/48c73970b129b96cba448e792576ad89b1f9fbed\"><code>48c7397</code></a>\r\n1.16.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/0c11fad159898cdc69fd9ab63269b72468ecaf6b\"><code>0c11fad</code></a>\r\nMerge commit from fork</li>\r\n<li>See full diff in <a\r\nhref=\"https://github.com/expressjs/serve-static/compare/v1.15.0...v1.16.2\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<details>\r\n<summary>Maintainer changes</summary>\r\n<p>This version was pushed to npm by <a\r\nhref=\"https://www.npmjs.com/~wesleytodd\">wesleytodd</a>, a new releaser\r\nfor serve-static since your current version.</p>\r\n</details>\r\n<br />\r\n\r\nUpdates `express` from 4.18.2 to 4.21.0\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/releases\">express's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>4.21.0</h2>\r\n<h2>What's Changed</h2>\r\n<ul>\r\n<li>Deprecate <code>&quot;back&quot;</code> magic string in redirects by\r\n<a href=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5935\">expressjs/express#5935</a></li>\r\n<li>finalhandler@1.3.1 by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5954\">expressjs/express#5954</a></li>\r\n<li>fix(deps): serve-static@1.16.2 by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5951\">expressjs/express#5951</a></li>\r\n<li>Upgraded dependency qs to 6.13.0 to match qs in body-parser by <a\r\nhref=\"https://github.com/agadzinski93\"><code>@​agadzinski93</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5946\">expressjs/express#5946</a></li>\r\n</ul>\r\n<h2>New Contributors</h2>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/agadzinski93\"><code>@​agadzinski93</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5946\">expressjs/express#5946</a></li>\r\n</ul>\r\n<p><strong>Full Changelog</strong>: <a\r\nhref=\"https://github.com/expressjs/express/compare/4.20.0...4.21.0\">https://github.com/expressjs/express/compare/4.20.0...4.21.0</a></p>\r\n<h2>4.20.0</h2>\r\n<h2>What's Changed</h2>\r\n<h3>Important</h3>\r\n<ul>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n</ul>\r\n<h3>Other Changes</h3>\r\n<ul>\r\n<li>4.19.2 Staging by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5561\">expressjs/express#5561</a></li>\r\n<li>remove duplicate location test for data uri by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5562\">expressjs/express#5562</a></li>\r\n<li>feat: document beta releases expectations by <a\r\nhref=\"https://github.com/marco-ippolito\"><code>@​marco-ippolito</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5565\">expressjs/express#5565</a></li>\r\n<li>Cut down on duplicated CI runs by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5564\">expressjs/express#5564</a></li>\r\n<li>Add a Threat Model by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5526\">expressjs/express#5526</a></li>\r\n<li>Assign captain of encodeurl by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5579\">expressjs/express#5579</a></li>\r\n<li>Nominate jonchurch as repo captain for <code>http-errors</code>,\r\n<code>expressjs.com</code>, <code>morgan</code>, <code>cors</code>,\r\n<code>body-parser</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5587\">expressjs/express#5587</a></li>\r\n<li>docs: update Security.md by <a\r\nhref=\"https://github.com/inigomarquinez\"><code>@​inigomarquinez</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5590\">expressjs/express#5590</a></li>\r\n<li>docs: update triage nomination policy by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5600\">expressjs/express#5600</a></li>\r\n<li>Add CodeQL (SAST) by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5433\">expressjs/express#5433</a></li>\r\n<li>docs: add UlisesGascon as triage initiative captain by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5605\">expressjs/express#5605</a></li>\r\n<li>deps: encodeurl@~2.0.0 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5569\">expressjs/express#5569</a></li>\r\n<li>skip QUERY method test by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5628\">expressjs/express#5628</a></li>\r\n<li>ignore ETAG query test on 21 and 22, reuse skip util by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5639\">expressjs/express#5639</a></li>\r\n<li>add support Node.js@22 in the CI by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5627\">expressjs/express#5627</a></li>\r\n<li>doc: add table of contents, tc/triager lists to readme by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5619\">expressjs/express#5619</a></li>\r\n<li>List and sort all projects, add captains by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5653\">expressjs/express#5653</a></li>\r\n<li>docs: add <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nas captain for cookie-parser by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5666\">expressjs/express#5666</a></li>\r\n<li>✨ bring back query tests for node 21 by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5690\">expressjs/express#5690</a></li>\r\n<li>[v4] Deprecate <code>res.clearCookie</code> accepting\r\n<code>options.maxAge</code> and <code>options.expires</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5672\">expressjs/express#5672</a></li>\r\n<li>skip QUERY tests for Node 21 only, still not supported by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5695\">expressjs/express#5695</a></li>\r\n<li>📝 update people, add ctcpip to TC by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5683\">expressjs/express#5683</a></li>\r\n<li>remove minor version pinning from ci by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5722\">expressjs/express#5722</a></li>\r\n<li>Fix link variable use in attribution section of CODE OF CONDUCT by\r\n<a href=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5762\">expressjs/express#5762</a></li>\r\n<li>Replace Appveyor windows testing with GHA by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5599\">expressjs/express#5599</a></li>\r\n<li>Add OSSF Scorecard badge by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5436\">expressjs/express#5436</a></li>\r\n<li>update scorecard link by <a\r\nhref=\"https://github.com/bjohansebas\"><code>@​bjohansebas</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5814\">expressjs/express#5814</a></li>\r\n<li>Nominate <a\r\nhref=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> to the\r\ntriage team by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5836\">expressjs/express#5836</a></li>\r\n<li>deps: path-to-regexp@0.1.8 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5603\">expressjs/express#5603</a></li>\r\n</ul>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/blob/4.21.0/History.md\">express's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h1>4.21.0 / 2024-09-11</h1>\r\n<ul>\r\n<li>Deprecate <code>res.location(&quot;back&quot;)</code> and\r\n<code>res.redirect(&quot;back&quot;)</code> magic string</li>\r\n<li>deps: serve-static@1.16.2\r\n<ul>\r\n<li>includes send@0.19.0</li>\r\n</ul>\r\n</li>\r\n<li>deps: finalhandler@1.3.1</li>\r\n<li>deps: qs@6.13.0</li>\r\n</ul>\r\n<h1>4.20.0 / 2024-09-10</h1>\r\n<ul>\r\n<li>deps: serve-static@0.16.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: send@0.19.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: body-parser@0.6.0\r\n<ul>\r\n<li>add <code>depth</code> option to customize the depth level in the\r\nparser</li>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n</ul>\r\n</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n<li>deps: path-to-regexp@0.1.10\r\n<ul>\r\n<li>Adds support for named matching groups in the routes using a\r\nregex</li>\r\n<li>Adds backtracking protection to parameters without regexes\r\ndefined</li>\r\n</ul>\r\n</li>\r\n<li>deps: encodeurl@~2.0.0\r\n<ul>\r\n<li>Removes encoding of <code>\\</code>, <code>|</code>, and\r\n<code>^</code> to align better with URL spec</li>\r\n</ul>\r\n</li>\r\n<li>Deprecate passing <code>options.maxAge</code> and\r\n<code>options.expires</code> to <code>res.clearCookie</code>\r\n<ul>\r\n<li>Will be ignored in v5, clearCookie will set a cookie with an expires\r\nin the past to instruct clients to delete the cookie</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<h1>4.19.2 / 2024-03-25</h1>\r\n<ul>\r\n<li>Improved fix for open redirect allow list bypass</li>\r\n</ul>\r\n<h1>4.19.1 / 2024-03-20</h1>\r\n<ul>\r\n<li>Allow passing non-strings to res.location with new encoding handling\r\nchecks</li>\r\n</ul>\r\n<h1>4.19.0 / 2024-03-20</h1>\r\n<ul>\r\n<li>Prevent open redirect allow list bypass due to encodeurl</li>\r\n<li>deps: cookie@0.6.0</li>\r\n</ul>\r\n<h1>4.18.3 / 2024-02-29</h1>\r\n<ul>\r\n<li>Fix routing requests without method</li>\r\n<li>deps: body-parser@1.20.2\r\n<ul>\r\n<li>Fix strict json error message on Node.js 19+</li>\r\n<li>deps: content-type@~1.0.5</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/7e562c6d8daddff4604f8efaaf9db2cf98c6dcff\"><code>7e562c6</code></a>\r\n4.21.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/1bcde96bc87c4704df9a704271d1167064ab56bb\"><code>1bcde96</code></a>\r\nfix(deps): qs@6.13.0 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5946\">#5946</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/7d364775688be98aaa973302e066d0da9f438997\"><code>7d36477</code></a>\r\nfix(deps): serve-static@1.16.2 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5951\">#5951</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/40d2d8f2c882712a0f2e4603c38d166c79676b2b\"><code>40d2d8f</code></a>\r\nfix(deps): finalhandler@1.3.1</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/77ada906dba57fd6e308f0d750e01653dbeaddfc\"><code>77ada90</code></a>\r\nDeprecate <code>&quot;back&quot;</code> magic string in redirects (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5935\">#5935</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/21df421ebc7a5249bb31101da666bbf22adc3f18\"><code>21df421</code></a>\r\n4.20.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/4c9ddc1c47bf579e55c2fe837d76a952e9fd8959\"><code>4c9ddc1</code></a>\r\nfeat: upgrade to serve-static@0.16.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/9ebe5d500d22cbb2b8aaa73446866b084c747971\"><code>9ebe5d5</code></a>\r\nfeat: upgrade to send@0.19.0 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5928\">#5928</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/ec4a01b6b8814d7b007f36a3023f4dbafdbc3d09\"><code>ec4a01b</code></a>\r\nfeat: upgrade to body-parser@1.20.3 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5926\">#5926</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553\"><code>54271f6</code></a>\r\nfix: don't render redirect values in anchor href</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/expressjs/express/compare/4.18.2...4.21.0\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<details>\r\n<summary>Maintainer changes</summary>\r\n<p>This version was pushed to npm by <a\r\nhref=\"https://www.npmjs.com/~wesleytodd\">wesleytodd</a>, a new releaser\r\nfor express since your current version.</p>\r\n</details>\r\n<br />\r\n\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/googlecodelabs/monolith-to-microservices/network/alerts).\r\n\r\n</details>\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump serve-static and express in /react-app (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2522445816\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googlecodelabs/monolith-to-microservices/issues/91\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googlecodelabs/monolith-to-microservices/pull/91/hovercard\" href=\"https://github.com/googlecodelabs/monolith-to-microservices/pull/91\">#91</a>)"}},{"before":"8addc887241c0dd93d5852dc46562c31995720de","after":"a1a28211154d8b694c568bea26e384bdc6d6c05a","ref":"refs/heads/dependabot/npm_and_yarn/react-app/multi-d66d039ac5","pushedAt":"2024-09-12T13:45:37.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump serve-static and express in /react-app\n\nBumps [serve-static](https://github.com/expressjs/serve-static) to 1.16.2 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.\n\n\nUpdates `serve-static` from 1.15.0 to 1.16.2\n- [Release notes](https://github.com/expressjs/serve-static/releases)\n- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)\n- [Commits](https://github.com/expressjs/serve-static/compare/v1.15.0...v1.16.2)\n\nUpdates `express` from 4.18.2 to 4.21.0\n- [Release notes](https://github.com/expressjs/express/releases)\n- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)\n- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.21.0)\n\n---\nupdated-dependencies:\n- dependency-name: serve-static\n  dependency-type: indirect\n- dependency-name: express\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"Bump serve-static and express in /react-app"}},{"before":"3b2d26ff07b3ba0688c1edb3bb1722171ed78b01","after":"b454100d202f33a0e78eadd298d7127486a9519a","ref":"refs/heads/dependabot/npm_and_yarn/monolith/express-4.20.0","pushedAt":"2024-09-12T13:45:34.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump express from 4.18.2 to 4.20.0 in /monolith\n\nBumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.20.0.\n- [Release notes](https://github.com/expressjs/express/releases)\n- [Changelog](https://github.com/expressjs/express/blob/master/History.md)\n- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.20.0)\n\n---\nupdated-dependencies:\n- dependency-name: express\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"Bump express from 4.18.2 to 4.20.0 in /monolith"}},{"before":"f9e419e35053dac7cb80a49eacbea96cd46bf317","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/microservices/multi-ceff1a497b","pushedAt":"2024-09-12T13:45:26.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"d6186ced250444e8d93aafa98c041cff6ec08f12","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/microservices/src/frontend/multi-27a054522e","pushedAt":"2024-09-12T13:45:26.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"abf4df1535fd5f26f5840bba412b0efb019adf5f","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/microservices/multi-cf87d80143","pushedAt":"2024-09-12T13:44:06.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"}},{"before":"5fd82270d6f9069dd182186480775fb78c2178c3","after":"5b326316362663e4739986e90fccc904addf6008","ref":"refs/heads/master","pushedAt":"2024-09-12T13:44:03.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"},"commit":{"message":"Bump send and express in /microservices (#90)\n\nBumps [send](https://github.com/pillarjs/send) to 0.19.0 and updates\r\nancestor dependency [express](https://github.com/expressjs/express).\r\nThese dependencies need to be updated together.\r\n\r\nUpdates `send` from 0.18.0 to 0.19.0\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/pillarjs/send/releases\">send's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>0.19.0</h2>\r\n<h2>What's Changed</h2>\r\n<ul>\r\n<li>Remove link renderization in html while redirecting (<a\r\nhref=\"https://redirect.github.com/pillarjs/send/pull/235\">pillarjs/send#235</a>)</li>\r\n</ul>\r\n<h2>New Contributors</h2>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/pillarjs/send/pull/235\">pillarjs/send#235</a></li>\r\n</ul>\r\n<p><strong>Full Changelog</strong>: <a\r\nhref=\"https://github.com/pillarjs/send/compare/0.18.0...0.19.0\">https://github.com/pillarjs/send/compare/0.18.0...0.19.0</a></p>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/pillarjs/send/blob/master/HISTORY.md\">send's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h1>0.19.0 / 2024-09-10</h1>\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/9d2db99518b366d20783fe1c08a1b9bd418929ce\"><code>9d2db99</code></a>\r\n0.19.0</li>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/ae4f2989491b392ae2ef3b0015a019770ae65d35\"><code>ae4f298</code></a>\r\nMerge commit from fork</li>\r\n<li>See full diff in <a\r\nhref=\"https://github.com/pillarjs/send/compare/0.18.0...0.19.0\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<details>\r\n<summary>Maintainer changes</summary>\r\n<p>This version was pushed to npm by <a\r\nhref=\"https://www.npmjs.com/~ulisesgascon\">ulisesgascon</a>, a new\r\nreleaser for send since your current version.</p>\r\n</details>\r\n<br />\r\n\r\nUpdates `express` from 4.18.2 to 4.21.0\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/releases\">express's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>4.21.0</h2>\r\n<h2>What's Changed</h2>\r\n<ul>\r\n<li>Deprecate <code>&quot;back&quot;</code> magic string in redirects by\r\n<a href=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5935\">expressjs/express#5935</a></li>\r\n<li>finalhandler@1.3.1 by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5954\">expressjs/express#5954</a></li>\r\n<li>fix(deps): serve-static@1.16.2 by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5951\">expressjs/express#5951</a></li>\r\n<li>Upgraded dependency qs to 6.13.0 to match qs in body-parser by <a\r\nhref=\"https://github.com/agadzinski93\"><code>@​agadzinski93</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5946\">expressjs/express#5946</a></li>\r\n</ul>\r\n<h2>New Contributors</h2>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/agadzinski93\"><code>@​agadzinski93</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5946\">expressjs/express#5946</a></li>\r\n</ul>\r\n<p><strong>Full Changelog</strong>: <a\r\nhref=\"https://github.com/expressjs/express/compare/4.20.0...4.21.0\">https://github.com/expressjs/express/compare/4.20.0...4.21.0</a></p>\r\n<h2>4.20.0</h2>\r\n<h2>What's Changed</h2>\r\n<h3>Important</h3>\r\n<ul>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n</ul>\r\n<h3>Other Changes</h3>\r\n<ul>\r\n<li>4.19.2 Staging by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5561\">expressjs/express#5561</a></li>\r\n<li>remove duplicate location test for data uri by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5562\">expressjs/express#5562</a></li>\r\n<li>feat: document beta releases expectations by <a\r\nhref=\"https://github.com/marco-ippolito\"><code>@​marco-ippolito</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5565\">expressjs/express#5565</a></li>\r\n<li>Cut down on duplicated CI runs by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5564\">expressjs/express#5564</a></li>\r\n<li>Add a Threat Model by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5526\">expressjs/express#5526</a></li>\r\n<li>Assign captain of encodeurl by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5579\">expressjs/express#5579</a></li>\r\n<li>Nominate jonchurch as repo captain for <code>http-errors</code>,\r\n<code>expressjs.com</code>, <code>morgan</code>, <code>cors</code>,\r\n<code>body-parser</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5587\">expressjs/express#5587</a></li>\r\n<li>docs: update Security.md by <a\r\nhref=\"https://github.com/inigomarquinez\"><code>@​inigomarquinez</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5590\">expressjs/express#5590</a></li>\r\n<li>docs: update triage nomination policy by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5600\">expressjs/express#5600</a></li>\r\n<li>Add CodeQL (SAST) by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5433\">expressjs/express#5433</a></li>\r\n<li>docs: add UlisesGascon as triage initiative captain by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5605\">expressjs/express#5605</a></li>\r\n<li>deps: encodeurl@~2.0.0 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5569\">expressjs/express#5569</a></li>\r\n<li>skip QUERY method test by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5628\">expressjs/express#5628</a></li>\r\n<li>ignore ETAG query test on 21 and 22, reuse skip util by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5639\">expressjs/express#5639</a></li>\r\n<li>add support Node.js@22 in the CI by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5627\">expressjs/express#5627</a></li>\r\n<li>doc: add table of contents, tc/triager lists to readme by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5619\">expressjs/express#5619</a></li>\r\n<li>List and sort all projects, add captains by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5653\">expressjs/express#5653</a></li>\r\n<li>docs: add <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nas captain for cookie-parser by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5666\">expressjs/express#5666</a></li>\r\n<li>✨ bring back query tests for node 21 by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5690\">expressjs/express#5690</a></li>\r\n<li>[v4] Deprecate <code>res.clearCookie</code> accepting\r\n<code>options.maxAge</code> and <code>options.expires</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5672\">expressjs/express#5672</a></li>\r\n<li>skip QUERY tests for Node 21 only, still not supported by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5695\">expressjs/express#5695</a></li>\r\n<li>📝 update people, add ctcpip to TC by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5683\">expressjs/express#5683</a></li>\r\n<li>remove minor version pinning from ci by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5722\">expressjs/express#5722</a></li>\r\n<li>Fix link variable use in attribution section of CODE OF CONDUCT by\r\n<a href=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5762\">expressjs/express#5762</a></li>\r\n<li>Replace Appveyor windows testing with GHA by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5599\">expressjs/express#5599</a></li>\r\n<li>Add OSSF Scorecard badge by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5436\">expressjs/express#5436</a></li>\r\n<li>update scorecard link by <a\r\nhref=\"https://github.com/bjohansebas\"><code>@​bjohansebas</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5814\">expressjs/express#5814</a></li>\r\n<li>Nominate <a\r\nhref=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> to the\r\ntriage team by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5836\">expressjs/express#5836</a></li>\r\n<li>deps: path-to-regexp@0.1.8 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5603\">expressjs/express#5603</a></li>\r\n</ul>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/blob/4.21.0/History.md\">express's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h1>4.21.0 / 2024-09-11</h1>\r\n<ul>\r\n<li>Deprecate <code>res.location(&quot;back&quot;)</code> and\r\n<code>res.redirect(&quot;back&quot;)</code> magic string</li>\r\n<li>deps: serve-static@1.16.2\r\n<ul>\r\n<li>includes send@0.19.0</li>\r\n</ul>\r\n</li>\r\n<li>deps: finalhandler@1.3.1</li>\r\n<li>deps: qs@6.13.0</li>\r\n</ul>\r\n<h1>4.20.0 / 2024-09-10</h1>\r\n<ul>\r\n<li>deps: serve-static@0.16.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: send@0.19.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: body-parser@0.6.0\r\n<ul>\r\n<li>add <code>depth</code> option to customize the depth level in the\r\nparser</li>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n</ul>\r\n</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n<li>deps: path-to-regexp@0.1.10\r\n<ul>\r\n<li>Adds support for named matching groups in the routes using a\r\nregex</li>\r\n<li>Adds backtracking protection to parameters without regexes\r\ndefined</li>\r\n</ul>\r\n</li>\r\n<li>deps: encodeurl@~2.0.0\r\n<ul>\r\n<li>Removes encoding of <code>\\</code>, <code>|</code>, and\r\n<code>^</code> to align better with URL spec</li>\r\n</ul>\r\n</li>\r\n<li>Deprecate passing <code>options.maxAge</code> and\r\n<code>options.expires</code> to <code>res.clearCookie</code>\r\n<ul>\r\n<li>Will be ignored in v5, clearCookie will set a cookie with an expires\r\nin the past to instruct clients to delete the cookie</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<h1>4.19.2 / 2024-03-25</h1>\r\n<ul>\r\n<li>Improved fix for open redirect allow list bypass</li>\r\n</ul>\r\n<h1>4.19.1 / 2024-03-20</h1>\r\n<ul>\r\n<li>Allow passing non-strings to res.location with new encoding handling\r\nchecks</li>\r\n</ul>\r\n<h1>4.19.0 / 2024-03-20</h1>\r\n<ul>\r\n<li>Prevent open redirect allow list bypass due to encodeurl</li>\r\n<li>deps: cookie@0.6.0</li>\r\n</ul>\r\n<h1>4.18.3 / 2024-02-29</h1>\r\n<ul>\r\n<li>Fix routing requests without method</li>\r\n<li>deps: body-parser@1.20.2\r\n<ul>\r\n<li>Fix strict json error message on Node.js 19+</li>\r\n<li>deps: content-type@~1.0.5</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/7e562c6d8daddff4604f8efaaf9db2cf98c6dcff\"><code>7e562c6</code></a>\r\n4.21.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/1bcde96bc87c4704df9a704271d1167064ab56bb\"><code>1bcde96</code></a>\r\nfix(deps): qs@6.13.0 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5946\">#5946</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/7d364775688be98aaa973302e066d0da9f438997\"><code>7d36477</code></a>\r\nfix(deps): serve-static@1.16.2 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5951\">#5951</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/40d2d8f2c882712a0f2e4603c38d166c79676b2b\"><code>40d2d8f</code></a>\r\nfix(deps): finalhandler@1.3.1</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/77ada906dba57fd6e308f0d750e01653dbeaddfc\"><code>77ada90</code></a>\r\nDeprecate <code>&quot;back&quot;</code> magic string in redirects (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5935\">#5935</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/21df421ebc7a5249bb31101da666bbf22adc3f18\"><code>21df421</code></a>\r\n4.20.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/4c9ddc1c47bf579e55c2fe837d76a952e9fd8959\"><code>4c9ddc1</code></a>\r\nfeat: upgrade to serve-static@0.16.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/9ebe5d500d22cbb2b8aaa73446866b084c747971\"><code>9ebe5d5</code></a>\r\nfeat: upgrade to send@0.19.0 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5928\">#5928</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/ec4a01b6b8814d7b007f36a3023f4dbafdbc3d09\"><code>ec4a01b</code></a>\r\nfeat: upgrade to body-parser@1.20.3 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5926\">#5926</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553\"><code>54271f6</code></a>\r\nfix: don't render redirect values in anchor href</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/expressjs/express/compare/4.18.2...4.21.0\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<details>\r\n<summary>Maintainer changes</summary>\r\n<p>This version was pushed to npm by <a\r\nhref=\"https://www.npmjs.com/~wesleytodd\">wesleytodd</a>, a new releaser\r\nfor express since your current version.</p>\r\n</details>\r\n<br />\r\n\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/googlecodelabs/monolith-to-microservices/network/alerts).\r\n\r\n</details>\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump send and express in /microservices (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2522445745\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googlecodelabs/monolith-to-microservices/issues/90\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googlecodelabs/monolith-to-microservices/pull/90/hovercard\" href=\"https://github.com/googlecodelabs/monolith-to-microservices/pull/90\">#90</a>)"}},{"before":null,"after":"8addc887241c0dd93d5852dc46562c31995720de","ref":"refs/heads/dependabot/npm_and_yarn/react-app/multi-d66d039ac5","pushedAt":"2024-09-12T13:43:47.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump serve-static and express in /react-app\n\nBumps [serve-static](https://github.com/expressjs/serve-static) to 1.16.2 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.\n\n\nUpdates `serve-static` from 1.15.0 to 1.16.2\n- [Release notes](https://github.com/expressjs/serve-static/releases)\n- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)\n- [Commits](https://github.com/expressjs/serve-static/compare/v1.15.0...v1.16.2)\n\nUpdates `express` from 4.18.2 to 4.21.0\n- [Release notes](https://github.com/expressjs/express/releases)\n- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)\n- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.21.0)\n\n---\nupdated-dependencies:\n- dependency-name: serve-static\n  dependency-type: indirect\n- dependency-name: express\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"Bump serve-static and express in /react-app"}},{"before":null,"after":"abf4df1535fd5f26f5840bba412b0efb019adf5f","ref":"refs/heads/dependabot/npm_and_yarn/microservices/multi-cf87d80143","pushedAt":"2024-09-12T13:43:45.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump send and express in /microservices\n\nBumps [send](https://github.com/pillarjs/send) to 0.19.0 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.\n\n\nUpdates `send` from 0.18.0 to 0.19.0\n- [Release notes](https://github.com/pillarjs/send/releases)\n- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)\n- [Commits](https://github.com/pillarjs/send/compare/0.18.0...0.19.0)\n\nUpdates `express` from 4.18.2 to 4.21.0\n- [Release notes](https://github.com/expressjs/express/releases)\n- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)\n- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.21.0)\n\n---\nupdated-dependencies:\n- dependency-name: send\n  dependency-type: indirect\n- dependency-name: express\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"Bump send and express in /microservices"}},{"before":null,"after":"3b2d26ff07b3ba0688c1edb3bb1722171ed78b01","ref":"refs/heads/dependabot/npm_and_yarn/monolith/express-4.20.0","pushedAt":"2024-09-12T13:43:41.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump express from 4.18.2 to 4.20.0 in /monolith\n\nBumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.20.0.\n- [Release notes](https://github.com/expressjs/express/releases)\n- [Changelog](https://github.com/expressjs/express/blob/master/History.md)\n- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.20.0)\n\n---\nupdated-dependencies:\n- dependency-name: express\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"Bump express from 4.18.2 to 4.20.0 in /monolith"}},{"before":"a9f3e85b9b122d0692e4d3fcb27f854a05fde2f6","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/microservices/src/orders/multi-d66d039ac5","pushedAt":"2024-09-12T13:42:59.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"}},{"before":"6f268e4290b69080c0c592d2c6e2b4a92ebd8160","after":"5fd82270d6f9069dd182186480775fb78c2178c3","ref":"refs/heads/master","pushedAt":"2024-09-12T13:42:57.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"},"commit":{"message":"Bump serve-static and express in /microservices/src/orders (#87)\n\nBumps [serve-static](https://github.com/expressjs/serve-static) to\r\n1.16.2 and updates ancestor dependency\r\n[express](https://github.com/expressjs/express). These dependencies need\r\nto be updated together.\r\n\r\nUpdates `serve-static` from 1.14.1 to 1.16.2\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/serve-static/releases\">serve-static's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>1.16.0</h2>\r\n<h2>What's Changed</h2>\r\n<ul>\r\n<li>Remove link renderization in html while redirecting (<a\r\nhref=\"https://redirect.github.com/expressjs/serve-static/pull/173\">expressjs/serve-static#173</a>)</li>\r\n</ul>\r\n<h2>New Contributors</h2>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/serve-static/pull/173\">expressjs/serve-static#173</a></li>\r\n</ul>\r\n<p><strong>Full Changelog</strong>: <a\r\nhref=\"https://github.com/expressjs/serve-static/compare/v1.15.0...1.16.0\">https://github.com/expressjs/serve-static/compare/v1.15.0...1.16.0</a></p>\r\n<h2>1.15.0</h2>\r\n<ul>\r\n<li>deps: send@0.18.0\r\n<ul>\r\n<li>Fix emitted 416 error missing headers property</li>\r\n<li>Limit the headers removed for 304 response</li>\r\n<li>deps: depd@2.0.0</li>\r\n<li>deps: destroy@1.2.0</li>\r\n<li>deps: http-errors@2.0.0</li>\r\n<li>deps: on-finished@2.4.1</li>\r\n<li>deps: statuses@2.0.1</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<h2>1.14.2</h2>\r\n<ul>\r\n<li>deps: send@0.17.2\r\n<ul>\r\n<li>deps: http-errors@1.8.1</li>\r\n<li>deps: ms@2.1.3</li>\r\n<li>pref: ignore empty http tokens</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md\">serve-static's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h1>1.16.2 / 2024-09-11</h1>\r\n<ul>\r\n<li>deps: encodeurl@~2.0.0</li>\r\n</ul>\r\n<h1>1.16.1 / 2024-09-11</h1>\r\n<ul>\r\n<li>deps: send@0.19.0</li>\r\n</ul>\r\n<h1>1.16.0 / 2024-09-10</h1>\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n<h1>1.15.0 / 2022-03-24</h1>\r\n<ul>\r\n<li>deps: send@0.18.0\r\n<ul>\r\n<li>Fix emitted 416 error missing headers property</li>\r\n<li>Limit the headers removed for 304 response</li>\r\n<li>deps: depd@2.0.0</li>\r\n<li>deps: destroy@1.2.0</li>\r\n<li>deps: http-errors@2.0.0</li>\r\n<li>deps: on-finished@2.4.1</li>\r\n<li>deps: statuses@2.0.1</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<h1>1.14.2 / 2021-12-15</h1>\r\n<ul>\r\n<li>deps: send@0.17.2\r\n<ul>\r\n<li>deps: http-errors@1.8.1</li>\r\n<li>deps: ms@2.1.3</li>\r\n<li>pref: ignore empty http tokens</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/ec9c5ecfb09368519e4698ffbbe1882de00d0ef2\"><code>ec9c5ec</code></a>\r\n1.16.2</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/f454d37c68fdad04b582cb9ac0cd165ab6d19114\"><code>f454d37</code></a>\r\nfix(deps): encodeurl@~2.0.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/77a8255688cc4affc70e6dc9aa02e3ced4957e77\"><code>77a8255</code></a>\r\n1.16.1</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/4263f496876980c165a3104d087c1ebaa046ad3d\"><code>4263f49</code></a>\r\nfix(deps): send@0.19.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/48c73970b129b96cba448e792576ad89b1f9fbed\"><code>48c7397</code></a>\r\n1.16.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/0c11fad159898cdc69fd9ab63269b72468ecaf6b\"><code>0c11fad</code></a>\r\nMerge commit from fork</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/9b5a12a76f4d70530d2d2a8c7742e9158ed3c0a4\"><code>9b5a12a</code></a>\r\n1.15.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/a39a0df51aa31f22b4947ade34fd90b14c7be1ea\"><code>a39a0df</code></a>\r\ndocs: update CI link</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/d702ea270e70970681906aefda9bd750a3e3ebaf\"><code>d702ea2</code></a>\r\nbuild: Node.js@17.8</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/serve-static/commit/ff1510a2f463282db3544fa4b9e40eff63b623d0\"><code>ff1510a</code></a>\r\ndeps: send@0.18.0</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/expressjs/serve-static/compare/v1.14.1...v1.16.2\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<details>\r\n<summary>Maintainer changes</summary>\r\n<p>This version was pushed to npm by <a\r\nhref=\"https://www.npmjs.com/~wesleytodd\">wesleytodd</a>, a new releaser\r\nfor serve-static since your current version.</p>\r\n</details>\r\n<br />\r\n\r\nUpdates `express` from 4.17.1 to 4.21.0\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/releases\">express's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>4.21.0</h2>\r\n<h2>What's Changed</h2>\r\n<ul>\r\n<li>Deprecate <code>&quot;back&quot;</code> magic string in redirects by\r\n<a href=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5935\">expressjs/express#5935</a></li>\r\n<li>finalhandler@1.3.1 by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5954\">expressjs/express#5954</a></li>\r\n<li>fix(deps): serve-static@1.16.2 by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5951\">expressjs/express#5951</a></li>\r\n<li>Upgraded dependency qs to 6.13.0 to match qs in body-parser by <a\r\nhref=\"https://github.com/agadzinski93\"><code>@​agadzinski93</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5946\">expressjs/express#5946</a></li>\r\n</ul>\r\n<h2>New Contributors</h2>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/agadzinski93\"><code>@​agadzinski93</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5946\">expressjs/express#5946</a></li>\r\n</ul>\r\n<p><strong>Full Changelog</strong>: <a\r\nhref=\"https://github.com/expressjs/express/compare/4.20.0...4.21.0\">https://github.com/expressjs/express/compare/4.20.0...4.21.0</a></p>\r\n<h2>4.20.0</h2>\r\n<h2>What's Changed</h2>\r\n<h3>Important</h3>\r\n<ul>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n</ul>\r\n<h3>Other Changes</h3>\r\n<ul>\r\n<li>4.19.2 Staging by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5561\">expressjs/express#5561</a></li>\r\n<li>remove duplicate location test for data uri by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5562\">expressjs/express#5562</a></li>\r\n<li>feat: document beta releases expectations by <a\r\nhref=\"https://github.com/marco-ippolito\"><code>@​marco-ippolito</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5565\">expressjs/express#5565</a></li>\r\n<li>Cut down on duplicated CI runs by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5564\">expressjs/express#5564</a></li>\r\n<li>Add a Threat Model by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5526\">expressjs/express#5526</a></li>\r\n<li>Assign captain of encodeurl by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5579\">expressjs/express#5579</a></li>\r\n<li>Nominate jonchurch as repo captain for <code>http-errors</code>,\r\n<code>expressjs.com</code>, <code>morgan</code>, <code>cors</code>,\r\n<code>body-parser</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5587\">expressjs/express#5587</a></li>\r\n<li>docs: update Security.md by <a\r\nhref=\"https://github.com/inigomarquinez\"><code>@​inigomarquinez</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5590\">expressjs/express#5590</a></li>\r\n<li>docs: update triage nomination policy by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5600\">expressjs/express#5600</a></li>\r\n<li>Add CodeQL (SAST) by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5433\">expressjs/express#5433</a></li>\r\n<li>docs: add UlisesGascon as triage initiative captain by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5605\">expressjs/express#5605</a></li>\r\n<li>deps: encodeurl@~2.0.0 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5569\">expressjs/express#5569</a></li>\r\n<li>skip QUERY method test by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5628\">expressjs/express#5628</a></li>\r\n<li>ignore ETAG query test on 21 and 22, reuse skip util by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5639\">expressjs/express#5639</a></li>\r\n<li>add support Node.js@22 in the CI by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5627\">expressjs/express#5627</a></li>\r\n<li>doc: add table of contents, tc/triager lists to readme by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5619\">expressjs/express#5619</a></li>\r\n<li>List and sort all projects, add captains by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5653\">expressjs/express#5653</a></li>\r\n<li>docs: add <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nas captain for cookie-parser by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5666\">expressjs/express#5666</a></li>\r\n<li>✨ bring back query tests for node 21 by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5690\">expressjs/express#5690</a></li>\r\n<li>[v4] Deprecate <code>res.clearCookie</code> accepting\r\n<code>options.maxAge</code> and <code>options.expires</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5672\">expressjs/express#5672</a></li>\r\n<li>skip QUERY tests for Node 21 only, still not supported by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5695\">expressjs/express#5695</a></li>\r\n<li>📝 update people, add ctcpip to TC by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5683\">expressjs/express#5683</a></li>\r\n<li>remove minor version pinning from ci by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5722\">expressjs/express#5722</a></li>\r\n<li>Fix link variable use in attribution section of CODE OF CONDUCT by\r\n<a href=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5762\">expressjs/express#5762</a></li>\r\n<li>Replace Appveyor windows testing with GHA by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5599\">expressjs/express#5599</a></li>\r\n<li>Add OSSF Scorecard badge by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5436\">expressjs/express#5436</a></li>\r\n<li>update scorecard link by <a\r\nhref=\"https://github.com/bjohansebas\"><code>@​bjohansebas</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5814\">expressjs/express#5814</a></li>\r\n<li>Nominate <a\r\nhref=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> to the\r\ntriage team by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5836\">expressjs/express#5836</a></li>\r\n<li>deps: path-to-regexp@0.1.8 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5603\">expressjs/express#5603</a></li>\r\n</ul>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/blob/4.21.0/History.md\">express's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h1>4.21.0 / 2024-09-11</h1>\r\n<ul>\r\n<li>Deprecate <code>res.location(&quot;back&quot;)</code> and\r\n<code>res.redirect(&quot;back&quot;)</code> magic string</li>\r\n<li>deps: serve-static@1.16.2\r\n<ul>\r\n<li>includes send@0.19.0</li>\r\n</ul>\r\n</li>\r\n<li>deps: finalhandler@1.3.1</li>\r\n<li>deps: qs@6.13.0</li>\r\n</ul>\r\n<h1>4.20.0 / 2024-09-10</h1>\r\n<ul>\r\n<li>deps: serve-static@0.16.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: send@0.19.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: body-parser@0.6.0\r\n<ul>\r\n<li>add <code>depth</code> option to customize the depth level in the\r\nparser</li>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n</ul>\r\n</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n<li>deps: path-to-regexp@0.1.10\r\n<ul>\r\n<li>Adds support for named matching groups in the routes using a\r\nregex</li>\r\n<li>Adds backtracking protection to parameters without regexes\r\ndefined</li>\r\n</ul>\r\n</li>\r\n<li>deps: encodeurl@~2.0.0\r\n<ul>\r\n<li>Removes encoding of <code>\\</code>, <code>|</code>, and\r\n<code>^</code> to align better with URL spec</li>\r\n</ul>\r\n</li>\r\n<li>Deprecate passing <code>options.maxAge</code> and\r\n<code>options.expires</code> to <code>res.clearCookie</code>\r\n<ul>\r\n<li>Will be ignored in v5, clearCookie will set a cookie with an expires\r\nin the past to instruct clients to delete the cookie</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<h1>4.19.2 / 2024-03-25</h1>\r\n<ul>\r\n<li>Improved fix for open redirect allow list bypass</li>\r\n</ul>\r\n<h1>4.19.1 / 2024-03-20</h1>\r\n<ul>\r\n<li>Allow passing non-strings to res.location with new encoding handling\r\nchecks</li>\r\n</ul>\r\n<h1>4.19.0 / 2024-03-20</h1>\r\n<ul>\r\n<li>Prevent open redirect allow list bypass due to encodeurl</li>\r\n<li>deps: cookie@0.6.0</li>\r\n</ul>\r\n<h1>4.18.3 / 2024-02-29</h1>\r\n<ul>\r\n<li>Fix routing requests without method</li>\r\n<li>deps: body-parser@1.20.2\r\n<ul>\r\n<li>Fix strict json error message on Node.js 19+</li>\r\n<li>deps: content-type@~1.0.5</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/7e562c6d8daddff4604f8efaaf9db2cf98c6dcff\"><code>7e562c6</code></a>\r\n4.21.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/1bcde96bc87c4704df9a704271d1167064ab56bb\"><code>1bcde96</code></a>\r\nfix(deps): qs@6.13.0 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5946\">#5946</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/7d364775688be98aaa973302e066d0da9f438997\"><code>7d36477</code></a>\r\nfix(deps): serve-static@1.16.2 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5951\">#5951</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/40d2d8f2c882712a0f2e4603c38d166c79676b2b\"><code>40d2d8f</code></a>\r\nfix(deps): finalhandler@1.3.1</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/77ada906dba57fd6e308f0d750e01653dbeaddfc\"><code>77ada90</code></a>\r\nDeprecate <code>&quot;back&quot;</code> magic string in redirects (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5935\">#5935</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/21df421ebc7a5249bb31101da666bbf22adc3f18\"><code>21df421</code></a>\r\n4.20.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/4c9ddc1c47bf579e55c2fe837d76a952e9fd8959\"><code>4c9ddc1</code></a>\r\nfeat: upgrade to serve-static@0.16.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/9ebe5d500d22cbb2b8aaa73446866b084c747971\"><code>9ebe5d5</code></a>\r\nfeat: upgrade to send@0.19.0 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5928\">#5928</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/ec4a01b6b8814d7b007f36a3023f4dbafdbc3d09\"><code>ec4a01b</code></a>\r\nfeat: upgrade to body-parser@1.20.3 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5926\">#5926</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553\"><code>54271f6</code></a>\r\nfix: don't render redirect values in anchor href</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/expressjs/express/compare/4.17.1...4.21.0\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<details>\r\n<summary>Maintainer changes</summary>\r\n<p>This version was pushed to npm by <a\r\nhref=\"https://www.npmjs.com/~wesleytodd\">wesleytodd</a>, a new releaser\r\nfor express since your current version.</p>\r\n</details>\r\n<br />\r\n\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/googlecodelabs/monolith-to-microservices/network/alerts).\r\n\r\n</details>\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump serve-static and express in /microservices/src/orders (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2520919437\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googlecodelabs/monolith-to-microservices/issues/87\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googlecodelabs/monolith-to-microservices/pull/87/hovercard\" href=\"https://github.com/googlecodelabs/monolith-to-microservices/pull/87\">#87</a>)"}},{"before":"e44fdf82c063d5d3e5f1faee59c0dcd1a0267fad","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/microservices/src/frontend/multi-cf87d80143","pushedAt":"2024-09-12T13:42:38.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"}},{"before":"94eaed3be1d65064cb9d457eed3bc9016322799a","after":"6f268e4290b69080c0c592d2c6e2b4a92ebd8160","ref":"refs/heads/master","pushedAt":"2024-09-12T13:42:36.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"verbanicm","name":"Mike Verbanic","path":"/verbanicm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5046972?s=80&v=4"},"commit":{"message":"Bump send and express in /microservices/src/frontend (#88)\n\nBumps [send](https://github.com/pillarjs/send) to 0.19.0 and updates\r\nancestor dependency [express](https://github.com/expressjs/express).\r\nThese dependencies need to be updated together.\r\n\r\nUpdates `send` from 0.17.1 to 0.19.0\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/pillarjs/send/releases\">send's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>0.19.0</h2>\r\n<h2>What's Changed</h2>\r\n<ul>\r\n<li>Remove link renderization in html while redirecting (<a\r\nhref=\"https://redirect.github.com/pillarjs/send/pull/235\">pillarjs/send#235</a>)</li>\r\n</ul>\r\n<h2>New Contributors</h2>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/pillarjs/send/pull/235\">pillarjs/send#235</a></li>\r\n</ul>\r\n<p><strong>Full Changelog</strong>: <a\r\nhref=\"https://github.com/pillarjs/send/compare/0.18.0...0.19.0\">https://github.com/pillarjs/send/compare/0.18.0...0.19.0</a></p>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/pillarjs/send/blob/master/HISTORY.md\">send's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h1>0.19.0 / 2024-09-10</h1>\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n<h1>0.18.0 / 2022-03-23</h1>\r\n<ul>\r\n<li>Fix emitted 416 error missing headers property</li>\r\n<li>Limit the headers removed for 304 response</li>\r\n<li>deps: depd@2.0.0\r\n<ul>\r\n<li>Replace internal <code>eval</code> usage with <code>Function</code>\r\nconstructor</li>\r\n<li>Use instance methods on <code>process</code> to check for\r\nlisteners</li>\r\n</ul>\r\n</li>\r\n<li>deps: destroy@1.2.0</li>\r\n<li>deps: http-errors@2.0.0\r\n<ul>\r\n<li>deps: depd@2.0.0</li>\r\n<li>deps: statuses@2.0.1</li>\r\n</ul>\r\n</li>\r\n<li>deps: on-finished@2.4.1</li>\r\n<li>deps: statuses@2.0.1</li>\r\n</ul>\r\n<h1>0.17.2 / 2021-12-11</h1>\r\n<ul>\r\n<li>pref: ignore empty http tokens</li>\r\n<li>deps: http-errors@1.8.1\r\n<ul>\r\n<li>deps: inherits@2.0.4</li>\r\n<li>deps: toidentifier@1.0.1</li>\r\n<li>deps: setprototypeof@1.2.0</li>\r\n</ul>\r\n</li>\r\n<li>deps: ms@2.1.3</li>\r\n</ul>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/9d2db99518b366d20783fe1c08a1b9bd418929ce\"><code>9d2db99</code></a>\r\n0.19.0</li>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/ae4f2989491b392ae2ef3b0015a019770ae65d35\"><code>ae4f298</code></a>\r\nMerge commit from fork</li>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/b69cbb3dc4c09c37917d08a4c13fcd1bac97ade5\"><code>b69cbb3</code></a>\r\n0.18.0</li>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/f53edbb7f4f7ebdd936d3d714d84d52f2d3d00f3\"><code>f53edbb</code></a>\r\nLimit the headers removed for 304 response</li>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/706d6ddf0d3c8a9248fc1edbc3ff60bbc6ad7b93\"><code>706d6dd</code></a>\r\ndocs: add security policy</li>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/b690ba4bd149d20fa6687ee6298fb6aede5b21d7\"><code>b690ba4</code></a>\r\ndocs: fix linux build badge link</li>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/fed09ff7dd5b24470fadaa6626b5db1667cccec6\"><code>fed09ff</code></a>\r\ndocs: update copyright</li>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/aee1a657be9fdf558ce3448c6a908227e15f0645\"><code>aee1a65</code></a>\r\ndeps: destroy@1.2.0</li>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/6060bdaf1a8684deec45704ad4e4b163d910f6fa\"><code>6060bda</code></a>\r\ndeps: on-finished@2.4.1</li>\r\n<li><a\r\nhref=\"https://github.com/pillarjs/send/commit/8055f787fee1a189b23a27e67dcc185dfe26bac2\"><code>8055f78</code></a>\r\nbuild: Node.js@17.7</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/pillarjs/send/compare/0.17.1...0.19.0\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<details>\r\n<summary>Maintainer changes</summary>\r\n<p>This version was pushed to npm by <a\r\nhref=\"https://www.npmjs.com/~ulisesgascon\">ulisesgascon</a>, a new\r\nreleaser for send since your current version.</p>\r\n</details>\r\n<br />\r\n\r\nUpdates `express` from 4.17.1 to 4.21.0\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/releases\">express's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>4.21.0</h2>\r\n<h2>What's Changed</h2>\r\n<ul>\r\n<li>Deprecate <code>&quot;back&quot;</code> magic string in redirects by\r\n<a href=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5935\">expressjs/express#5935</a></li>\r\n<li>finalhandler@1.3.1 by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5954\">expressjs/express#5954</a></li>\r\n<li>fix(deps): serve-static@1.16.2 by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5951\">expressjs/express#5951</a></li>\r\n<li>Upgraded dependency qs to 6.13.0 to match qs in body-parser by <a\r\nhref=\"https://github.com/agadzinski93\"><code>@​agadzinski93</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5946\">expressjs/express#5946</a></li>\r\n</ul>\r\n<h2>New Contributors</h2>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/agadzinski93\"><code>@​agadzinski93</code></a>\r\nmade their first contribution in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5946\">expressjs/express#5946</a></li>\r\n</ul>\r\n<p><strong>Full Changelog</strong>: <a\r\nhref=\"https://github.com/expressjs/express/compare/4.20.0...4.21.0\">https://github.com/expressjs/express/compare/4.20.0...4.21.0</a></p>\r\n<h2>4.20.0</h2>\r\n<h2>What's Changed</h2>\r\n<h3>Important</h3>\r\n<ul>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n</ul>\r\n<h3>Other Changes</h3>\r\n<ul>\r\n<li>4.19.2 Staging by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5561\">expressjs/express#5561</a></li>\r\n<li>remove duplicate location test for data uri by <a\r\nhref=\"https://github.com/wesleytodd\"><code>@​wesleytodd</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5562\">expressjs/express#5562</a></li>\r\n<li>feat: document beta releases expectations by <a\r\nhref=\"https://github.com/marco-ippolito\"><code>@​marco-ippolito</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5565\">expressjs/express#5565</a></li>\r\n<li>Cut down on duplicated CI runs by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5564\">expressjs/express#5564</a></li>\r\n<li>Add a Threat Model by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5526\">expressjs/express#5526</a></li>\r\n<li>Assign captain of encodeurl by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5579\">expressjs/express#5579</a></li>\r\n<li>Nominate jonchurch as repo captain for <code>http-errors</code>,\r\n<code>expressjs.com</code>, <code>morgan</code>, <code>cors</code>,\r\n<code>body-parser</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5587\">expressjs/express#5587</a></li>\r\n<li>docs: update Security.md by <a\r\nhref=\"https://github.com/inigomarquinez\"><code>@​inigomarquinez</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5590\">expressjs/express#5590</a></li>\r\n<li>docs: update triage nomination policy by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5600\">expressjs/express#5600</a></li>\r\n<li>Add CodeQL (SAST) by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5433\">expressjs/express#5433</a></li>\r\n<li>docs: add UlisesGascon as triage initiative captain by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5605\">expressjs/express#5605</a></li>\r\n<li>deps: encodeurl@~2.0.0 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5569\">expressjs/express#5569</a></li>\r\n<li>skip QUERY method test by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5628\">expressjs/express#5628</a></li>\r\n<li>ignore ETAG query test on 21 and 22, reuse skip util by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5639\">expressjs/express#5639</a></li>\r\n<li>add support Node.js@22 in the CI by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5627\">expressjs/express#5627</a></li>\r\n<li>doc: add table of contents, tc/triager lists to readme by <a\r\nhref=\"https://github.com/mertcanaltin\"><code>@​mertcanaltin</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5619\">expressjs/express#5619</a></li>\r\n<li>List and sort all projects, add captains by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5653\">expressjs/express#5653</a></li>\r\n<li>docs: add <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nas captain for cookie-parser by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5666\">expressjs/express#5666</a></li>\r\n<li>✨ bring back query tests for node 21 by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5690\">expressjs/express#5690</a></li>\r\n<li>[v4] Deprecate <code>res.clearCookie</code> accepting\r\n<code>options.maxAge</code> and <code>options.expires</code> by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5672\">expressjs/express#5672</a></li>\r\n<li>skip QUERY tests for Node 21 only, still not supported by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5695\">expressjs/express#5695</a></li>\r\n<li>📝 update people, add ctcpip to TC by <a\r\nhref=\"https://github.com/ctcpip\"><code>@​ctcpip</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5683\">expressjs/express#5683</a></li>\r\n<li>remove minor version pinning from ci by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5722\">expressjs/express#5722</a></li>\r\n<li>Fix link variable use in attribution section of CODE OF CONDUCT by\r\n<a href=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5762\">expressjs/express#5762</a></li>\r\n<li>Replace Appveyor windows testing with GHA by <a\r\nhref=\"https://github.com/jonchurch\"><code>@​jonchurch</code></a> in <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5599\">expressjs/express#5599</a></li>\r\n<li>Add OSSF Scorecard badge by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5436\">expressjs/express#5436</a></li>\r\n<li>update scorecard link by <a\r\nhref=\"https://github.com/bjohansebas\"><code>@​bjohansebas</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5814\">expressjs/express#5814</a></li>\r\n<li>Nominate <a\r\nhref=\"https://github.com/IamLizu\"><code>@​IamLizu</code></a> to the\r\ntriage team by <a\r\nhref=\"https://github.com/UlisesGascon\"><code>@​UlisesGascon</code></a>\r\nin <a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5836\">expressjs/express#5836</a></li>\r\n<li>deps: path-to-regexp@0.1.8 by <a\r\nhref=\"https://github.com/blakeembrey\"><code>@​blakeembrey</code></a> in\r\n<a\r\nhref=\"https://redirect.github.com/expressjs/express/pull/5603\">expressjs/express#5603</a></li>\r\n</ul>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Changelog</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/expressjs/express/blob/4.21.0/History.md\">express's\r\nchangelog</a>.</em></p>\r\n<blockquote>\r\n<h1>4.21.0 / 2024-09-11</h1>\r\n<ul>\r\n<li>Deprecate <code>res.location(&quot;back&quot;)</code> and\r\n<code>res.redirect(&quot;back&quot;)</code> magic string</li>\r\n<li>deps: serve-static@1.16.2\r\n<ul>\r\n<li>includes send@0.19.0</li>\r\n</ul>\r\n</li>\r\n<li>deps: finalhandler@1.3.1</li>\r\n<li>deps: qs@6.13.0</li>\r\n</ul>\r\n<h1>4.20.0 / 2024-09-10</h1>\r\n<ul>\r\n<li>deps: serve-static@0.16.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: send@0.19.0\r\n<ul>\r\n<li>Remove link renderization in html while redirecting</li>\r\n</ul>\r\n</li>\r\n<li>deps: body-parser@0.6.0\r\n<ul>\r\n<li>add <code>depth</code> option to customize the depth level in the\r\nparser</li>\r\n<li>IMPORTANT: The default <code>depth</code> level for parsing\r\nURL-encoded data is now <code>32</code> (previously was\r\n<code>Infinity</code>)</li>\r\n</ul>\r\n</li>\r\n<li>Remove link renderization in html while using\r\n<code>res.redirect</code></li>\r\n<li>deps: path-to-regexp@0.1.10\r\n<ul>\r\n<li>Adds support for named matching groups in the routes using a\r\nregex</li>\r\n<li>Adds backtracking protection to parameters without regexes\r\ndefined</li>\r\n</ul>\r\n</li>\r\n<li>deps: encodeurl@~2.0.0\r\n<ul>\r\n<li>Removes encoding of <code>\\</code>, <code>|</code>, and\r\n<code>^</code> to align better with URL spec</li>\r\n</ul>\r\n</li>\r\n<li>Deprecate passing <code>options.maxAge</code> and\r\n<code>options.expires</code> to <code>res.clearCookie</code>\r\n<ul>\r\n<li>Will be ignored in v5, clearCookie will set a cookie with an expires\r\nin the past to instruct clients to delete the cookie</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<h1>4.19.2 / 2024-03-25</h1>\r\n<ul>\r\n<li>Improved fix for open redirect allow list bypass</li>\r\n</ul>\r\n<h1>4.19.1 / 2024-03-20</h1>\r\n<ul>\r\n<li>Allow passing non-strings to res.location with new encoding handling\r\nchecks</li>\r\n</ul>\r\n<h1>4.19.0 / 2024-03-20</h1>\r\n<ul>\r\n<li>Prevent open redirect allow list bypass due to encodeurl</li>\r\n<li>deps: cookie@0.6.0</li>\r\n</ul>\r\n<h1>4.18.3 / 2024-02-29</h1>\r\n<ul>\r\n<li>Fix routing requests without method</li>\r\n<li>deps: body-parser@1.20.2\r\n<ul>\r\n<li>Fix strict json error message on Node.js 19+</li>\r\n<li>deps: content-type@~1.0.5</li>\r\n</ul>\r\n</li>\r\n</ul>\r\n<!-- raw HTML omitted -->\r\n</blockquote>\r\n<p>... (truncated)</p>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/7e562c6d8daddff4604f8efaaf9db2cf98c6dcff\"><code>7e562c6</code></a>\r\n4.21.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/1bcde96bc87c4704df9a704271d1167064ab56bb\"><code>1bcde96</code></a>\r\nfix(deps): qs@6.13.0 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5946\">#5946</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/7d364775688be98aaa973302e066d0da9f438997\"><code>7d36477</code></a>\r\nfix(deps): serve-static@1.16.2 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5951\">#5951</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/40d2d8f2c882712a0f2e4603c38d166c79676b2b\"><code>40d2d8f</code></a>\r\nfix(deps): finalhandler@1.3.1</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/77ada906dba57fd6e308f0d750e01653dbeaddfc\"><code>77ada90</code></a>\r\nDeprecate <code>&quot;back&quot;</code> magic string in redirects (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5935\">#5935</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/21df421ebc7a5249bb31101da666bbf22adc3f18\"><code>21df421</code></a>\r\n4.20.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/4c9ddc1c47bf579e55c2fe837d76a952e9fd8959\"><code>4c9ddc1</code></a>\r\nfeat: upgrade to serve-static@0.16.0</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/9ebe5d500d22cbb2b8aaa73446866b084c747971\"><code>9ebe5d5</code></a>\r\nfeat: upgrade to send@0.19.0 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5928\">#5928</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/ec4a01b6b8814d7b007f36a3023f4dbafdbc3d09\"><code>ec4a01b</code></a>\r\nfeat: upgrade to body-parser@1.20.3 (<a\r\nhref=\"https://redirect.github.com/expressjs/express/issues/5926\">#5926</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553\"><code>54271f6</code></a>\r\nfix: don't render redirect values in anchor href</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/expressjs/express/compare/4.17.1...4.21.0\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<details>\r\n<summary>Maintainer changes</summary>\r\n<p>This version was pushed to npm by <a\r\nhref=\"https://www.npmjs.com/~wesleytodd\">wesleytodd</a>, a new releaser\r\nfor express since your current version.</p>\r\n</details>\r\n<br />\r\n\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/googlecodelabs/monolith-to-microservices/network/alerts).\r\n\r\n</details>\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump send and express in /microservices/src/frontend (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2520941981\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googlecodelabs/monolith-to-microservices/issues/88\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googlecodelabs/monolith-to-microservices/pull/88/hovercard\" href=\"https://github.com/googlecodelabs/monolith-to-microservices/pull/88\">#88</a>)"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0xMlQxNjoxMzozMy4wMDAwMDBazwAAAAS0mucn","startCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0xMlQxNjoxMzozMy4wMDAwMDBazwAAAAS0mucn","endCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0xMlQxMzo0MjozNi4wMDAwMDBazwAAAAS0cMAz"}},"title":"Activity · googlecodelabs/monolith-to-microservices"}