Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency morgan to ~1.9.1 #11

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Jun 20, 2022

This PR contains the following updates:

Package Type Update Change
morgan dependencies minor ~1.6.1 -> ~1.9.1

By merging this PR, the issue #3 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2019-5413

Release Notes

expressjs/morgan (morgan)

v1.9.1

Compare Source

==================

  • Fix using special characters in format
  • deps: depd@~1.1.2
    • perf: remove argument reassignment

v1.9.0

Compare Source

==================

  • Use res.headersSent when available
  • deps: basic-auth@~2.0.0
    • Use safe-buffer for improved Buffer API
  • deps: debug@2.6.9
  • deps: depd@~1.1.1
    • Remove unnecessary Buffer loading

v1.8.2

Compare Source

==================

  • deps: debug@2.6.8
    • Fix DEBUG_MAX_ARRAY_LENGTH
    • deps: ms@2.0.0

v1.8.1

Compare Source

==================

  • deps: debug@2.6.1
    • Fix deprecation messages in WebStorm and other editors
    • Undeprecate DEBUG_FD set to 1 or 2

v1.8.0

Compare Source

==================

  • Fix sending unnecessary undefined argument to token functions
  • deps: basic-auth@~1.1.0
  • deps: debug@2.6.0
    • Allow colors in workers
    • Deprecated DEBUG_FD environment variable
    • Fix error when running under React Native
    • Use same color for same namespace
    • deps: ms@0.7.2
  • perf: enable strict mode in compiled functions

v1.7.0

Compare Source

==================

  • Add digits argument to response-time token
  • deps: depd@~1.1.0
    • Enable strict mode in more places
    • Support web browser loading
  • deps: on-headers@~1.0.1
    • perf: enable strict mode

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Jun 20, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/morgan-1.x branch from e7ac904 to 9b8036e Compare March 12, 2023 11:06
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/morgan-1.x branch from 9b8036e to a079a5b Compare March 13, 2023 16:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants