Update express: 4.17.3 → 4.18.1 (minor)

[depfu]

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ express (4.17.3 → 4.18.1) · Repo · Changelog

Release Notes

4.18.1

• Fix hanging on large stack of sync routes

4.18.0

• Add "root" option to res.download
• Allow options without filename in res.download
• Deprecate string and non-integer arguments to res.status
• Fix behavior of null/undefined as maxAge in res.cookie
• Fix handling very large stacks of sync middleware
• Ignore Object.prototype values in settings through app.set/app.get
• Invoke default with same arguments as types in res.format
• Support proper 205 responses using res.send
• Use http-errors for res.format error
• deps: body-parser@1.20.0
  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: depd@2.0.0
  • deps: http-errors@2.0.0
  • deps: on-finished@2.4.1
  • deps: qs@6.10.3
  • deps: raw-body@2.5.1
• deps: cookie@0.5.0
  • Add priority option
  • Fix expires option to reject invalid dates
• deps: depd@2.0.0
  • Replace internal eval usage with Function constructor
  • Use instance methods on process to check for listeners
• deps: finalhandler@1.2.0
  • Remove set content headers that break response
  • deps: on-finished@2.4.1
  • deps: statuses@2.0.1
• deps: on-finished@2.4.1
  • Prevent loss of async hooks context
• deps: qs@6.10.3
• deps: send@0.18.0
  • Fix emitted 416 error missing headers property
  • Limit the headers removed for 304 response
  • deps: depd@2.0.0
  • deps: destroy@1.2.0
  • deps: http-errors@2.0.0
  • deps: on-finished@2.4.1
  • deps: statuses@2.0.1
• deps: serve-static@1.15.0
  • deps: send@0.18.0
• deps: statuses@2.0.1
  • Remove code 306
  • Rename 425 Unordered Collection to standard 425 Too Early

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 59 commits:

• 4.18.1
• build: Node.js@16.15
• Fix hanging on large stack of sync routes
• bench: remove unused parameter
• build: ejs@3.1.7
• build: supertest@6.2.3
• build: mocha@9.2.2
• 4.18.0
• bench: print latency and vary connections
• build: support Node.js 18.x
• build: use 64-bit Node.js in AppVeyor
• build: support Node.js 17.x
• tests: mark stack overflow as long running
• Fix handling very large stacks of sync middleware
• deps: cookie@0.5.0
• examples: add missing html label associations
• examples: use http-errors to create errors
• docs: remove Node Security Project from security policy
• docs: fix typo in casing of HTTP
• tests: fix typo in description
• build: use supertest@3.4.2 for Node.js 6.x
• deps: on-finished@2.4.1
• deps: statuses@2.0.1
• deps: qs@6.10.3
• deps: body-parser@1.20.0
• Use http-errors for res.format error
• Fix behavior of null/undefined as "maxAge" in res.cookie
• deps: depd@2.0.0
• Invoke default with same arguments as types in res.format
• examples: use updated res.download in example
• Allow options without filename in res.download
• deps: finalhandler@1.2.0
• deps: serve-static@1.15.0
• deps: send@0.18.0
• Add "root" option to res.download
• Deprecate string and non-integer arguments to res.status
• Ignore Object.prototype values in settings through app.set/app.get
• Support proper 205 responses using res.send
• build: support Node.js 16.x
• build: support Node.js 15.x
• lint: remove unnecessary continue statement in loop
• docs: fix incomplete JSDoc comment
• examples: fixup html
• lint: remove deprecated String.prototype.substr
• build: mocha@9.2.1
• tests: expand res.sendFile options tests
• docs: add install size badge
• docs: consolidate contributing in readme
• docs: switch badges to badgen
• docs: update link to github actions ci
• docs: fix typo in private api jsdoc
• tests: fix position of res.sendfile(path, options) test
• tests: fix callback in res.download test
• tests: remove duplicate utils
• tests: remove usage of should
• tests: update res.append to verify separate header lines
• tests: fix up app.locals tests
• tests: fix req.acceptsLanguage tests
• tests: fix req.acceptsEncodings tests

---

👉 No CI detected

You don't seem to have any Continuous Integration service set up!

Without a service that will test the Depfu branches and pull requests, we can't inform you if incoming updates actually work with your app. We think that this degrades the service we're trying to provide down to a point where it is more or less meaningless.

This is fine if you just want to give Depfu a quick try. If you want to really let Depfu help you keep your app up-to-date, we recommend setting up a CI system:

• Circle CI, Semaphore and Travis-CI are all excellent options.
• If you use something like Jenkins, make sure that you're using the Github integration correctly so that it reports status data back to Github.
• If you have already set up a CI for this repository, you might need to check your configuration. Make sure it will run on all new branches. If you don’t want it to run on every branch, you can whitelist branches starting with depfu/.

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)

[depfu]

Closed in favor of #63.