Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade express-rate-limit from 6.4.0 to 6.11.2 #20

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

spinfal
Copy link
Owner

@spinfal spinfal commented Nov 23, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade express-rate-limit from 6.4.0 to 6.11.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 13 versions ahead of your current version.
  • The recommended version was released 2 months ago, on 2023-09-12.
Release notes
Package name: express-rate-limit
  • 6.11.2 - 2023-09-12

    Fixed

    • Restored IncrementResponse TypeScript type (See #397)
  • 6.11.1 - 2023-09-10

    Fixed

    • Check for prefixed keys when validating that the stores have single counted keys (See #395).
  • 6.11.0 - 2023-09-06

    Added

    • Support for retrieving the current hit count and reset time for a given key from a store (See #390).
  • 6.10.0 - 2023-08-30

    Added

    • Support for combined RateLimit header from the RateLimit header fields for HTTP standardization draft adopted by the IETF. Enable by setting standardHeaders: 'draft-7'
    • New standardHeaders: 'draft-6' option, treated equivalent to standardHeaders: true from previous releases. (true and false are still supported.)
    • New RateLimit-Policy header added when standardHeaders is set to 'draft-6', 'draft-7', or true
    • Warning when using deprecated draft_polli_ratelimit_headers option
    • Warning when using deprecated onLimitReached option
    • Warning when totalHits value returned from Store is invalid
  • 6.9.0 - 2023-08-06

    Added

    • New validaion check for double-counted requests
    • Added help link to each ValidationError, directing users to the appropriate wiki page for more info

    Changed

    • Miscaleanous documenation improvements

    You can view the full changelog here.

  • 6.8.1 - 2023-07-27

    Changed

    • Revert 6.7.1 change that bumped typescript from 5.x to 4.x and dts-bundle-generator from 8.x to 7.x (See #360)

    You can view the full changelog here.

  • 6.8.0 - 2023-07-21

    Added

    You can view the changelog here.

  • 6.7.2 - 2023-07-27

    (Backport of v6.8.1)

    You can view the full changelog here.

  • 6.7.1 - 2023-07-06

    Fixed

    • Fixed compatibility with TypeScript's TypeScript new node16 module
      resolution strategy (See
      #355)

    Changed

    • Bumped development dependencies.
    • Added node 20 to list of versions the CI jobs run on.

    No functional changes.

    You can view the changelog here.

  • 6.7.0 - 2022-11-15

    No functional changes.

    Changed

    • Updated links to point to the new express-rate-limit organization on GitHub.
    • Added advertisement to readme.md for project sponsor Zuplo.
    • Updated to typescript version 5 and bumped other dependencies.
    • Dropped node 12, and added node 19 to the list of versions the CI jobs run on.

    You can view the changelog here.

  • 6.6.0 - 2022-09-04
  • 6.5.2 - 2022-08-24
  • 6.5.1 - 2022-07-23
  • 6.4.0 - 2022-04-24
from express-rate-limit GitHub release notes
Commit messages
Package name: express-rate-limit
  • 1f7d05e 6.11.2
  • d57dd59 doc: 6.11.2 changelog
  • 82a1d46 fix: restore IncrementResponse type (#397)
  • 08f936d chore: release v6.11.1
  • aeb1088 docs: update changelog for v6.11.1
  • 23558f0 fix: consider store prefix in `singleCount` validation check (#394)
  • 625ce86 chore: release v6.11.0
  • a38ced9 docs: update changelog for v6.11.0
  • 6217b36 feat: add `get` method to the `Store` interface (#390)
  • b669e77 docs: update contributing guide
  • d3477c2 chore: use `.prettierignore` file
  • 57ee25c 6.10.0
  • fbd64df Update changelog for 6.10.0
  • 8716f5a feat: support combined `RateLimit` header from ietf draft 7 (#376)
  • 07bfc67 feat: validate `totalHits` value returned from store (#379)
  • 43cadd4 validations: add `draft_polli_ratelimit_headers` option deprecation warning (#377)
  • 0bdd5fc test: improve coverage
  • 3cb205d docs: precise-memory-store is modern as of v2
  • f8469d1 chore: remove unecessary meta files
  • a53350c chore: use extracted config packages
  • a118c69 docs: update ci badge in readme
  • 9ba2ed2 use named export in all readme examples
  • 7e7f74a validations: add onLimitReached deprecation warning (#373)
  • 7ad59d3 validations: add `max: 0` change warning (#370)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants