Skip to content

fix(deps): update all non-major dependencies - #148

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#148
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 2, 2023

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@commitlint/cli (source) ^17.7.1^17.8.1 age confidence devDependencies patch
@commitlint/config-conventional (source) ^17.7.0^17.8.1 age confidence devDependencies patch
@google-cloud/firestore (source) ^6.7.0^6.8.0 age confidence dependencies patch
@google-cloud/pubsub (source) ^4.0.6^4.11.0 age confidence dependencies patch
eslint (source) ^8.57.0^8.57.1 age confidence devDependencies patch
express (source) ^4.18.2^4.22.2 age confidence dependencies minor
firebase-functions ^4.4.1^4.9.0 age confidence dependencies patch
node (source) 2222.23.2 age confidence minor
node (source) 2222.23.2 age confidence engines minor
node 18.x18.20.8 age confidence uses-with minor
node 22.x22.23.2 age confidence uses-with minor
standard (source) ^17.1.0^17.1.2 age confidence devDependencies patch
uglify-js ^3.17.4^3.19.3 age confidence dependencies patch

Release Notes

expressjs/express (express)

v4.22.2

Compare Source

What's Changed

  • fix: restore >20 array parsing for req.query repeated keys (8d09bfe6)
    • This also unifies array-cap behavior across notations. Indexed notation (a[0]=...) was historically capped at qs's default arrayLimit of 20 even in older qs versions; after this change it also allows up to 1000 items.
  • deps: qs@~6.15.1
  • deps: body-parser@~1.20.5

New Contributors

Full Changelog: expressjs/express@v4.22.1...v4.22.2

v4.22.1

Compare Source

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@4.22.0...v4.22.1

v4.22.0

Compare Source

Important: Security

What's Changed

Full Changelog: expressjs/express@4.21.2...4.22.0

nodejs/node (node)

v22.23.2: 2026-07-29, Version 22.23.2 'Jod' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
  • (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
  • (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
  • (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
  • (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
  • (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
  • (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
  • (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
  • (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
  • (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
  • deps: update llhttp to 9.4.3 (Paolo Insogna)
  • deps: update undici to 6.28.0 (Node.js GitHub Bot)
Commits

v22.23.1: 2026-06-23, Version 22.23.1 'Jod' (LTS), @​RafaelGSS

Compare Source

This release includes a fix for an unexpected behavior introduced
by the recent security release (22.23.0).

Commits

v22.23.0: 2026-06-18, Version 22.23.0 'Jod' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v22.22.3: 2026-05-13, Version 22.22.3 'Jod' (LTS), @​marco-ippolito

Compare Source

Commits

v22.22.2

Compare Source

v22.22.1: 2026-03-05, Version 22.22.1 'Jod' (LTS)

Compare Source

Notable Changes
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Oct 2, 2023
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 9d7dabb to 66fab4c Compare October 20, 2023 13:32
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 66fab4c to 4a56cb1 Compare November 2, 2023 18:44
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 4a56cb1 to 5c753aa Compare November 9, 2023 23:15
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 5c753aa to 817405e Compare December 14, 2023 23:15
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 6a6a32f to 048b347 Compare January 9, 2024 19:53
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 36714fa to 9053c6f Compare February 8, 2024 22:25
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 9053c6f to a7919ed Compare February 13, 2024 22:14
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from c82d4af to 33cda12 Compare March 6, 2024 18:54
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 33cda12 to 921c8bc Compare March 8, 2024 01:30
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from a4f32bf to dc68472 Compare March 25, 2024 17:39
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 9cc4481 to 0f6a2ec Compare April 4, 2024 21:03
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 0f6a2ec to 00abb92 Compare April 14, 2024 12:32
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 00abb92 to fdd4d93 Compare May 6, 2024 18:21
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from fdd4d93 to 685e41e Compare May 30, 2024 23:11
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from bd2ed4c to a94bce3 Compare June 11, 2024 19:05
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from a94bce3 to 46c4154 Compare July 17, 2024 11:45
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 46c4154 to 8b61f11 Compare July 28, 2024 12:45
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 8b61f11 to 0b82655 Compare August 10, 2024 13:39
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 8215f9f to ae2a41a Compare October 15, 2024 22:00
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from ae2a41a to d1ee453 Compare November 13, 2024 21:59
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Dec 10, 2024
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 07e1cbd to 4690445 Compare January 24, 2025 22:20
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 95074d2 to c4fe054 Compare February 20, 2025 12:50
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from c4fe054 to 73a6629 Compare March 11, 2025 15:25
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from e0f87e4 to 97458ea Compare March 28, 2025 20:31
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from a3fc396 to 4e84355 Compare July 22, 2025 00:51
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from b8fa24a to 11cb43c Compare July 28, 2025 16:07
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 11cb43c to 5fd4f60 Compare September 25, 2025 17:35
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 5fd4f60 to bde58cc Compare November 10, 2025 21:56
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from bde58cc to b4f7b80 Compare November 18, 2025 23:45
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from cd5b281 to b6da61b Compare December 3, 2025 15:50
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from b6da61b to 5c1e1b5 Compare December 15, 2025 15:42
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 5c1e1b5 to acc4e83 Compare December 31, 2025 18:15
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from acc4e83 to 66e9019 Compare February 12, 2026 12:50
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 3f8e535 to 19a799a Compare March 30, 2026 19:10
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 353d1cb to 64e14a4 Compare May 12, 2026 13:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants