[Snyk] Upgrade express-rate-limit from 5.1.3 to 6.5.1 #10
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade express-rate-limit from 5.1.3 to 6.5.1. See this package in npm: https://www.npmjs.com/package/express-rate-limit See this project in Snyk: https://app.snyk.io/org/marcelraschke/project/59a45eb9-d8a8-45b4-b115-b672fc80f23a?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade express-rate-limit from 5.1.3 to 6.5.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Warning: This is a major version upgrade, and may be a breaking change.
The recommended version fixes:
SNYK-JS-TAR-1579155
Why? CVSS 8.5
SNYK-JS-TAR-1579152
Why? CVSS 8.5
SNYK-JS-TAR-1579147
Why? CVSS 8.5
SNYK-JS-TAR-1536531
Why? CVSS 8.5
SNYK-JS-TAR-1536528
Why? CVSS 8.5
SNYK-JS-TAR-1579155
Why? CVSS 8.5
SNYK-JS-TAR-1579152
Why? CVSS 8.5
SNYK-JS-TAR-1579147
Why? CVSS 8.5
SNYK-JS-TAR-1536531
Why? CVSS 8.5
SNYK-JS-TAR-1536528
Why? CVSS 8.5
SNYK-JS-SIMPLEGET-2361683
Why? CVSS 8.5
SNYK-JS-SIMPLEGET-2361683
Why? CVSS 8.5
SNYK-JS-SHELLQUOTE-1766506
Why? CVSS 8.5
SNYK-JS-NORMALIZEURL-1296539
Why? CVSS 8.5
SNYK-JS-MOMENT-2944238
Why? CVSS 8.5
SNYK-JS-MOMENT-2440688
Why? CVSS 8.5
SNYK-JS-LODASH-1040724
Why? CVSS 8.5
SNYK-JS-JSONSCHEMA-1920922
Why? CVSS 8.5
SNYK-JS-JPEGJS-2859218
Why? CVSS 8.5
SNYK-JS-INI-1048974
Why? CVSS 8.5
SNYK-JS-EJS-2803307
Why? CVSS 8.5
SNYK-JS-CACHEDPATHRELATIVE-2342653
Why? CVSS 8.5
SNYK-JS-WS-1296835
Why? CVSS 8.5
SNYK-JS-UNDERSCORE-1080984
Why? CVSS 8.5
SNYK-JS-PATHPARSE-1077067
Why? CVSS 8.5
SNYK-JS-NWSAPI-2841516
Why? CVSS 8.5
SNYK-JS-NODEFETCH-2342118
Why? CVSS 8.5
SNYK-JS-LODASH-1018905
Why? CVSS 8.5
SNYK-JS-ISSVG-1243891
Why? CVSS 8.5
SNYK-JS-ISSVG-1085627
Why? CVSS 8.5
SNYK-JS-HOSTEDGITINFO-1088355
Why? CVSS 8.5
SNYK-JS-ELLIPTIC-1064899
Why? CVSS 8.5
SNYK-JS-EJS-1049328
Why? CVSS 8.5
SNYK-JS-COLORSTRING-1082939
Why? CVSS 8.5
SNYK-JS-BROWSERSLIST-1090194
Why? CVSS 8.5
SNYK-JS-TAR-1536758
Why? CVSS 8.5
SNYK-JS-TAR-1536758
Why? CVSS 8.5
SNYK-JS-STRIPTAGS-1312310
Why? CVSS 8.5
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: express-rate-limit
-
6.5.1 - 2022-07-23
- The message option can now be a (sync/asynx) function that returns a value (#311)
- Updated all dependencies
-
6.4.0 - 2022-04-24
- Adds Express 5 (
- Tests are now run on Node 12, 14, 16 and 18 on CI (#305)
- Updated all development dependencies (#306)
-
6.3.0 - 2022-02-19
- Changes the build target to
- Changes the minimum required Node version to 12.9.0.
-
6.2.1 - 2022-02-10
- Use the default value for an option when
-
6.2.0 - 2022-01-22
- Export the
- Deprecate the
-
6.1.0 - 2022-01-12
- Added a named export
- Added a named export
-
6.0.5 - 2022-01-06
- Use named imports for ExpressJS types so users do not need to enable the
-
6.0.4 - 2022-01-02
- Upload the built package as a
- Add
- Bumped the minimum node.js version in
-
6.0.3 - 2021-12-30
- Bumped minimum Node version from 12.9 to 14.5 because the transpiled output uses the nullish coalescing operator (
-
6.0.2 - 2021-12-30
- Ensure CommonJS projects can import the module.
- Add additional tests that test:
- importing the library in
- usage of the library with external stores (
- Use
- Use
-
6.0.1 - 2021-12-25
-
6.0.0 - 2021-12-24
-
5.5.1 - 2021-11-06
-
5.5.0 - 2021-10-12
-
5.4.1 - 2021-10-05
-
5.4.0 - 2021-10-01
-
5.3.0 - 2021-07-01
-
5.2.6 - 2021-02-17
-
5.2.5 - 2021-02-08
-
5.2.3 - 2020-11-19
-
5.2.2 - 2020-11-19
-
5.2.1 - 2020-11-19
-
5.1.3 - 2020-04-29
from express-rate-limit GitHub release notesChanged
Added
5.0.0-beta.1) as a supported peer dependency (#304)Changed
Changed
es2019so that ESBuild outputs code that can run with Node 12.Fixed
undefinedis passed to the ratelimiter.
Added
MemoryStore, so it can now be imported as a named import(
import { MemoryStore } from 'express-rate-limit').Fixed
onLimitReachedoption (this was supposed to be deprecated inv6.0.0 itself); developers should use a custom handler function that checks if
the rate limit has been exceeded instead.
Added
rateLimitin case the default import does not work.Fixed
default, so Typescript CommonJS developers can default-import the library (import rateLimit from 'express-rate-limit').Fixed
esModuleInteropflag in their Typescript compiler configuration.Fixed
.tgzto GitHub releases.Changed
mainandmodulefields topackage.json. This helps tools such as ESLint that do not yet support theexportsfield.package-lock.jsonto matchpackage.jsonChanged
??), which isn't supported in Node prior to 14.x.Fixed
Added
js-cjs,js-esm,ts-cjs,ts-esmenvironments.redis,mongo,memcached,precise).Changed
esbuildto generate ESM and CJS output. This reduces the size of the built package from 138 kb to 13kb and build time to 4 ms! 🚀dts-bundle-generatorto generate a single Typescript declaration file.Commit messages
Package name: express-rate-limit
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs