Skip to content

fix(deps): update npm - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json #886

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Feb 4, 2025
Merged

fix(deps): update npm - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json #886

merged 1 commit into from
Feb 4, 2025

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jan 27, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@finos/git-proxy ^1.4.0 -> ^1.7.1 age adoption passing confidence
express (source) ^4.18.2 -> ^4.21.2 age adoption passing confidence

Release Notes

finos/git-proxy (@​finos/git-proxy)

v1.7.1: Version 1.7.1

Compare Source

What's Changed

Full Changelog: v1.7.0...v1.7.1

v1.7.0: Version 1.7.0

Compare Source

What's Changed

Full Changelog: v1.6.0...v1.7.0

v1.6.0: Version 1.6.0

Compare Source

What's Changed

Full Changelog: v1.5.2...v1.6.0

v1.5.2: Version 1.5.2

Compare Source

What's Changed

New Contributors

Full Changelog: v1.5.1...v1.5.2

v1.5.1: Version 1.5.1

Compare Source

What's Changed

New Contributors

Full Changelog: v1.5.0...v1.5.1

v1.5.0: Version 1.5.0

Compare Source

What's Changed

Full Changelog: v1.4.1...v1.5.0

v1.4.1: Version 1.4.1

Compare Source

What's Changed

New Contributors

Full Changelog: v1.4.0...v1.4.1

expressjs/express (express)

v4.21.2

Compare Source

v4.21.1

Compare Source

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

v4.21.0

Compare Source

What's Changed

New Contributors

Full Changelog: expressjs/express@4.20.0...4.21.0

v4.20.0

Compare Source

==========

  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: [email protected]
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

v4.19.2

Compare Source

==========

  • Improved fix for open redirect allow list bypass

v4.19.1

Compare Source

==========

  • Allow passing non-strings to res.location with new encoding handling checks

v4.19.0

Compare Source

v4.18.3

Compare Source

==========

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions github-actions bot added the fix label Jan 27, 2025
@github-actions GitHub Actions
Copy link

github-actions bot commented Jan 27, 2025 •
edited
Loading

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/express ^4.21.2 🟢 7.3
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 10all changesets reviewed
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1019 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities🟢 100 existing vulnerabilities detected
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST🟢 9SAST tool detected but not run on all commits

Scanned Files

  • plugins/git-proxy-plugin-samples/package.json

@netlify Netlify
Copy link

netlify bot commented Jan 27, 2025 •
edited
Loading

✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name Link
🔨 Latest commit 15c5657
🔍 Latest deploy log https://app.netlify.com/sites/endearing-brigadeiros-63f9d0/deploys/67a28b6bdfa2780008602c57

@codecov Codecov
Copy link

codecov bot commented Jan 27, 2025 •
edited
Loading

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 63.20%. Comparing base (6da3e86) to head (15c5657).
Report is 2 commits behind head on main.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #886   +/-   ##
=======================================
  Coverage   63.20%   63.20%           
=======================================
  Files          47       47           
  Lines        1685     1685           
=======================================
  Hits         1065     1065           
  Misses        620      620

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@renovate renovate bot force-pushed the renovate/git-proxy-plugin-samples-manager branch from d5bc601 to 68a679c Compare January 28, 2025 09:27
@renovate renovate bot force-pushed the renovate/git-proxy-plugin-samples-manager branch 2 times, most recently from 578baf7 to ed1fd46 Compare February 4, 2025 21:36
@renovate renovate bot force-pushed the renovate/git-proxy-plugin-samples-manager branch from ed1fd46 to 15c5657 Compare February 4, 2025 21:49
JamieSlome
JamieSlome approved these changes Feb 4, 2025
View reviewed changes
Copy link
Member

@JamieSlome JamieSlome left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 🍰

@JamieSlome JamieSlome merged commit 069fcfa into main Feb 4, 2025
14 checks passed
@JamieSlome JamieSlome deleted the renovate/git-proxy-plugin-samples-manager branch February 4, 2025 22:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@JamieSlome JamieSlome JamieSlome approved these changes

Assignees
No one assigned
Labels
fix
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@JamieSlome