{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":296678196,"defaultBranch":"main","name":"dgraph-lambda","ownerLogin":"dgraph-io","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2020-09-18T16:45:56.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/13958706?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1726077557.0","currentOid":""},"activityList":{"items":[{"before":"b5076451659c88fc9a4a7f191dbaf3833ee98b14","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/multi-435c4b74b9","pushedAt":"2024-09-11T17:59:17.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"b5076451659c88fc9a4a7f191dbaf3833ee98b14","ref":"refs/heads/dependabot/npm_and_yarn/multi-435c4b74b9","pushedAt":"2024-09-11T17:48:00.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump send and express\n\nBumps [send](https://github.com/pillarjs/send) to 1.1.0 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.\n\n\nUpdates `send` from 0.18.0 to 1.1.0\n- [Release notes](https://github.com/pillarjs/send/releases)\n- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)\n- [Commits](https://github.com/pillarjs/send/compare/0.18.0...1.1.0)\n\nUpdates `express` from 4.20.0 to 5.0.0\n- [Release notes](https://github.com/expressjs/express/releases)\n- [Changelog](https://github.com/expressjs/express/blob/master/History.md)\n- [Commits](https://github.com/expressjs/express/compare/4.20.0...v5.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: send\n dependency-type: indirect\n- dependency-name: express\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump send and express"}},{"before":"79df65ddb919e6b8be09ca448a29cb46155876e7","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/multi-ceff1a497b","pushedAt":"2024-09-11T17:47:00.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"}},{"before":"6260b2fcb364ff8b02d1fb67945a39143933d0d2","after":"409dd4d6a455215710a728a9b637af4c553583d1","ref":"refs/heads/main","pushedAt":"2024-09-11T17:46:58.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"},"commit":{"message":"Bump path-to-regexp and express (#57)\n\nBumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to\r\n0.1.10 and updates ancestor dependency\r\n[express](https://github.com/expressjs/express). These dependencies need\r\nto be updated together.\r\n\r\nUpdates `path-to-regexp` from 0.1.7 to 0.1.10\r\n
\r\nRelease notes\r\n

Sourced from path-to-regexp's\r\nreleases.

\r\n
\r\n

Backtrack protection

\r\n

Fixed

\r\n
    \r\n
  • Add backtrack protection to parameters 29b96b4\r\n
      \r\n
    • This will break some edge cases but should improve performance
      • \r\n
    \r\n
    • \r\n
\r\n

https://github.com/pillarjs/path-to-regexp/compare/v0.1.9...v0.1.10

\r\n

Support non-lookahead regex output

\r\n

Added

\r\n
    \r\n
  • Allow a non-lookahead regex (#312)\r\nc4272e4
    • \r\n
\r\n

https://github.com/component/path-to-regexp/compare/v0.1.8...v0.1.9

\r\n

Support named matching groups in RegExp

\r\n

Added

\r\n
    \r\n
  • Add support for named matching groups (#301)\r\n114f62d
    • \r\n
\r\n

https://github.com/pillarjs/path-to-regexp/compare/v0.1.7...v0.1.8

\r\n
\r\n
\r\n
\r\nCommits\r\n\r\n
\r\n
\r\n\r\nUpdates `express` from 4.19.2 to 4.20.0\r\n
\r\nRelease notes\r\n

Sourced from express's\r\nreleases.

\r\n
\r\n

4.20.0

\r\n

What's Changed

\r\n

Important

\r\n
    \r\n
  • IMPORTANT: The default depth level for parsing\r\nURL-encoded data is now 32 (previously was\r\nInfinity)
    • \r\n
  • Remove link renderization in html while using\r\nres.redirect
    • \r\n
\r\n

Other Changes

\r\n
    \r\n
  • 4.19.2 Staging by @​wesleytodd in expressjs/express#5561
    • \r\n
  • remove duplicate location test for data uri by @​wesleytodd in expressjs/express#5562
    • \r\n
  • feat: document beta releases expectations by @​marco-ippolito\r\nin expressjs/express#5565
    • \r\n
  • Cut down on duplicated CI runs by @​jonchurch in expressjs/express#5564
    • \r\n
  • Add a Threat Model by @​UlisesGascon\r\nin expressjs/express#5526
    • \r\n
  • Assign captain of encodeurl by @​blakeembrey in\r\nexpressjs/express#5579
    • \r\n
  • Nominate jonchurch as repo captain for http-errors,\r\nexpressjs.com, morgan, cors,\r\nbody-parser by @​jonchurch in expressjs/express#5587
    • \r\n
  • docs: update Security.md by @​inigomarquinez\r\nin expressjs/express#5590
    • \r\n
  • docs: update triage nomination policy by @​UlisesGascon\r\nin expressjs/express#5600
    • \r\n
  • Add CodeQL (SAST) by @​UlisesGascon\r\nin expressjs/express#5433
    • \r\n
  • docs: add UlisesGascon as triage initiative captain by @​UlisesGascon\r\nin expressjs/express#5605
    • \r\n
  • deps: encodeurl@~2.0.0 by @​blakeembrey in\r\nexpressjs/express#5569
    • \r\n
  • skip QUERY method test by @​jonchurch in expressjs/express#5628
    • \r\n
  • ignore ETAG query test on 21 and 22, reuse skip util by @​jonchurch in expressjs/express#5639
    • \r\n
  • add support Node.js@22 in the CI by @​mertcanaltin\r\nin expressjs/express#5627
    • \r\n
  • doc: add table of contents, tc/triager lists to readme by @​mertcanaltin\r\nin expressjs/express#5619
    • \r\n
  • List and sort all projects, add captains by @​blakeembrey in\r\nexpressjs/express#5653
    • \r\n
  • docs: add @​UlisesGascon\r\nas captain for cookie-parser by @​UlisesGascon\r\nin expressjs/express#5666
    • \r\n
  • ✨ bring back query tests for node 21 by @​ctcpip in expressjs/express#5690
    • \r\n
  • [v4] Deprecate res.clearCookie accepting\r\noptions.maxAge and options.expires by @​jonchurch in expressjs/express#5672
    • \r\n
  • skip QUERY tests for Node 21 only, still not supported by @​jonchurch in expressjs/express#5695
    • \r\n
  • 📝 update people, add ctcpip to TC by @​ctcpip in expressjs/express#5683
    • \r\n
  • remove minor version pinning from ci by @​jonchurch in expressjs/express#5722
    • \r\n
  • Fix link variable use in attribution section of CODE OF CONDUCT by\r\n@​IamLizu in expressjs/express#5762
    • \r\n
  • Replace Appveyor windows testing with GHA by @​jonchurch in expressjs/express#5599
    • \r\n
  • Add OSSF Scorecard badge by @​UlisesGascon\r\nin expressjs/express#5436
    • \r\n
  • update scorecard link by @​bjohansebas in\r\nexpressjs/express#5814
    • \r\n
  • Nominate @​IamLizu to the\r\ntriage team by @​UlisesGascon\r\nin expressjs/express#5836
    • \r\n
  • deps: path-to-regexp@0.1.8 by @​blakeembrey in\r\nexpressjs/express#5603
    • \r\n
  • docs: specify new instructions for question and\r\ndiscuss by @​IamLizu in expressjs/express#5835
    • \r\n
  • 4.x: Upgrade merge-descriptors dependency by @​RobinTail in expressjs/express#5781
    • \r\n
  • path-to-regexp@0.1.10 by @​blakeembrey in\r\nexpressjs/express#5902
    • \r\n
\r\n

New Contributors

\r\n
    \r\n
  • @​marco-ippolito\r\nmade their first contribution in expressjs/express#5565
    • \r\n
  • @​inigomarquinez\r\nmade their first contribution in expressjs/express#5590
    • \r\n
  • @​mertcanaltin\r\nmade their first contribution in expressjs/express#5627
    • \r\n
  • @​ctcpip made\r\ntheir first contribution in expressjs/express#5690
    • \r\n
  • @​bjohansebas\r\nmade their first contribution in expressjs/express#5814
    • \r\n
\r\n

Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.20.0

\r\n
\r\n
\r\n
\r\nChangelog\r\n

Sourced from express's\r\nchangelog.

\r\n
\r\n

4.20.0 / 2024-09-10

\r\n
    \r\n
  • deps: serve-static@0.16.0\r\n
      \r\n
    • Remove link renderization in html while redirecting
      • \r\n
    \r\n
    • \r\n
  • deps: send@0.19.0\r\n
      \r\n
    • Remove link renderization in html while redirecting
      • \r\n
    \r\n
    • \r\n
  • deps: body-parser@0.6.0\r\n
      \r\n
    • add depth option to customize the depth level in the\r\nparser
      • \r\n
    • IMPORTANT: The default depth level for parsing\r\nURL-encoded data is now 32 (previously was\r\nInfinity)
      • \r\n
    \r\n
    • \r\n
  • Remove link renderization in html while using\r\nres.redirect
    • \r\n
  • deps: path-to-regexp@0.1.10\r\n
      \r\n
    • Adds support for named matching groups in the routes using a\r\nregex
      • \r\n
    • Adds backtracking protection to parameters without regexes\r\ndefined
      • \r\n
    \r\n
    • \r\n
  • deps: encodeurl@~2.0.0\r\n
      \r\n
    • Removes encoding of \\, |, and\r\n^ to align better with URL spec
      • \r\n
    \r\n
    • \r\n
  • Deprecate passing options.maxAge and\r\noptions.expires to res.clearCookie\r\n
      \r\n
    • Will be ignored in v5, clearCookie will set a cookie with an expires\r\nin the past to instruct clients to delete the cookie
      • \r\n
    \r\n
    • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n\r\n
\r\n
\r\n\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dgraph-io/dgraph-lambda/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump path-to-regexp and express (#57)"}},{"before":null,"after":"79df65ddb919e6b8be09ca448a29cb46155876e7","ref":"refs/heads/dependabot/npm_and_yarn/multi-ceff1a497b","pushedAt":"2024-09-11T02:59:23.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump path-to-regexp and express\n\nBumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 0.1.10 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.\n\n\nUpdates `path-to-regexp` from 0.1.7 to 0.1.10\n- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)\n- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)\n- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.7...v0.1.10)\n\nUpdates `express` from 4.19.2 to 4.20.0\n- [Release notes](https://github.com/expressjs/express/releases)\n- [Changelog](https://github.com/expressjs/express/blob/master/History.md)\n- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.20.0)\n\n---\nupdated-dependencies:\n- dependency-name: path-to-regexp\n dependency-type: indirect\n- dependency-name: express\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump path-to-regexp and express"}},{"before":"7e55460514591679e508fe06655f071836957be5","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/multi-da046e2c65","pushedAt":"2024-07-18T12:02:09.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"}},{"before":"88558907c1983b4f69d00bb65e599a65d8f4f2dc","after":"6260b2fcb364ff8b02d1fb67945a39143933d0d2","ref":"refs/heads/main","pushedAt":"2024-07-18T12:02:07.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"},"commit":{"message":"Bump ws and @pm2/agent (#51)\n\n[//]: # (dependabot-start)\r\n⚠️ **Dependabot is rebasing this PR** ⚠️ \r\n\r\nRebasing might not happen immediately, so don't worry if this takes some\r\ntime.\r\n\r\nNote: if you make any changes to this PR yourself, they will take\r\nprecedence over the rebase.\r\n\r\n---\r\n\r\n[//]: # (dependabot-end)\r\n\r\nBumps [ws](https://github.com/websockets/ws) and @pm2/agent. These\r\ndependencies needed to be updated together.\r\nUpdates `ws` from 7.5.9 to 7.5.10\r\n
\r\nRelease notes\r\n

Sourced from ws's\r\nreleases.

\r\n
\r\n

7.5.10

\r\n

Bug fixes

\r\n
    \r\n
  • Backported e55e5106 to the 7.x release line (22c28763).
    • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • d962d70\r\n[dist] 7.5.10
    • \r\n
  • 22c2876\r\n[security] Fix crash when the Upgrade header cannot be read (#2231)
    • \r\n
  • See full diff in compare\r\nview
    • \r\n
\r\n
\r\n
\r\n\r\nUpdates `@pm2/agent` from 2.0.1 to 2.0.4\r\n\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dgraph-io/dgraph-lambda/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump ws and @pm2/agent (#51)"}},{"before":"03492677859e95361694eb7bfddd3cc82fa79bcf","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/multi-6a0c1b1a77","pushedAt":"2024-07-18T12:01:47.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"}},{"before":"0802c85d93579903c3b26137e26a4c4e8015300c","after":"88558907c1983b4f69d00bb65e599a65d8f4f2dc","ref":"refs/heads/main","pushedAt":"2024-07-18T12:01:45.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"},"commit":{"message":"Bump axios and pm2 (#49)\n\n[//]: # (dependabot-start)\r\n⚠️ **Dependabot is rebasing this PR** ⚠️ \r\n\r\nRebasing might not happen immediately, so don't worry if this takes some\r\ntime.\r\n\r\nNote: if you make any changes to this PR yourself, they will take\r\nprecedence over the rebase.\r\n\r\n---\r\n\r\n[//]: # (dependabot-end)\r\n\r\nRemoves [axios](https://github.com/axios/axios). It's no longer used\r\nafter updating ancestor dependency\r\n[pm2](https://github.com/Unitech/pm2). These dependencies need to be\r\nupdated together.\r\n\r\nRemoves `axios`\r\n\r\nUpdates `pm2` from 5.3.0 to 5.4.2\r\n
\r\nRelease notes\r\n

Sourced from pm2's\r\nreleases.

\r\n
\r\n

v5.4.2

\r\n
    \r\n
  • Unitech/pm2#5833
    • \r\n
  • keymetrics/pm2-io-apm#301
    • \r\n
\r\n

5.4.1

\r\n

Update websocket dependency in pm2/agent submodule

\r\n

5.4.0

\r\n
    \r\n
  • drop old uuid sub dependency
    • \r\n
  • #5782 add\r\nautostart true||false feature by @​ultimate-tester
    • \r\n
  • update modules
    • \r\n
\r\n

5.3.1

\r\n
    \r\n
  • Fix terminal width when condensed https://github.com/Unitech/pm2/commit/cac839329afaa768ea9901e3e2551987d509ae05
    • \r\n
  • Auto run tsx/ts files with bun binary instead of ts-node https://github.com/Unitech/pm2/commit/f122aabe3270aade8fa770fd5b67b877a26efd52
    • \r\n
  • #5686\r\nSwitch from Travis CI to Github Actions
    • \r\n
  • #5680\r\nFixed reserved keyword for ES6 Strict Mode when Bundling @​juaneth
    • \r\n
  • #5683\r\nupdate badges
    • \r\n
  • #5684\r\nauto switch light and dark mode logos
    • \r\n
  • #5678\r\nBugfix/deploy ecosystem filename extension / esm module default\r\necosystem config name @​TeleMediaCC
    • \r\n
  • #5660 Fix\r\nmatching logic for logs from namespace when lines = 0 @​bawjensen
    • \r\n
  • fix "vulnerabilities" in axios module
    • \r\n
\r\n
\r\n
\r\n
\r\nChangelog\r\n

Sourced from pm2's\r\nchangelog.

\r\n
\r\n

5.4.1

\r\n
    \r\n
  • @​pm2/io DeprecationWarning: The util._extend API is\r\ndeprecated keymetrics/pm2-io-apm#301\r\n@​egoroof
    • \r\n
\r\n

5.4.0

\r\n
    \r\n
  • #5782 add\r\nautostart true||false feature by @​ultimate-tester
    • \r\n
  • fix UUID deprecation
    • \r\n
  • updates modules
    • \r\n
\r\n

5.3.1

\r\n
    \r\n
  • #5686\r\nSwitch from Travis CI to Github Actions
    • \r\n
  • #5680\r\nFixed reserved keyword for ES6 Strict Mode when Bundling @​juaneth
    • \r\n
  • #5683\r\nupdate badges
    • \r\n
  • #5684\r\nauto switch light and dark mode logos
    • \r\n
  • #5678\r\nBugfix/deploy ecosystem filename extension / esm module default\r\necosystem config name @​TeleMediaCC
    • \r\n
  • #5660 Fix\r\nmatching logic for logs from namespace when lines = 0 @​bawjensen
    • \r\n
  • fix "vulnerabilities" in axios module
    • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • de0bbad\r\npm2@5.4.2
    • \r\n
  • 5c50ed4\r\npm2@5.4.1
    • \r\n
  • f8e312e\r\nMerge pull request #5833\r\nfrom we-fork/fix-env-output
    • \r\n
  • cef628d\r\nfx
    • \r\n
  • 87612eb\r\npm2@5.4.1
    • \r\n
  • 49c2824\r\nfix: env output in pm2-describe
    • \r\n
  • 5e0eb40\r\npm2@5.4.0
    • \r\n
  • 098b344\r\npm2@5.4.0
    • \r\n
  • 8eab965\r\nfx
    • \r\n
  • 0713061\r\nfix
    • \r\n
  • Additional commits viewable in compare\r\nview
    • \r\n
\r\n
\r\n
\r\n\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dgraph-io/dgraph-lambda/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump axios and pm2 (#49)"}},{"before":"65f52530c6e531bd5b150d733d43fdc766221abe","after":"03492677859e95361694eb7bfddd3cc82fa79bcf","ref":"refs/heads/dependabot/npm_and_yarn/multi-6a0c1b1a77","pushedAt":"2024-07-18T12:01:37.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump axios and pm2\n\nRemoves [axios](https://github.com/axios/axios). It's no longer used after updating ancestor dependency [pm2](https://github.com/Unitech/pm2). These dependencies need to be updated together.\n\n\nRemoves `axios`\n\nUpdates `pm2` from 5.3.0 to 5.4.2\n- [Release notes](https://github.com/Unitech/pm2/releases)\n- [Changelog](https://github.com/Unitech/pm2/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/Unitech/pm2/compare/5.3.0...v5.4.2)\n\n---\nupdated-dependencies:\n- dependency-name: axios\n dependency-type: indirect\n- dependency-name: pm2\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump axios and pm2"}},{"before":"de9d4478e31110a34cec7d9f6018a0177e8bd1eb","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/semver-5.7.2","pushedAt":"2024-07-18T12:01:05.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"}},{"before":"4c0153d38a2c15c20f44108d33a65650a66a04bd","after":"0802c85d93579903c3b26137e26a4c4e8015300c","ref":"refs/heads/main","pushedAt":"2024-07-18T12:01:03.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"},"commit":{"message":"Bump semver from 5.7.1 to 5.7.2 (#56)\n\nBumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 5.7.2.\r\n
\r\nRelease notes\r\n

Sourced from semver's\r\nreleases.

\r\n
\r\n

v5.7.2

\r\n

5.7.2\r\n(2023-07-10)

\r\n

Bug Fixes

\r\n
    \r\n
  • 2f8fd41\r\n#585\r\nbetter handling of whitespace (#585)\r\n(@​joaomoreno,\r\n@​lukekarrys)
    • \r\n
\r\n
\r\n
\r\n
\r\nChangelog\r\n

Sourced from semver's\r\nchangelog.

\r\n
\r\n

5.7.2\r\n(2023-07-10)

\r\n

Bug Fixes

\r\n
    \r\n
  • 2f8fd41\r\n#585\r\nbetter handling of whitespace (#585)\r\n(@​joaomoreno,\r\n@​lukekarrys)
    • \r\n
\r\n

5.7

\r\n
    \r\n
  • Add minVersion method
    • \r\n
\r\n

5.6

\r\n
    \r\n
  • Move boolean loose param to an options object, with\r\nbackwards-compatibility protection.
    • \r\n
  • Add ability to opt out of special prerelease version handling with\r\nthe includePrerelease option flag.
    • \r\n
\r\n

5.5

\r\n
    \r\n
  • Add version coercion capabilities
    • \r\n
\r\n

5.4

\r\n
    \r\n
  • Add intersection checking
    • \r\n
\r\n

5.3

\r\n
    \r\n
  • Add minSatisfying method
    • \r\n
\r\n

5.2

\r\n
    \r\n
  • Add prerelease(v) that returns prerelease\r\ncomponents
    • \r\n
\r\n

5.1

\r\n
    \r\n
  • Add Backus-Naur for ranges
    • \r\n
  • Remove excessively cute inspection methods
    • \r\n
\r\n

5.0

\r\n
    \r\n
  • Remove AMD/Browserified build artifacts
    • \r\n
  • Fix ltr and gtr when using the * range
    • \r\n
  • Fix for range * with a prerelease identifier
    • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • f8cc313\r\nchore: release 5.7.2
    • \r\n
  • 2f8fd41\r\nfix: better handling of whitespace (#585)
    • \r\n
  • deb5ad5\r\nchore: @​npmcli/template-oss@​4.16.0
    • \r\n
  • See full diff in compare\r\nview
    • \r\n
\r\n
\r\n
\r\nMaintainer changes\r\n

This version was pushed to npm by lukekarrys, a new releaser\r\nfor semver since your current version.

\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=semver&package-manager=npm_and_yarn&previous-version=5.7.1&new-version=5.7.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dgraph-io/dgraph-lambda/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump semver from 5.7.1 to 5.7.2 (#56)"}},{"before":"4f2c059e4b1bbe81f39e3c383a41e1b3ba0f0ce6","after":"65f52530c6e531bd5b150d733d43fdc766221abe","ref":"refs/heads/dependabot/npm_and_yarn/multi-6a0c1b1a77","pushedAt":"2024-07-18T12:00:48.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump axios and pm2\n\nRemoves [axios](https://github.com/axios/axios). It's no longer used after updating ancestor dependency [pm2](https://github.com/Unitech/pm2). These dependencies need to be updated together.\n\n\nRemoves `axios`\n\nUpdates `pm2` from 5.3.0 to 5.4.2\n- [Release notes](https://github.com/Unitech/pm2/releases)\n- [Changelog](https://github.com/Unitech/pm2/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/Unitech/pm2/compare/5.3.0...v5.4.2)\n\n---\nupdated-dependencies:\n- dependency-name: axios\n dependency-type: indirect\n- dependency-name: pm2\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump axios and pm2"}},{"before":null,"after":"de9d4478e31110a34cec7d9f6018a0177e8bd1eb","ref":"refs/heads/dependabot/npm_and_yarn/semver-5.7.2","pushedAt":"2024-07-18T12:00:31.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump semver from 5.7.1 to 5.7.2\n\nBumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 5.7.2.\n- [Release notes](https://github.com/npm/node-semver/releases)\n- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)\n- [Commits](https://github.com/npm/node-semver/compare/v5.7.1...v5.7.2)\n\n---\nupdated-dependencies:\n- dependency-name: semver\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump semver from 5.7.1 to 5.7.2"}},{"before":"aac85e0f8ff0ae25c9321053010c1c8a8a8206e8","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/multi-9b2b4eccca","pushedAt":"2024-07-18T12:00:28.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"4882f7af11d7b4f69dc836835cc5705ec450e732","after":"7e55460514591679e508fe06655f071836957be5","ref":"refs/heads/dependabot/npm_and_yarn/multi-da046e2c65","pushedAt":"2024-07-18T12:00:06.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump ws and @pm2/agent\n\nBumps [ws](https://github.com/websockets/ws) and @pm2/agent. These dependencies needed to be updated together.\n\nUpdates `ws` from 7.5.9 to 7.5.10\n- [Release notes](https://github.com/websockets/ws/releases)\n- [Commits](https://github.com/websockets/ws/compare/7.5.9...7.5.10)\n\nUpdates `@pm2/agent` from 2.0.1 to 2.0.4\n\n---\nupdated-dependencies:\n- dependency-name: ws\n dependency-type: indirect\n- dependency-name: \"@pm2/agent\"\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump ws and @pm2/agent"}},{"before":"31817564f1374bb39b4c6f9710a5fd8cbfc60d8a","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/systeminformation-5.22.11","pushedAt":"2024-07-18T11:59:53.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"}},{"before":"16a8ac327264ed0f1b22b149631f90dd0ba5faee","after":"4c0153d38a2c15c20f44108d33a65650a66a04bd","ref":"refs/heads/main","pushedAt":"2024-07-18T11:59:51.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"},"commit":{"message":"Bump systeminformation from 5.18.6 to 5.22.11 (#52)\n\nBumps\r\n[systeminformation](https://github.com/sebhildebrandt/systeminformation)\r\nfrom 5.18.6 to 5.22.11.\r\n
\r\nChangelog\r\n

Sourced from systeminformation's\r\nchangelog.

\r\n
\r\n

Changelog

\r\n

Major Changes - Version 5

\r\n

New Functions

\r\n
    \r\n
  • audio() detailed audio information
    • \r\n
  • bluetoothDevices() detailed information detected\r\nbluetooth devices
    • \r\n
  • dockerImages() detailed information docker images
    • \r\n
  • dockerVolumes() detailed information docker\r\nvolumes
    • \r\n
  • printers() detailed printer information
    • \r\n
  • usb() detailed USB information
    • \r\n
  • wifiInterfaces() detected Wi-Fi interfaces
    • \r\n
  • wifiConnections() active Wi-Fi connections
    • \r\n
\r\n

Breaking Changes

\r\n

Be aware, that the new version 5.x is NOT\r\nfully backward compatible to version 4.x ...

\r\n

We had to make several interface changes to keep\r\nsysteminformation as consistent as possible. We highly recommend to go through\r\nthe complete list and adapt your own code to be again compatible to\r\nthe new version 5.

\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
FunctionOldNew (V5)Comments
unsupported values-1nullvalues which are unknown orunsupported on\r\nplatform
battery()hasbatterycyclecountischargingdesignedcapacitymaxcapacityacconnectedtimeremaininghasBatterycycleCountisChargingdesignedCapacitymaxCapacityacConnectedtimeRemainingpascalCase conformity
blockDevices()fstypefsTypepascalCase conformity
cpu()speedminspeedmaxspeedMinspeedMaxpascalCase conformity
cpu().speedcpu().speedMincpu().speedMaxstring valuesnow returningnumerical valuesbetter value handling
cpuCurrentspeed()cpuCurrentSpeed()function name changedpascalCase\r\nconformity
currentLoad()avgloadcurrentloadcurrentload_usercurrentload_systemcurrentload_nicecurrentload_idlecurrentload_irqraw_currentloadavgLoadcurrentLoadcurrentLoadUsercurrentLoadSystemcurrentLoadNicecurrentLoadIdlecurrentLoadIrqrawCurrentLoadpascalCase conformity
dockerContainerStats()mem_usagemem_limitmem_percentcpu_percentcpu_statsprecpu_statsmemory_statsmemUsagememLimitmemPercentcpuPercentcpuStatsprecpuStatsmemoryStatspascalCase conformity
dockerContainerProcesses()pid_hostpidHostpascalCase conformity
graphics().displaypixeldepthresolutionxresolutionysizexsizeypixelDepthresolutionXresolutionYsizeXsizeYpascalCase conformity
networkConnections()localaddresslocalportpeeraddresspeerportlocalAddresslocalPortpeerAddresspeerPortpascalCase conformity
networkInterfaces()carrier_changescarrierChangespascalCase conformity
processes()mem_vszmem_rsspcpupcpuupcpuspmemmemVszmemRsscpucpuucpusmempascalCase conformityrenamed\r\nattributes
processLoad()result as objectresult as array of objectsfunction now allows to provide more thanone\r\nprocess (as a comma separated list)
services()pcpupmemcpumemrenamed attributes
vbox()HPETPAEAPICX2APICACPIIOAPICbiosAPICmodeTRChpetpaeapicx2ApicacpiioApicbiosApicModertcpascalCase conformity
\r\n

Other Improvements and Changes

\r\n
    \r\n
  • baseboard(): added memMax, memSlots
    • \r\n
  • bios(): added language and features (linux)
    • \r\n
  • blockDevices() added raid group member (linux)
    • \r\n
  • cpu(): extended AMD processor list
    • \r\n
  • cpu(): extended socket list (win)
    • \r\n
  • cpu(): added virtualization if cpu supports\r\nvirtualization
    • \r\n
  • cpu(): now flags are part of this function
    • \r\n
  • cpuTemperature() added socket and chipset temp\r\n(linux)
    • \r\n
\r\n\r\n
\r\n

... (truncated)

\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • bb006e4\r\n5.22.11
    • \r\n
  • ec7fa4a\r\nosInfo() added macOS Sequoia
    • \r\n
  • 9e1feab\r\n5.22.10
    • \r\n
  • 7debd4c\r\npowerShellStart() fixed kill issue
    • \r\n
  • 7071e8f\r\n5.22.9
    • \r\n
  • 6ed68f7\r\nmemLayout() fixed typo manufacturer
    • \r\n
  • f114fc3\r\n5.22.8
    • \r\n
  • 8e66e0d\r\nutils() replaces deprecated util._extend()
    • \r\n
  • b4bc62b\r\n5.22.7
    • \r\n
  • 5fe29c6\r\nbattery() fixed designed capacity issue (windows)
    • \r\n
  • Additional commits viewable in compare\r\nview
    • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=systeminformation&package-manager=npm_and_yarn&previous-version=5.18.6&new-version=5.22.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dgraph-io/dgraph-lambda/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump systeminformation from 5.18.6 to 5.22.11 (#52)"}},{"before":"270e9416225d37ef782d1efa3e6e6995127049d7","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/word-wrap-1.2.5","pushedAt":"2024-07-18T11:59:36.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"}},{"before":"2b7defc67e8d0c046051406bb84ce0bec86b54e1","after":"16a8ac327264ed0f1b22b149631f90dd0ba5faee","ref":"refs/heads/main","pushedAt":"2024-07-18T11:59:34.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"},"commit":{"message":"Bump word-wrap from 1.2.3 to 1.2.5 (#54)\n\nBumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3\r\nto 1.2.5.\r\n
\r\nRelease notes\r\n

Sourced from word-wrap's\r\nreleases.

\r\n
\r\n

1.2.5

\r\n

Changes:

\r\n

Reverts default value for options.indent to two spaces\r\n' '.

\r\n

Full Changelog: https://github.com/jonschlinkert/word-wrap/compare/1.2.4...1.2.5

\r\n

1.2.4

\r\n

What's Changed

\r\n
    \r\n
  • Remove default indent by @​mohd-akram in jonschlinkert/word-wrap#24
    • \r\n
  • 🔒fix: CVE 2023 26115 (2) by @​OlafConijn in jonschlinkert/word-wrap#41
    • \r\n
  • :lock: fix: CVE-2023-26115 by @​aashutoshrathi\r\nin jonschlinkert/word-wrap#33
    • \r\n
  • chore: publish workflow by @​OlafConijn in jonschlinkert/word-wrap#42
    • \r\n
\r\n

New Contributors

\r\n
    \r\n
  • @​mohd-akram made\r\ntheir first contribution in jonschlinkert/word-wrap#24
    • \r\n
  • @​OlafConijn made\r\ntheir first contribution in jonschlinkert/word-wrap#41
    • \r\n
  • @​aashutoshrathi\r\nmade their first contribution in jonschlinkert/word-wrap#33
    • \r\n
\r\n

Full Changelog: https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4

\r\n
\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • 207044e\r\n1.2.5
    • \r\n
  • 9894315\r\nrevert default indent
    • \r\n
  • f64b188\r\nrun verb to generate README
    • \r\n
  • 03ea082\r\nMerge pull request #42\r\nfrom jonschlinkert/chore/publish-workflow
    • \r\n
  • 420dce9\r\nMerge pull request #41\r\nfrom jonschlinkert/fix/CVE-2023-26115-2
    • \r\n
  • bfa694e\r\nUpdate .github/workflows/publish.yml
    • \r\n
  • ace0b3c\r\nchore: bump version to 1.2.4
    • \r\n
  • 6fd7275\r\nchore: add publish workflow
    • \r\n
  • 30d6daf\r\nchore: fix test
    • \r\n
  • 655929c\r\nchore: remove package-lock
    • \r\n
  • Additional commits viewable in compare\r\nview
    • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=word-wrap&package-manager=npm_and_yarn&previous-version=1.2.3&new-version=1.2.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dgraph-io/dgraph-lambda/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump word-wrap from 1.2.3 to 1.2.5 (#54)"}},{"before":"27b27f2ceab32587f87b9ab5204102b7bb4000df","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/babel/traverse-7.24.7","pushedAt":"2024-07-18T11:59:19.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"}},{"before":"b1d8c13ce86e2a3e30480f9759cf1aa14051435c","after":"2b7defc67e8d0c046051406bb84ce0bec86b54e1","ref":"refs/heads/main","pushedAt":"2024-07-18T11:59:17.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"},"commit":{"message":"Bump @babel/traverse from 7.22.5 to 7.24.7 (#48)\n\nBumps\r\n[@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse)\r\nfrom 7.22.5 to 7.24.7.\r\n
\r\nRelease notes\r\n

Sourced from @​babel/traverse's\r\nreleases.

\r\n
\r\n

v7.24.7 (2024-06-05)

\r\n

:bug: Bug Fix

\r\n
    \r\n
  • babel-node\r\n
      \r\n
    • #16554\r\nAllow extra flags in babel-node (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-traverse\r\n
      \r\n
    • #16522\r\nfix: incorrect constantViolations with destructuring (@​liuxingbaoyu)
      • \r\n
    \r\n
    • \r\n
  • babel-helper-transform-fixture-test-runner,\r\nbabel-plugin-proposal-explicit-resource-management\r\n
      \r\n
    • #16524\r\nfix: Transform using in switch correctly (@​liuxingbaoyu)
      • \r\n
    \r\n
    • \r\n
\r\n

:house: Internal

\r\n
    \r\n
  • babel-helpers, babel-runtime-corejs2,\r\nbabel-runtime-corejs3, babel-runtime\r\n
      \r\n
    • #16525\r\nDelete unused array helpers (@​blakewilson)
      • \r\n
    \r\n
    • \r\n
\r\n

Committers: 7

\r\n
    \r\n
  • Amjad Yahia Robeen Hassan (@​amjed-98)
    • \r\n
  • Babel Bot (@​babel-bot)
    • \r\n
  • Blake Wilson (@​blakewilson)
    • \r\n
  • Huáng Jùnliàng (@​JLHwung)
    • \r\n
  • Nicolò Ribaudo (@​nicolo-ribaudo)
    • \r\n
  • Sukka (@​SukkaW)
    • \r\n
  • @​liuxingbaoyu
    • \r\n
\r\n

v7.24.6 (2024-05-24)

\r\n

Thanks @​amjed-98, @​blakewilson, @​coelhucas, and @​SukkaW for your\r\nfirst PRs!

\r\n

:bug: Bug Fix

\r\n
    \r\n
  • babel-helper-create-class-features-plugin,\r\nbabel-plugin-transform-class-properties\r\n
      \r\n
    • #16514 Fix\r\nsource maps for private member expressions (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-core, babel-generator,\r\nbabel-plugin-transform-modules-commonjs\r\n
      \r\n
    • #16515 Fix\r\nsource maps for template literals (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-helper-create-class-features-plugin,\r\nbabel-plugin-proposal-decorators\r\n
      \r\n
    • #16485\r\nSupport undecorated static accessor in anonymous classes (@​JLHwung)
      • \r\n
    • #16484 Fix\r\ndecorator bare yield await (@​JLHwung)
      • \r\n
    \r\n
    • \r\n
  • babel-helpers,\r\nbabel-plugin-proposal-decorators,\r\nbabel-runtime-corejs3\r\n
      \r\n
    • #16483\r\nFix: throw TypeError if addInitializer is called after finished (@​JLHwung)
      • \r\n
    \r\n
    • \r\n
  • babel-parser,\r\nbabel-plugin-transform-typescript\r\n
      \r\n
    • #16476\r\nfix: Correctly parse cls.fn<C> = x (@​liuxingbaoyu)
      • \r\n
    \r\n
    • \r\n
\r\n

:house: Internal

\r\n
    \r\n
  • babel-core, babel-helpers,\r\nbabel-plugin-transform-runtime,\r\nbabel-preset-env, babel-runtime-corejs2,\r\nbabel-runtime-corejs3, babel-runtime\r\n
      \r\n
    • #16501\r\nGenerate helper metadata at build time (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-helpers\r\n
      \r\n
    • #16499 Add\r\ntsconfig.json for @babel/helpers/src/helpers\r\n(@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-cli, babel-helpers,\r\nbabel-plugin-external-helpers,\r\nbabel-plugin-proposal-decorators,\r\nbabel-plugin-transform-class-properties,\r\nbabel-plugin-transform-modules-commonjs,\r\nbabel-plugin-transform-modules-systemjs,\r\nbabel-plugin-transform-runtime,\r\nbabel-preset-env, babel-runtime-corejs2,\r\nbabel-runtime-corejs3, babel-runtime\r\n
      \r\n
    • #16495\r\nMove all runtime helpers to individual files (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-parser, babel-traverse\r\n
      \r\n
    • #16482\r\nStatically generate boilerplate for bitfield accessors (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • Other
    • \r\n
\r\n\r\n
\r\n

... (truncated)

\r\n
\r\n
\r\nChangelog\r\n

Sourced from @​babel/traverse's\r\nchangelog.

\r\n
\r\n

v7.24.7 (2024-06-05)

\r\n

:bug: Bug Fix

\r\n
    \r\n
  • babel-node\r\n
      \r\n
    • #16554\r\nAllow extra flags in babel-node (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-traverse\r\n
      \r\n
    • #16522\r\nfix: incorrect constantViolations with destructuring (@​liuxingbaoyu)
      • \r\n
    \r\n
    • \r\n
  • babel-helper-transform-fixture-test-runner,\r\nbabel-plugin-proposal-explicit-resource-management\r\n
      \r\n
    • #16524\r\nfix: Transform using in switch correctly (@​liuxingbaoyu)
      • \r\n
    \r\n
    • \r\n
\r\n

:house: Internal

\r\n
    \r\n
  • babel-helpers, babel-runtime-corejs2,\r\nbabel-runtime-corejs3, babel-runtime\r\n
      \r\n
    • #16525\r\nDelete unused array helpers (@​blakewilson)
      • \r\n
    \r\n
    • \r\n
\r\n

v7.24.6 (2024-05-24)

\r\n

:bug: Bug Fix

\r\n
    \r\n
  • babel-helper-create-class-features-plugin,\r\nbabel-plugin-transform-class-properties\r\n
      \r\n
    • #16514 Fix\r\nsource maps for private member expressions (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-core, babel-generator,\r\nbabel-plugin-transform-modules-commonjs\r\n
      \r\n
    • #16515 Fix\r\nsource maps for template literals (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-helper-create-class-features-plugin,\r\nbabel-plugin-proposal-decorators\r\n
      \r\n
    • #16485\r\nSupport undecorated static accessor in anonymous classes (@​JLHwung)
      • \r\n
    • #16484 Fix\r\ndecorator bare yield await (@​JLHwung)
      • \r\n
    \r\n
    • \r\n
  • babel-helpers,\r\nbabel-plugin-proposal-decorators,\r\nbabel-runtime-corejs3\r\n
      \r\n
    • #16483\r\nFix: throw TypeError if addInitializer is called after finished (@​JLHwung)
      • \r\n
    \r\n
    • \r\n
  • babel-parser,\r\nbabel-plugin-transform-typescript\r\n
      \r\n
    • #16476\r\nfix: Correctly parse cls.fn<C> = x (@​liuxingbaoyu)
      • \r\n
    \r\n
    • \r\n
\r\n

:house: Internal

\r\n
    \r\n
  • babel-core, babel-helpers,\r\nbabel-plugin-transform-runtime,\r\nbabel-preset-env, babel-runtime-corejs2,\r\nbabel-runtime-corejs3, babel-runtime\r\n
      \r\n
    • #16501\r\nGenerate helper metadata at build time (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-helpers\r\n
      \r\n
    • #16499 Add\r\ntsconfig.json for @babel/helpers/src/helpers\r\n(@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-cli, babel-helpers,\r\nbabel-plugin-external-helpers,\r\nbabel-plugin-proposal-decorators,\r\nbabel-plugin-transform-class-properties,\r\nbabel-plugin-transform-modules-commonjs,\r\nbabel-plugin-transform-modules-systemjs,\r\nbabel-plugin-transform-runtime,\r\nbabel-preset-env, babel-runtime-corejs2,\r\nbabel-runtime-corejs3, babel-runtime\r\n
      \r\n
    • #16495\r\nMove all runtime helpers to individual files (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • babel-parser, babel-traverse\r\n
      \r\n
    • #16482\r\nStatically generate boilerplate for bitfield accessors (@​nicolo-ribaudo)
      • \r\n
    \r\n
    • \r\n
  • Other\r\n
      \r\n
    • #16466\r\nMigrate import assertions syntax (@​JLHwung)
      • \r\n
    \r\n
    • \r\n
\r\n

v7.24.5 (2024-04-29)

\r\n

:bug: Bug Fix

\r\n
    \r\n
  • babel-plugin-transform-classes,\r\nbabel-traverse\r\n
      \r\n
    • #16377\r\nfix: TypeScript annotation affects output (@​liuxingbaoyu)
      • \r\n
    \r\n
    • \r\n
  • babel-helpers,\r\nbabel-plugin-proposal-explicit-resource-management,\r\nbabel-runtime-corejs3\r\n
      \r\n
    • #16440 Fix\r\nsuppressed error order (@​sossost)
      • \r\n
    • #16408\r\nAwait nullish async disposable (@​JLHwung)
      • \r\n
    \r\n
    • \r\n
\r\n

:nail_care: Polish

\r\n
    \r\n
  • babel-parser
    • \r\n
\r\n\r\n
\r\n

... (truncated)

\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • bf1e9a3\r\nv7.24.7
    • \r\n
  • 4463aa5\r\nfix: incorrect constantViolations with destructuring (#16522)
    • \r\n
  • 07bd000\r\nImprove getBindingIdentifiers (#16544)
    • \r\n
  • 17a5502\r\n[Babel 8] Remove extra.shorthand (#16521)
    • \r\n
  • 7934963\r\nUse type: module in all package.jsons (#16535)
    • \r\n
  • 9630250\r\nv7.24.6
    • \r\n
  • 1f010df\r\nExplicitly define NodePath.prototype.* (#16488)
    • \r\n
  • 6e3539b\r\n[babel 8] Publish .d.ts files for every package (#16416)
    • \r\n
  • e37e64d\r\nUse eslint v9 (#16479)
    • \r\n
  • 3ff20b9\r\nStatically generate boilerplate for bitfield accessors (#16482)
    • \r\n
  • Additional commits viewable in compare\r\nview
    • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@babel/traverse&package-manager=npm_and_yarn&previous-version=7.22.5&new-version=7.24.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dgraph-io/dgraph-lambda/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump @babel/traverse from 7.22.5 to 7.24.7 (#48)"}},{"before":"4f5f7c3edf20e6b446280aae8507ea9986fbd3ee","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/express-4.19.2","pushedAt":"2024-07-18T11:58:53.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"}},{"before":"4065034a8ae57d4781b2ac805fcce7589f94df83","after":"b1d8c13ce86e2a3e30480f9759cf1aa14051435c","ref":"refs/heads/main","pushedAt":"2024-07-18T11:58:51.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"},"commit":{"message":"Bump express from 4.18.2 to 4.19.2 (#46)\n\nBumps [express](https://github.com/expressjs/express) from 4.18.2 to\r\n4.19.2.\r\n
\r\nRelease notes\r\n

Sourced from express's\r\nreleases.

\r\n
\r\n

4.19.2

\r\n

What's Changed

\r\n
    \r\n
  • Improved\r\nfix for open redirect allow list bypass
    • \r\n
\r\n

Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2

\r\n

4.19.1

\r\n

What's Changed

\r\n
    \r\n
  • Fix ci after location patch by @​wesleytodd in expressjs/express#5552
    • \r\n
  • fixed un-edited version in history.md for 4.19.0 by @​wesleytodd in expressjs/express#5556
    • \r\n
\r\n

Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1

\r\n

4.19.0

\r\n

What's Changed

\r\n
    \r\n
  • fix typo in release date by @​UlisesGascon\r\nin expressjs/express#5527
    • \r\n
  • docs: nominating @​wesleytodd to be\r\nproject captian by @​wesleytodd in expressjs/express#5511
    • \r\n
  • docs: loosen TC activity rules by @​wesleytodd in expressjs/express#5510
    • \r\n
  • Add note on how to update docs for new release by @​crandmck in expressjs/express#5541
    • \r\n
  • Prevent\r\nopen redirect allow list bypass due to encodeurl
    • \r\n
  • Release 4.19.0 by @​wesleytodd in expressjs/express#5551
    • \r\n
\r\n

New Contributors

\r\n
    \r\n
  • @​crandmck\r\nmade their first contribution in expressjs/express#5541
    • \r\n
\r\n

Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0

\r\n

4.18.3

\r\n

Main Changes

\r\n
    \r\n
  • Fix routing requests without method
    • \r\n
  • deps: body-parser@1.20.2\r\n
      \r\n
    • Fix strict json error message on Node.js 19+
      • \r\n
    • deps: content-type@~1.0.5
      • \r\n
    • deps: raw-body@2.5.2
      • \r\n
    \r\n
    • \r\n
\r\n

Other Changes

\r\n
    \r\n
  • Use https: protocol instead of deprecated git: protocol by @​vcsjones in expressjs/express#5032
    • \r\n
  • build: Node.js@16.18 and Node.js@18.12 by @​abenhamdine in\r\nexpressjs/express#5034
    • \r\n
  • ci: update actions/checkout to v3 by @​armujahid in expressjs/express#5027
    • \r\n
  • test: remove unused function arguments in params by @​raksbisht in expressjs/express#5124
    • \r\n
  • Remove unused originalIndex from acceptParams by @​raksbisht in expressjs/express#5119
    • \r\n
  • Fixed typos by @​raksbisht in expressjs/express#5117
    • \r\n
  • examples: remove unused params by @​raksbisht in expressjs/express#5113
    • \r\n
  • fix: parameter str is not described in JSDoc by @​raksbisht in expressjs/express#5130
    • \r\n
  • fix: typos in History.md by @​raksbisht in expressjs/express#5131
    • \r\n
  • build : add Node.js@19.7 by @​abenhamdine in\r\nexpressjs/express#5028
    • \r\n
  • test: remove unused function arguments in params by @​raksbisht in expressjs/express#5137
    • \r\n
\r\n\r\n
\r\n

... (truncated)

\r\n
\r\n
\r\nChangelog\r\n

Sourced from express's\r\nchangelog.

\r\n
\r\n

4.19.2 / 2024-03-25

\r\n
    \r\n
  • Improved fix for open redirect allow list bypass
    • \r\n
\r\n

4.19.1 / 2024-03-20

\r\n
    \r\n
  • Allow passing non-strings to res.location with new encoding handling\r\nchecks
    • \r\n
\r\n

4.19.0 / 2024-03-20

\r\n
    \r\n
  • Prevent open redirect allow list bypass due to encodeurl
    • \r\n
  • deps: cookie@0.6.0
    • \r\n
\r\n

4.18.3 / 2024-02-29

\r\n
    \r\n
  • Fix routing requests without method
    • \r\n
  • deps: body-parser@1.20.2\r\n
      \r\n
    • Fix strict json error message on Node.js 19+
      • \r\n
    • deps: content-type@~1.0.5
      • \r\n
    • deps: raw-body@2.5.2
      • \r\n
    \r\n
    • \r\n
  • deps: cookie@0.6.0\r\n
      \r\n
    • Add partitioned option
      • \r\n
    \r\n
    • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • 04bc627\r\n4.19.2
    • \r\n
  • da4d763\r\nImproved fix for open redirect allow list bypass
    • \r\n
  • 4f0f6cc\r\n4.19.1
    • \r\n
  • a003cfa\r\nAllow passing non-strings to res.location with new encoding handling\r\nchecks f...
    • \r\n
  • a1fa90f\r\nfixed un-edited version in history.md for 4.19.0
    • \r\n
  • 11f2b1d\r\nbuild: fix build due to inconsistent supertest behavior in older\r\nversions
    • \r\n
  • 084e365\r\n4.19.0
    • \r\n
  • 0867302\r\nPrevent open redirect allow list bypass due to encodeurl
    • \r\n
  • 567c9c6\r\nAdd note on how to update docs for new release (#5541)
    • \r\n
  • 69a4cf2\r\ndeps: cookie@0.6.0
    • \r\n
  • Additional commits viewable in compare\r\nview
    • \r\n
\r\n
\r\n
\r\nMaintainer changes\r\n

This version was pushed to npm by wesleytodd, a new releaser\r\nfor express since your current version.

\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=express&package-manager=npm_and_yarn&previous-version=4.18.2&new-version=4.19.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dgraph-io/dgraph-lambda/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\r\nCo-authored-by: Ryan Fox-Tyler <60440289+ryanfoxtyler@users.noreply.github.com>","shortMessageHtmlLink":"Bump express from 4.18.2 to 4.19.2 (#46)"}},{"before":null,"after":"aac85e0f8ff0ae25c9321053010c1c8a8a8206e8","ref":"refs/heads/dependabot/npm_and_yarn/multi-9b2b4eccca","pushedAt":"2024-07-18T11:58:20.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump semver, @pm2/agent and @pm2/io\n\nBumps [semver](https://github.com/npm/node-semver), @pm2/agent and [@pm2/io](https://github.com/keymetrics/pm2-io-apm). These dependencies needed to be updated together.\n\nUpdates `semver` from 6.3.0 to 7.5.4\n- [Release notes](https://github.com/npm/node-semver/releases)\n- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/npm/node-semver/compare/v6.3.0...v7.5.4)\n\nUpdates `@pm2/agent` from 2.0.1 to 2.0.4\n\nUpdates `@pm2/io` from 5.0.0 to 5.0.2\n- [Release notes](https://github.com/keymetrics/pm2-io-apm/releases)\n- [Commits](https://github.com/keymetrics/pm2-io-apm/compare/5.0.0...v5.0.2)\n\n---\nupdated-dependencies:\n- dependency-name: semver\n dependency-type: indirect\n- dependency-name: \"@pm2/agent\"\n dependency-type: indirect\n- dependency-name: \"@pm2/io\"\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump semver, @pm2/agent and @pm2/io"}},{"before":"ead9198a8ce06d97b7568a2147816a33c3393b39","after":"4f5f7c3edf20e6b446280aae8507ea9986fbd3ee","ref":"refs/heads/dependabot/npm_and_yarn/express-4.19.2","pushedAt":"2024-07-18T11:57:45.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"},"commit":{"message":"Merge branch 'main' into dependabot/npm_and_yarn/express-4.19.2","shortMessageHtmlLink":"Merge branch 'main' into dependabot/npm_and_yarn/express-4.19.2"}},{"before":"2d3402cd2bafaa22950a9ff4fd00571bcc9a993e","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/follow-redirects-1.15.6","pushedAt":"2024-07-18T11:57:18.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"}},{"before":"6b67cc3d0080f01ce2714f26878c988316697727","after":"4065034a8ae57d4781b2ac805fcce7589f94df83","ref":"refs/heads/main","pushedAt":"2024-07-18T11:57:16.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"},"commit":{"message":"Bump follow-redirects from 1.15.2 to 1.15.6 (#47)\n\nBumps\r\n[follow-redirects](https://github.com/follow-redirects/follow-redirects)\r\nfrom 1.15.2 to 1.15.6.\r\n
\r\nCommits\r\n
    \r\n
  • 35a517c\r\nRelease version 1.15.6 of the npm package.
    • \r\n
  • c4f847f\r\nDrop Proxy-Authorization across hosts.
    • \r\n
  • 8526b4a\r\nUse GitHub for disclosure.
    • \r\n
  • b1677ce\r\nRelease version 1.15.5 of the npm package.
    • \r\n
  • d8914f7\r\nPreserve fragment in responseUrl.
    • \r\n
  • 6585820\r\nRelease version 1.15.4 of the npm package.
    • \r\n
  • 7a6567e\r\nDisallow bracketed hostnames.
    • \r\n
  • 05629af\r\nPrefer native URL instead of deprecated url.parse.
    • \r\n
  • 1cba8e8\r\nPrefer native URL instead of legacy url.resolve.
    • \r\n
  • 72bc2a4\r\nSimplify _processResponse error handling.
    • \r\n
  • Additional commits viewable in compare\r\nview
    • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=follow-redirects&package-manager=npm_and_yarn&previous-version=1.15.2&new-version=1.15.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dgraph-io/dgraph-lambda/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump follow-redirects from 1.15.2 to 1.15.6 (#47)"}},{"before":null,"after":"270e9416225d37ef782d1efa3e6e6995127049d7","ref":"refs/heads/dependabot/npm_and_yarn/word-wrap-1.2.5","pushedAt":"2024-07-18T11:56:31.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump word-wrap from 1.2.3 to 1.2.5\n\nBumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.5.\n- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)\n- [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.5)\n\n---\nupdated-dependencies:\n- dependency-name: word-wrap\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump word-wrap from 1.2.3 to 1.2.5"}},{"before":"eade93073cc0c96e6a904b617f5d22aec043159c","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/braces-3.0.3","pushedAt":"2024-07-18T11:55:42.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ryanfoxtyler","name":"Ryan Fox-Tyler","path":"/ryanfoxtyler","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/60440289?s=80&v=4"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEs4RHSQA","startCursor":null,"endCursor":null}},"title":"Activity · dgraph-io/dgraph-lambda"}