[Snyk] Upgrade: express-rate-limit, mongoose, nodemailer, validator #14
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- express-rate-limit from 7.2.0 to 7.4.0.
See this package in npm: https://www.npmjs.com/package/express-rate-limit
- mongoose from 8.3.4 to 8.5.4.
See this package in npm: https://www.npmjs.com/package/mongoose
- nodemailer from 6.9.13 to 6.9.14.
See this package in npm: https://www.npmjs.com/package/nodemailer
- validator from 13.11.0 to 13.12.0.
See this package in npm: https://www.npmjs.com/package/validator
See this project in Snyk:
https://app.snyk.io/org/vky5/project/596f659b-651e-460a-a3db-5a2c59c4253d?utm_source=github&utm_medium=referral&page=upgrade-pr
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
express-rate-limit
from 7.2.0 to 7.4.0 | 3 versions ahead of your current version | 2 months ago
on 2024-07-23
mongoose
from 8.3.4 to 8.5.4 | 12 versions ahead of your current version | 23 days ago
on 2024-08-23
nodemailer
from 6.9.13 to 6.9.14 | 1 version ahead of your current version | 3 months ago
on 2024-06-19
validator
from 13.11.0 to 13.12.0 | 1 version ahead of your current version | 4 months ago
on 2024-05-09
Release notes
Package name: express-rate-limit
-
7.4.0 - 2024-07-23
-
7.3.1 - 2024-06-07
- Changed error displayed for the
- Improved documentation for the
-
7.3.0 - 2024-06-01
- Added a new
-
7.2.0 - 2024-03-02
- Added a new
from express-rate-limit GitHub release notesYou can view the changelog here.
Fixed
creationStackvalidation check when a storewith
localKeysset to false is used.creationStackcheck.You can view the full changelog here.
Added
unsharedStorevalidation check that identifies cases where asingle store instance is shared across multiple limiters.
You can view the full changelog here.
Added
creationStackvalidation check that looks for instances createdin a request handler.
You can view the full changelog here.
Package name: mongoose
-
8.5.4 - 2024-08-23
- fix: add empty string check for collection name passed #14806 Shubham2552
- docs(model): add 'throw' as valid strict value for bulkWrite() and add some more clarification on throwOnValidationError #14809
-
8.5.3 - 2024-08-13
- fix(document): call required functions on subdocuments underneath nested paths with correct context #14801 #14788
- fix(populate): avoid throwing error when no result and
- fix(document): apply virtuals to subdocuments if parent schema has virtuals: true for backwards compatibility #14774 #14771 #14623 #14394
- types: make HydratedSingleSubdocument and HydratedArraySubdocument merge types instead of using & #14800 #14793
- types: support schema type inference based on schema options timestamps as well #14773 #13215 ark23CIS
- types(cursor): indicate that cursor.next() can return null #14798 #14787
- types: allow mongoose.connection.db to be undefined #14797 #14789
- docs: add schema type widening advice #14790 JstnMcBrd
-
8.5.2 - 2024-07-30
- perf(clone): avoid further unnecessary checks if cloning a primitive value #14762 #14394
- fix: allow setting document array default to null #14769 #14717 #6691
- fix(model): support session: null option for save() to opt out of automatic session option with transactionAsyncLocalStorage #14744 #14736
- fix(model+document): avoid depopulating manually populated doc as getter value #14760 #14759
- fix: correct shardkey access in buildBulkWriteOps #14753 #14752 adf0nt3s
- fix(query): handle casting $switch in $expr #14755 #14751
- types: allow calling SchemaType.cast() without parent and init parameters #14756 #14748 #9076
- docs: fix a wrong example in v6 migration guide #14758 abdelrahman-elkady
-
8.5.1 - 2024-07-12
-
8.5.0 - 2024-07-08
-
8.4.5 - 2024-07-05
-
8.4.4 - 2024-06-25
-
8.4.3 - 2024-06-17
-
8.4.2 - 2024-06-17
-
8.4.1 - 2024-05-31
-
8.4.0 - 2024-05-17
-
8.3.5 - 2024-05-15
-
8.3.4 - 2024-05-06
from mongoose GitHub release notes8.5.4 / 2024-08-23
8.5.3 / 2024-08-13
lean()set #14799 #14794 #14759 MohOraby8.5.2 / 2024-07-30
Package name: nodemailer
-
6.9.14 - 2024-06-19
- api: Added support for Ethereal authentication (56b2205)
- services.json: Add Email Services Provider Feishu Mail (CN) (#1648) (e9e9ecc)
- services.json: update Mailtrap host and port in well known (#1652) (fc2c9ea)
- well-known-services: Add Loopia in well known services (#1655) (21a28a1)
-
6.9.13 - 2024-03-20
- tls: Ensure servername for SMTP (d66fdd3)
from nodemailer GitHub release notes6.9.14 (2024-06-19)
Bug Fixes
6.9.13 (2024-03-20)
Bug Fixes
Package name: validator
What's Changed
New Features / Validators
isAbaRouting@ songyuewFixes, New Locales and Enhancements
isLicensePlateadd Pakistanien-PKlocale @ anasshakilisPortfix invalid leading zeros @ anasshakilisTaxIDadded Argentinaes-ARlocale @ estefrareisDatetimezone offset fix @ tomaspanekisPassportNumberaddedZAlocale @ GMorris-professionalisMobilePhone:en-MWlocale @ SimranSiddiquiam-AMlocale @ AlexKrupkoisPostalAddressfixNLlocale @ RobinvanderVlietisISO4217addSLEcurrency @ urgisStrongPasswordfix symbolRegex to include\@ nandavikasisVATfixedKZlocale @ MatthieuLemoineisAlpha,isAlphanumericaddedeolocale @ RobinvanderVlietisIBANadd AlgeriaDZlocale @ thibault-lrisVATimproveAUlocale @ matthewberrymanisUUIDadd support for v7 @ rusconisTaxIDadd Ukraineuk-UAlocale @ arttigerisDatedisallow hiphen before year @ Sumit-tech-joshiNew Contributors
Full Changelog: 13.11.0...13.12.0
New Features / Validators
isFreightContainerID: for shipping containers IDs @ songyuewisMailtoURI@ uksarkarFixes, New Locales and Enhancements
isIBANaddMAlocale @ lroudgeisCreditCardrefactor @ pano9000isLocaleadd support for more language tags @ kwahomeisVATforCU@ jimmyorpheusisJWT@ Prathamesh061IsFQDNtest enhancements @ aalekhpatel07isAlpha,isAlphanumericforkk-KZ@ BekStar7isEmailsupportallow_underscores@ guspowerisDateenhance Date declaration compatibility across multiple environments @ CiprianSisIBANadd white and blacklist options to the isIBAN validator @ edilsonisEmaildo not allow non-breaking space in user part @ jeremy21212121isMobilePhone:so-SO@ ohersifr-CF@ cheboies-CU@ klaframboisepl-PL@ czerwony03fr-WF@ aidos42ar-SD@ HussienmaNew Contributors 🎉