You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2025/04/01 07:30:41 UTC
[PR] chore(deps): bump express from 4.21.2 to 5.1.0 in /superset-websocket/utils/client-ws-app [superset]
dependabot[bot] opened a new pull request, #32948:
URL: https://github.com/apache/superset/pull/32948
Bumps [express](https://github.com/expressjs/express) from 4.21.2 to 5.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p>
<blockquote>
<h2>v5.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update captains by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6027">expressjs/express#6027</a></li>
<li>build: Node.js 23.0 by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6075">expressjs/express#6075</a></li>
<li>Add funding field (v5) by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6064">expressjs/express#6064</a></li>
<li>✅ add discarded middleware test by <a href="https://github.com/ctcpip"><code>@ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5819">expressjs/express#5819</a></li>
<li>update homepage link http to https by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5920">expressjs/express#5920</a></li>
<li>Improve readme by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5994">expressjs/express#5994</a></li>
<li>Add bjohansebas as repo captain for expressjs.com by <a href="https://github.com/crandmck"><code>@crandmck</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6058">expressjs/express#6058</a></li>
<li>Remove Object.setPrototypeOf polyfill by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6081">expressjs/express#6081</a></li>
<li>fix(buffer): use node:buffer instead of safe-buffer by <a href="https://github.com/bhavya3024"><code>@bhavya3024</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6071">expressjs/express#6071</a></li>
<li>docs: Add DCO by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6048">expressjs/express#6048</a></li>
<li>cleanup: remove promise support check from tests by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6148">expressjs/express#6148</a></li>
<li>Use loop for acceptParams by <a href="https://github.com/blakeembrey"><code>@blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6066">expressjs/express#6066</a></li>
<li>Improve documentation step in release process by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6150">expressjs/express#6150</a></li>
<li>cleanup: remove unnecessary require for global Buffer by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6146">expressjs/express#6146</a></li>
<li>cleanup: remove AsyncLocalStorage check by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6147">expressjs/express#6147</a></li>
<li>update history.md for acceptParams change by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6177">expressjs/express#6177</a></li>
<li>docs: add <a href="https://github.com/rxmarbles"><code>@rxmarbles</code></a> to the triage team by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6151">expressjs/express#6151</a></li>
<li>refactor: improve readability by <a href="https://github.com/sazk07"><code>@sazk07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6173">expressjs/express#6173</a></li>
<li>docs: clarify the security process in the triage role by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6217">expressjs/express#6217</a></li>
<li>chore: replace <code>methods</code> dependency with standard library by <a href="https://github.com/jonkoops"><code>@jonkoops</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6196">expressjs/express#6196</a></li>
<li>Remove <code>utils-merge</code> dependency - use spread syntax instead by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6091">expressjs/express#6091</a></li>
<li>fix(securite): fix vulnerabilities by <a href="https://github.com/Abdel-Monaam-Aouini"><code>@Abdel-Monaam-Aouini</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6211">expressjs/express#6211</a></li>
<li>refactor: prefix built-in node module imports by <a href="https://github.com/slagiewka"><code>@slagiewka</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6236">expressjs/express#6236</a></li>
<li>fix: remove download size badges by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6266">expressjs/express#6266</a></li>
<li>Remove unused <code>depd</code> dependency by <a href="https://github.com/jonkoops"><code>@jonkoops</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6197">expressjs/express#6197</a></li>
<li>fix: usage of <code>Invalid action input 'persist-credentials'</code> for <code>actions/setup-node@v4</code> in <code>ci.yml</code> by <a href="https://github.com/hamirmahal"><code>@hamirmahal</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6256">expressjs/express#6256</a></li>
<li>Add support for OSSF scorecard reporting by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5431">expressjs/express#5431</a></li>
<li>docs: add <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> to the triage team by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6276">expressjs/express#6276</a></li>
<li>fix: added a missing semicolon in css styles in examples/auth by <a href="https://github.com/pr4j3sh"><code>@pr4j3sh</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6297">expressjs/express#6297</a></li>
<li>docs: include team email in the security policy by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6278">expressjs/express#6278</a></li>
<li>refactor: simplify <code>normalizeTypes</code> function by <a href="https://github.com/Ayoub-Mabrouk"><code>@Ayoub-Mabrouk</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6097">expressjs/express#6097</a></li>
<li>ci: updated github actions ci workflow by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6314">expressjs/express#6314</a></li>
<li>ci: fix npm install --include typo by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6324">expressjs/express#6324</a></li>
<li>ci: updated scorecard actions by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6322">expressjs/express#6322</a></li>
<li>build(deps): use carat notation for dependency versions by <a href="https://github.com/dpopp07"><code>@dpopp07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6317">expressjs/express#6317</a></li>
<li>chore(deps): update <code>debug</code> to ^4.4.0 by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6313">expressjs/express#6313</a></li>
<li>docs: retroactively note 5.0.0-beta.1 api change in history file by <a href="https://github.com/dpopp07"><code>@dpopp07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6333">expressjs/express#6333</a></li>
<li>feat(deps): body-parser@^2.1.0 by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6332">expressjs/express#6332</a></li>
<li>feat(deps): router@^2.1.0 by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6331">expressjs/express#6331</a></li>
<li>Update repo captains by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6234">expressjs/express#6234</a></li>
<li>deps: upgrade nyc by <a href="https://github.com/agungjati"><code>@agungjati</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6122">expressjs/express#6122</a></li>
<li>fix (deps): update deps by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6337">expressjs/express#6337</a></li>
<li>response: add support for ETag option in res.sendFile by <a href="https://github.com/juanarbol"><code>@juanarbol</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6073">expressjs/express#6073</a></li>
<li>Update multiple links to use <code>https</code> instead of <code>http</code> by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6338">expressjs/express#6338</a></li>
<li>Extend res.links() to allow adding multiple links with the same rel <a href="https://redirect.github.com/expressjs/express/issues/2729">#2729</a> by <a href="https://github.com/andvea"><code>@andvea</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/4885">expressjs/express#4885</a></li>
<li>docs: update emeritus triagers by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6345">expressjs/express#6345</a></li>
<li>docs: update guidance for triager nominations by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6349">expressjs/express#6349</a></li>
<li>docs: clarify guidelines for becoming a committer by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6364">expressjs/express#6364</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p>
<blockquote>
<h1>5.1.0 / 2025-03-31</h1>
<ul>
<li>Add support for <code>Uint8Array</code> in <code>res.send()</code></li>
<li>Add support for ETag option in <code>res.sendFile()</code></li>
<li>Add support for multiple links with the same rel in <code>res.links()</code></li>
<li>Add funding field to package.json</li>
<li>perf: use loop for acceptParams</li>
<li>refactor: prefix built-in node module imports</li>
<li>deps: remove <code>setprototypeof</code></li>
<li>deps: remove <code>safe-buffer</code></li>
<li>deps: remove <code>utils-merge</code></li>
<li>deps: remove <code>methods</code></li>
<li>deps: remove <code>depd</code></li>
<li>deps: <code>debug@^4.4.0</code></li>
<li>deps: <code>body-parser@^2.2.0</code></li>
<li>deps: <code>router@^2.2.0</code></li>
<li>deps: <code>content-type@^1.0.5</code></li>
<li>deps: <code>finalhandler@^2.1.0</code></li>
<li>deps: <code>qs@^6.14.0</code></li>
<li>deps: <code>server-static@2.2.0</code></li>
<li>deps: <code>type-is@2.0.1</code></li>
</ul>
<h1>5.0.1 / 2024-10-08</h1>
<ul>
<li>Update <code>cookie</code> semver lock to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-47764">CVE-2024-47764</a></li>
</ul>
<h1>5.0.0 / 2024-09-10</h1>
<ul>
<li>remove:
<ul>
<li><code>path-is-absolute</code> dependency - use <code>path.isAbsolute</code> instead</li>
</ul>
</li>
<li>breaking:
<ul>
<li><code>res.status()</code> accepts only integers, and input must be greater than 99 and less than 1000
<ul>
<li>will throw a <code>RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.</code> for inputs outside this range</li>
<li>will throw a <code>TypeError: Invalid status code: ${code}. Status code must be an integer.</code> for non integer inputs</li>
</ul>
</li>
<li>deps: send@1.0.0</li>
<li><code>res.redirect('back')</code> and <code>res.location('back')</code> is no longer a supported magic string, explicitly use <code>req.get('Referrer') || '/'</code>.</li>
</ul>
</li>
<li>change:
<ul>
<li><code>res.clearCookie</code> will ignore user provided <code>maxAge</code> and <code>expires</code> options</li>
</ul>
</li>
<li>deps: cookie-signature@^1.2.1</li>
<li>deps: debug@4.3.6</li>
<li>deps: merge-descriptors@^2.0.0</li>
<li>deps: serve-static@^2.1.0</li>
<li>deps: qs@6.13.0</li>
<li>deps: accepts@^2.0.0</li>
<li>deps: mime-types@^3.0.0
<ul>
<li><code>application/javascript</code> => <code>text/javascript</code></li>
</ul>
</li>
<li>deps: type-is@^2.0.0</li>
<li>deps: content-disposition@^1.0.0</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/expressjs/express/commit/cd7d4397c398a3f3ecadeaf9ef6ac1377bd414c4"><code>cd7d439</code></a> 5.1.0</li>
<li><a href="https://github.com/expressjs/express/commit/4c4f3ea1059319d217dbb8177dfec902d2917424"><code>4c4f3ea</code></a> fix(deps): serve-static@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6418">#6418</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/cb4c56e9a7ebc208730886e010b75475bf816fd9"><code>cb4c56e</code></a> fix(docs): remove <a href="https://github.com/mertcanaltin"><code>@mertcanaltin</code></a> from Triagers (<a href="https://redirect.github.com/expressjs/express/issues/6408">#6408</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/7b44e1d8501d7b8a15de5bbee7d10a67d86f2630"><code>7b44e1d</code></a> ci: use full SHAs for github action versions</li>
<li><a href="https://github.com/expressjs/express/commit/eb6d12587a2fdb907bd91cbedcd3b92f434fadd0"><code>eb6d125</code></a> deps: router@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6417">#6417</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/f1a2dc884de77fe9e84cdc8807407bd57a2e1008"><code>f1a2dc8</code></a> deps: type-is@^2.0.1 (<a href="https://redirect.github.com/expressjs/express/issues/6420">#6420</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/6b51e8ef979d0aa6dc42ee0d61c8eb4c3e3196df"><code>6b51e8e</code></a> deps: body-parser@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6419">#6419</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/1f311c59d4b9cb94562ae0dd9917351e556f1602"><code>1f311c5</code></a> build(deps-dev): bump cookie-session from 2.0.0 to 2.1.0 (<a href="https://redirect.github.com/expressjs/express/issues/6399">#6399</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/9e97144222cb4c29df0a96b689781e87fc3e781c"><code>9e97144</code></a> feat(deps): finalhandler@2.1.0 (<a href="https://redirect.github.com/expressjs/express/issues/6373">#6373</a>)</li>
<li><a href="https://github.com/expressjs/express/commit/29d09803c11641d910107793947cefe4c0133358"><code>29d0980</code></a> build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (<a href="https://redirect.github.com/expressjs/express/issues/6397">#6397</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.21.2...v5.1.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore(deps): bump express from 4.21.2 to 5.1.0 in /superset-websocket/utils/client-ws-app [superset]
Posted by "korbit-ai[bot] (via GitHub)" <gi...@apache.org>.
korbit-ai[bot] commented on PR #32948:
URL: https://github.com/apache/superset/pull/32948#issuecomment-2768443632
By default, I don't review pull requests opened by bots. If you would like me to review this pull request anyway, you can request a review via the `/korbit-review` command in a comment.
[](85d09a00-27ef-4a64-93d2-5a9f5d81dff1)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org