Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump express from 4.19.2 to 4.20.0 #134

Closed
wants to merge 54 commits into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 10, 2024

Bumps express from 4.19.2 to 4.20.0.

Release notes

Sourced from express's releases.

4.20.0

What's Changed

Important

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect

Other Changes

New Contributors

Full Changelog: expressjs/express@4.19.1...4.20.0

Changelog

Sourced from express's changelog.

4.20.0 / 2024-09-10

  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: [email protected]
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

jthoward64 and others added 30 commits April 7, 2024 12:12
* Some more work on new GQL stuff

* Update GraphQL schema with new types and fields

* Add custom scalar types for NodeID and Cursor

* Import DateTimeISOResolver from graphql-scalars

* Add Node, Edge, Connection, Resource, Result, PageInfo, and ResourceError classes

* Update cSpell.words in .vscode/settings.json

* Update id and tweak relay defs

* Update id and tweak relay defs

* Update relay definitions and add new node classes

* Refactor file structure and import paths

* Add IntervalISO type and update import paths

* Refactor GraphQL schema and update import paths

* Refactor GraphQL schema and update import paths

* Refactor GraphQL schema and update import paths

* Refactor file structure and update import paths

* Update id field names in Node classes

* Add CommitteeNode class to common/lib/api/resources/Committee.ts

* Refactor Node class names and update import paths

* Refactor PersonResource class to PersonNode and update import paths

* Start on prisma stuff for marathon teams

* Resolve errors from device resolver

* Replace references to renamed classes

* Refactor import paths and remove unused code

* Update auth login functions to include empty committees array

* Refactor import paths and update auth login functions

* Refactor import paths and update auth login functions

* Refactor import paths and update auth login functions

* Add marathon_id column to teams table and update existing data

* Add marathon_id column to teams table and update existing data

* Update resource model properties to use 'id' instead of 'uuid'

* Update resource model properties to use 'id' instead of 'uuid'

* Update resource model properties to use 'id' instead of 'uuid'

* Add foreign key constraint for marathon_id in teams table

* chore: Update CommitteeNode to include identifier field

* Add unique index for committees' identifier field

* Add overall committee to CommitteeIdentifier and committeeNames

* Update CommitteeRepository to include child and parent committee retrieval methods

* Update MarathonRepository and TeamRepository to use UniqueMarathonParam

* Update database schema for optional marathon date and committee role on membership

* Update MembershipRepository to support assigning person to team with committee role

* Update MarathonRepository to order marathons by ascending year

* Update personModelToResource to use personRepository for retrieving dbRole

* Add Skyler Trowel and Camille Dyer as App Coordinators for DB25

* Start updating mobile for changed API

* More fixes on mobile for new API

* Fix remaining direct GraphQL errors

* Change some `uuid`s to `id`s

* Add more support for passing committee info to client

* Add support for retrieving committee memberships of a person

* Update Luxon imports and interval handling in event-related files

* Update PersonResolver to use CommitteeMembershipNode for committees field

* Update code to use marathon.year instead of marathonYear in team forms

* Refactor team creation form to remove persistentIdentifier field

* Update logic around auth

* Finish simplifying JWT and auth stuff

* Refactor GraphQL types and resolvers for LoginState

* Remove unused common code

* Remove unused server code

* Update TeamsTable filters to use enum values for type and legacy status

* Rename SortDirection.*CENDING to *c

* Refactor TeamsTable to integrate marathon filter with global setting

* Refactor LoginStateResolver to use userData.authSource for determining login state

* Add database tables and foreign key constraints for fundraising entries and assignments

* Connect demoTeam by id in PersonRepository

* Update npm dependencies

* Remove old packages and add true-myth

* Add unique constraint for db_num and marathon_id in db_funds_teams table

* Start on new error handling

* Refactor error classes and result types

* Add DBFundsFundraisingProvider implementation

* Add zod package for runtime type validation

* Add DBFunds config to env

* Update foreign key constraints for DBFunds team entries

* Refactor error classes and add NotFoundError class

* Refactor DBFundsFundraisingProvider and add identifier to FundraisingTeam

* Start DBFunds repository

* Refactor DBFundsFundraisingProvider and update FundraisingTeam interface

* Add CompositeError class for handling multiple errors

* Add syncDbFunds job for DBFunds synchronization

* Refactor error handling in DBFundsFundraisingProvider and DBFundsRepository

* Get dbfunds sync going

* Fix dbfunds on null donatedBy

* Refactor DBFundsFundraisingProvider and DBFundsRepository

* Add FundraisingAssignment and FundraisingEntry resolvers

* Refactor FundraisingEntry and FundraisingAssignment classes

* Write the fundraising repository

* Add ControlError and related classes for error handling

* Extract SomePrismaError type to alias

* Remove preferTypeOnlyAutoImports

* Add model to node functions

* Add true-myth to common

* Add prettyPrintAuthorizationRule function

* Fix fundraising node classes

* Start on resolvers for fundraising

* Add FundraisingAssignment and FundraisingEntry resolvers

* Update checkAuthorization function to support asynchronous custom authorization checks

* More work on implementing fundraising tracking

* Add an entry point for fundraising to teams

* Wrap up initial fundraising tracking support

* Add an entry point to fundraising assignments under person

* Some fundraising stuff

* Add assignTeamToDbFundsTeam mutation

* Update authorization context to include effective committee roles

* Get fundraising tracking's core "finished"

* Simplify results use in resolvers

* feat: Add assignTeamToDbFundsTeam mutation

* Fix fields on committee roles

* Update fundraising repository to check parent entry funds amount

* Start getting marathon selection on portal

* Implement Marathon selection

* Remove unused imports and commented code in PersonCreator and PersonEditor files

* Update team repository to use marathonId instead of marathonYear

* Update marathon config to save selected marathon in local storage

* Update marathon config to save selected marathon in local storage

* Update LoginStateResolver to use ctx.authorization.dbRole instead of ctx.userData.authSource

* Refactor FeedNode initialization to use 'id' instead of 'uuid'

* Rename FeedRepository

* Tweak logging code

* Add a timeout to dbfunds sync

* Fix tasks deps

* Start on temp fundraising on portal

* Update compose file

* Some more work on compose file

* Add GlobalIdScalar custom scalar type for GraphQL API

* Refactor code to use GlobalIdScalar for GraphQL API

* Refactor code to use GlobalIdScalar for GraphQL API

* Add NodeResolver

* Update schema

* Refactor code to use GlobalIdScalar for GraphQL API

* Refactor error classes to use tags for better error handling

* Do a pass with true-myth over the repositories

* Refactor person code to use Result type for error handling

* Remove true-myth and add ts-results-es

* Switch from true-myth to ts-results-es

* Fix some result issues

* Misc

* Fix graphql errors

* Fix some more issues

* Remove duplicate index file

* Add import aliases to server

* Change import sort rules

* Add more import aliasing

* Move error types to common

* Update TypeScript dependency to version 5.5.3

* Updates to server/docker config and startup

* Tweak job schedule logic

* Dockerfile updates

* More dockerfile stuff

* Update devcontainer.json and compose.yaml

* Merge dockerfiles

* Update Dockerfile and compose.yaml configurations to use secrets

* Update github action to build new dockerfile

* Rename graphql lib dirs
Bumps [ataylorme/eslint-annotate-action](https://github.com/ataylorme/eslint-annotate-action) from 3.pre.beta to 3.0.0.
- [Release notes](https://github.com/ataylorme/eslint-annotate-action/releases)
- [Changelog](https://github.com/ataylorme/eslint-annotate-action/blob/v3/CHANGELOG.md)
- [Commits](ataylorme/eslint-annotate-action@v3-beta...3.0.0)

---
updated-dependencies:
- dependency-name: ataylorme/eslint-annotate-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [fast-loops](https://github.com/robinweser/fast-loops) from 1.1.3 to 1.1.4.
- [Commits](https://github.com/robinweser/fast-loops/commits)

---
updated-dependencies:
- dependency-name: fast-loops
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.0.2 to 4.0.3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4.0.2...v4.0.3)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [ejs](https://github.com/mde/ejs) from 3.1.9 to 3.1.10.
- [Release notes](https://github.com/mde/ejs/releases)
- [Commits](mde/ejs@v3.1.9...v3.1.10)

---
updated-dependencies:
- dependency-name: ejs
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Get versions to all match

* A ton of version changes and some cleanup

* ESLint tweaks

* First pass of linting fixes and firebase removal

* Some ESLint changes

* Apply auto-fixes from eslint

* Various fixes to mobile and portal

* Fix some of the things broken by tanstack updates

* Some more fixes to mobile

* Add node-gyp
jthoward64 and others added 24 commits August 18, 2024 04:20
* Fix tanstack errors from portal update

* Tweak marathon management

* Add UUID columns to DBFundsTeam and DBFundsFundraisingEntry models

* More GQL stuff

* A bunch

* changes

* Fundraising UI improvements

* Some portal&server work

* Fundraising on mobile

* A ton of admin-centric changes

* Use a better value for stack

* Update error handling middleware to include GraphQLResolveInfo

* Some more portal work

* Add masquerade support

* changes

* Make base files for all the routes

* Move images route

* Move feed page

* Move teams and config pages

* Final route refactor

* Replace a bunch of navigate() calls with <Link />

* More route fixes

* Use router context rather than hooks

* Some more fixes for routing

* Add .bashrc and .git-prompt.sh to devcontainer

* Update devcontainer configuration and settings

* Refactor NavigationMenu component to use new Menu API

* Big improvement to portal auth

* Clear loading messages when navigating

* Move some files around in portal

* Update auditLogger levels

* Portal work

* Even more portal work
Bumps [express](https://github.com/expressjs/express) from 4.19.2 to 4.20.0.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.19.2...4.20.0)

---
updated-dependencies:
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 10, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 23, 2024

Superseded by #140.

@dependabot dependabot bot closed this Sep 23, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/express-4.20.0 branch September 23, 2024 18:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant