Skip to content

fix(deps): update dependency helmet to v8 - autoclosed#646

Closed
renovate[bot] wants to merge 1 commit intomainfrom
renovate/helmet-8.x
Closed

fix(deps): update dependency helmet to v8 - autoclosed#646
renovate[bot] wants to merge 1 commit intomainfrom
renovate/helmet-8.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Dec 1, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
helmet (source) ~7.1.0 -> ~8.0.0 age adoption passing confidence

Release Notes

helmetjs/helmet (helmet)

v8.0.0

Compare Source

Changed
  • Breaking: Strict-Transport-Security now has a max-age of 365 days, up from 180
  • Breaking: Content-Security-Policy middleware now throws an error if a directive should have quotes but does not, such as self instead of 'self'. See #​454
  • Breaking: Content-Security-Policy's getDefaultDirectives now returns a deep copy. This only affects users who were mutating the result
  • Breaking: Strict-Transport-Security now throws an error when "includeSubDomains" option is misspelled. This was previously a warning
Removed
  • Breaking: Drop support for Node 16 and 17. Node 18+ is now required

v7.2.0

Compare Source

Changed
  • Content-Security-Policy middleware now warns if a directive should have quotes but does not, such as self instead of 'self'. This will be an error in future versions. See #​454

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security
Copy link
Copy Markdown

socket-security Bot commented Dec 1, 2024

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report↗︎

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Dec 5, 2024

@iNeoO
Copy link
Copy Markdown
Contributor

iNeoO commented Feb 11, 2025

v8 break cors

@socket-security
Copy link
Copy Markdown

socket-security Bot commented Feb 11, 2025

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@gouvminint/vue-dsfr@8.2.1 🔁 npm/@gouvminint/vue-dsfr@7.1.1 Transitive: environment +3 187 MB gouvminint
npm/@iconify/vue@4.3.0 network +1 210 kB cyberalien
npm/@sentry/node@8.54.0 🔁 npm/@sentry/node@8.47.0 Transitive: filesystem, shell +51 27.2 MB billyvg, evanpurkhiser, haza, ...7 more
npm/@sentry/profiling-node@8.54.0 🔁 npm/@sentry/profiling-node@8.47.0 None +1 3.5 MB sentry-bot
npm/helmet@8.0.0 🔁 npm/helmet@7.1.0 None 0 103 kB evanhahn

View full report↗︎

@sonarqubecloud
Copy link
Copy Markdown

@iNeoO iNeoO closed this Feb 12, 2025
@renovate renovate Bot changed the title fix(deps): update dependency helmet to v8 fix(deps): update dependency helmet to v8 - autoclosed Feb 12, 2025
@renovate renovate Bot deleted the renovate/helmet-8.x branch February 12, 2025 09:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant