Skip to content

Bump rate-limiter-flexible from 5.0.5 to 7.1.0 #241

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Apr 29, 2025

Bumps rate-limiter-flexible from 5.0.5 to 7.1.0.

Release notes

Sourced from rate-limiter-flexible's releases.

Etcd support

This is the first time we add atomic and non-atomic limiters for the same storage. Atomic increments are necessary to count sensitive things like incorrect password or PIN tries while non-atomic increments may be better (because they are faster) when exact count doesn't matter, e.g. to protect a service against DDoS attack.

Thank you @​Tobias4872 🍇

v7.0.0

What's Changed

  • feat: add RateLimiterValkeyGlide to support Valkey Glide @​avifenesh in animir/node-rate-limiter-flexible#302 Thank you!
  • X-RateLimit-Reset header example was fixed. It should be Math.ceil((Date.now() + rateLimiterRes.msBeforeNext) / 1000). Thanks to @​Fdavidtr.
  • [BREAKING CHANGE] Node.js 18 support removed.

New Contributors

Full Changelog: animir/node-rate-limiter-flexible@v6.2.1...v7.0.0

🐆

SQLite: fix Knex connection issue

  • RateLimiterSQLite: This fixes an issue where an unused Knex connection remained open, causing pool connection problems. Additionally, this adds functions to run tests against Knex. Thanks to @​muco-rolle 📌

Multiple SQLite clients support

  • RateLimiterSQLite supports sqlite3, better-sqlite3 and knex clients now. Set storeType option to one of sqlite3, better-sqlite3 or knex, defaults to sqlite3 if not set. Thank you @​muco-rolle 🎁

SQLite support

Just a day after Valkey limiter release we are releasing SQLite support. One new database and one old (but still good) added to the list of the big family. Congrats!

Valkey support [zap]

  • RateLimiterValkey added. Thanks to @​gurgunday rate-limiter-flexible supports Valkey now! ⚡ It can be used with iovalkey package.

  • [breaking] Node.js support for version 16 was dropped.

Commits
  • b0e5c70 7.1.0
  • b362daf [chore] update readme
  • df34689 Merge pull request #305 from Tobias4872/master
  • ed4971c fixing typescript definition; adjusting minor detail in comment
  • 9c6d934 adding non-atomic etcd class to index.js and adding typescript definition
  • 7ae0746 adding non-atomic etcd limiter; adding specific error classes
  • 9d6e324 using specific error class
  • bb4097a removing custom etcd client in favor of the officially suggested package
  • 0f8246f using default port of etcd rather than the artificial 8082
  • 21b628f adding missing interface definitions
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rate-limiter-flexible](https://github.com/animir/node-rate-limiter-flexible) from 5.0.5 to 7.1.0.
- [Release notes](https://github.com/animir/node-rate-limiter-flexible/releases)
- [Commits](animir/node-rate-limiter-flexible@v5.0.5...v7.1.0)

---
updated-dependencies:
- dependency-name: rate-limiter-flexible
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Apr 29, 2025

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants