Skip to content

[Dependency] Bump the all-updates group across 1 directory with 7 updates - #431

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/api/all-updates-477d0dbeb9
Open

[Dependency] Bump the all-updates group across 1 directory with 7 updates#431
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/api/all-updates-477d0dbeb9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 10, 2025

Copy link
Copy Markdown
Contributor

Bumps the all-updates group with 7 updates in the /src/api directory:

Package From To
axios 1.7.7 1.7.9
dotenv 16.4.5 16.4.7
express 4.21.1 4.21.2
express-rate-limit 7.4.1 7.5.0
mongoose 8.8.1 8.10.0
nodemailer 6.9.16 6.10.0
nodemon 3.1.7 3.1.9

Updates axios from 1.7.7 to 1.7.9

Release notes

Sourced from axios's releases.

Release v1.7.9

Release notes:

Reverts

Contributors to this release

Release v1.7.8

Release notes:

Bug Fixes

  • allow passing a callback as paramsSerializer to buildURL (#6680) (eac4619)
  • core: fixed config merging bug (#6668) (5d99fe4)
  • fixed width form to not shrink after 'Send Request' button is clicked (#6644) (7ccd5fd)
  • http: add support for File objects as payload in http adapter (#6588) (#6605) (6841d8d)
  • http: fixed proxy-from-env module import (#5222) (12b3295)
  • http: use globalThis.TextEncoder when available (#6634) (df956d1)
  • ios11 breaks when build (#6608) (7638952)
  • types: add missing types for mergeConfig function (#6590) (00de614)
  • types: export CJS types from ESM (#6218) (c71811b)
  • updated stream aborted error message to be more clear (#6615) (cc3217a)
  • use URL API instead of DOM to fix a potential vulnerability warning; (#6714) (0a8d6e1)

Contributors to this release

Changelog

Sourced from axios's changelog.

1.7.9 (2024-12-04)

Reverts

Contributors to this release

1.7.8 (2024-11-25)

Bug Fixes

  • allow passing a callback as paramsSerializer to buildURL (#6680) (eac4619)
  • core: fixed config merging bug (#6668) (5d99fe4)
  • fixed width form to not shrink after 'Send Request' button is clicked (#6644) (7ccd5fd)
  • http: add support for File objects as payload in http adapter (#6588) (#6605) (6841d8d)
  • http: fixed proxy-from-env module import (#5222) (12b3295)
  • http: use globalThis.TextEncoder when available (#6634) (df956d1)
  • ios11 breaks when build (#6608) (7638952)
  • types: add missing types for mergeConfig function (#6590) (00de614)
  • types: export CJS types from ESM (#6218) (c71811b)
  • updated stream aborted error message to be more clear (#6615) (cc3217a)
  • use URL API instead of DOM to fix a potential vulnerability warning; (#6714) (0a8d6e1)

Contributors to this release

Commits

Updates dotenv from 16.4.5 to 16.4.7

Changelog

Sourced from dotenv's changelog.

16.4.7 (2024-12-03)

Changed

  • Ignore .tap folder when publishing. (oops, sorry about that everyone. - @​motdotla) #848

16.4.6 (2024-12-02)

Changed

  • Clean up stale dev dependencies #847
  • Various README updates clarifying usage and alternative solutions using dotenvx
Commits

Updates express from 4.21.1 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Full Changelog: expressjs/express@4.21.1...4.21.2

Changelog

Sourced from express's changelog.

4.21.2 / 2024-11-06

  • deps: path-to-regexp@0.1.12
    • Fix backtracking protection
  • deps: path-to-regexp@0.1.11
    • Throws an error on invalid path values
Commits
Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.


Updates express-rate-limit from 7.4.1 to 7.5.0

Release notes

Sourced from express-rate-limit's releases.

v7.5.0

Added

  • Implemented the combined RateLimit header according to the eighth draft of the IETF RateLimit header specificiation. Enable by setting standardHeaders: 'draft-8'.
  • Added a new identifier option, used as the name for the quota policy in the draft-8 headers.
  • Added a new headersDraftVersion validation check to identifies cases where an unsupported version string is passed to the standardHeaders option.

You can view the full changelog here.

Commits

Updates mongoose from 8.8.1 to 8.10.0

Release notes

Sourced from mongoose's releases.

8.10.0 / 2025-02-05

  • feat(schema+schematype): add toJSONSchema() method to convert schemas and schematypes to JSON schema #15184 #11162
  • feat(connection): make connection helpers respect bufferTimeoutMS #15229 #15201
  • feat(document): support schematype-level transform option #15163 #15084
  • feat(model): add insertOne() function to insert a single doc #15162 #14843
  • feat(connection): support Connection.prototype.aggregate() for db-level aggregations #15153
  • feat(model): make syncIndexes() not call createIndex() on indexes that already exist #15175 #12250
  • feat(model): useConnection(connection) function #14802
  • fix(model): disallow updateMany(update) and fix TypeScript types re: updateMany() #15199 #15190
  • fix(collection): avoid buffering if creating a collection during a connection interruption #15187 #14971
  • fix(model): throw error if calling create() with multiple docs in a transaction unless ordered: true #15100
  • fix(model): skip createCollection() in syncIndexes() if autoCreate: false #15155
  • fix(model): make hydrate() handle hydrating deeply nested populated docs with hydratedPopulatedDocs #15130
  • types(document): make sure toObject() and toJSON() apply versionKey __v #15097
  • ci(NODE-6505): CI Setup for Encryption Support #15139 aditi-khare-mongoDB

8.9.7 / 2025-02-04

  • fix: avoid applying defaults on map embedded paths #15217 #15196
  • types: add missing $median operator to aggregation types #15233 #15209
  • docs(document): clarify that toObject() returns a POJO that may contain non-POJO values #15232 #15208

8.9.6 / 2025-01-31

  • fix(document): allow setting values to undefined with set(obj) syntax with strict: false #15207 #15192
  • fix(schema): improve reason for UUID cast error, currently a TypeError #15215 #15202
  • fix(aggregate): improve error when calling near() with invalid coordinates #15206 #15188

8.9.5 / 2025-01-13

  • fix: disallow nested $where in populate match
  • fix(schema): handle bitwise operators on Int32 #15176 #15170

8.9.4 / 2025-01-09

  • fix(document): fix document not applying manual populate when using a function in schema.options.ref #15138 IchirokuXVI
  • fix(model): make Model.validate() static correctly cast document arrays #15169 #15164
  • fix(model): allow passing validateBeforeSave option to bulkSave() to skip validation #15161 #15156
  • fix(schema): allow multiple self-referencing discriminator schemas using Schema.prototype.discriminator #15142 #15120
  • types: avoid BufferToBinary<> wiping lean types when passed to generic functions #15160 #15158
  • docs: fix <code> in header ids #15159
  • docs: fix header in field-level-encryption.md #15137 damieng

8.9.3 / 2024-12-30

  • fix(schema): make duplicate index error a warning for now to prevent blocking upgrading #15135 #15112 #15109
  • fix(model): handle document array paths set to non-array values in Model.castObject() #15124 #15075
  • fix(document): avoid using childSchemas.path for compatibility with pre-Mongoose-8.8 schemas #15131 #15071
  • fix(model): avoid throwing unnecessary error if updateOne() returns null in save() #15126

... (truncated)

Changelog

Sourced from mongoose's changelog.

8.10.0 / 2025-02-05

  • feat(schema+schematype): add toJSONSchema() method to convert schemas and schematypes to JSON schema #15184 #11162
  • feat(connection): make connection helpers respect bufferTimeoutMS #15229 #15201
  • feat(document): support schematype-level transform option #15163 #15084
  • feat(model): add insertOne() function to insert a single doc #15162 #14843
  • feat(connection): support Connection.prototype.aggregate() for db-level aggregations #15153
  • feat(model): make syncIndexes() not call createIndex() on indexes that already exist #15175 #12250
  • feat(model): useConnection(connection) function #14802
  • fix(model): disallow updateMany(update) and fix TypeScript types re: updateMany() #15199 #15190
  • fix(collection): avoid buffering if creating a collection during a connection interruption #15187 #14971
  • fix(model): throw error if calling create() with multiple docs in a transaction unless ordered: true #15100
  • fix(model): skip createCollection() in syncIndexes() if autoCreate: false #15155
  • fix(model): make hydrate() handle hydrating deeply nested populated docs with hydratedPopulatedDocs #15130
  • types(document): make sure toObject() and toJSON() apply versionKey __v #15097
  • ci(NODE-6505): CI Setup for Encryption Support #15139 aditi-khare-mongoDB

8.9.7 / 2025-02-04

  • fix: avoid applying defaults on map embedded paths #15217 #15196
  • types: add missing $median operator to aggregation types #15233 #15209
  • docs(document): clarify that toObject() returns a POJO that may contain non-POJO values #15232 #15208

8.9.6 / 2025-01-31

  • fix(document): allow setting values to undefined with set(obj) syntax with strict: false #15207 #15192
  • fix(schema): improve reason for UUID cast error, currently a TypeError #15215 #15202
  • fix(aggregate): improve error when calling near() with invalid coordinates #15206 #15188

7.8.6 / 2025-01-20

  • chore: remove coverage output from bundle

6.13.8 / 2025-01-20

  • chore: remove coverage output from bundle

7.8.5 / 2025-01-20

  • chore: re-release to force npm audit to pick up 6.x fix for CVE-2025-23061

6.13.7 / 2025-01-20

  • chore: re-release to force npm audit to pick up 6.x fix for CVE-2025-23061

8.9.5 / 2025-01-13

... (truncated)

Commits

Updates nodemailer from 6.9.16 to 6.10.0

Release notes

Sourced from nodemailer's releases.

v6.10.0

6.10.0 (2025-01-23)

Features

  • services: add Seznam email service configuration (#1695) (d1ae0a8)

Bug Fixes

  • proxy: Set error and timeout errors for proxied sockets (aa0c99c)
Changelog

Sourced from nodemailer's changelog.

6.10.0 (2025-01-23)

Features

  • services: add Seznam email service configuration (#1695) (d1ae0a8)

Bug Fixes

  • proxy: Set error and timeout errors for proxied sockets (aa0c99c)
Commits

Updates nodemon from 3.1.7 to 3.1.9

Release notes

Sourced from nodemon's releases.

v3.1.9

3.1.9 (2024-12-13)

Bug Fixes

  • maintain backward support for exitcrash (9c9de6e)

v3.1.8

3.1.8 (2024-12-13)

Bug Fixes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
[Dependency] Bump the all-updates group across 1 directory with 7 upd…
c163747 
…ates

Bumps the all-updates group with 7 updates in the /src/api directory:

| Package | From | To |
| --- | --- | --- |
| [axios](https://github.com/axios/axios) | `1.7.7` | `1.7.9` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.4.5` | `16.4.7` |
| [express](https://github.com/expressjs/express) | `4.21.1` | `4.21.2` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `7.4.1` | `7.5.0` |
| [mongoose](https://github.com/Automattic/mongoose) | `8.8.1` | `8.10.0` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.9.16` | `6.10.0` |
| [nodemon](https://github.com/remy/nodemon) | `3.1.7` | `3.1.9` |



Updates `axios` from 1.7.7 to 1.7.9
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.7...v1.7.9)

Updates `dotenv` from 16.4.5 to 16.4.7
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.4.5...v16.4.7)

Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](expressjs/express@4.21.1...4.21.2)

Updates `express-rate-limit` from 7.4.1 to 7.5.0
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v7.4.1...v7.5.0)

Updates `mongoose` from 8.8.1 to 8.10.0
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@8.8.1...8.10.0)

Updates `nodemailer` from 6.9.16 to 6.10.0
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v6.9.16...v6.10.0)

Updates `nodemon` from 3.1.7 to 3.1.9
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](remy/nodemon@v3.1.7...v3.1.9)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: dotenv
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: express
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: express-rate-limit
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: mongoose
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: nodemailer
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: nodemon
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Feb 10, 2025
@dependabot dependabot Bot mentioned this pull request Feb 10, 2025
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants