joezombie/VEFT-Skil03
Archived
Watch
1
0
Fork
You've already forked VEFT-Skil03
 0
Code Issues Pull requests 1 Projects Releases Packages Activity Actions

Bump the npm_and_yarn group across 3 directories with 5 updates #1

Open
dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/kodemon-server/npm_and_yarn-2777da279c into master
pull from: dependabot/npm_and_yarn/kodemon-server/npm_and_yarn-2777da279c
merge into: joezombie:master
Conversation 0 Commits 1 Files changed 3 +6 -6
dependabot[bot] commented 2026-01-21 23:28:35 +00:00 (Migrated from github.com)
Copy link

Bumps the npm_and_yarn group with 3 updates in the /kodemon-server directory: body-parser, express and mongoose.
Bumps the npm_and_yarn group with 1 update in the /iodocs directory: express.
Bumps the npm_and_yarn group with 2 updates in the /kodemon-client directory: karma and shelljs.

Updates body-parser from 1.9.3 to 2.2.2

Release notes

Sourced from body-parser's releases.

v2.2.2

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/body-parser/compare/v2.2.1...v2.2.2

v2.2.1

Important: Security

What's Changed

... (truncated)

Changelog

Sourced from body-parser's changelog.

2.2.2 / 2026-01-07

  • deps: qs@^6.14.1
  • refactor(json): simplify strict mode error string construction

2.2.1 / 2025-11-24

  • Security fix for GHSA-wqch-xfxh-vrr4
  • deps:
    • type-is@^2.0.1
    • iconv-lite@^0.7.0
      • Handle split surrogate pairs when encoding UTF-8
      • Avoid false positives in encodingExists by using prototype-less objects
    • raw-body@^3.0.1
    • debug@^4.4.3

2.2.0 / 2025-03-27

  • refactor: normalize common options for all parsers
  • deps:
    • iconv-lite@^0.6.3

2.1.0 / 2025-02-10

  • deps:
    • type-is@^2.0.0
    • debug@^4.4.0
    • Removed destroy
  • refactor: prefix built-in node module imports
  • use the node require cache instead of custom caching

2.0.2 / 2024-10-31

  • remove unpipe package and use native unpipe() method

2.0.1 / 2024-09-10

  • Restore expected behavior extended to false

2.0.0 / 2024-09-10

Breaking Changes

  • Node.js 18 is the minimum supported version

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.


Updates express from 4.10.8 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: https://github.com/expressjs/express/compare/v5.2.0...v5.2.1

v5.2.0

Important: Security

What's Changed

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

  • Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
    • The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

5.1.0 / 2025-03-31

  • Add support for Uint8Array in res.send()
  • Add support for ETag option in res.sendFile()
  • Add support for multiple links with the same rel in res.links()
  • Add funding field to package.json
  • perf: use loop for acceptParams
  • refactor: prefix built-in node module imports
  • deps: remove setprototypeof
  • deps: remove safe-buffer
  • deps: remove utils-merge
  • deps: remove methods
  • deps: remove depd
  • deps: debug@^4.4.0
  • deps: body-parser@^2.2.0
  • deps: router@^2.2.0
  • deps: content-type@^1.0.5
  • deps: finalhandler@^2.1.0
  • deps: qs@^6.14.0
  • deps: server-static@2.2.0
  • deps: type-is@2.0.1

5.0.1 / 2024-10-08

5.0.0 / 2024-09-10

  • remove:
    • path-is-absolute dependency - use path.isAbsolute instead
  • breaking:
    • res.status() accepts only integers, and input must be greater than 99 and less than 1000
      • will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range
      • will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs
    • deps: send@1.0.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.


Updates mongoose from 3.8.40 to 9.1.5

Release notes

Sourced from mongoose's releases.

9.1.5 / 2026-01-20

9.1.4 / 2026-01-15

9.1.3 / 2026-01-09

  • fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig #15941 #15938
  • fix(query): include preview of current and incoming update in error when merging normal update with pipeline #15939 #15928
  • types(model): apply basic type casting to paths underneath subdocuments #15948 #15947
  • types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members #15942 #15923
  • docs(schema): expose "DocumentArrayElement" #15590 hasezoey

9.1.2 / 2025-01-05

9.1.1 / 2025-12-30

  • fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline #15928
  • docs: update default search version to 9.x #15926 #15925

9.1.0 / 2025-12-29

  • feat(model): make pathsToSave handle saving just a subpath of a modified path #15896
  • feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
  • feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options #15917 #15915 #15912 AbdelrahmanHafez
  • feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
  • perf: optimize Object.keys() checks and optional chaining #15865 AbdelrahmanHafez
  • fix: add support for typescript style enums #15914 #15913 mjfwebb
  • fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901
  • types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15918 #15910
  • types: allow calling create() with TRawDocType for better generics support #15903 #15902
  • types(document): add id virtual getter by default to HydrateDocument<> if TOverrides is Record<string, never> #15906 #15900
  • docs(schema): add lean to list of schema options #15907 #15894 #12081

9.0.2 / 2025-12-17

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.1.5 / 2026-01-20

9.1.4 / 2026-01-15

9.1.3 / 2026-01-09

  • fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig #15941 #15938
  • fix(query): include preview of current and incoming update in error when merging normal update with pipeline #15939 #15928
  • types(model): apply basic type casting to paths underneath subdocuments #15948 #15947
  • types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members #15942 #15923
  • docs(schema): expose "DocumentArrayElement" #15590 hasezoey

9.1.2 / 2026-01-05

9.1.1 / 2025-12-30

  • fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline #15928
  • docs: update default search version to 9.x #15926 #15925

9.1.0 / 2025-12-29

  • feat(model): make pathsToSave handle saving just a subpath of a modified path #15896
  • feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
  • feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options #15917 #15915 #15912 AbdelrahmanHafez
  • feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
  • perf: optimize Object.keys() checks and optional chaining #15865 AbdelrahmanHafez
  • fix: add support for typescript style enums #15914 #15913 mjfwebb
  • fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901
  • types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15918 #15910
  • types: allow calling create() with TRawDocType for better generics support #15903 #15902
  • types(document): add id virtual getter by default to HydrateDocument<> if TOverrides is Record<string, never> #15906 #15900
  • docs(schema): add lean to list of schema options #15907 #15894 #12081

8.21.0 / 2025-12-29

  • feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870

... (truncated)

Commits
  • 22643d6 chore: release 9.1.5
  • 87ffed8 Merge pull request #15967 from Automattic/vkarpov15/correct-raw-doc-type-subdocs
  • f9bdfa2 Merge pull request #15974 from Automattic/gh-15966
  • 76753bf style: break up ternary
  • b9dc767 Merge pull request #15971 from harshsinghpujari/docs-typescript-grammer-fix
  • 0cb75cb handling for _id option
  • c8e5cb9 fix(discriminator): skip merging parentSchema to prevent duplication in child...
  • 853e612 test(discriminator): add tests asserting queues are not duplicated for nested...
  • 57bc5c8 test(discriminator): add tests to verify nested discriminator indexes do not ...
  • c7549db docs: improve grammar and clarity in TypeScript schema comments
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for mongoose since your current version.


Updates express from 3.3.1 to 4.22.0

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: https://github.com/expressjs/express/compare/v5.2.0...v5.2.1

v5.2.0

Important: Security

What's Changed

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

  • Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
    • The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

5.1.0 / 2025-03-31

  • Add support for Uint8Array in res.send()
  • Add support for ETag option in res.sendFile()
  • Add support for multiple links with the same rel in res.links()
  • Add funding field to package.json
  • perf: use loop for acceptParams
  • refactor: prefix built-in node module imports
  • deps: remove setprototypeof
  • deps: remove safe-buffer
  • deps: remove utils-merge
  • deps: remove methods
  • deps: remove depd
  • deps: debug@^4.4.0
  • deps: body-parser@^2.2.0
  • deps: router@^2.2.0
  • deps: content-type@^1.0.5
  • deps: finalhandler@^2.1.0
  • deps: qs@^6.14.0
  • deps: server-static@2.2.0
  • deps: type-is@2.0.1

5.0.1 / 2024-10-08

5.0.0 / 2024-09-10

  • remove:
    • path-is-absolute dependency - use path.isAbsolute instead
  • breaking:
    • res.status() accepts only integers, and input must be greater than 99 and less than 1000
      • will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range
      • will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs
    • deps: send@1.0.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.


Updates karma from 0.10.10 to 6.4.4

Release notes

Sourced from karma's releases.

v6.4.4

6.4.4 (2024-07-29)

v6.4.3

6.4.3 (2024-02-24)

Bug Fixes

  • add build commits for patch release (d7f2d69)

v6.4.2

6.4.2 (2023-04-21)

Bug Fixes

v6.4.1

6.4.1 (2022-09-19)

Bug Fixes

v6.4.0

6.4.0 (2022-06-14)

Features

  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

v6.3.20

6.3.20 (2022-05-13)

Bug Fixes

  • prefer IPv4 addresses when resolving domains (e17698f),...

    Description has been truncated

Bumps the npm_and_yarn group with 3 updates in the /kodemon-server directory: [body-parser](https://github.com/expressjs/body-parser), [express](https://github.com/expressjs/express) and [mongoose](https://github.com/Automattic/mongoose). Bumps the npm_and_yarn group with 1 update in the /iodocs directory: [express](https://github.com/expressjs/express). Bumps the npm_and_yarn group with 2 updates in the /kodemon-client directory: [karma](https://github.com/karma-runner/karma) and [shelljs](https://github.com/shelljs/shelljs). Updates `body-parser` from 1.9.3 to 2.2.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/body-parser/releases">body-parser's releases</a>.</em></p> <blockquote> <h2>v2.2.2</h2> <h2>What's Changed</h2> <ul> <li>docs: update README links by <a href="https://github.com/efekrskl"><code>@​efekrskl</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/673">expressjs/body-parser#673</a></li> <li>docs: release notes for the v1.20.4 release by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/674">expressjs/body-parser#674</a></li> <li>docs: update URL-encoded parser description to include ISO-8859-1 encoding support by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/679">expressjs/body-parser#679</a></li> <li>docs: use standard jsdoc tags everywhere by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/677">expressjs/body-parser#677</a></li> <li>deps: qs@^6.14.1 by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/689">expressjs/body-parser#689</a></li> <li>refactor(json): simplify strict mode error string construction by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/693">expressjs/body-parser#693</a></li> <li>Release: 2.2.2 by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/691">expressjs/body-parser#691</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/efekrskl"><code>@​efekrskl</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/body-parser/pull/673">expressjs/body-parser#673</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/body-parser/compare/v2.2.1...v2.2.2">https://github.com/expressjs/body-parser/compare/v2.2.1...v2.2.2</a></p> <h2>v2.2.1</h2> <h2>Important: Security</h2> <ul> <li>Security fix for <a href="https://www.cve.org/CVERecord?id=CVE-2025-13466">CVE-2025-13466</a> (<a href="https://github.com/expressjs/body-parser/security/advisories/GHSA-wqch-xfxh-vrr4">GHSA-wqch-xfxh-vrr4</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>ci: add dependabot by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/593">expressjs/body-parser#593</a></li> <li>ci: use full SHAs for github action versions by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/594">expressjs/body-parser#594</a></li> <li>deps: type-is@^2.0.1 by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/599">expressjs/body-parser#599</a></li> <li>build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/609">expressjs/body-parser#609</a></li> <li>build(deps): bump github/codeql-action from 3.28.13 to 3.28.15 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/610">expressjs/body-parser#610</a></li> <li>build(deps-dev): bump eslint-plugin-promise from 6.1.1 to 6.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/611">expressjs/body-parser#611</a></li> <li>build(deps-dev): bump eslint-plugin-import from 2.27.5 to 2.31.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/613">expressjs/body-parser#613</a></li> <li>build(deps-dev): bump eslint-plugin-markdown from 3.0.0 to 3.0.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/612">expressjs/body-parser#612</a></li> <li>ci: add codeql github workflows scanning by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/614">expressjs/body-parser#614</a></li> <li>ci: update CodeQL config to ignore the test directory by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/615">expressjs/body-parser#615</a></li> <li>build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/620">expressjs/body-parser#620</a></li> <li>build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/619">expressjs/body-parser#619</a></li> <li>chore(deps): unpin devDependencies by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/616">expressjs/body-parser#616</a></li> <li>ci: add node.js 24 to test matrix by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/621">expressjs/body-parser#621</a></li> <li>build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/623">expressjs/body-parser#623</a></li> <li>build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/624">expressjs/body-parser#624</a></li> <li>chore: add funding to package.json by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/617">expressjs/body-parser#617</a></li> <li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/625">expressjs/body-parser#625</a></li> <li>build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/630">expressjs/body-parser#630</a></li> <li>refactor: move common request validation to read function by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/600">expressjs/body-parser#600</a></li> <li>deps: bump iconv-lite by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/631">expressjs/body-parser#631</a></li> <li>doc: pull beta changelog forward into 2.0.0 by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/629">expressjs/body-parser#629</a></li> <li>refactor: optimize raw and text parsers with shared passthrough function by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/634">expressjs/body-parser#634</a></li> <li>build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/640">expressjs/body-parser#640</a></li> <li>build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/639">expressjs/body-parser#639</a></li> <li>build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/636">expressjs/body-parser#636</a></li> <li>build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/637">expressjs/body-parser#637</a></li> <li>build(deps): bump github/codeql-action from 3.29.7 to 3.30.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/body-parser/pull/638">expressjs/body-parser#638</a></li> <li>deps: raw-body@^3.0.1 by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/641">expressjs/body-parser#641</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/body-parser/blob/master/HISTORY.md">body-parser's changelog</a>.</em></p> <blockquote> <h1>2.2.2 / 2026-01-07</h1> <ul> <li>deps: qs@^6.14.1</li> <li>refactor(json): simplify strict mode error string construction</li> </ul> <h1>2.2.1 / 2025-11-24</h1> <ul> <li>Security fix for <a href="https://github.com/expressjs/body-parser/security/advisories/GHSA-wqch-xfxh-vrr4">GHSA-wqch-xfxh-vrr4</a></li> <li>deps: <ul> <li>type-is@^2.0.1</li> <li>iconv-lite@^0.7.0 <ul> <li>Handle split surrogate pairs when encoding UTF-8</li> <li>Avoid false positives in <code>encodingExists</code> by using prototype-less objects</li> </ul> </li> <li>raw-body@^3.0.1</li> <li>debug@^4.4.3</li> </ul> </li> </ul> <h1>2.2.0 / 2025-03-27</h1> <ul> <li>refactor: normalize common options for all parsers</li> <li>deps: <ul> <li>iconv-lite@^0.6.3</li> </ul> </li> </ul> <h1>2.1.0 / 2025-02-10</h1> <ul> <li>deps: <ul> <li>type-is@^2.0.0</li> <li>debug@^4.4.0</li> <li>Removed destroy</li> </ul> </li> <li>refactor: prefix built-in node module imports</li> <li>use the node require cache instead of custom caching</li> </ul> <h1>2.0.2 / 2024-10-31</h1> <ul> <li>remove <code>unpipe</code> package and use native <code>unpipe()</code> method</li> </ul> <h1>2.0.1 / 2024-09-10</h1> <ul> <li>Restore expected behavior <code>extended</code> to <code>false</code></li> </ul> <h1>2.0.0 / 2024-09-10</h1> <h2>Breaking Changes</h2> <ul> <li>Node.js 18 is the minimum supported version</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/body-parser/commit/3d248660b2e8b66732b232d7c758517fbf2420a6"><code>3d24866</code></a> 2.2.2 (<a href="https://redirect.github.com/expressjs/body-parser/issues/691">#691</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/8474a984c3ba36a1b4328ce019833b99caa0f08f"><code>8474a98</code></a> refactor(json): simplify strict mode error string construction (<a href="https://redirect.github.com/expressjs/body-parser/issues/693">#693</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/03f17c2538552a57e6be537afca8c7587bd40aaa"><code>03f17c2</code></a> deps: qs@^6.14.1 (<a href="https://redirect.github.com/expressjs/body-parser/issues/689">#689</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/ea1f25e503c1b2f7ba6f8562724ae0fcd247fb75"><code>ea1f25e</code></a> docs: use standard jsdoc tags everywhere (<a href="https://redirect.github.com/expressjs/body-parser/issues/677">#677</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/d7deef8ec61307fa28c22bc443cf8ed2f267945a"><code>d7deef8</code></a> docs: update URL-encoded parser description to include ISO-8859-1 encoding su...</li> <li><a href="https://github.com/expressjs/body-parser/commit/b6f52aabc65137c5227c8a462bddb761daeb96e7"><code>b6f52aa</code></a> docs: release notes for the v1.20.4 release (<a href="https://redirect.github.com/expressjs/body-parser/issues/674">#674</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/2965ca4af4883109cb2f651f4ce12da310902a0c"><code>2965ca4</code></a> docs: update links (<a href="https://redirect.github.com/expressjs/body-parser/issues/673">#673</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/d96b63da8d7445de317736471633bac83ec76cbb"><code>d96b63d</code></a> 2.2.1 (<a href="https://redirect.github.com/expressjs/body-parser/issues/659">#659</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/b204886a6744b0b6d297cd0e849d75de836f3b63"><code>b204886</code></a> sec: security patch for CVE-2025-13466</li> <li><a href="https://github.com/expressjs/body-parser/commit/e20e3512e085c1162e8ffe36ac65c705a8017251"><code>e20e351</code></a> feat: remove <code>history.md</code> from being packaged on publish (<a href="https://redirect.github.com/expressjs/body-parser/issues/660">#660</a>)</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/body-parser/compare/1.9.3...v2.2.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~ulisesgascon">ulisesgascon</a>, a new releaser for body-parser since your current version.</p> </details> <br /> Updates `express` from 4.10.8 to 5.2.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p> <blockquote> <h2>v5.2.1</h2> <h2>What's Changed</h2> <blockquote> <p>[!IMPORTANT]<br /> The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.</p> </blockquote> <ul> <li>Release: 5.2.1 by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6933">expressjs/express#6933</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/v5.2.0...v5.2.1">https://github.com/expressjs/express/compare/v5.2.0...v5.2.1</a></p> <h2>v5.2.0</h2> <h2>Important: Security</h2> <ul> <li>Security fix for <a href="https://www.cve.org/CVERecord?id=CVE-2024-51999">CVE-2024-51999</a> (<a href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6">GHSA-pj86-cfqh-vqx6</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6429">expressjs/express#6429</a></li> <li>Refactor: simplify <code>acceptsLanguages</code> implementation using spread operator by <a href="https://github.com/Ayoub-Mabrouk"><code>@​Ayoub-Mabrouk</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6137">expressjs/express#6137</a></li> <li>increased code coverage of utils.js file by <a href="https://github.com/ashish3011"><code>@​ashish3011</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6386">expressjs/express#6386</a></li> <li>chore: remove duplicate word by <a href="https://github.com/dufucun"><code>@​dufucun</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6456">expressjs/express#6456</a></li> <li>build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6498">expressjs/express#6498</a></li> <li>build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6497">expressjs/express#6497</a></li> <li>build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6496">expressjs/express#6496</a></li> <li>ci: add node.js 24 to test matrix by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6504">expressjs/express#6504</a></li> <li>ci: update codeql config by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6488">expressjs/express#6488</a></li> <li>chore: wider range for query test skip by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6512">expressjs/express#6512</a></li> <li>chore: fix typos in test by <a href="https://github.com/noritaka1166"><code>@​noritaka1166</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6535">expressjs/express#6535</a></li> <li>ci: disable credential persistence for checkout actions by <a href="https://github.com/mertssmnoglu"><code>@​mertssmnoglu</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6522">expressjs/express#6522</a></li> <li>ci: allow manual triggering of workflow by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6515">expressjs/express#6515</a></li> <li>test: add coverage for app.listen() variants by <a href="https://github.com/kgarg1"><code>@​kgarg1</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6476">expressjs/express#6476</a></li> <li>docs: move documentation and charters to the discussions and .github … by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6427">expressjs/express#6427</a></li> <li>build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6549">expressjs/express#6549</a></li> <li>build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6548">expressjs/express#6548</a></li> <li>chore: enforce explicit <code>Buffer</code> import and add lint rule by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6525">expressjs/express#6525</a></li> <li>chore: use node protocol for querystring by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6520">expressjs/express#6520</a></li> <li>chore: fix typo by <a href="https://github.com/mountdisk"><code>@​mountdisk</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6609">expressjs/express#6609</a></li> <li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6618">expressjs/express#6618</a></li> <li>add deprecation warnings for redirect arguments undefined by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6405">expressjs/express#6405</a></li> <li>ci: run CI when the markdown changes by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6632">expressjs/express#6632</a></li> <li>doc: fix CONTRIBUTING link by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6653">expressjs/express#6653</a></li> <li>doc: update contributing guidelines and code of conduct links by <a href="https://github.com/ShubhamOulkar"><code>@​ShubhamOulkar</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6601">expressjs/express#6601</a></li> <li>build(deps-dev): bump morgan from 1.10.0 to 1.10.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6679">expressjs/express#6679</a></li> <li>build(deps-dev): bump cookie-session from 2.1.0 to 2.1.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6678">expressjs/express#6678</a></li> <li>lint: add --fix flag to automatic fix linting issue by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6644">expressjs/express#6644</a></li> <li>chore: ignore yarn.lock file and update example by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6588">expressjs/express#6588</a></li> <li>lib: use req.socket over deprecated req.connection by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6705">expressjs/express#6705</a></li> <li>doc: update express app example by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6718">expressjs/express#6718</a></li> <li>build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6675">expressjs/express#6675</a></li> <li>Remove history.md from being packaged on publish by <a href="https://github.com/sheplu"><code>@​sheplu</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6780">expressjs/express#6780</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p> <blockquote> <h1>5.2.1 / 2025-12-01</h1> <ul> <li>Revert security fix for <a href="https://www.cve.org/CVERecord?id=CVE-2024-51999">CVE-2024-51999</a> (<a href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6">GHSA-pj86-cfqh-vqx6</a>) <ul> <li>The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.</li> </ul> </li> </ul> <h1>5.2.0 / 2025-12-01</h1> <ul> <li>Security fix for <a href="https://www.cve.org/CVERecord?id=CVE-2024-51999">CVE-2024-51999</a> (<a href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6">GHSA-pj86-cfqh-vqx6</a>)</li> <li>deps: <code>body-parser@^2.2.1</code></li> <li>A deprecation warning was added when using <code>res.redirect</code> with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.</li> </ul> <h1>5.1.0 / 2025-03-31</h1> <ul> <li>Add support for <code>Uint8Array</code> in <code>res.send()</code></li> <li>Add support for ETag option in <code>res.sendFile()</code></li> <li>Add support for multiple links with the same rel in <code>res.links()</code></li> <li>Add funding field to package.json</li> <li>perf: use loop for acceptParams</li> <li>refactor: prefix built-in node module imports</li> <li>deps: remove <code>setprototypeof</code></li> <li>deps: remove <code>safe-buffer</code></li> <li>deps: remove <code>utils-merge</code></li> <li>deps: remove <code>methods</code></li> <li>deps: remove <code>depd</code></li> <li>deps: <code>debug@^4.4.0</code></li> <li>deps: <code>body-parser@^2.2.0</code></li> <li>deps: <code>router@^2.2.0</code></li> <li>deps: <code>content-type@^1.0.5</code></li> <li>deps: <code>finalhandler@^2.1.0</code></li> <li>deps: <code>qs@^6.14.0</code></li> <li>deps: <code>server-static@2.2.0</code></li> <li>deps: <code>type-is@2.0.1</code></li> </ul> <h1>5.0.1 / 2024-10-08</h1> <ul> <li>Update <code>cookie</code> semver lock to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-47764">CVE-2024-47764</a></li> </ul> <h1>5.0.0 / 2024-09-10</h1> <ul> <li>remove: <ul> <li><code>path-is-absolute</code> dependency - use <code>path.isAbsolute</code> instead</li> </ul> </li> <li>breaking: <ul> <li><code>res.status()</code> accepts only integers, and input must be greater than 99 and less than 1000 <ul> <li>will throw a <code>RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.</code> for inputs outside this range</li> <li>will throw a <code>TypeError: Invalid status code: ${code}. Status code must be an integer.</code> for non integer inputs</li> </ul> </li> <li>deps: send@1.0.0</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/express/commit/dbac741a49a5a64336b70c06e85c2e2706e36336"><code>dbac741</code></a> 5.2.1</li> <li><a href="https://github.com/expressjs/express/commit/697547cde621d8b0a47b4fff6e98b29337f8c980"><code>697547c</code></a> Revert &quot;sec: security patch for CVE-2024-51999&quot;</li> <li><a href="https://github.com/expressjs/express/commit/4007ad103ba29f6426b2ec9eccfb1ceb792682a8"><code>4007ad1</code></a> Release: 5.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6920">#6920</a>)</li> <li><a href="https://github.com/expressjs/express/commit/2f64f68c37c64ae333e41ff38032d21860f22255"><code>2f64f68</code></a> sec: security patch for CVE-2024-51999</li> <li><a href="https://github.com/expressjs/express/commit/ed0ba3f1dc905d6b62eabf23bd383abcae4901ba"><code>ed0ba3f</code></a> build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (<a href="https://redirect.github.com/expressjs/express/issues/6928">#6928</a>)</li> <li><a href="https://github.com/expressjs/express/commit/8eace4603cb2547608578a4fbb259dc984216f71"><code>8eace46</code></a> build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (<a href="https://redirect.github.com/expressjs/express/issues/6929">#6929</a>)</li> <li><a href="https://github.com/expressjs/express/commit/30bae810279b2ea162bed5b14ce6c35a110a87f5"><code>30bae81</code></a> build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (<a href="https://redirect.github.com/expressjs/express/issues/6930">#6930</a>)</li> <li><a href="https://github.com/expressjs/express/commit/758d4355d45322b4c8cd347ebcefbf3b154c7e7f"><code>758d435</code></a> deps: body-parser@^2.2.1 (<a href="https://redirect.github.com/expressjs/express/issues/6922">#6922</a>)</li> <li><a href="https://github.com/expressjs/express/commit/77bcd5274a87047e5b3fe2f17f6c342db3909c53"><code>77bcd52</code></a> docs: update emeritus triagers (<a href="https://redirect.github.com/expressjs/express/issues/6890">#6890</a>)</li> <li><a href="https://github.com/expressjs/express/commit/f33caf1f89a028f0ea98ff5a156a68e65a2eabdd"><code>f33caf1</code></a> Nominate to <a href="https://github.com/efekrskl"><code>@​efekrskl</code></a> for triage team (<a href="https://redirect.github.com/expressjs/express/issues/6888">#6888</a>)</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.10.8...v5.2.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~jonchurch">jonchurch</a>, a new releaser for express since your current version.</p> </details> <br /> Updates `mongoose` from 3.8.40 to 9.1.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Automattic/mongoose/releases">mongoose's releases</a>.</em></p> <blockquote> <h1>9.1.5 / 2026-01-20</h1> <ul> <li>fix(map): validate map subdocument when loaded with init <a href="https://redirect.github.com/Automattic/mongoose/issues/15960">#15960</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15957">#15957</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>fix(discriminator): prevent indexes and callQueue duplication with shared nested schemas <a href="https://redirect.github.com/Automattic/mongoose/issues/15974">#15974</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15966">#15966</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>fix(subdocuments): do not pass parent path on init <a href="https://redirect.github.com/Automattic/mongoose/issues/15970">#15970</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15969">#15969</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15682">#15682</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>types(inferrawdoctype): correct handling for subdocs and doc arrays <a href="https://redirect.github.com/Automattic/mongoose/issues/15967">#15967</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/13772">#13772</a></li> <li>docs: improve grammar and clarity in TypeScript schema comments <a href="https://redirect.github.com/Automattic/mongoose/issues/15971">#15971</a> <a href="https://github.com/harshsinghpujari">harshsinghpujari</a></li> </ul> <h1>9.1.4 / 2026-01-15</h1> <ul> <li>fix: attach sessions to docs retrieved by cursor <a href="https://redirect.github.com/Automattic/mongoose/issues/15953">#15953</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15949">#15949</a> <a href="https://github.com/mjfwalsh">mjfwalsh</a></li> <li>fix(model): make hydrate() handle nested schema arrays <a href="https://redirect.github.com/Automattic/mongoose/issues/15964">#15964</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15956">#15956</a></li> <li>fix(clone): fix parent doc for map subdocuments and array subdocuments <a href="https://redirect.github.com/Automattic/mongoose/issues/15958">#15958</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15954">#15954</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>fix: prevent crash when accessing nested paths on prototype <a href="https://redirect.github.com/Automattic/mongoose/issues/15962">#15962</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15961">#15961</a> <a href="https://github.com/som14062005">som14062005</a></li> </ul> <h1>9.1.3 / 2026-01-09</h1> <ul> <li>fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig <a href="https://redirect.github.com/Automattic/mongoose/issues/15941">#15941</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15938">#15938</a></li> <li>fix(query): include preview of current and incoming update in error when merging normal update with pipeline <a href="https://redirect.github.com/Automattic/mongoose/issues/15939">#15939</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15928">#15928</a></li> <li>types(model): apply basic type casting to paths underneath subdocuments <a href="https://redirect.github.com/Automattic/mongoose/issues/15948">#15948</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15947">#15947</a></li> <li>types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members <a href="https://redirect.github.com/Automattic/mongoose/issues/15942">#15942</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15923">#15923</a></li> <li>docs(schema): expose &quot;DocumentArrayElement&quot; <a href="https://redirect.github.com/Automattic/mongoose/issues/15590">#15590</a> <a href="https://github.com/hasezoey">hasezoey</a></li> </ul> <h1>9.1.2 / 2025-01-05</h1> <ul> <li>fix(subdocs): pass options to pre-save hooks for subdocs <a href="https://redirect.github.com/Automattic/mongoose/issues/15921">#15921</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15920">#15920</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>perf(model): select only _id when checking document existence during save() <a href="https://redirect.github.com/Automattic/mongoose/issues/15919">#15919</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> </ul> <h1>9.1.1 / 2025-12-30</h1> <ul> <li>fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline <a href="https://redirect.github.com/Automattic/mongoose/issues/15928">#15928</a></li> <li>docs: update default search version to 9.x <a href="https://redirect.github.com/Automattic/mongoose/issues/15926">#15926</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15925">#15925</a></li> </ul> <h1>9.1.0 / 2025-12-29</h1> <ul> <li>feat(model): make pathsToSave handle saving just a subpath of a modified path <a href="https://redirect.github.com/Automattic/mongoose/issues/15896">#15896</a></li> <li>feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks <a href="https://redirect.github.com/Automattic/mongoose/issues/15908">#15908</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15870">#15870</a></li> <li>feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options <a href="https://redirect.github.com/Automattic/mongoose/issues/15917">#15917</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15915">#15915</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15912">#15912</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>feat(document): add support for getAtomics() to allow custom container types to utilize atomics <a href="https://redirect.github.com/Automattic/mongoose/issues/15817">#15817</a></li> <li>perf: optimize Object.keys() checks and optional chaining <a href="https://redirect.github.com/Automattic/mongoose/issues/15865">#15865</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>fix: add support for typescript style enums <a href="https://redirect.github.com/Automattic/mongoose/issues/15914">#15914</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15913">#15913</a> <a href="https://github.com/mjfwebb">mjfwebb</a></li> <li>fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc <a href="https://redirect.github.com/Automattic/mongoose/issues/15904">#15904</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15901">#15901</a></li> <li>types(models): support Mongoose query casting in AnyBulkWriteOperation filter property <a href="https://redirect.github.com/Automattic/mongoose/issues/15918">#15918</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15910">#15910</a></li> <li>types: allow calling create() with TRawDocType for better generics support <a href="https://redirect.github.com/Automattic/mongoose/issues/15903">#15903</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15902">#15902</a></li> <li>types(document): add id virtual getter by default to HydrateDocument&lt;&gt; if TOverrides is Record&lt;string, never&gt; <a href="https://redirect.github.com/Automattic/mongoose/issues/15906">#15906</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15900">#15900</a></li> <li>docs(schema): add lean to list of schema options <a href="https://redirect.github.com/Automattic/mongoose/issues/15907">#15907</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15894">#15894</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/12081">#12081</a></li> </ul> <h1>9.0.2 / 2025-12-17</h1> <ul> <li>fix(model): trigger error post hook on bulkwrite when pre-hook throws an error <a href="https://redirect.github.com/Automattic/mongoose/issues/15882">#15882</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md">mongoose's changelog</a>.</em></p> <blockquote> <h1>9.1.5 / 2026-01-20</h1> <ul> <li>fix(map): validate map subdocument when loaded with init <a href="https://redirect.github.com/Automattic/mongoose/issues/15960">#15960</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15957">#15957</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>fix(discriminator): prevent indexes and callQueue duplication with shared nested schemas <a href="https://redirect.github.com/Automattic/mongoose/issues/15974">#15974</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15966">#15966</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>fix(subdocuments): do not pass parent path on init <a href="https://redirect.github.com/Automattic/mongoose/issues/15970">#15970</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15969">#15969</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15682">#15682</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>types(inferrawdoctype): correct handling for subdocs and doc arrays <a href="https://redirect.github.com/Automattic/mongoose/issues/15967">#15967</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/13772">#13772</a></li> <li>docs: improve grammar and clarity in TypeScript schema comments <a href="https://redirect.github.com/Automattic/mongoose/issues/15971">#15971</a> <a href="https://github.com/harshsinghpujari">harshsinghpujari</a></li> </ul> <h1>9.1.4 / 2026-01-15</h1> <ul> <li>fix: attach sessions to docs retrieved by cursor <a href="https://redirect.github.com/Automattic/mongoose/issues/15953">#15953</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15949">#15949</a> <a href="https://github.com/mjfwalsh">mjfwalsh</a></li> <li>fix(model): make hydrate() handle nested schema arrays <a href="https://redirect.github.com/Automattic/mongoose/issues/15964">#15964</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15956">#15956</a></li> <li>fix(clone): fix parent doc for map subdocuments and array subdocuments <a href="https://redirect.github.com/Automattic/mongoose/issues/15958">#15958</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15954">#15954</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>fix: prevent crash when accessing nested paths on prototype <a href="https://redirect.github.com/Automattic/mongoose/issues/15962">#15962</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15961">#15961</a> <a href="https://github.com/som14062005">som14062005</a></li> </ul> <h1>9.1.3 / 2026-01-09</h1> <ul> <li>fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig <a href="https://redirect.github.com/Automattic/mongoose/issues/15941">#15941</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15938">#15938</a></li> <li>fix(query): include preview of current and incoming update in error when merging normal update with pipeline <a href="https://redirect.github.com/Automattic/mongoose/issues/15939">#15939</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15928">#15928</a></li> <li>types(model): apply basic type casting to paths underneath subdocuments <a href="https://redirect.github.com/Automattic/mongoose/issues/15948">#15948</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15947">#15947</a></li> <li>types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members <a href="https://redirect.github.com/Automattic/mongoose/issues/15942">#15942</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15923">#15923</a></li> <li>docs(schema): expose &quot;DocumentArrayElement&quot; <a href="https://redirect.github.com/Automattic/mongoose/issues/15590">#15590</a> <a href="https://github.com/hasezoey">hasezoey</a></li> </ul> <h1>9.1.2 / 2026-01-05</h1> <ul> <li>fix(subdocs): pass options to pre-save hooks for subdocs <a href="https://redirect.github.com/Automattic/mongoose/issues/15921">#15921</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15920">#15920</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>perf(model): select only _id when checking document existence during save() <a href="https://redirect.github.com/Automattic/mongoose/issues/15919">#15919</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> </ul> <h1>9.1.1 / 2025-12-30</h1> <ul> <li>fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline <a href="https://redirect.github.com/Automattic/mongoose/issues/15928">#15928</a></li> <li>docs: update default search version to 9.x <a href="https://redirect.github.com/Automattic/mongoose/issues/15926">#15926</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15925">#15925</a></li> </ul> <h1>9.1.0 / 2025-12-29</h1> <ul> <li>feat(model): make pathsToSave handle saving just a subpath of a modified path <a href="https://redirect.github.com/Automattic/mongoose/issues/15896">#15896</a></li> <li>feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks <a href="https://redirect.github.com/Automattic/mongoose/issues/15908">#15908</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15870">#15870</a></li> <li>feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options <a href="https://redirect.github.com/Automattic/mongoose/issues/15917">#15917</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15915">#15915</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15912">#15912</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>feat(document): add support for getAtomics() to allow custom container types to utilize atomics <a href="https://redirect.github.com/Automattic/mongoose/issues/15817">#15817</a></li> <li>perf: optimize Object.keys() checks and optional chaining <a href="https://redirect.github.com/Automattic/mongoose/issues/15865">#15865</a> <a href="https://github.com/AbdelrahmanHafez">AbdelrahmanHafez</a></li> <li>fix: add support for typescript style enums <a href="https://redirect.github.com/Automattic/mongoose/issues/15914">#15914</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15913">#15913</a> <a href="https://github.com/mjfwebb">mjfwebb</a></li> <li>fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc <a href="https://redirect.github.com/Automattic/mongoose/issues/15904">#15904</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15901">#15901</a></li> <li>types(models): support Mongoose query casting in AnyBulkWriteOperation filter property <a href="https://redirect.github.com/Automattic/mongoose/issues/15918">#15918</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15910">#15910</a></li> <li>types: allow calling create() with TRawDocType for better generics support <a href="https://redirect.github.com/Automattic/mongoose/issues/15903">#15903</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15902">#15902</a></li> <li>types(document): add id virtual getter by default to HydrateDocument&lt;&gt; if TOverrides is Record&lt;string, never&gt; <a href="https://redirect.github.com/Automattic/mongoose/issues/15906">#15906</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15900">#15900</a></li> <li>docs(schema): add lean to list of schema options <a href="https://redirect.github.com/Automattic/mongoose/issues/15907">#15907</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15894">#15894</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/12081">#12081</a></li> </ul> <h1>8.21.0 / 2025-12-29</h1> <ul> <li>feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks <a href="https://redirect.github.com/Automattic/mongoose/issues/15908">#15908</a> <a href="https://redirect.github.com/Automattic/mongoose/issues/15870">#15870</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Automattic/mongoose/commit/22643d6dceb89a8912f031ffda3a1ae94055a5c2"><code>22643d6</code></a> chore: release 9.1.5</li> <li><a href="https://github.com/Automattic/mongoose/commit/87ffed8f00edeacdfe5d46806472d03a45b332a9"><code>87ffed8</code></a> Merge pull request <a href="https://redirect.github.com/Automattic/mongoose/issues/15967">#15967</a> from Automattic/vkarpov15/correct-raw-doc-type-subdocs</li> <li><a href="https://github.com/Automattic/mongoose/commit/f9bdfa2f47ca5067ea7b491b70f4fb5c7742cbb9"><code>f9bdfa2</code></a> Merge pull request <a href="https://redirect.github.com/Automattic/mongoose/issues/15974">#15974</a> from Automattic/<a href="https://redirect.github.com/Automattic/mongoose/issues/15966">gh-15966</a></li> <li><a href="https://github.com/Automattic/mongoose/commit/76753bf7bc0454bd99b44686d5baf2d75db766c8"><code>76753bf</code></a> style: break up ternary</li> <li><a href="https://github.com/Automattic/mongoose/commit/b9dc767cff31201c85ddcab9a4d4d952f61102ac"><code>b9dc767</code></a> Merge pull request <a href="https://redirect.github.com/Automattic/mongoose/issues/15971">#15971</a> from harshsinghpujari/docs-typescript-grammer-fix</li> <li><a href="https://github.com/Automattic/mongoose/commit/0cb75cbe611ace572be2a8b3afc4c162cc41a284"><code>0cb75cb</code></a> handling for _id option</li> <li><a href="https://github.com/Automattic/mongoose/commit/c8e5cb9c95f6b2e2117120d884581a14b65ca04a"><code>c8e5cb9</code></a> fix(discriminator): skip merging parentSchema to prevent duplication in child...</li> <li><a href="https://github.com/Automattic/mongoose/commit/853e612e48e0742f2583ec13d61a5154c1f3acf8"><code>853e612</code></a> test(discriminator): add tests asserting queues are not duplicated for nested...</li> <li><a href="https://github.com/Automattic/mongoose/commit/57bc5c80772b407aad73c984c1b4788f43d6ab89"><code>57bc5c8</code></a> test(discriminator): add tests to verify nested discriminator indexes do not ...</li> <li><a href="https://github.com/Automattic/mongoose/commit/c7549db79e119ab3c01dc08afecb3a55c3e0b4f4"><code>c7549db</code></a> docs: improve grammar and clarity in TypeScript schema comments</li> <li>Additional commits viewable in <a href="https://github.com/Automattic/mongoose/compare/3.8.40...9.1.5">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for mongoose since your current version.</p> </details> <br /> Updates `express` from 3.3.1 to 4.22.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p> <blockquote> <h2>v5.2.1</h2> <h2>What's Changed</h2> <blockquote> <p>[!IMPORTANT]<br /> The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.</p> </blockquote> <ul> <li>Release: 5.2.1 by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6933">expressjs/express#6933</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/v5.2.0...v5.2.1">https://github.com/expressjs/express/compare/v5.2.0...v5.2.1</a></p> <h2>v5.2.0</h2> <h2>Important: Security</h2> <ul> <li>Security fix for <a href="https://www.cve.org/CVERecord?id=CVE-2024-51999">CVE-2024-51999</a> (<a href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6">GHSA-pj86-cfqh-vqx6</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6429">expressjs/express#6429</a></li> <li>Refactor: simplify <code>acceptsLanguages</code> implementation using spread operator by <a href="https://github.com/Ayoub-Mabrouk"><code>@​Ayoub-Mabrouk</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6137">expressjs/express#6137</a></li> <li>increased code coverage of utils.js file by <a href="https://github.com/ashish3011"><code>@​ashish3011</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6386">expressjs/express#6386</a></li> <li>chore: remove duplicate word by <a href="https://github.com/dufucun"><code>@​dufucun</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6456">expressjs/express#6456</a></li> <li>build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6498">expressjs/express#6498</a></li> <li>build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6497">expressjs/express#6497</a></li> <li>build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6496">expressjs/express#6496</a></li> <li>ci: add node.js 24 to test matrix by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6504">expressjs/express#6504</a></li> <li>ci: update codeql config by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6488">expressjs/express#6488</a></li> <li>chore: wider range for query test skip by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6512">expressjs/express#6512</a></li> <li>chore: fix typos in test by <a href="https://github.com/noritaka1166"><code>@​noritaka1166</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6535">expressjs/express#6535</a></li> <li>ci: disable credential persistence for checkout actions by <a href="https://github.com/mertssmnoglu"><code>@​mertssmnoglu</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6522">expressjs/express#6522</a></li> <li>ci: allow manual triggering of workflow by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6515">expressjs/express#6515</a></li> <li>test: add coverage for app.listen() variants by <a href="https://github.com/kgarg1"><code>@​kgarg1</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6476">expressjs/express#6476</a></li> <li>docs: move documentation and charters to the discussions and .github … by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6427">expressjs/express#6427</a></li> <li>build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6549">expressjs/express#6549</a></li> <li>build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6548">expressjs/express#6548</a></li> <li>chore: enforce explicit <code>Buffer</code> import and add lint rule by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6525">expressjs/express#6525</a></li> <li>chore: use node protocol for querystring by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6520">expressjs/express#6520</a></li> <li>chore: fix typo by <a href="https://github.com/mountdisk"><code>@​mountdisk</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6609">expressjs/express#6609</a></li> <li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6618">expressjs/express#6618</a></li> <li>add deprecation warnings for redirect arguments undefined by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6405">expressjs/express#6405</a></li> <li>ci: run CI when the markdown changes by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6632">expressjs/express#6632</a></li> <li>doc: fix CONTRIBUTING link by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6653">expressjs/express#6653</a></li> <li>doc: update contributing guidelines and code of conduct links by <a href="https://github.com/ShubhamOulkar"><code>@​ShubhamOulkar</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6601">expressjs/express#6601</a></li> <li>build(deps-dev): bump morgan from 1.10.0 to 1.10.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6679">expressjs/express#6679</a></li> <li>build(deps-dev): bump cookie-session from 2.1.0 to 2.1.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6678">expressjs/express#6678</a></li> <li>lint: add --fix flag to automatic fix linting issue by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6644">expressjs/express#6644</a></li> <li>chore: ignore yarn.lock file and update example by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6588">expressjs/express#6588</a></li> <li>lib: use req.socket over deprecated req.connection by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6705">expressjs/express#6705</a></li> <li>doc: update express app example by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6718">expressjs/express#6718</a></li> <li>build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/expressjs/express/pull/6675">expressjs/express#6675</a></li> <li>Remove history.md from being packaged on publish by <a href="https://github.com/sheplu"><code>@​sheplu</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6780">expressjs/express#6780</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p> <blockquote> <h1>5.2.1 / 2025-12-01</h1> <ul> <li>Revert security fix for <a href="https://www.cve.org/CVERecord?id=CVE-2024-51999">CVE-2024-51999</a> (<a href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6">GHSA-pj86-cfqh-vqx6</a>) <ul> <li>The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.</li> </ul> </li> </ul> <h1>5.2.0 / 2025-12-01</h1> <ul> <li>Security fix for <a href="https://www.cve.org/CVERecord?id=CVE-2024-51999">CVE-2024-51999</a> (<a href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6">GHSA-pj86-cfqh-vqx6</a>)</li> <li>deps: <code>body-parser@^2.2.1</code></li> <li>A deprecation warning was added when using <code>res.redirect</code> with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.</li> </ul> <h1>5.1.0 / 2025-03-31</h1> <ul> <li>Add support for <code>Uint8Array</code> in <code>res.send()</code></li> <li>Add support for ETag option in <code>res.sendFile()</code></li> <li>Add support for multiple links with the same rel in <code>res.links()</code></li> <li>Add funding field to package.json</li> <li>perf: use loop for acceptParams</li> <li>refactor: prefix built-in node module imports</li> <li>deps: remove <code>setprototypeof</code></li> <li>deps: remove <code>safe-buffer</code></li> <li>deps: remove <code>utils-merge</code></li> <li>deps: remove <code>methods</code></li> <li>deps: remove <code>depd</code></li> <li>deps: <code>debug@^4.4.0</code></li> <li>deps: <code>body-parser@^2.2.0</code></li> <li>deps: <code>router@^2.2.0</code></li> <li>deps: <code>content-type@^1.0.5</code></li> <li>deps: <code>finalhandler@^2.1.0</code></li> <li>deps: <code>qs@^6.14.0</code></li> <li>deps: <code>server-static@2.2.0</code></li> <li>deps: <code>type-is@2.0.1</code></li> </ul> <h1>5.0.1 / 2024-10-08</h1> <ul> <li>Update <code>cookie</code> semver lock to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-47764">CVE-2024-47764</a></li> </ul> <h1>5.0.0 / 2024-09-10</h1> <ul> <li>remove: <ul> <li><code>path-is-absolute</code> dependency - use <code>path.isAbsolute</code> instead</li> </ul> </li> <li>breaking: <ul> <li><code>res.status()</code> accepts only integers, and input must be greater than 99 and less than 1000 <ul> <li>will throw a <code>RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.</code> for inputs outside this range</li> <li>will throw a <code>TypeError: Invalid status code: ${code}. Status code must be an integer.</code> for non integer inputs</li> </ul> </li> <li>deps: send@1.0.0</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/express/commit/dbac741a49a5a64336b70c06e85c2e2706e36336"><code>dbac741</code></a> 5.2.1</li> <li><a href="https://github.com/expressjs/express/commit/697547cde621d8b0a47b4fff6e98b29337f8c980"><code>697547c</code></a> Revert &quot;sec: security patch for CVE-2024-51999&quot;</li> <li><a href="https://github.com/expressjs/express/commit/4007ad103ba29f6426b2ec9eccfb1ceb792682a8"><code>4007ad1</code></a> Release: 5.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6920">#6920</a>)</li> <li><a href="https://github.com/expressjs/express/commit/2f64f68c37c64ae333e41ff38032d21860f22255"><code>2f64f68</code></a> sec: security patch for CVE-2024-51999</li> <li><a href="https://github.com/expressjs/express/commit/ed0ba3f1dc905d6b62eabf23bd383abcae4901ba"><code>ed0ba3f</code></a> build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (<a href="https://redirect.github.com/expressjs/express/issues/6928">#6928</a>)</li> <li><a href="https://github.com/expressjs/express/commit/8eace4603cb2547608578a4fbb259dc984216f71"><code>8eace46</code></a> build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (<a href="https://redirect.github.com/expressjs/express/issues/6929">#6929</a>)</li> <li><a href="https://github.com/expressjs/express/commit/30bae810279b2ea162bed5b14ce6c35a110a87f5"><code>30bae81</code></a> build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (<a href="https://redirect.github.com/expressjs/express/issues/6930">#6930</a>)</li> <li><a href="https://github.com/expressjs/express/commit/758d4355d45322b4c8cd347ebcefbf3b154c7e7f"><code>758d435</code></a> deps: body-parser@^2.2.1 (<a href="https://redirect.github.com/expressjs/express/issues/6922">#6922</a>)</li> <li><a href="https://github.com/expressjs/express/commit/77bcd5274a87047e5b3fe2f17f6c342db3909c53"><code>77bcd52</code></a> docs: update emeritus triagers (<a href="https://redirect.github.com/expressjs/express/issues/6890">#6890</a>)</li> <li><a href="https://github.com/expressjs/express/commit/f33caf1f89a028f0ea98ff5a156a68e65a2eabdd"><code>f33caf1</code></a> Nominate to <a href="https://github.com/efekrskl"><code>@​efekrskl</code></a> for triage team (<a href="https://redirect.github.com/expressjs/express/issues/6888">#6888</a>)</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.10.8...v5.2.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~jonchurch">jonchurch</a>, a new releaser for express since your current version.</p> </details> <br /> Updates `karma` from 0.10.10 to 6.4.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/karma-runner/karma/releases">karma's releases</a>.</em></p> <blockquote> <h2>v6.4.4</h2> <h2><a href="https://github.com/karma-runner/karma/compare/v6.4.3...v6.4.4">6.4.4</a> (2024-07-29)</h2> <h2>v6.4.3</h2> <h2><a href="https://github.com/karma-runner/karma/compare/v6.4.2...v6.4.3">6.4.3</a> (2024-02-24)</h2> <h3>Bug Fixes</h3> <ul> <li>add build commits for patch release (<a href="https://github.com/karma-runner/karma/commit/d7f2d69ff41a5811552412080519b1984ff48669">d7f2d69</a>)</li> </ul> <h2>v6.4.2</h2> <h2><a href="https://github.com/karma-runner/karma/compare/v6.4.1...v6.4.2">6.4.2</a> (2023-04-21)</h2> <h3>Bug Fixes</h3> <ul> <li>few typos (<a href="https://github.com/karma-runner/karma/commit/c6a42710b40e81269f1e6c5d5bb55d01188a8872">c6a4271</a>)</li> </ul> <h2>v6.4.1</h2> <h2><a href="https://github.com/karma-runner/karma/compare/v6.4.0...v6.4.1">6.4.1</a> (2022-09-19)</h2> <h3>Bug Fixes</h3> <ul> <li>pass integrity value (<a href="https://github.com/karma-runner/karma/commit/63d86befd3431fe8e1500e22f4f115a3762d000a">63d86be</a>)</li> </ul> <h2>v6.4.0</h2> <h1><a href="https://github.com/karma-runner/karma/compare/v6.3.20...v6.4.0">6.4.0</a> (2022-06-14)</h1> <h3>Features</h3> <ul> <li>support SRI verification of link tags (<a href="https://github.com/karma-runner/karma/commit/dc51a2e0e9b9805f7740f52fde01bcd20adc2dfc">dc51a2e</a>)</li> <li>support SRI verification of script tags (<a href="https://github.com/karma-runner/karma/commit/6a54b1c2a1df8214c470b8a5cc8036912874637e">6a54b1c</a>)</li> </ul> <h2>v6.3.20</h2> <h2><a href="https://github.com/karma-runner/karma/compare/v6.3.19...v6.3.20">6.3.20</a> (2022-05-13)</h2> <h3>Bug Fixes</h3> <ul> <li>prefer IPv4 addresses when resolving domains (<a href="https://github.com/karma-runner/karma/commit/e17698f950af83bf2b3edc540d2a3e1fb73cba59">e17698f</a>),... _Description has been truncated_
Commenting is not possible because the repository is archived.
Reviewers
No reviewers
Labels
Clear labels   
bug

   
dependencies
Pull requests that update a dependency file

  
duplicate

   
enhancement

   
help wanted

   
invalid

   
javascript
Pull requests that update javascript code

  
question

   
wontfix
No labels
bug
dependencies
duplicate
enhancement
help wanted
invalid
javascript
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
joezombie/VEFT-Skil03!1
No description provided.