Skip to content

Bump the npm_and_yarn group across 5 directories with 14 updates#349

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/OPENAPI-REST-API/openapi-documentation/dynamic-html/npm_and_yarn-0a782abd2c
Open

Bump the npm_and_yarn group across 5 directories with 14 updates#349
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/OPENAPI-REST-API/openapi-documentation/dynamic-html/npm_and_yarn-0a782abd2c

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Bumps the npm_and_yarn group with 1 update in the /OPENAPI-REST-API/openapi-documentation/dynamic-html directory: express.
Bumps the npm_and_yarn group with 1 update in the /OPENAPI-REST-API/swagger-client/dynamic-html directory: express.
Bumps the npm_and_yarn group with 1 update in the /OPENAPI-REST-API/swagger-documentation/dynamic-html directory: express.
Bumps the npm_and_yarn group with 2 updates in the /OPENAPI-REST-API/openapi-client/javascript-flowtyped directory: @babel/plugin-transform-modules-systemjs and fast-uri.
Bumps the npm_and_yarn group with 1 update in the /OPENAPI-REST-API/openapi-client/typescript-aurelia directory: minimist.

Updates express from 3.21.2 to 4.22.0

Release notes

Sourced from express's releases.

4.22.0

Important: Security

What's Changed

Full Changelog: expressjs/express@4.21.2...4.22.0

4.21.2

What's Changed

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from express's changelog.

4.22.0 / 2025-12-01

4.21.2 / 2024-11-06

  • deps: path-to-regexp@0.1.12
    • Fix backtracking protection
  • deps: path-to-regexp@0.1.11
    • Throws an error on invalid path values

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

  • Deprecate res.location("back") and res.redirect("back") magic string
  • deps: serve-static@1.16.2
    • includes send@0.19.0
  • deps: finalhandler@1.3.1
  • deps: qs@6.13.0

4.20.0 / 2024-09-10

  • deps: serve-static@0.16.0
    • Remove link renderization in html while redirecting
  • deps: send@0.19.0
    • Remove link renderization in html while redirecting
  • deps: body-parser@0.6.0
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: path-to-regexp@0.1.10
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

4.19.2 / 2024-03-25

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for express since your current version.


Updates body-parser from 1.13.3 to 1.20.5

Release notes

Sourced from body-parser's releases.

v1.20.5

What's Changed

The reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (> 100) on qs@6.14.2+. (expressjs/body-parser#716)

New Contributors

Special thanks to triager @​krzysdz for keeping this on our radar and effectively triaging the specific issue!

Full Changelog: expressjs/body-parser@1.20.4...1.20.5

1.20.4

What's Changed

Full Changelog: expressjs/body-parser@1.20.3...1.20.4

1.20.3

What's Changed

Important

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

... (truncated)

Changelog

Sourced from body-parser's changelog.

1.20.5 / 2026-04-24

  • refactor(json): simplify strict mode error string construction
  • fix: extended urlencoded parsing of arrays with >100 elements (#716)
  • deps: qs@~6.15.1

1.20.4 / 2025-12-01

  • deps: qs@~6.14.0
  • deps: use tilde notation for dependencies
  • deps: http-errors@~2.0.1
  • deps: raw-body@~2.5.3

1.20.3 / 2024-09-10

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: raw-body@2.5.2

1.20.1 / 2022-10-06

  • deps: qs@6.11.0
  • perf: remove unnecessary object clone

1.20.0 / 2022-04-02

  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: depd@2.0.0
    • Replace internal eval usage with Function constructor
    • Use instance methods on process to check for listeners
  • deps: http-errors@2.0.0
    • deps: depd@2.0.0
    • deps: statuses@2.0.1
  • deps: on-finished@2.4.1
  • deps: qs@6.10.3

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for body-parser since your current version.


Updates cookie from 0.1.3 to 0.7.2

Release notes

Sourced from cookie's releases.

v0.7.2

Fixed

  • Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option

0.5.0

  • Add priority option
  • Fix expires option to reject invalid dates
  • pref: improve default decode speed
  • pref: remove slow string split in parse

0.4.2

  • pref: read value only when assigning in parse
  • pref: remove unnecessary regexp in parse

0.4.1

  • Fix maxAge option to reject invalid values

0.4.0

  • Add SameSite=None support

0.3.1

  • Fix sameSite: true to work with draft-7 clients
    • true now sends SameSite=Strict instead of SameSite

0.3.0

  • Add sameSite option
    • Replaces firstPartyOnly option, never implemented by browsers
  • Improve error message when encode is not a function

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates debug from 2.2.0 to 2.6.9

Release notes

Sourced from debug's releases.

2.6.9

Patches

  • Remove ReDoS regexp in %o formatter: #504

Credits

Huge thanks to @​zhuangya for their help!

release 2.6.7

No release notes provided.

release 2.6.6

No release notes provided.

release 2.6.5

No release notes provided.

release 2.6.4

No release notes provided.

release 2.6.3

No release notes provided.

release 2.6.2

No release notes provided.

release 2.6.1

No release notes provided.

release 2.6.0

No release notes provided.

release 2.5.2

No release notes provided.

release 2.5.1

No release notes provided.

release 2.4.5

No release notes provided.

release 2.4.4

No release notes provided.

release 2.4.3

No release notes provided.

release 2.4.2

No release notes provided.

... (truncated)

Changelog

Sourced from debug's changelog.

2.6.9 / 2017-09-22

  • remove ReDoS regexp in %o formatter (#504)

2.6.8 / 2017-05-18

2.6.7 / 2017-05-16

2.6.5 / 2017-04-27

2.6.4 / 2017-04-20

2.6.3 / 2017-03-13

2.6.2 / 2017-03-10

2.6.1 / 2017-02-10

  • Fix: Module's export default syntax fix for IE8 Expected identifier error
  • Fix: Whitelist DEBUG_FD for values 1 and 2 only (#415, @​pi0)

... (truncated)

Commits

Updates negotiator from 0.5.3 to 0.6.3

Release notes

Sourced from negotiator's releases.

0.6.3

  • Revert "Lazy-load modules from main entry point"

0.6.2

  • Fix sorting charset, encoding, and language with extra parameters

0.6.1

  • perf: improve Accept parsing speed
  • perf: improve Accept-Charset parsing speed
  • perf: improve Accept-Encoding parsing speed
  • perf: improve Accept-Language parsing speed

0.6.0

  • Fix including type extensions in parameters in Accept parsing
  • Fix parsing Accept parameters with quoted equals
  • Fix parsing Accept parameters with quoted semicolons
  • Lazy-load modules from main entry point
  • perf: delay type concatenation until needed
  • perf: enable strict mode
  • perf: hoist regular expressions
  • perf: remove closures getting spec properties
  • perf: remove a closure from media type parsing
  • perf: remove property delete from media type parsing
Changelog

Sourced from negotiator's changelog.

0.6.3 / 2022-01-22

  • Revert "Lazy-load modules from main entry point"

0.6.2 / 2019-04-29

  • Fix sorting charset, encoding, and language with extra parameters

0.6.1 / 2016-05-02

  • perf: improve Accept parsing speed
  • perf: improve Accept-Charset parsing speed
  • perf: improve Accept-Encoding parsing speed
  • perf: improve Accept-Language parsing speed

0.6.0 / 2015-09-29

  • Fix including type extensions in parameters in Accept parsing
  • Fix parsing Accept parameters with quoted equals
  • Fix parsing Accept parameters with quoted semicolons
  • Lazy-load modules from main entry point
  • perf: delay type concatenation until needed
  • perf: enable strict mode
  • perf: hoist regular expressions
  • perf: remove closures getting spec properties
  • perf: remove a closure from media type parsing
  • perf: remove property delete from media type parsing
Commits

Updates fresh from 0.3.0 to 0.5.2

Changelog

Sourced from fresh's changelog.

0.5.2 / 2017-09-13

  • Fix regression matching multiple ETags in If-None-Match
  • perf: improve If-None-Match token parsing

0.5.1 / 2017-09-11

  • Fix handling of modified headers with invalid dates
  • perf: improve ETag match loop

0.5.0 / 2017-02-21

  • Fix incorrect result when If-None-Match has both * and ETags
  • Fix weak ETag matching to match spec
  • perf: delay reading header values until needed
  • perf: skip checking modified time if ETag check failed
  • perf: skip parsing If-None-Match when no ETag header
  • perf: use Date.parse instead of new Date

0.4.0 / 2017-02-05

  • Fix false detection of no-cache request directive
  • perf: enable strict mode
  • perf: hoist regular expressions
  • perf: remove duplicate conditional
  • perf: remove unnecessary boolean coercions
Commits
  • 02df630 0.5.2
  • 37cd4a2 build: Node.js@8.5
  • 731c0eb build: Node.js@6.11
  • 21a0f0c perf: improve If-None-Match token parsing
  • ff5f257 Fix regression matching multiple ETags in If-None-Match
  • e8a4aaf 0.5.1
  • 7015bce perf: improve ETag match loop
  • 7a2b460 Fix handling of modified headers with invalid dates
  • 1599530 bench: add simple benchmarks
  • 74793d9 build: eslint-plugin-node@5.1.1
  • Additional commits viewable in compare view

Updates ms from 0.7.1 to 2.0.0

Release notes

Sourced from ms's releases.

2.0.0

Major Changes

  • Limit str to 100 to avoid ReDoS of 0.3s: #89

Patches

  • Ignored logs coming from npm: b1eaab752203e978492a4d540a7ae1d26e6306b1
  • Bumped dependencies to the latest version: bcf57157678fd5afc691383145a35e116f9704d0
  • Invalidated cache for slack badge: 94b995c1d6d5d13ec976a0c6849a3cca9b277e6b

Credits

Huge thanks to @​karenyavine for their help!

1.0.0

Major Changes

  • Removed component specification: 1fbbe974cdcad96e592dcb65a7b2a8649f690420

Patches

  • Test on LTS version of Node: c9b1fd319f0f9198d85ecf4ba83e46cc1216be04
  • Removed XO: 94068ea6d518387670df277f740b1abada80ed48
  • Use prettier and eslint: 57b3ef8e3423cae6254f94c5564a11b4492cff43
  • Badge for XO removed: 389840b329436117741b2ef13a172725082695b9
  • Removed browser testing: e818c3581aca3119c00d81901bfe8fe653bcfda4
  • More suitable name for file containing tests: ee91f307a8dc3581ebdad614ec0533ddb3d8bf56

0.7.3

Patches

  • Mark "options" param as optional in jsdoc: #77
  • Lowercased text files: 5f0653ab192a30301aed8668b4588a87975b41ab
  • Pinned dependencies: 126d7f094a1836b991c8d0abfeb4d0ce09ac280f
  • Chore(package): update serve to version 5.0.1: #81

Credits

Huge thanks to @​Jokero for their help!

0.7.2

Patches 💅

  • Added license field to package.json file: zeit/ms#42
  • Renamed long and short (reserved keywords): zeit/ms#53
  • Capitalized important files: b2d9f9d
  • Specified version numbers for devDependencies in package.json: abd3616
  • Updated license file to the latest version: 5d53ae8
  • Only upload important files to npm, instead of excluding certain ones: 2b2f02a
  • Adjusted name of repository in package.json: e84f95d

... (truncated)

Commits
  • 9b88d15 2.0.0
  • 94b995c Invalidated cache for slack badge
  • bcf5715 Bumped dependencies to the latest version
  • b1eaab7 Ignored logs coming from npm
  • caae298 Limit str to 100 to avoid ReDoS of 0.3s (#89)
  • b83b36d chore(package): update eslint to version 3.19.0 (#88)
  • 3f2a4d7 chore(package): update husky to version 0.13.3 (#86)
  • 7daf984 1.0.0
  • ee91f30 More suitable name for file containing tests
  • e818c35 Removed browser testing
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by leo, a new releaser for ms since your current version.


Updates mime from 1.3.4 to 1.6.0

Changelog

Sourced from mime's changelog.

v1.6.0 (24/11/2017)

No changelog for this release.

v2.0.4 (24/11/2017)

  • [closed] Switch to mime-score module for resolving extension contention issues. #182
  • [closed] Update mime-db to 1.31.0 in v1.x branch #181

v1.5.0 (22/11/2017)

  • [closed] need ES5 version ready in npm package #179
  • [closed] mime-db no trace of iWork - pages / numbers / etc. #178
  • [closed] How it works in brownser ? #176
  • [closed] Missing ./Mime #175
  • [closed] Vulnerable Regular Expression #167

v2.0.3 (25/09/2017)

No changelog for this release.

v1.4.1 (25/09/2017)

  • [closed] Issue when bundling with webpack #172

v2.0.2 (15/09/2017)

  • [V2] fs.readFileSync is not a function #165
  • [closed] The extension for video/quicktime should map to .mov, not .qt #164
  • [V2] [v2 Feedback request] Mime class API #163
  • [V2] [v2 Feedback request] Resolving conflicts over extensions #162
  • [V2] Allow callers to load module with official, full, or no defined types. #161
  • [V2] Use "facets" to resolve extension conflicts #160
  • [V2] Remove fs and path dependencies #152
  • [V2] Default content-type should not be application/octet-stream #139
  • [V2] reset mime-types #124
  • [V2] Extensionless paths should return null or false #113

v2.0.1 (14/09/2017)

  • [closed] Changelog for v2.0 does not mention breaking changes #171
  • [closed] MIME breaking with 'class' declaration as it is without 'use strict mode' #170

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates qs from 4.0.0 to 6.14.2

Changelog

Sourced from qs's changelog.

6.14.2

  • [Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit (#546)
  • [Fix] arrayLimit means max count, not max index, in combine/merge/parseArrayValue
  • [Fix] parse: throw on arrayLimit exceeded with indexed notation when throwOnLimitExceeded is true (#529)
  • [Fix] parse: enforce arrayLimit on comma-parsed values
  • [Fix] parse: fix error message to reflect arrayLimit as max index; remove extraneous comments (#545)
  • [Robustness] avoid .push, use void
  • [readme] document that addQueryPrefix does not add ? to empty output (#418)
  • [readme] clarify parseArrays and arrayLimit documentation (#543)
  • [readme] replace runkit CI badge with shields.io check-runs badge
  • [meta] fix changelog typo (arrayLength → arrayLimit)
  • [actions] fix rebase workflow permissions

6.14.1

  • [Fix] ensure arrayLimit applies to [] notation as well
  • [Fix] parse: when a custom decoder returns null for a key, ignore that key
  • [Refactor] parse: extract key segment splitting helper
  • [meta] add threat model
  • [actions] add workflow permissions
  • [Tests] stringify: increase coverage
  • [Dev Deps] update eslint, @ljharb/eslint-config, npmignore, es-value-fixtures, for-each, object-inspect

6.14.0

  • [New] parse: add throwOnParameterLimitExceeded option (#517)
  • [Refactor] parse: use utils.combine more
  • [patch] parse: add explicit throwOnLimitExceeded default
  • [actions] use shared action; re-add finishers
  • [meta] Fix changelog formatting bug
  • [Deps] update side-channel
  • [Dev Deps] update es-value-fixtures, has-bigints, has-proto, has-symbols
  • [Tests] increase coverage

6.13.3

[Fix] fix regressions from robustness refactor [actions] update reusable workflows

6.13.2

  • [Robustness] avoid .push, use void
  • [readme] clarify parseArrays and arrayLimit documentation (#543)
  • [readme] document that addQueryPrefix does not add ? to empty output (#418)
  • [readme] replace runkit CI badge with shields.io check-runs badge
  • [actions] fix rebase workflow permissions

6.13.1

  • [Fix] stringify: avoid a crash when a filter key is null
  • [Fix] utils.merge: functions should not be stringified into keys
  • [Fix] parse: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset
  • [Fix] stringify: ensure a non-string filter does not crash
  • [Refactor] use __proto__ syntax instead of Object.create for null objects
  • [Refactor] misc cleanup

... (truncated)

Commits
  • bdcf0c7 v6.14.2
  • 294db90 [readme] document that addQueryPrefix does not add ? to empty output
  • 5c308e5 [readme] clarify parseArrays and arrayLimit documentation
  • 6addf8c [Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit
  • cfc108f [Fix] arrayLimit means max count, not max index, in combine/merge/`pars...
  • febb644 [Fix] parse: throw on arrayLimit exceeded with indexed notation when `thr...
  • f6a7abf [Fix] parse: enforce arrayLimit on comma-parsed values
  • fbc5206 [Fix] parse: fix error message to reflect arrayLimit as max index; remove e...
  • 1b9a8b4 [actions] fix rebase workflow permissions
  • 2a35775 [meta] fix changelog typo (arrayLength → arrayLimit)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for qs since your current version.

Install script changes

This version adds prepublish script that runs during installation. Review the package contents before updating.


Updates send from 0.13.0 to 0.19.2

Release notes

Sourced from send's releases.

0.19.2

What's Changed

Full Changelog: pillarjs/send@0.19.1...0.19.2

0.19.1

What's Changed

Full Changelog: pillarjs/send@0.19.0...0.19.1

0.19.0

What's Changed

New Contributors

Full Changelog: pillarjs/send@0.18.0...0.19.0

Changelog

Sourced from send's changelog.

0.19.2 / 2025-12-15

  • deps: use tilde notation for dependencies
  • deps: http-errors@~2.0.1
  • deps: statuses@~2.0.2

0.19.1 / 2024-10-09

  • deps: encodeurl@~2.0.0

0.19.0 / 2024-09-10

  • Remove link renderization in html while redirecting

0.18.0 / 2022-03-23

  • Fix emitted 416 error missing headers property
  • Limit the headers removed for 304 response
  • deps: depd@2.0.0
    • Replace internal eval usage with Function constructor
    • Use instance methods on process to check for listeners
  • deps: destroy@1.2.0
  • deps: http-errors@2.0.0
    • deps: depd@2.0.0
    • deps: statuses@2.0.1
  • deps: on-finished@2.4.1
  • deps: statuses@2.0.1

0.17.2 / 2021-12-11

  • pref: ignore empty http tokens
  • deps: http-errors@1.8.1
    • deps: inherits@2.0.4
    • deps: toidentifier@1.0.1
    • deps: setprototypeof@1.2.0
  • deps: ms@2.1.3

0.17.1 / 2019-05-10

  • Set stricter CSP header in redirect & error responses
  • deps: range-parser@~1.2.1

0.17.0 / 2019-05-03

... (truncated)

Commits

@dependabot
Bump the npm_and_yarn group across 5 directories with 14 updates
ab7554a 
Bumps the npm_and_yarn group with 1 update in the /OPENAPI-REST-API/openapi-documentation/dynamic-html directory: [express](https://github.com/expressjs/express).
Bumps the npm_and_yarn group with 1 update in the /OPENAPI-REST-API/swagger-client/dynamic-html directory: [express](https://github.com/expressjs/express).
Bumps the npm_and_yarn group with 1 update in the /OPENAPI-REST-API/swagger-documentation/dynamic-html directory: [express](https://github.com/expressjs/express).
Bumps the npm_and_yarn group with 2 updates in the /OPENAPI-REST-API/openapi-client/javascript-flowtyped directory: [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) and [fast-uri](https://github.com/fastify/fast-uri).
Bumps the npm_and_yarn group with 1 update in the /OPENAPI-REST-API/openapi-client/typescript-aurelia directory: [minimist](https://github.com/minimistjs/minimist).


Updates `express` from 3.21.2 to 4.22.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.22.0/History.md)
- [Commits](expressjs/express@3.21.2...4.22.0)

Updates `body-parser` from 1.13.3 to 1.20.5
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/1.20.5/HISTORY.md)
- [Commits](expressjs/body-parser@1.13.3...1.20.5)

Updates `cookie` from 0.1.3 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.1.3...v0.7.2)

Updates `debug` from 2.2.0 to 2.6.9
- [Release notes](https://github.com/debug-js/debug/releases)
- [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md)
- [Commits](debug-js/debug@2.2.0...2.6.9)

Updates `negotiator` from 0.5.3 to 0.6.3
- [Release notes](https://github.com/jshttp/negotiator/releases)
- [Changelog](https://github.com/jshttp/negotiator/blob/master/HISTORY.md)
- [Commits](jshttp/negotiator@0.5.3...0.6.3)

Updates `fresh` from 0.3.0 to 0.5.2
- [Changelog](https://github.com/jshttp/fresh/blob/master/HISTORY.md)
- [Commits](jshttp/fresh@v0.3.0...v0.5.2)

Updates `ms` from 0.7.1 to 2.0.0
- [Release notes](https://github.com/vercel/ms/releases)
- [Commits](vercel/ms@0.7.1...2.0.0)

Updates `mime` from 1.3.4 to 1.6.0
- [Release notes](https://github.com/broofa/mime/releases)
- [Changelog](https://github.com/broofa/mime/blob/v1.6.0/CHANGELOG.md)
- [Commits](broofa/mime@v1.3.4...v1.6.0)

Updates `qs` from 4.0.0 to 6.14.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v4.0.0...v6.14.2)

Updates `send` from 0.13.0 to 0.19.2
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.13.0...0.19.2)

Updates `serve-static` from 1.10.3 to 1.16.3
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md)
- [Commits](expressjs/serve-static@v1.10.3...v1.16.3)

Updates `express` from 3.21.2 to 4.22.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.22.0/History.md)
- [Commits](expressjs/express@3.21.2...4.22.0)

Updates `body-parser` from 1.13.3 to 1.20.5
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/1.20.5/HISTORY.md)
- [Commits](expressjs/body-parser@1.13.3...1.20.5)

Updates `cookie` from 0.1.3 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.1.3...v0.7.2)

Updates `debug` from 2.2.0 to 2.6.9
- [Release notes](https://github.com/debug-js/debug/releases)
- [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md)
- [Commits](debug-js/debug@2.2.0...2.6.9)

Updates `negotiator` from 0.5.3 to 0.6.3
- [Release notes](https://github.com/jshttp/negotiator/releases)
- [Changelog](https://github.com/jshttp/negotiator/blob/master/HISTORY.md)
- [Commits](jshttp/negotiator@0.5.3...0.6.3)

Updates `fresh` from 0.3.0 to 0.5.2
- [Changelog](https://github.com/jshttp/fresh/blob/master/HISTORY.md)
- [Commits](jshttp/fresh@v0.3.0...v0.5.2)

Updates `ms` from 0.7.1 to 2.0.0
- [Release notes](https://github.com/vercel/ms/releases)
- [Commits](vercel/ms@0.7.1...2.0.0)

Updates `mime` from 1.3.4 to 1.6.0
- [Release notes](https://github.com/broofa/mime/releases)
- [Changelog](https://github.com/broofa/mime/blob/v1.6.0/CHANGELOG.md)
- [Commits](broofa/mime@v1.3.4...v1.6.0)

Updates `qs` from 4.0.0 to 6.14.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v4.0.0...v6.14.2)

Updates `send` from 0.13.0 to 0.19.2
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.13.0...0.19.2)

Updates `serve-static` from 1.10.3 to 1.16.3
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md)
- [Commits](expressjs/serve-static@v1.10.3...v1.16.3)

Updates `express` from 3.21.2 to 4.22.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.22.0/History.md)
- [Commits](expressjs/express@3.21.2...4.22.0)

Updates `body-parser` from 1.13.3 to 1.20.5
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/1.20.5/HISTORY.md)
- [Commits](expressjs/body-parser@1.13.3...1.20.5)

Updates `cookie` from 0.1.3 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.1.3...v0.7.2)

Updates `debug` from 2.2.0 to 2.6.9
- [Release notes](https://github.com/debug-js/debug/releases)
- [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md)
- [Commits](debug-js/debug@2.2.0...2.6.9)

Updates `negotiator` from 0.5.3 to 0.6.3
- [Release notes](https://github.com/jshttp/negotiator/releases)
- [Changelog](https://github.com/jshttp/negotiator/blob/master/HISTORY.md)
- [Commits](jshttp/negotiator@0.5.3...0.6.3)

Updates `fresh` from 0.3.0 to 0.5.2
- [Changelog](https://github.com/jshttp/fresh/blob/master/HISTORY.md)
- [Commits](jshttp/fresh@v0.3.0...v0.5.2)

Updates `ms` from 0.7.1 to 2.0.0
- [Release notes](https://github.com/vercel/ms/releases)
- [Commits](vercel/ms@0.7.1...2.0.0)

Updates `mime` from 1.3.4 to 1.6.0
- [Release notes](https://github.com/broofa/mime/releases)
- [Changelog](https://github.com/broofa/mime/blob/v1.6.0/CHANGELOG.md)
- [Commits](broofa/mime@v1.3.4...v1.6.0)

Updates `qs` from 4.0.0 to 6.14.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v4.0.0...v6.14.2)

Updates `send` from 0.13.0 to 0.19.2
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.13.0...0.19.2)

Updates `serve-static` from 1.10.3 to 1.16.3
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md)
- [Commits](expressjs/serve-static@v1.10.3...v1.16.3)

Updates `@babel/plugin-transform-modules-systemjs` from 7.29.0 to 7.29.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs)

Updates `@babel/plugin-transform-modules-systemjs` from 7.29.0 to 7.29.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs)

Updates `@babel/plugin-transform-modules-systemjs` from 7.29.0 to 7.29.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs)

Updates `fast-uri` from 3.1.0 to 3.1.2
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

Updates `minimist` from 0.0.10 to 1.2.8
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v0.0.10...v1.2.8)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 4.22.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-version: 1.20.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 0.7.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-version: 2.6.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: negotiator
  dependency-version: 0.6.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: fresh
  dependency-version: 0.5.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ms
  dependency-version: 2.0.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: mime
  dependency-version: 1.6.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-version: 0.19.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-version: 1.16.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-version: 4.22.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-version: 1.20.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 0.7.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-version: 2.6.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: negotiator
  dependency-version: 0.6.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: fresh
  dependency-version: 0.5.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ms
  dependency-version: 2.0.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: mime
  dependency-version: 1.6.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-version: 0.19.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-version: 1.16.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-version: 4.22.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-version: 1.20.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 0.7.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-version: 2.6.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: negotiator
  dependency-version: 0.6.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: fresh
  dependency-version: 0.5.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ms
  dependency-version: 2.0.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: mime
  dependency-version: 1.6.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-version: 0.19.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-version: 1.16.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/plugin-transform-modules-systemjs"
  dependency-version: 7.29.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/plugin-transform-modules-systemjs"
  dependency-version: 7.29.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/plugin-transform-modules-systemjs"
  dependency-version: 7.29.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimist
  dependency-version: 1.2.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants