Skip to content

Commit a7ddb01

Browse files
Update dependency helmet to v8 (#134)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [helmet](https://helmetjs.github.io/) ([source](https://redirect.github.com/helmetjs/helmet)) | [`^7.1.0` -> `^8.0.0`](https://renovatebot.com/diffs/npm/helmet/7.1.0/8.0.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/helmet/8.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/helmet/8.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/helmet/7.1.0/8.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/helmet/7.1.0/8.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>helmetjs/helmet (helmet)</summary> ### [`v8.0.0`](https://redirect.github.com/helmetjs/helmet/blob/HEAD/CHANGELOG.md#800) [Compare Source](https://redirect.github.com/helmetjs/helmet/compare/v7.2.0...v8.0.0) ##### Changed - **Breaking:** `Strict-Transport-Security` now has a max-age of 365 days, up from 180 - **Breaking:** `Content-Security-Policy` middleware now throws an error if a directive should have quotes but does not, such as `self` instead of `'self'`. See [#&#8203;454](https://redirect.github.com/helmetjs/helmet/issues/454) - **Breaking:** `Content-Security-Policy`'s `getDefaultDirectives` now returns a deep copy. This only affects users who were mutating the result - **Breaking:** `Strict-Transport-Security` now throws an error when "includeSubDomains" option is misspelled. This was previously a warning ##### Removed - **Breaking:** Drop support for Node 16 and 17. Node 18+ is now required ### [`v7.2.0`](https://redirect.github.com/helmetjs/helmet/blob/HEAD/CHANGELOG.md#720---2024-09-28) [Compare Source](https://redirect.github.com/helmetjs/helmet/compare/v7.1.0...v7.2.0) ##### Changed - `Content-Security-Policy` middleware now warns if a directive should have quotes but does not, such as `self` instead of `'self'`. This will be an error in future versions. See [#&#8203;454](https://redirect.github.com/helmetjs/helmet/issues/454) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LUISDASARTIMANHAS/template-server-express-node-js). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC45Ny4wIiwidXBkYXRlZEluVmVyIjoiMzguOTcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
2 parents af640a6 + a5bd288 commit a7ddb01

File tree

2 files changed

+6
-4
lines changed

2 files changed

+6
-4
lines changed

package-lock.json

Lines changed: 5 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
"dotenv": "^16.4.5",
1515
"express": "^4.19.2",
1616
"express-ws": "^5.0.2",
17-
"helmet": "^7.1.0",
17+
"helmet": "^8.0.0",
1818
"jsonwebtoken": "^9.0.2",
1919
"mongoose": "^8.5.1",
2020
"multer": "^1.4.4",

0 commit comments

Comments
 (0)