Commit Graph

71 Commits

Author SHA1 Message Date
dependabot[bot]
d5081a1520 build(deps): bump type-is from 1.6.18 to 2.0.1 (#1866)
Bumps [type-is](https://github.com/jshttp/type-is) from 1.6.18 to 2.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jshttp/type-is/releases">type-is's
releases</a>.</em></p>
<blockquote>
<h2>2.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Refactor normalizeType function to simplify return statement by <a
href="https://github.com/Ayoub-Mabrouk"><code>@​Ayoub-Mabrouk</code></a>
in <a
href="https://redirect.github.com/jshttp/type-is/pull/61">jshttp/type-is#61</a></li>
<li>Refactor tryNormalizeType function for cleaner code by <a
href="https://github.com/Ayoub-Mabrouk"><code>@​Ayoub-Mabrouk</code></a>
in <a
href="https://redirect.github.com/jshttp/type-is/pull/59">jshttp/type-is#59</a></li>
<li>Replace deprecated String.prototype.substr() by <a
href="https://github.com/CommanderRoot"><code>@​CommanderRoot</code></a>
in <a
href="https://redirect.github.com/jshttp/type-is/pull/50">jshttp/type-is#50</a></li>
<li>Optimize argument handling in typeofrequest function by <a
href="https://github.com/Ayoub-Mabrouk"><code>@​Ayoub-Mabrouk</code></a>
in <a
href="https://redirect.github.com/jshttp/type-is/pull/60">jshttp/type-is#60</a></li>
<li>Release 2.0.1 by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/jshttp/type-is/pull/64">jshttp/type-is#64</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/Ayoub-Mabrouk"><code>@​Ayoub-Mabrouk</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/type-is/pull/61">jshttp/type-is#61</a></li>
<li><a
href="https://github.com/CommanderRoot"><code>@​CommanderRoot</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/type-is/pull/50">jshttp/type-is#50</a></li>
<li><a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/type-is/pull/64">jshttp/type-is#64</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/jshttp/type-is/compare/2.0.0...2.0.1">https://github.com/jshttp/type-is/compare/2.0.0...2.0.1</a></p>
<h2>2.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>README changes by <a
href="https://github.com/Yash-Singh1"><code>@​Yash-Singh1</code></a> in
<a
href="https://redirect.github.com/jshttp/type-is/pull/48">jshttp/type-is#48</a></li>
<li>add OSSF scorecard pipeline by <a
href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a
href="https://redirect.github.com/jshttp/type-is/pull/55">jshttp/type-is#55</a></li>
<li>Fix ci pipeline by <a
href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a
href="https://redirect.github.com/jshttp/type-is/pull/54">jshttp/type-is#54</a></li>
<li>2.x Staging PR by <a
href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a
href="https://redirect.github.com/jshttp/type-is/pull/57">jshttp/type-is#57</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/Yash-Singh1"><code>@​Yash-Singh1</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/type-is/pull/48">jshttp/type-is#48</a></li>
<li><a href="https://github.com/carpasse"><code>@​carpasse</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/type-is/pull/55">jshttp/type-is#55</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/jshttp/type-is/compare/1.6.18...2.0.0">https://github.com/jshttp/type-is/compare/1.6.18...2.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jshttp/type-is/blob/master/HISTORY.md">type-is's
changelog</a>.</em></p>
<blockquote>
<h1>2.0.1 / 2025-03-27</h1>
<h1>2.0.0 / 2024-08-31</h1>
<ul>
<li>Drop node &lt;18</li>
<li>Use <code>content-type@^1.0.5</code> and
<code>media-typer@^1.0.0</code> for type validation
<ul>
<li>No behavior changes, upgrades <code>media-typer</code></li>
</ul>
</li>
<li>deps: mime-types@^3.0.0
<ul>
<li>Add <code>application/toml</code> with extension
<code>.toml</code></li>
<li>Add <code>application/ubjson</code> with extension
<code>.ubj</code></li>
<li>Add <code>application/x-keepass2</code> with extension
<code>.kdbx</code></li>
<li>Add deprecated iWorks mime types and extensions</li>
<li>Add extension <code>.amr</code> to <code>audio/amr</code></li>
<li>Add extension <code>.cjs</code> to
<code>application/node</code></li>
<li>Add extension <code>.dbf</code> to
<code>application/vnd.dbf</code></li>
<li>Add extension <code>.m4s</code> to
<code>video/iso.segment</code></li>
<li>Add extension <code>.mvt</code> to
<code>application/vnd.mapbox-vector-tile</code></li>
<li>Add extension <code>.mxmf</code> to
<code>audio/mobile-xmf</code></li>
<li>Add extension <code>.opus</code> to <code>audio/ogg</code></li>
<li>Add extension <code>.rar</code> to
<code>application/vnd.rar</code></li>
<li>Add extension <code>.td</code> to
<code>application/urc-targetdesc+xml</code></li>
<li>Add extension <code>.trig</code> to
<code>application/trig</code></li>
<li>Add extensions from IANA for <code>application/*+xml</code>
types</li>
<li>Add <code>image/avif</code> with extension <code>.avif</code></li>
<li>Add <code>image/ktx2</code> with extension <code>.ktx2</code></li>
<li>Add <code>image/vnd.ms-dds</code> with extension
<code>.dds</code></li>
<li>Add new upstream MIME types</li>
<li>Fix extension of <code>application/vnd.apple.keynote</code> to be
<code>.key</code></li>
<li>Remove ambigious extensions from IANA for
<code>application/*+xml</code> types</li>
<li>Update primary extension to <code>.es</code> for
<code>application/ecmascript</code></li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4a16e0850e"><code>4a16e08</code></a>
2.0.1 (<a
href="https://redirect.github.com/jshttp/type-is/issues/64">#64</a>)</li>
<li><a
href="e45c6afedc"><code>e45c6af</code></a>
chore: refactor <code>typeofrequest</code> function (<a
href="https://redirect.github.com/jshttp/type-is/issues/60">#60</a>)</li>
<li><a
href="b4e746dcbc"><code>b4e746d</code></a>
chore: refactor to replace deprecated String method (<a
href="https://redirect.github.com/jshttp/type-is/issues/50">#50</a>)</li>
<li><a
href="a00e748eeb"><code>a00e748</code></a>
chore: refactor <code>tryNormalizeType</code> function (<a
href="https://redirect.github.com/jshttp/type-is/issues/59">#59</a>)</li>
<li><a
href="5ecc1414eb"><code>5ecc141</code></a>
chore: refactor <code>normalizeType</code> function (<a
href="https://redirect.github.com/jshttp/type-is/issues/61">#61</a>)</li>
<li><a
href="0d79e2d0c5"><code>0d79e2d</code></a>
2.0.0</li>
<li><a
href="d8a2552c02"><code>d8a2552</code></a>
fix(deps): accept minors of media-typer</li>
<li><a
href="e5dc464bc8"><code>e5dc464</code></a>
fix(deps): accept minors of media-typer</li>
<li><a
href="ed1cc660b3"><code>ed1cc66</code></a>
Use content-type and media-typer for type validation</li>
<li><a
href="3700a79ebc"><code>3700a79</code></a>
fix(deps): replace media-typer with content-type</li>
<li>Additional commits viewable in <a
href="https://github.com/jshttp/type-is/compare/1.6.18...2.0.1">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~ulisesgascon">ulisesgascon</a>, a new
releaser for type-is since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=type-is&package-manager=npm_and_yarn&previous-version=1.6.18&new-version=2.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-02 21:25:54 -07:00
dependabot[bot]
579fd15bf8 build(deps-dev): bump supertest from 7.0.0 to 7.1.0 (#1863)
Bumps [supertest](https://github.com/ladjs/supertest) from 7.0.0 to
7.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ladjs/supertest/releases">supertest's
releases</a>.</em></p>
<blockquote>
<h2>v7.1.0</h2>
<ul>
<li>Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/852">#852</a>
from alxndrsn/econnreset de045d4</li>
<li>Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/845">#845</a>
from ikonst/master be0d5c7</li>
<li>Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/854">#854</a>
from alxndrsn/commitlint 35ac86f</li>
<li>fix(dev): commitlint dev dependency &amp; config  e67fcb2</li>
<li>fix: avoid server re-use race conditions  96c06e3</li>
<li>test: fix test failure due to localhost being also ipv6 92079a0</li>
</ul>
<p><a
href="https://github.com/ladjs/supertest/compare/v7.0.0...v7.1.0">https://github.com/ladjs/supertest/compare/v7.0.0...v7.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="359bc52e3a"><code>359bc52</code></a>
7.1.0</li>
<li><a
href="de045d4d41"><code>de045d4</code></a>
Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/852">#852</a>
from alxndrsn/econnreset</li>
<li><a
href="be0d5c73d9"><code>be0d5c7</code></a>
Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/845">#845</a>
from ikonst/master</li>
<li><a
href="35ac86fc23"><code>35ac86f</code></a>
Merge pull request <a
href="https://redirect.github.com/ladjs/supertest/issues/854">#854</a>
from alxndrsn/commitlint</li>
<li><a
href="e67fcb2791"><code>e67fcb2</code></a>
fix(dev): commitlint dev dependency &amp; config</li>
<li><a
href="96c06e3dcb"><code>96c06e3</code></a>
fix: avoid server re-use race conditions</li>
<li><a
href="92079a017c"><code>92079a0</code></a>
test: fix test failure due to localhost being also ipv6</li>
<li>See full diff in <a
href="https://github.com/ladjs/supertest/compare/v7.0.0...v7.1.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=supertest&package-manager=npm_and_yarn&previous-version=7.0.0&new-version=7.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-21 22:34:34 -07:00
jongleberry
eee6e805f9 3.0.0-alpha.4 2025-03-21 00:33:57 -07:00
jongleberry
af0547d5f6 don't coerce header value to string on set #1394 (#1859)
this is a rebase of https://github.com/koajs/koa/pull/1394. closes #1394
2025-03-17 21:43:21 -07:00
dependabot[bot]
ca6718c90b build(deps): bump debug from 4.3.6 to 4.4.0 (#1852)
Bumps [debug](https://github.com/debug-js/debug) from 4.3.6 to 4.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/debug-js/debug/releases">debug's
releases</a>.</em></p>
<blockquote>
<h2>4.4.0</h2>
<p>Fixes (hopefully) the inefficient regex warnings in
<code>.enable()</code>.</p>
<p>Minor version as this is invariably going to break certain users who
misuse the <code>.enable()</code> API and expected it to work with
regexes, which was never supported nor documented. That's on you, sorry
- that functionality won't be added back.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/debug-js/debug/compare/4.3.7...4.4.0">https://github.com/debug-js/debug/compare/4.3.7...4.4.0</a></p>
<h2>4.3.7</h2>
<h2>What's Changed</h2>
<ul>
<li>Upgrade ms to version 2.1.3 by <a
href="https://github.com/realityking"><code>@​realityking</code></a> in
<a
href="https://redirect.github.com/debug-js/debug/pull/819">debug-js/debug#819</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/debug-js/debug/compare/4.3.6...4.3.7">https://github.com/debug-js/debug/compare/4.3.6...4.3.7</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7e3814cc60"><code>7e3814c</code></a>
4.4.0</li>
<li><a
href="d2d6bf0bab"><code>d2d6bf0</code></a>
fix inefficient .enable() regex and .enabled() test</li>
<li><a
href="bc60914816"><code>bc60914</code></a>
4.3.7</li>
<li><a
href="c63e96e649"><code>c63e96e</code></a>
Upgrade ms to version 2.1.3 (<a
href="https://redirect.github.com/debug-js/debug/issues/819">#819</a>)</li>
<li><a
href="382864a45a"><code>382864a</code></a>
remove archaic badges from readme</li>
<li>See full diff in <a
href="https://github.com/debug-js/debug/compare/4.3.6...4.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=debug&package-manager=npm_and_yarn&previous-version=4.3.6&new-version=4.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-16 21:04:18 -07:00
jongleberry
71902b1f21 3.0.0-alpha.2 2024-11-03 21:08:13 -08:00
Imed Jaberi
4c34546413 deps: update http-errors to v2.0.0 (#1486)
- https://github.com/jshttp/http-errors/blob/master/HISTORY.md
2024-11-03 20:52:31 -08:00
Vlad Sirenko
ce6b3b6eee Use node test runner (#1845)
## Checklist
use `node --test` instead of `jest`
See: https://github.com/koajs/koa/issues/1837#issuecomment-2323002820

- [X] I have ensured my pull request is not behind the main or master
branch of the original repository.
- [X] I have rebased all commits where necessary so that reviewing this
pull request can be done without having to merge it first.
- [X] I have written a commit message that passes commitlint linting.
- [X] I have ensured that my code changes pass linting tests.
- [X] I have ensured that my code changes pass unit tests.
- [X] I have described my pull request and the reasons for code changes
along with context if necessary.
2024-10-27 22:04:24 -05:00
Michal Martinek
988ebec9b4 ⬆️ cookies@0.9.1 (#1846)
## Checklist

- [x] I have ensured my pull request is not behind the main or master
branch of the original repository.
- [x] I have rebased all commits where necessary so that reviewing this
pull request can be done without having to merge it first.
- [x] I have written a commit message that passes commitlint linting.
- [x] I have ensured that my code changes pass linting tests.
- [x] I have ensured that my code changes pass unit tests.
- [x] I have described my pull request and the reasons for code changes
along with context if necessary.

## Maintainer Notes

Closes https://github.com/koajs/koa/issues/1561
2024-10-22 13:39:59 -05:00
jongleberry
0d9f062aa8 ⬆️ statuses@2.0.1
commit 84c89f25b880cf648044e2d0eeb14f9a43e1f2c9
Author: jongleberry <jonathanrichardong@gmail.com>
Date:   Sat Aug 31 11:02:37 2024 -0700

    package-lock++

commit 2c7715c797473d463ed73542d68e634f172dc3c3
Merge: 5af69c8 b95dfcb
Author: jongleberry <jonathanrichardong@gmail.com>
Date:   Sat Aug 31 10:56:58 2024 -0700

    Merge branch 'master' into update-statuses-to-v2.0.0

commit 5af69c87926db6f491af2b8882c07d7d141fe422
Author: imed jaberi <imed.jaberi@hotmail.fr>
Date:   Sat Apr 2 14:47:43 2022 +0100

    fix tests

commit 9af4bb37db0be416cd9e211ef4fc52f57de0cb69
Author: imed jaberi <imed.jaberi@hotmail.fr>
Date:   Sat Apr 2 14:43:51 2022 +0100

    lint code

commit 140be25c88d7641ce7cfc1463889d437e3cb939d
Author: imed jaberi <imed.jaberi@hotmail.fr>
Date:   Sat Apr 2 14:42:10 2022 +0100

    clean locks ---force

commit bc553ec713b16c1fe4d6a400637ab30590c176d2
Author: imed jaberi <imed.jaberi@hotmail.fr>
Date:   Sat Apr 2 14:35:12 2022 +0100

    clean locks

commit 3d7e22aef781820f7d611ad64f7622a7258e2c6d
Merge: ff65ef6 f3c67d9
Author: imed jaberi <imed.jaberi@hotmail.fr>
Date:   Sat Apr 2 14:31:30 2022 +0100

    resolve conflicts

commit ff65ef6c6b19c7f307726bae22eb8154894a14dc
Author: 3imed-jaberi <imed_jebari@hotmail.fr>
Date:   Tue Jul 14 10:52:50 2020 +0200

     deps: use the new statuses api --ctx --response --test

commit f565f3b732a6550a74506c480319e6efe4b51da7
Author: 3imed-jaberi <imed_jebari@hotmail.fr>
Date:   Tue Jul 14 10:52:31 2020 +0200

     deps: use the new statuses api --ctx --response --src

commit e8f7609ca405904fabc6669fa31be0df1c9ada55
Author: 3imed-jaberi <imed_jebari@hotmail.fr>
Date:   Tue Jul 14 10:50:49 2020 +0200

     deps: update statuses >> v2.0.0
2024-08-31 11:05:25 -07:00
jongleberry
51d0e2deca ⬆️ jest@29 (#1839) 2024-08-30 21:52:45 -07:00
jongleberry
ba9a222382 ⬆️ supertest@7 (#1841) 2024-08-30 21:52:36 -07:00
dependabot[bot]
2281cadfd9 build(deps-dev): bump braces from 3.0.2 to 3.0.3 (#1822)
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to
3.0.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="74b2db2938"><code>74b2db2</code></a>
3.0.3</li>
<li><a
href="88f1429a0f"><code>88f1429</code></a>
update eslint. lint, fix unit tests.</li>
<li><a
href="415d660c30"><code>415d660</code></a>
Snyk js braces 6838727 (<a
href="https://redirect.github.com/micromatch/braces/issues/40">#40</a>)</li>
<li><a
href="190510f79d"><code>190510f</code></a>
fix tests, skip 1 test in test/braces.expand</li>
<li><a
href="716eb9f12d"><code>716eb9f</code></a>
readme bump</li>
<li><a
href="a5851e57f4"><code>a5851e5</code></a>
Merge pull request <a
href="https://redirect.github.com/micromatch/braces/issues/37">#37</a>
from coderaiser/fix/vulnerability</li>
<li><a
href="2092bd1fb1"><code>2092bd1</code></a>
feature: braces: add maxSymbols (<a
href="https://github.com/micromatch/braces/issues/">https://github.com/micromatch/braces/issues/</a>...</li>
<li><a
href="9f5b4cf473"><code>9f5b4cf</code></a>
fix: vulnerability (<a
href="https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727">https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727</a>)</li>
<li><a
href="98414f9f1f"><code>98414f9</code></a>
remove funding file</li>
<li><a
href="665ab5d561"><code>665ab5d</code></a>
update keepEscaping doc (<a
href="https://redirect.github.com/micromatch/braces/issues/27">#27</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/micromatch/braces/compare/3.0.2...3.0.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=braces&package-manager=npm_and_yarn&previous-version=3.0.2&new-version=3.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/koajs/koa/network/alerts).

</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-18 13:27:08 -07:00
dependabot[bot]
5bf8002d7b build(deps): bump debug from 4.3.4 to 4.3.6 (#1836)
Bumps [debug](https://github.com/debug-js/debug) from 4.3.4 to 4.3.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/debug-js/debug/releases">debug's
releases</a>.</em></p>
<blockquote>
<h2>4.3.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Avoid using deprecated RegExp.$1 by <a
href="https://github.com/bluwy"><code>@​bluwy</code></a> in <a
href="https://redirect.github.com/debug-js/debug/pull/969">debug-js/debug#969</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/bluwy"><code>@​bluwy</code></a> made
their first contribution in <a
href="https://redirect.github.com/debug-js/debug/pull/969">debug-js/debug#969</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/debug-js/debug/compare/4.3.5...4.3.6">https://github.com/debug-js/debug/compare/4.3.5...4.3.6</a></p>
<h2>4.3.5</h2>
<h1>Patch</h1>
<ul>
<li>cac39b1c5b018b0fe93a53a05f084eee543d17f5 Fix/debug depth (<a
href="https://redirect.github.com/debug-js/debug/issues/926">#926</a>)</li>
</ul>
<p>Thank you <a
href="https://github.com/calvintwr"><code>@​calvintwr</code></a> for the
fix.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33b464a79"><code>c33b464</code></a>
4.3.6</li>
<li><a
href="7956a45f68"><code>7956a45</code></a>
Avoid using deprecated RegExp.$1</li>
<li><a
href="5464bdddbc"><code>5464bdd</code></a>
4.3.5</li>
<li><a
href="f244ada2e9"><code>f244ada</code></a>
update authorship contact info</li>
<li><a
href="cac39b1c5b"><code>cac39b1</code></a>
Fix/debug depth (<a
href="https://redirect.github.com/debug-js/debug/issues/926">#926</a>)</li>
<li><a
href="f66cb2d9f7"><code>f66cb2d</code></a>
remove .github folder (and the outdated issue templates)</li>
<li><a
href="d1616622e4"><code>d161662</code></a>
Update ISSUE_TEMPLATE.md</li>
<li><a
href="12c1ad04db"><code>12c1ad0</code></a>
Update ISSUE_TEMPLATE.md</li>
<li>See full diff in <a
href="https://github.com/debug-js/debug/compare/4.3.4...4.3.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=debug&package-manager=npm_and_yarn&previous-version=4.3.4&new-version=4.3.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-18 13:16:44 -07:00
Matthieu Tabarin
757e4ebc51 deps: make "only" package inside (#1824)
closes https://github.com/koajs/koa/issues/1802
2024-06-20 12:26:12 +08:00
Evgenii Troinov
5573b966a6 feat: Drop node.js 12.x, 14.x, 17.x support (#1797) 2024-04-22 14:25:10 +08:00
dependabot[bot]
6bd2cb18dd build(deps): bump encodeurl from 1.0.2 to 2.0.0 (#1807)
Bumps [encodeurl](https://github.com/pillarjs/encodeurl) from 1.0.2 to 2.0.0.
- [Release notes](https://github.com/pillarjs/encodeurl/releases)
- [Commits](https://github.com/pillarjs/encodeurl/compare/v1.0.2...v2.0.0)

---
updated-dependencies:
- dependency-name: encodeurl
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-29 18:13:23 -07:00
Evgenii Troinov
ac61b8ca12 chore: Replacing eslint with standard cli (#1796) 2024-01-17 10:01:07 +08:00
dependabot[bot]
6134b3c8bf build(deps-dev): bump supertest from 6.3.2 to 6.3.3 (#1727)
Bumps [supertest](https://github.com/visionmedia/supertest) from 6.3.2 to 6.3.3.
- [Release notes](https://github.com/visionmedia/supertest/releases)
- [Commits](https://github.com/visionmedia/supertest/compare/v6.3.2...v6.3.3)

---
updated-dependencies:
- dependency-name: supertest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-09 13:49:41 +08:00
fengmk2
a0148c1f01 Revert "build(deps-dev): bump jest from 28.1.3 to 29.3.1 (#1709)" (#1719)
This reverts commit d2b09439b7.
2022-12-06 11:31:39 +08:00
dependabot[bot]
d2b09439b7 build(deps-dev): bump jest from 28.1.3 to 29.3.1 (#1709)
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) from 28.1.3 to 29.3.1.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.3.1/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-06 10:39:09 +08:00
dependabot[bot]
702eb13e57 build(deps-dev): bump supertest from 6.3.1 to 6.3.2 (#1716) 2022-12-05 16:09:50 +00:00
dependabot[bot]
55f4c33589 build(deps-dev): bump supertest from 6.3.0 to 6.3.1 (#1703) 2022-10-25 16:21:44 +00:00
dependabot[bot]
28912d36dd build(deps-dev): bump supertest from 6.2.4 to 6.3.0 (#1695) 2022-10-04 16:16:08 +00:00
dependabot[bot]
eea921a603 build(deps-dev): bump jest from 28.1.2 to 28.1.3 (#1679) 2022-07-13 16:11:33 +00:00
dependabot[bot]
29f20de47d build(deps-dev): bump supertest from 3.4.2 to 6.2.4
Bumps [supertest](https://github.com/visionmedia/supertest) from 3.4.2 to 6.2.4.
- [Release notes](https://github.com/visionmedia/supertest/releases)
- [Commits](https://github.com/visionmedia/supertest/compare/v3.4.2...v6.2.4)

---
updated-dependencies:
- dependency-name: supertest
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-07-02 09:03:17 +02:00
dependabot[bot]
93b34d70a3 build(deps-dev): bump jest from 27.5.1 to 28.1.2
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) from 27.5.1 to 28.1.2.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v28.1.2/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-07-02 08:59:28 +02:00
dependabot[bot]
00ce71fddb build(deps-dev): bump eslint-plugin-import from 2.25.4 to 2.26.0 (#1660) 2022-04-06 16:09:57 +00:00
dependabot[bot]
f3c67d9973 build(deps): bump minimist from 1.2.5 to 1.2.6 (#1655) 2022-03-30 14:07:36 +00:00
dependabot[bot]
cc4cc1fe57 build(deps): bump destroy from 1.1.1 to 1.2.0 (#1652) 2022-03-21 16:10:20 +00:00
dependabot[bot]
d52e4ead28 build(deps): bump debug from 4.3.3 to 4.3.4 (#1651) 2022-03-17 16:09:54 +00:00
dependabot[bot]
d7e0e27b28 build(deps): bump destroy from 1.1.0 to 1.1.1 (#1649) 2022-03-01 16:12:01 +00:00
dependabot[bot]
e00a77d539 build(deps): bump on-finished from 2.4.0 to 2.4.1 (#1648) 2022-02-23 16:09:24 +00:00
dependabot[bot]
7173023e71 build(deps): bump on-finished from 2.3.0 to 2.4.0 (#1647) 2022-02-22 16:09:56 +00:00
dependabot[bot]
aa816ca523 build(deps-dev): bump jest from 27.5.0 to 27.5.1 (#1644) 2022-02-08 16:08:52 +00:00
dependabot[bot]
ce18cd1db5 build(deps-dev): bump jest from 27.4.7 to 27.5.0 (#1643) 2022-02-07 16:08:52 +00:00
dependabot[bot]
6fd149abad build(deps): bump accepts from 1.3.7 to 1.3.8 (#1642) 2022-02-03 16:08:51 +00:00
dependabot[bot]
fc4d9eafbd build(deps): bump destroy from 1.0.4 to 1.1.0 (#1641) 2022-01-26 16:08:39 +00:00
dependabot[bot]
8c1dd48120 build(deps-dev): bump jest from 27.4.5 to 27.4.7 (#1629) 2022-01-05 16:09:52 +00:00
dependabot[bot]
3609065e6a build(deps-dev): bump eslint-plugin-import from 2.25.3 to 2.25.4 (#1628) 2022-01-03 16:09:47 +00:00
dependabot[bot]
910585d12b build(deps-dev): bump jest from 27.4.4 to 27.4.5 (#1623) 2021-12-14 16:09:23 +00:00
dependabot[bot]
27ebeab8be build(deps): bump content-disposition from 0.5.3 to 0.5.4 (#1622) 2021-12-13 16:09:08 +00:00
dependabot[bot]
6a7bdb4dc8 build(deps-dev): bump jest from 27.4.3 to 27.4.4 (#1621) 2021-12-10 16:09:16 +00:00
dependabot[bot]
07c17dda2c build(deps-dev): bump jest from 27.4.2 to 27.4.3 (#1618) 2021-12-01 16:09:26 +00:00
dependabot[bot]
0ed925d75c build(deps-dev): bump eslint-plugin-promise from 5.1.0 to 5.2.0 (#1619) 2021-12-01 16:09:24 +00:00
dependabot[bot]
771d59a856 build(deps-dev): bump jest from 27.4.0 to 27.4.2 (#1617) 2021-11-30 16:09:06 +00:00
dependabot[bot]
9062e3d895 build(deps-dev): bump jest from 27.3.1 to 27.4.0 (#1616) 2021-11-29 16:09:36 +00:00
dependabot[bot]
fe92ea2338 build(deps): bump debug from 4.3.2 to 4.3.3 (#1615) 2021-11-29 16:09:33 +00:00
dependabot[bot]
e8146ad657 build(deps): bump http-errors from 1.8.0 to 1.8.1 (#1610) 2021-11-15 16:09:06 +00:00
dependabot[bot]
4d7b81214c build(deps-dev): bump eslint-plugin-import from 2.25.2 to 2.25.3 (#1609) 2021-11-10 16:09:09 +00:00