Commit Graph

5296 Commits

Author SHA1 Message Date
Kamil Myśliwiec
236b633a76 style: address integration tests lint errors 2024-11-26 09:39:20 +01:00
pabloaguilarm
4d3d39158a build(socket.io): update engine.io dependencies for cookie vulnerability 2024-10-16 19:59:59 +02:00
Kamil Mysliwiec
508d2f3428 Merge pull request #14060 from ezintz/fix-express-vulnerabilities
build(express): upgrade to express 4.2.1
2024-10-16 12:36:34 +02:00
Patricia Ahern
980eb5bb0a build(fastify): upgrade light-my-request to 6.1.0 2024-10-10 19:14:57 -05:00
Eduard Zintz
160c3b37d8 build(express): upgrade to express 4.2.1
fixes vulnerabilites with cookie and path-to-regexp, see
https://github.com/jshttp/cookie/security/advisories/GHSA-pxg6-pf52-xh8x
https://github.com/advisories/GHSA-9wv6-86v2-598j
2024-10-10 09:31:46 +02:00
Kamil Mysliwiec
9d9b03366f Merge pull request #13992 from nestjs/dependabot/npm_and_yarn/concurrently-9.0.1
chore(deps-dev): bump concurrently from 8.2.2 to 9.0.1
2024-09-18 09:44:53 +02:00
Kamil Mysliwiec
51ba90249d Merge pull request #13995 from nestjs/dependabot/npm_and_yarn/nodemon-3.1.5
chore(deps-dev): bump nodemon from 3.1.4 to 3.1.5
2024-09-18 09:43:29 +02:00
Kamil Mysliwiec
545061c0b2 Merge pull request #13996 from nestjs/dependabot/npm_and_yarn/sinon-19.0.2
chore(deps-dev): bump sinon from 18.0.0 to 19.0.2
2024-09-18 09:43:13 +02:00
dependabot[bot]
3149bbca59 chore(deps-dev): bump @types/mocha from 10.0.7 to 10.0.8
Bumps [@types/mocha](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/mocha) from 10.0.7 to 10.0.8.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/mocha)

---
updated-dependencies:
- dependency-name: "@types/mocha"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-18 01:00:54 +00:00
dependabot[bot]
a77a55291d chore(deps-dev): bump sinon from 18.0.0 to 19.0.2
Bumps [sinon](https://github.com/sinonjs/sinon) from 18.0.0 to 19.0.2.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](https://github.com/sinonjs/sinon/compare/v18.0.0...v19.0.2)

---
updated-dependencies:
- dependency-name: sinon
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-18 01:00:04 +00:00
dependabot[bot]
d68a7c1e55 chore(deps-dev): bump nodemon from 3.1.4 to 3.1.5
Bumps [nodemon](https://github.com/remy/nodemon) from 3.1.4 to 3.1.5.
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](https://github.com/remy/nodemon/compare/v3.1.4...v3.1.5)

---
updated-dependencies:
- dependency-name: nodemon
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-18 00:59:33 +00:00
dependabot[bot]
b5e34f4cfc chore(deps-dev): bump concurrently from 8.2.2 to 9.0.1
Bumps [concurrently](https://github.com/open-cli-tools/concurrently) from 8.2.2 to 9.0.1.
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](https://github.com/open-cli-tools/concurrently/compare/v8.2.2...v9.0.1)

---
updated-dependencies:
- dependency-name: concurrently
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-18 00:57:49 +00:00
Kamil Mysliwiec
2009e9b6af Revert "chore(deps-dev): bump @typescript-eslint/eslint-plugin from 7.18.0 to 8.6.0" 2024-09-17 09:35:13 +02:00
Kamil Mysliwiec
00ae6c523a Merge pull request #13976 from nestjs/dependabot/npm_and_yarn/typescript-5.6.2
chore(deps-dev): bump typescript from 5.5.4 to 5.6.2
2024-09-17 09:19:55 +02:00
Kamil Mysliwiec
b287aff5ba Merge pull request #13977 from nestjs/dependabot/npm_and_yarn/express-4.21.0
chore(deps): bump express from 4.19.2 to 4.21.0
2024-09-17 09:19:49 +02:00
dependabot[bot]
508da6ee29 chore(deps-dev): bump eslint from 8.57.0 to 8.57.1
Bumps [eslint](https://github.com/eslint/eslint) from 8.57.0 to 8.57.1.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.57.0...v8.57.1)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-17 07:16:31 +00:00
dependabot[bot]
91c6f3dc03 chore(deps-dev): bump typescript from 5.5.4 to 5.6.2
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.5.4 to 5.6.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.5.4...v5.6.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-17 07:16:15 +00:00
dependabot[bot]
fa9c0178cd chore(deps): bump express from 4.19.2 to 4.21.0
Bumps [express](https://github.com/expressjs/express) from 4.19.2 to 4.21.0.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.21.0)

---
updated-dependencies:
- dependency-name: express
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-17 07:15:35 +00:00
Kamil Mysliwiec
e9235c02f9 Merge pull request #13979 from nestjs/dependabot/npm_and_yarn/mysql2-3.11.3
chore(deps-dev): bump mysql2 from 3.11.0 to 3.11.3
2024-09-17 09:14:34 +02:00
Kamil Mysliwiec
8aecc3705e Merge pull request #13980 from nestjs/dependabot/npm_and_yarn/body-parser-1.20.3
chore(deps): bump body-parser from 1.20.2 to 1.20.3
2024-09-17 09:14:27 +02:00
Kamil Mysliwiec
5ec4606bf8 Merge pull request #13981 from nestjs/dependabot/npm_and_yarn/commitlint/config-angular-19.5.0
chore(deps-dev): bump @commitlint/config-angular from 19.4.1 to 19.5.0
2024-09-17 09:14:15 +02:00
dependabot[bot]
1010513535 chore(deps-dev): bump @typescript-eslint/eslint-plugin
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 7.18.0 to 8.6.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.6.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-17 00:33:02 +00:00
dependabot[bot]
923246a362 chore(deps-dev): bump @commitlint/config-angular from 19.4.1 to 19.5.0
Bumps [@commitlint/config-angular](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-angular) from 19.4.1 to 19.5.0.
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-angular/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v19.5.0/@commitlint/config-angular)

---
updated-dependencies:
- dependency-name: "@commitlint/config-angular"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-17 00:29:24 +00:00
dependabot[bot]
94069796f7 chore(deps): bump body-parser from 1.20.2 to 1.20.3
Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.2 to 1.20.3.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/body-parser/compare/1.20.2...1.20.3)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-17 00:28:57 +00:00
dependabot[bot]
82c262e938 chore(deps-dev): bump mysql2 from 3.11.0 to 3.11.3
Bumps [mysql2](https://github.com/sidorares/node-mysql2) from 3.11.0 to 3.11.3.
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](https://github.com/sidorares/node-mysql2/compare/v3.11.0...v3.11.3)

---
updated-dependencies:
- dependency-name: mysql2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-17 00:28:17 +00:00
Kamil Mysliwiec
cfc2217a48 Merge pull request #13911 from nestjs/dependabot/npm_and_yarn/tslib-2.7.0
chore(deps): bump tslib from 2.6.3 to 2.7.0
2024-09-16 11:48:26 +02:00
dependabot[bot]
fff4b96de8 chore(deps): bump tslib from 2.6.3 to 2.7.0
Bumps [tslib](https://github.com/Microsoft/tslib) from 2.6.3 to 2.7.0.
- [Release notes](https://github.com/Microsoft/tslib/releases)
- [Commits](https://github.com/Microsoft/tslib/compare/v2.6.3...v2.7.0)

---
updated-dependencies:
- dependency-name: tslib
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-16 08:19:08 +00:00
dependabot[bot]
f593343a45 chore(deps): bump light-my-request from 5.13.0 to 6.0.0
Bumps [light-my-request](https://github.com/fastify/light-my-request) from 5.13.0 to 6.0.0.
- [Release notes](https://github.com/fastify/light-my-request/releases)
- [Commits](https://github.com/fastify/light-my-request/compare/v5.13.0...v6.0.0)

---
updated-dependencies:
- dependency-name: light-my-request
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-16 08:17:56 +00:00
Kamil Mysliwiec
71c1a73120 Merge pull request #13936 from nestjs/dependabot/npm_and_yarn/lint-staged-15.2.10
chore(deps-dev): bump lint-staged from 15.2.9 to 15.2.10
2024-09-16 10:17:08 +02:00
dependabot[bot]
291cf96d41 chore(deps-dev): bump lint-staged from 15.2.9 to 15.2.10
Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 15.2.9 to 15.2.10.
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/master/CHANGELOG.md)
- [Commits](https://github.com/lint-staged/lint-staged/compare/v15.2.9...v15.2.10)

---
updated-dependencies:
- dependency-name: lint-staged
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-16 08:16:45 +00:00
Kamil Mysliwiec
484a956e89 Merge pull request #13947 from nestjs/dependabot/npm_and_yarn/webpack-5.94.0
chore(deps-dev): bump webpack from 5.91.0 to 5.94.0
2024-09-16 10:16:43 +02:00
Kamil Mysliwiec
b0d0ab8ac3 Merge pull request #13967 from nestjs/dependabot/npm_and_yarn/dset-3.1.4
chore(deps): bump dset from 3.1.3 to 3.1.4
2024-09-16 10:15:51 +02:00
Kamil Mysliwiec
daaba39520 Merge pull request #13968 from nestjs/dependabot/npm_and_yarn/commitlint/cli-19.5.0
chore(deps-dev): bump @commitlint/cli from 19.4.0 to 19.5.0
2024-09-16 10:15:43 +02:00
Kamil Mysliwiec
679812a1c7 Merge pull request #13969 from nestjs/dependabot/npm_and_yarn/mongoose-8.6.2
chore(deps-dev): bump mongoose from 8.6.0 to 8.6.2
2024-09-16 10:15:39 +02:00
dependabot[bot]
1b3af389ea chore(deps-dev): bump @types/node from 22.5.1 to 22.5.5
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.5.1 to 22.5.5.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-16 00:41:33 +00:00
dependabot[bot]
874e33d2d1 chore(deps-dev): bump mongoose from 8.6.0 to 8.6.2
Bumps [mongoose](https://github.com/Automattic/mongoose) from 8.6.0 to 8.6.2.
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Automattic/mongoose/compare/8.6.0...8.6.2)

---
updated-dependencies:
- dependency-name: mongoose
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-12 00:58:17 +00:00
dependabot[bot]
4746fd053d chore(deps-dev): bump @commitlint/cli from 19.4.0 to 19.5.0
Bumps [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) from 19.4.0 to 19.5.0.
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v19.5.0/@commitlint/cli)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-12 00:53:38 +00:00
dependabot[bot]
a80f8a4ee7 chore(deps): bump dset from 3.1.3 to 3.1.4
Bumps [dset](https://github.com/lukeed/dset) from 3.1.3 to 3.1.4.
- [Release notes](https://github.com/lukeed/dset/releases)
- [Commits](https://github.com/lukeed/dset/compare/v3.1.3...v3.1.4)

---
updated-dependencies:
- dependency-name: dset
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-11 23:48:53 +00:00
dependabot[bot]
6864375fd5 chore(deps-dev): bump webpack from 5.91.0 to 5.94.0
Bumps [webpack](https://github.com/webpack/webpack) from 5.91.0 to 5.94.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v5.91.0...v5.94.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-05 11:19:00 +00:00
Kamil Mysliwiec
742536834b Merge pull request #13926 from nestjs/dependabot/npm_and_yarn/mongoose-8.6.0
chore(deps-dev): bump mongoose from 8.5.3 to 8.6.0
2024-08-30 09:02:44 +02:00
Kamil Mysliwiec
656f7ee23c Merge pull request #13928 from nestjs/dependabot/npm_and_yarn/types/node-22.5.1
chore(deps-dev): bump @types/node from 22.5.0 to 22.5.1
2024-08-30 09:02:29 +02:00
dependabot[bot]
80baf9d16a chore(deps-dev): bump @commitlint/config-angular from 19.3.0 to 19.4.1
Bumps [@commitlint/config-angular](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-angular) from 19.3.0 to 19.4.1.
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-angular/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v19.4.1/@commitlint/config-angular)

---
updated-dependencies:
- dependency-name: "@commitlint/config-angular"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-29 00:50:37 +00:00
dependabot[bot]
a8ff9a820b chore(deps-dev): bump @types/node from 22.5.0 to 22.5.1
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.5.0 to 22.5.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-29 00:48:44 +00:00
dependabot[bot]
e4b2624c55 chore(deps-dev): bump mongoose from 8.5.3 to 8.6.0
Bumps [mongoose](https://github.com/Automattic/mongoose) from 8.5.3 to 8.6.0.
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Automattic/mongoose/compare/8.5.3...8.6.0)

---
updated-dependencies:
- dependency-name: mongoose
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-29 00:47:19 +00:00
Kamil Mysliwiec
dda5940654 Revert "chore(deps-dev): bump @typescript-eslint/eslint-plugin from 7.18.0 to 8.2.0" 2024-08-27 09:00:49 +02:00
dependabot[bot]
a822e1567a chore(deps-dev): bump @typescript-eslint/eslint-plugin
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 7.18.0 to 8.2.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.2.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-22 06:42:50 +00:00
Kamil Mysliwiec
d51d2c26a6 Merge pull request #13896 from nestjs/dependabot/npm_and_yarn/husky-9.1.5
chore(deps-dev): bump husky from 9.1.4 to 9.1.5
2024-08-22 08:41:51 +02:00
Kamil Mysliwiec
250b3209d6 Merge pull request #13897 from nestjs/dependabot/npm_and_yarn/core-js-3.38.1
chore(deps-dev): bump core-js from 3.38.0 to 3.38.1
2024-08-22 08:41:00 +02:00
Kamil Mysliwiec
1e729166f4 Merge pull request #13901 from nestjs/dependabot/npm_and_yarn/types/node-22.5.0
chore(deps-dev): bump @types/node from 22.3.0 to 22.5.0
2024-08-22 08:40:53 +02:00
dependabot[bot]
13151085f0 chore(deps-dev): bump artillery from 2.0.19 to 2.0.20
Bumps [artillery](https://github.com/artilleryio/artillery) from 2.0.19 to 2.0.20.
- [Release notes](https://github.com/artilleryio/artillery/releases)
- [Commits](https://github.com/artilleryio/artillery/commits)

---
updated-dependencies:
- dependency-name: artillery
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-22 00:10:44 +00:00