From 6a62cbfacd5fd2f3eba4c484be7acafc7f20a3a1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 28 Mar 2024 03:58:19 +0000 Subject: [PATCH 1/2] Bump express from 4.18.1 to 4.19.2 Bumps [express](https://github.com/expressjs/express) from 4.18.1 to 4.19.2. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](https://github.com/expressjs/express/compare/4.18.1...4.19.2) --- updated-dependencies: - dependency-name: express dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 5a23365..8a96f63 100644 --- a/package.json +++ b/package.json @@ -29,7 +29,7 @@ "dependencies": { "async": "2.6.4", "body-parser": "1.20.0", - "express": "4.18.1", + "express": "4.19.2", "logops": "2.1.2", "mustache": "2.3.2", "node-cache": "5.1.2", From 86ff53cab1947ba1e68a3be28a84c690bff363e6 Mon Sep 17 00:00:00 2001 From: Alvaro Vega Date: Mon, 1 Apr 2024 09:01:59 +0200 Subject: [PATCH 2/2] Update CHANGES_NEXT_RELEASE --- CHANGES_NEXT_RELEASE | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGES_NEXT_RELEASE b/CHANGES_NEXT_RELEASE index 49d9d40..51c3409 100644 --- a/CHANGES_NEXT_RELEASE +++ b/CHANGES_NEXT_RELEASE @@ -1 +1,2 @@ -- Remove: RPM stuff \ No newline at end of file +- Upgrade express dep from 4.18.1 to 4.19.2 due to a vulnerability +- Remove: RPM stuff