dependabot[bot]
6cfb880908
build(deps): bump express from 5.1.0 to 5.2.0 in /backend ( #7175 )
...
Bumps [express](https://github.com/expressjs/express ) from 5.1.0 to
5.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/releases ">express's
releases</a>.</em></p>
<blockquote>
<h2>v5.2.0</h2>
<h2>Important: Security</h2>
<ul>
<li>Security fix for <a
href="https://www.cve.org/CVERecord?id=CVE-2024-51999 ">CVE-2024-51999</a>
(<a
href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6 ">GHSA-pj86-cfqh-vqx6</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6429 ">expressjs/express#6429</a></li>
<li>Refactor: simplify <code>acceptsLanguages</code> implementation
using spread operator by <a
href="https://github.com/Ayoub-Mabrouk "><code>@Ayoub-Mabrouk</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6137 ">expressjs/express#6137</a></li>
<li>increased code coverage of utils.js file by <a
href="https://github.com/ashish3011 "><code>@ashish3011</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6386 ">expressjs/express#6386</a></li>
<li>chore: remove duplicate word by <a
href="https://github.com/dufucun "><code>@dufucun</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6456 ">expressjs/express#6456</a></li>
<li>build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6498 ">expressjs/express#6498</a></li>
<li>build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6497 ">expressjs/express#6497</a></li>
<li>build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6496 ">expressjs/express#6496</a></li>
<li>ci: add node.js 24 to test matrix by <a
href="https://github.com/Phillip9587 "><code>@Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6504 ">expressjs/express#6504</a></li>
<li>ci: update codeql config by <a
href="https://github.com/Phillip9587 "><code>@Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6488 ">expressjs/express#6488</a></li>
<li>chore: wider range for query test skip by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6512 ">expressjs/express#6512</a></li>
<li>chore: fix typos in test by <a
href="https://github.com/noritaka1166 "><code>@noritaka1166</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6535 ">expressjs/express#6535</a></li>
<li>ci: disable credential persistence for checkout actions by <a
href="https://github.com/mertssmnoglu "><code>@mertssmnoglu</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6522 ">expressjs/express#6522</a></li>
<li>ci: allow manual triggering of workflow by <a
href="https://github.com/shivarm "><code>@shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6515 ">expressjs/express#6515</a></li>
<li>test: add coverage for app.listen() variants by <a
href="https://github.com/kgarg1 "><code>@kgarg1</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6476 ">expressjs/express#6476</a></li>
<li>docs: move documentation and charters to the discussions and .github
… by <a
href="https://github.com/bjohansebas "><code>@bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6427 ">expressjs/express#6427</a></li>
<li>build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6549 ">expressjs/express#6549</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6548 ">expressjs/express#6548</a></li>
<li>chore: enforce explicit <code>Buffer</code> import and add lint rule
by <a href="https://github.com/shivarm "><code>@shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6525 ">expressjs/express#6525</a></li>
<li>chore: use node protocol for querystring by <a
href="https://github.com/shivarm "><code>@shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6520 ">expressjs/express#6520</a></li>
<li>chore: fix typo by <a
href="https://github.com/mountdisk "><code>@mountdisk</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6609 ">expressjs/express#6609</a></li>
<li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6618 ">expressjs/express#6618</a></li>
<li>add deprecation warnings for redirect arguments undefined by <a
href="https://github.com/bjohansebas "><code>@bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6405 ">expressjs/express#6405</a></li>
<li>ci: run CI when the markdown changes by <a
href="https://github.com/bjohansebas "><code>@bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6632 ">expressjs/express#6632</a></li>
<li>doc: fix CONTRIBUTING link by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6653 ">expressjs/express#6653</a></li>
<li>doc: update contributing guidelines and code of conduct links by <a
href="https://github.com/ShubhamOulkar "><code>@ShubhamOulkar</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6601 ">expressjs/express#6601</a></li>
<li>build(deps-dev): bump morgan from 1.10.0 to 1.10.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6679 ">expressjs/express#6679</a></li>
<li>build(deps-dev): bump cookie-session from 2.1.0 to 2.1.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6678 ">expressjs/express#6678</a></li>
<li>lint: add --fix flag to automatic fix linting issue by <a
href="https://github.com/shivarm "><code>@shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6644 ">expressjs/express#6644</a></li>
<li>chore: ignore yarn.lock file and update example by <a
href="https://github.com/shivarm "><code>@shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6588 ">expressjs/express#6588</a></li>
<li>lib: use req.socket over deprecated req.connection by <a
href="https://github.com/bjohansebas "><code>@bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6705 ">expressjs/express#6705</a></li>
<li>doc: update express app example by <a
href="https://github.com/shivarm "><code>@shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6718 ">expressjs/express#6718</a></li>
<li>build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6675 ">expressjs/express#6675</a></li>
<li>Remove history.md from being packaged on publish by <a
href="https://github.com/sheplu "><code>@sheplu</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6780 ">expressjs/express#6780</a></li>
<li>build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6797 ">expressjs/express#6797</a></li>
<li>build(deps): bump github/codeql-action from 3.29.7 to 3.30.5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6796 ">expressjs/express#6796</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6795 ">expressjs/express#6795</a></li>
<li>build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6794 ">expressjs/express#6794</a></li>
<li>build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6793 ">expressjs/express#6793</a></li>
<li>ci: add node.js 25 to test matrix by <a
href="https://github.com/Phillip9587 "><code>@Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6843 ">expressjs/express#6843</a></li>
<li>build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6871 ">expressjs/express#6871</a></li>
<li>build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6870 ">expressjs/express#6870</a></li>
<li>build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6869 ">expressjs/express#6869</a></li>
<li>build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6868 ">expressjs/express#6868</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/blob/master/History.md ">express's
changelog</a>.</em></p>
<blockquote>
<h1>5.2.0 / 2025-12-01</h1>
<ul>
<li>Security fix for <a
href="https://www.cve.org/CVERecord?id=CVE-2024-51999 ">CVE-2024-51999</a>
(<a
href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6 ">GHSA-pj86-cfqh-vqx6</a>)</li>
<li>deps: <code>body-parser@^2.2.1</code></li>
<li>A deprecation warning was added when using <code>res.redirect</code>
with undefined arguments, Express now emits a warning to help detect
calls that pass undefined as the status or URL and make them easier to
fix.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4007ad103b "><code>4007ad1</code></a>
Release: 5.2.0 (<a
href="https://redirect.github.com/expressjs/express/issues/6920 ">#6920</a>)</li>
<li><a
href="2f64f68c37 "><code>2f64f68</code></a>
sec: security patch for CVE-2024-51999</li>
<li><a
href="ed0ba3f1dc "><code>ed0ba3f</code></a>
build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (<a
href="https://redirect.github.com/expressjs/express/issues/6928 ">#6928</a>)</li>
<li><a
href="8eace4603c "><code>8eace46</code></a>
build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (<a
href="https://redirect.github.com/expressjs/express/issues/6929 ">#6929</a>)</li>
<li><a
href="30bae81027 "><code>30bae81</code></a>
build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (<a
href="https://redirect.github.com/expressjs/express/issues/6930 ">#6930</a>)</li>
<li><a
href="758d4355d4 "><code>758d435</code></a>
deps: body-parser@^2.2.1 (<a
href="https://redirect.github.com/expressjs/express/issues/6922 ">#6922</a>)</li>
<li><a
href="77bcd5274a "><code>77bcd52</code></a>
docs: update emeritus triagers (<a
href="https://redirect.github.com/expressjs/express/issues/6890 ">#6890</a>)</li>
<li><a
href="f33caf1f89 "><code>f33caf1</code></a>
Nominate to <a
href="https://github.com/efekrskl "><code>@efekrskl</code></a> for
triage team (<a
href="https://redirect.github.com/expressjs/express/issues/6888 ">#6888</a>)</li>
<li><a
href="54af593b73 "><code>54af593</code></a>
refactor: use cached slice in app.listen (<a
href="https://redirect.github.com/expressjs/express/issues/6897 ">#6897</a>)</li>
<li><a
href="2551a7d8af "><code>2551a7d</code></a>
docs: switch badges from badgen.net to shields.io (<a
href="https://redirect.github.com/expressjs/express/issues/6900 ">#6900</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/expressjs/express/compare/v5.1.0...v5.2.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/monkeytypegame/monkeytype/network/alerts ).
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Miodec <jack@monkeytype.com>
2025-12-03 16:47:36 +01:00
dependabot[bot]
71c0f43d96
build(deps): bump nodemailer from 7.0.7 to 7.0.11 in /backend ( #7176 )
...
Bumps [nodemailer](https://github.com/nodemailer/nodemailer ) from 7.0.7
to 7.0.11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodemailer/nodemailer/releases ">nodemailer's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.11</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.10...v7.0.11 ">7.0.11</a>
(2025-11-26)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>prevent stack overflow DoS in addressparser with deeply nested
groups (<a
href="b61b9c0cfd ">b61b9c0</a>)</li>
</ul>
<h2>v7.0.10</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.9...v7.0.10 ">7.0.10</a>
(2025-10-23)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>Increase data URI size limit from 100KB to 50MB and preserve content
type (<a
href="28dbf3fe12 ">28dbf3f</a>)</li>
</ul>
<h2>v7.0.9</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.8...v7.0.9 ">7.0.9</a>
(2025-10-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>release:</strong> Trying to fix release proecess by
upgrading Node version in runner (<a
href="579fce4683 ">579fce4</a>)</li>
</ul>
<h2>v7.0.8</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.7...v7.0.8 ">7.0.8</a>
(2025-10-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>addressparser:</strong> flatten nested groups per RFC 5322
(<a
href="8f8a77c67f ">8f8a77c</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md ">nodemailer's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.10...v7.0.11 ">7.0.11</a>
(2025-11-26)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>prevent stack overflow DoS in addressparser with deeply nested
groups (<a
href="b61b9c0cfd ">b61b9c0</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.9...v7.0.10 ">7.0.10</a>
(2025-10-23)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>Increase data URI size limit from 100KB to 50MB and preserve content
type (<a
href="28dbf3fe12 ">28dbf3f</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.8...v7.0.9 ">7.0.9</a>
(2025-10-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>release:</strong> Trying to fix release proecess by
upgrading Node version in runner (<a
href="579fce4683 ">579fce4</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.7...v7.0.8 ">7.0.8</a>
(2025-10-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>addressparser:</strong> flatten nested groups per RFC 5322
(<a
href="8f8a77c67f ">8f8a77c</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3d17dbec49 "><code>3d17dbe</code></a>
chore(master): release 7.0.11 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1783 ">#1783</a>)</li>
<li><a
href="15879f8bd5 "><code>15879f8</code></a>
Bumped dev dependencies</li>
<li><a
href="b61b9c0cfd "><code>b61b9c0</code></a>
fix: prevent stack overflow DoS in addressparser with deeply nested
groups</li>
<li><a
href="4175e4baf9 "><code>4175e4b</code></a>
chore(master): release 7.0.10 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1776 ">#1776</a>)</li>
<li><a
href="d882ccfe8d "><code>d882ccf</code></a>
Merge branch 'master' of github.com:nodemailer/nodemailer</li>
<li><a
href="1d7e4f786b "><code>1d7e4f7</code></a>
Bumped deps</li>
<li><a
href="10bd871656 "><code>10bd871</code></a>
chore: correct typo in variable name (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1773 ">#1773</a>)</li>
<li><a
href="28dbf3fe12 "><code>28dbf3f</code></a>
fix: Increase data URI size limit from 100KB to 50MB and preserve
content type</li>
<li><a
href="92ae1c49e3 "><code>92ae1c4</code></a>
chore(master): release 7.0.9 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1769 ">#1769</a>)</li>
<li><a
href="c675d9e7e5 "><code>c675d9e</code></a>
Merge branch 'master' of github.com:nodemailer/nodemailer</li>
<li>Additional commits viewable in <a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.7...v7.0.11 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub ">https://www.npmjs.com/~GitHub </a>
Actions), a new releaser for nodemailer since your current version.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/monkeytypegame/monkeytype/network/alerts ).
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Miodec <jack@monkeytype.com>
2025-12-03 16:35:59 +01:00
Miodec
3dfea100d1
chore: upgrade typescript
...
also disables declaration file generation since we dont use them anyway
2025-11-24 13:33:49 +01:00
Miodec
2107c87fdb
chore: upgrade oxlint
...
also enables prefer-includes
2025-11-20 12:22:58 +01:00
Christian Fehmer
1009791915
refactor: remove lodash from backend (@fehmer) ( #6953 )
2025-11-17 12:51:40 +01:00
Christian Fehmer
8db1140040
chore: update vitest to 4.0.8 (@fehmer) ( #7096 )
2025-11-12 12:42:30 +01:00
Miodec
c0191da004
chore: bump node version
2025-10-31 14:18:59 +01:00
Miodec
586a19ad3e
chore: upgrade oxlint
2025-10-31 14:18:59 +01:00
Jack
7e6a73aac2
chore: upgrade to vite 7 (@miodec) ( #7051 )
2025-10-27 17:17:21 +01:00
Christian Fehmer
cd8ebd1430
chore: update nodejs to 24.10.0 (@fehmer) ( #7035 )
2025-10-27 13:38:37 +01:00
Christian Fehmer
4268572be4
build: fix scope of dependency @monkeytype/schemas (@fehmer) ( #7033 )
2025-10-21 13:05:07 +02:00
dependabot[bot]
4e5ba24a3e
build(deps): bump nodemailer from 6.9.14 to 7.0.7 in /backend ( #7011 )
...
Bumps [nodemailer](https://github.com/nodemailer/nodemailer ) from 6.9.14
to 7.0.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodemailer/nodemailer/releases ">nodemailer's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.7</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.6...v7.0.7 ">7.0.7</a>
(2025-10-05)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>addressparser:</strong> Fixed addressparser handling of
quoted nested email addresses (<a
href="1150d99fba ">1150d99</a>)</li>
<li><strong>dns:</strong> add memory leak prevention for DNS cache (<a
href="0240d6795d ">0240d67</a>)</li>
<li><strong>linter:</strong> Updated eslint and created prettier
formatting task (<a
href="df13b7487e ">df13b74</a>)</li>
<li>refresh expired DNS cache on error (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1759 ">#1759</a>)
(<a
href="ea0fc5a663 ">ea0fc5a</a>)</li>
<li>resolve linter errors in DNS cache tests (<a
href="3b8982c1f2 ">3b8982c</a>)</li>
</ul>
<h2>v7.0.6</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.5...v7.0.6 ">7.0.6</a>
(2025-08-27)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>encoder:</strong> avoid silent data loss by properly
flushing trailing base64 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1747 ">#1747</a>)
(<a
href="01ae76f2cf ">01ae76f</a>)</li>
<li>handle multiple XOAUTH2 token requests correctly (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1754 ">#1754</a>)
(<a
href="dbe0028635 ">dbe0028</a>)</li>
<li>ReDoS vulnerability in parseDataURI and _processDataUrl (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1755 ">#1755</a>)
(<a
href="90b3e24d23 ">90b3e24</a>)</li>
</ul>
<h2>v7.0.5</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.4...v7.0.5 ">7.0.5</a>
(2025-07-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>updated well known delivery service list (<a
href="fa2724b337 ">fa2724b</a>)</li>
</ul>
<h2>v7.0.4</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.3...v7.0.4 ">7.0.4</a>
(2025-06-29)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>pools:</strong> Emit 'clear' once transporter is idle and
all connections are closed (<a
href="839e28634c ">839e286</a>)</li>
<li><strong>smtp-connection:</strong> jsdoc public annotation for socket
(<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1741 ">#1741</a>)
(<a
href="c45c84fe9b ">c45c84f</a>)</li>
<li><strong>well-known-services:</strong> Added AliyunQiye (<a
href="bb9e6daffb ">bb9e6da</a>)</li>
</ul>
<h2>v7.0.3</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.2...v7.0.3 ">7.0.3</a>
(2025-05-08)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>attachments:</strong> Set the default transfer encoding for
message/rfc822 attachments as '7bit' (<a
href="007d5f3f40 ">007d5f3</a>)</li>
</ul>
<h2>v7.0.2</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.1...v7.0.2 ">7.0.2</a>
(2025-05-04)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md ">nodemailer's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.6...v7.0.7 ">7.0.7</a>
(2025-10-05)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>addressparser:</strong> Fixed addressparser handling of
quoted nested email addresses (<a
href="1150d99fba ">1150d99</a>)</li>
<li><strong>dns:</strong> add memory leak prevention for DNS cache (<a
href="0240d6795d ">0240d67</a>)</li>
<li><strong>linter:</strong> Updated eslint and created prettier
formatting task (<a
href="df13b7487e ">df13b74</a>)</li>
<li>refresh expired DNS cache on error (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1759 ">#1759</a>)
(<a
href="ea0fc5a663 ">ea0fc5a</a>)</li>
<li>resolve linter errors in DNS cache tests (<a
href="3b8982c1f2 ">3b8982c</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.5...v7.0.6 ">7.0.6</a>
(2025-08-27)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>encoder:</strong> avoid silent data loss by properly
flushing trailing base64 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1747 ">#1747</a>)
(<a
href="01ae76f2cf ">01ae76f</a>)</li>
<li>handle multiple XOAUTH2 token requests correctly (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1754 ">#1754</a>)
(<a
href="dbe0028635 ">dbe0028</a>)</li>
<li>ReDoS vulnerability in parseDataURI and _processDataUrl (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1755 ">#1755</a>)
(<a
href="90b3e24d23 ">90b3e24</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.4...v7.0.5 ">7.0.5</a>
(2025-07-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>updated well known delivery service list (<a
href="fa2724b337 ">fa2724b</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.3...v7.0.4 ">7.0.4</a>
(2025-06-29)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>pools:</strong> Emit 'clear' once transporter is idle and
all connections are closed (<a
href="839e28634c ">839e286</a>)</li>
<li><strong>smtp-connection:</strong> jsdoc public annotation for socket
(<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1741 ">#1741</a>)
(<a
href="c45c84fe9b ">c45c84f</a>)</li>
<li><strong>well-known-services:</strong> Added AliyunQiye (<a
href="bb9e6daffb ">bb9e6da</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.2...v7.0.3 ">7.0.3</a>
(2025-05-08)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>attachments:</strong> Set the default transfer encoding for
message/rfc822 attachments as '7bit' (<a
href="007d5f3f40 ">007d5f3</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.1...v7.0.2 ">7.0.2</a>
(2025-05-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>ses:</strong> Fixed structured from header (<a
href="faa9a5eafa ">faa9a5e</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.0...v7.0.1 ">7.0.1</a>
(2025-05-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>ses:</strong> Use formatted FromEmailAddress for SES emails
(<a
href="821cd09002 ">821cd09</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9357a71233 "><code>9357a71</code></a>
chore(master): release 7.0.7 [skip-ci] (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1761 ">#1761</a>)</li>
<li><a
href="df13b7487e "><code>df13b74</code></a>
fix(linter): Updated eslint and created prettier formatting task</li>
<li><a
href="62629a0674 "><code>62629a0</code></a>
Updated tests for addressparser</li>
<li><a
href="1150d99fba "><code>1150d99</code></a>
fix(addressparser): Fixed addressparser handling of quoted nested email
addre...</li>
<li><a
href="3b8982c1f2 "><code>3b8982c</code></a>
fix: resolve linter errors in DNS cache tests</li>
<li><a
href="0240d6795d "><code>0240d67</code></a>
fix(dns): add memory leak prevention for DNS cache</li>
<li><a
href="ea0fc5a663 "><code>ea0fc5a</code></a>
fix: refresh expired DNS cache on error (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1759 ">#1759</a>)</li>
<li><a
href="430ca75aa8 "><code>430ca75</code></a>
chore(master): release 7.0.6 [skip-ci] (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1753 ">#1753</a>)</li>
<li><a
href="e3e700c4c4 "><code>e3e700c</code></a>
Bumped deps</li>
<li><a
href="f322c380ae "><code>f322c38</code></a>
replaced escaped single quotes with unescaped ones</li>
<li>Additional commits viewable in <a
href="https://github.com/nodemailer/nodemailer/compare/v6.9.14...v7.0.7 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/monkeytypegame/monkeytype/network/alerts ).
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christian Fehmer <cfe@sexy-developer.com>
2025-10-15 10:42:46 +02:00
Christian Fehmer
85671a32b2
chore: update version of supertest (@fehmer) ( #6839 )
2025-10-15 10:34:47 +02:00
Miodec
1fa473744a
chore: bump oxlint
2025-09-11 22:04:48 +02:00
Miodec
b54052913c
chore: bump oxlint version
2025-08-26 17:41:51 +02:00
Miodec
057fdf3fed
chore: bump oxlint version
2025-08-18 15:38:13 +02:00
Christian Fehmer
7a91b4e08b
chore: update redocly to 2.0.5 (@fehmer) ( #6874 )
2025-08-14 11:14:33 +02:00
Miodec
5183caf91e
chore: upgrade oxlint
2025-08-10 15:08:46 +02:00
Christian Fehmer
f9b22ade56
chore: remove unused dependencies (@fehmer) ( #6841 )
...
- **remove chokidar**
- **remove path, node-fetch, ioredis-mock**
- **remove nodemon**
2025-08-07 15:02:19 +02:00
Christian Fehmer
bec5606c7a
chore: move knip to project root (@fehmer) ( #6842 )
2025-08-07 15:00:43 +02:00
Christian Fehmer
c8a91ede52
test: fix flaky user tests (@fehmer) ( #6837 )
2025-08-07 14:47:35 +02:00
Christian Fehmer
01ed9322ec
test: update to vitest3 (@fehmer) ( #6811 )
...
- **test: use mongodb testcontainer (@fehmer)**
- **don't run integration tests in parallel**
- **fix premium test**
- **refactor, cleanup**
- **refactor, cleanup**
- **test: add integration tests for daily leaderboards (@fehmer)**
- **trigger**
- **trigger**
- **test: update to vitest3 (@fehmer)**
2025-08-04 15:55:10 +02:00
Christian Fehmer
d9009e51cc
test: use mongodb testcontainer (@fehmer) ( #6808 )
2025-08-04 15:10:41 +02:00
Christian Fehmer
c1a681c17f
test: split integration tests (@fehmer) ( #6807 )
...
- **trigger**
- **test: split integration tests (@fehmer)**
2025-07-30 13:22:40 +02:00
Christian Fehmer
aa94a8afed
chore: update nodejs to 20.19.4 (@fehmer) ( #6805 )
2025-07-30 10:06:04 +02:00
Cameron
2180e3b603
chore(deps): upgrade oxlint to 1.8.0, fix errors (@camc314) ( #6776 )
...
### Description
This PR updates oxlint to 1.8.0 and fixes the resulting errors in order
to keep oxlint's ecosystem CI green.
Thanks for using oxlint
---------
Co-authored-by: Miodec <jack@monkeytype.com>
2025-07-24 14:32:12 +02:00
Jack
69cbbe4ab2
refactor(contracts / schemas): move schemas into their own package (@miodec) ( #6754 )
2025-07-21 14:55:54 +02:00
Miodec
41495981a8
chore: bump oxlint version
2025-07-19 15:02:14 +02:00
Christian Fehmer
9b26793a6d
chore: update express to 5.1.0 (@fehmer) ( #6691 )
2025-07-03 15:43:01 +02:00
Miodec
4c05dd8326
chore: bump oxlint version
2025-06-14 14:43:05 +02:00
Miodec
04fbd81c10
chore: bump oxlint version
2025-05-29 13:23:13 +02:00
Christian Fehmer
d6ae7cf7c4
fix: compatability check header shown if client is using cached responses (@fehmer) ( #6602 )
...
If frontend and backend are deployed with a new COMPATABILITY_CHECK
header frontend might show the backend version is lower because of the
http header of a cached response.
Adding the COMPATABILITY_CHECK version as part of the etag fixes this.
2025-05-27 16:59:49 +02:00
Miodec
a424f96480
chore: upgrade oxlint
2025-04-23 18:54:33 +02:00
Jack
cac8835c77
chore: add oxlint (@miodec) ( #6455 )
...
Use oxlint for general linting to provide much quicker feedback. Keep
eslint for type-aware rules. Fully switch to oxlint once it supports
type-aware.
2025-04-16 17:18:50 +02:00
Christian Fehmer
60f664117f
chore: update @redocly/cli (@fehmer) ( #6255 )
...
Use latest version to get rid of the configuration warnings.
2025-02-11 13:52:36 +01:00
dependabot[bot]
ae9c3ca003
chore(deps-dev): bump vitest from 2.0.5 to 2.1.9 ( #6242 )
...
Bumps
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest )
from 2.0.5 to 2.1.9.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases ">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v2.1.9</h2>
<p>This release includes security patches for:</p>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/security/advisories/GHSA-8gvc-j273-4wm5 ">Browser
mode serves arbitrary files | CVE-2025-24963</a></li>
<li><a
href="https://github.com/vitest-dev/vitest/security/advisories/GHSA-9crc-q9x8-hgqq ">Remote
Code Execution when accessing a malicious website while Vitest API
server is listening | CVE-2025-24964</a></li>
</ul>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li>backport <a
href="https://redirect.github.com/vitest-dev/vitest/issues/7317 ">vitest-dev/vitest#7317</a>
to v2 - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/pull/7318 ">vitest-dev/vitest#7318</a></li>
<li>(backport <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/7340 ">#7340</a>
to v2) restrict served files from <code>/__screenshot-error</code> - by
<a href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/pull/7343 ">vitest-dev/vitest#7343</a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.8...v2.1.9 ">View
changes on GitHub</a></h5>
<h2>v2.1.8</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li>Support Node 21 - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> <a
href="https://github.com/vitest-dev/vitest/commit/92f7a2ad "><!-- raw
HTML omitted -->(92f7a)<!-- raw HTML omitted --></a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.7...v2.1.8 ">View
changes on GitHub</a></h5>
<h2>v2.1.7</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li>Revert support for Vite 6 - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> <a
href="https://github.com/vitest-dev/vitest/commit/fbe5c39d "><!-- raw
HTML omitted -->(fbe5c)<!-- raw HTML omitted --></a>
<ul>
<li>This introduced some breaking changes (<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6992 ">vitest-dev/vitest#6992</a>).
We will enable support for it later. In the meantime, you can still use
<code>pnpm.overrides</code> or yarn resolutions to override the
<code>vite</code> version in the <code>vitest</code> package - the APIs
are compatible.</li>
</ul>
</li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.6...v2.1.7 ">View
changes on GitHub</a></h5>
<h2>v2.1.6</h2>
<h2>🚀 Features</h2>
<ul>
<li>Support Vite 6</li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.5...v2.1.6 ">View
changes on GitHub</a></h5>
<h2>v2.1.5</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li><code>dangerouslyIgnoreUnhandledErrors</code> without base reporter
- by <a
href="https://github.com/AriPerkkio "><code>@AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6808 ">vitest-dev/vitest#6808</a>
<a href="https://github.com/vitest-dev/vitest/commit/0bf0ab00 "><!-- raw
HTML omitted -->(0bf0a)<!-- raw HTML omitted --></a></li>
<li>Capture <code>unhandledRejection</code> even when base reporter is
not used - by <a
href="https://github.com/AriPerkkio "><code>@AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6812 ">vitest-dev/vitest#6812</a>
<a href="https://github.com/vitest-dev/vitest/commit/8878b04d "><!-- raw
HTML omitted -->(8878b)<!-- raw HTML omitted --></a></li>
<li>Don't change the working directory when loading workspace projects
- by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6811 ">vitest-dev/vitest#6811</a>
<a href="https://github.com/vitest-dev/vitest/commit/f0aeaca8 "><!-- raw
HTML omitted -->(f0aea)<!-- raw HTML omitted --></a></li>
<li>Remove <code>sequence.concurrent</code> from the
<code>RuntimeConfig</code> type - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6880 ">vitest-dev/vitest#6880</a>
<a href="https://github.com/vitest-dev/vitest/commit/6af73d93 "><!-- raw
HTML omitted -->(6af73)<!-- raw HTML omitted --></a></li>
<li>Stop the runner before restarting, restart on workspace config
change - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6859 ">vitest-dev/vitest#6859</a>
<a href="https://github.com/vitest-dev/vitest/commit/b01df47d "><!-- raw
HTML omitted -->(b01df)<!-- raw HTML omitted --></a></li>
<li>Don't rerun on Esc or Ctrl-C during watch filter - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6895 ">vitest-dev/vitest#6895</a>
<a href="https://github.com/vitest-dev/vitest/commit/98f76ea7 "><!-- raw
HTML omitted -->(98f76)<!-- raw HTML omitted --></a></li>
<li>Print ssrTransform error - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6885 ">vitest-dev/vitest#6885</a>
<a href="https://github.com/vitest-dev/vitest/commit/4c96cce7 "><!-- raw
HTML omitted -->(4c96c)<!-- raw HTML omitted --></a></li>
<li>Throw an error and a warning if <code>.poll</code>,
<code>.element</code>, <code>.rejects</code>/<code>.resolves</code>, and
<code>locator.*</code> weren't awaited - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6877 ">vitest-dev/vitest#6877</a>
<a href="https://github.com/vitest-dev/vitest/commit/93b67c24 "><!-- raw
HTML omitted -->(93b67)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Don't process the default css styles - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6861 ">vitest-dev/vitest#6861</a>
<a href="https://github.com/vitest-dev/vitest/commit/0d67f04b "><!-- raw
HTML omitted -->(0d67f)<!-- raw HTML omitted --></a></li>
<li>Support non US key input - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6873 ">vitest-dev/vitest#6873</a>
<a href="https://github.com/vitest-dev/vitest/commit/5969d8da "><!-- raw
HTML omitted -->(5969d)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c9e59a089d "><code>c9e59a0</code></a>
chore: release v2.1.9</li>
<li><a
href="e0fe1d81e2 "><code>e0fe1d8</code></a>
fix: backport <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/7317 ">#7317</a>
to v2 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/7318 ">#7318</a>)</li>
<li><a
href="d69cc75698 "><code>d69cc75</code></a>
bump: 2.1.8</li>
<li><a
href="92f7a2ad18 "><code>92f7a2a</code></a>
fix: support Node 21</li>
<li><a
href="81ed45b3a4 "><code>81ed45b</code></a>
chore: release v2.1.7</li>
<li><a
href="fbe5c39d88 "><code>fbe5c39</code></a>
fix: revert support for Vite 6</li>
<li><a
href="b936702deb "><code>b936702</code></a>
bump: 2.1.6</li>
<li><a
href="32f23b98b4 "><code>32f23b9</code></a>
chore: release v2.1.5</li>
<li><a
href="417bdb423d "><code>417bdb4</code></a>
fix(browser): init browsers eagerly when tests are running (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/6876 ">#6876</a>)</li>
<li><a
href="93b67c24b1 "><code>93b67c2</code></a>
fix: throw an error and a warning if <code>.poll</code>,
<code>.element</code>, <code>.rejects</code>/`.resolv...</li>
<li>Additional commits viewable in <a
href="https://github.com/vitest-dev/vitest/commits/v2.1.9/packages/vitest ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/monkeytypegame/monkeytype/network/alerts ).
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christian Fehmer <cfe@sexy-developer.com>
2025-02-08 13:53:20 +01:00
Miodec
edd2903171
chore: bump eslint version
2025-01-21 11:50:09 +01:00
Jack
fdadb4ae83
refactor: move funboxes to a shared package (@miodec) ( #6063 )
2024-12-04 16:11:07 +01:00
Miodec
a7664d46ea
chore: upgrade express
2024-10-15 11:01:20 +02:00
Jack
1509a675b8
refactor: move common util functions to a package (@miodec) ( #5894 )
...
Also moves esbuild to a package.
2024-09-20 11:54:14 +02:00
Christian Fehmer
e19b3e3e8b
refactor: remove leftover code from ts-rest migration (@fehmer) ( #5875 )
2024-09-13 12:27:35 +02:00
dependabot[bot]
c6daef0e9d
chore(deps): bump express from 4.19.2 to 4.20.0 in /backend ( #5867 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christian Fehmer <cfe@sexy-developer.com>
2024-09-11 11:17:02 +02:00
Christian Fehmer
c7b3e2c916
impr: move permission checks to contracts (@fehmer, @miodec) ( #5848 )
...
!nuf
2024-09-10 11:35:57 +02:00
Christian Fehmer
b06b9f73e5
refactor: rework rate limiting (@fehmer) ( #5845 )
...
!nuf
2024-09-09 10:39:08 +02:00
Christian Fehmer
259894ab9f
impr: use tsrest for user endpoints (@fehmer) ( #5815 )
...
!nuf
2024-09-05 17:28:19 +02:00
Christian Fehmer
e03a25fb92
impr: use ts-rest for results endpoint (@fehmer) ( #5758 )
...
!nuf
2024-08-23 12:13:50 +02:00
dependabot[bot]
7cd44812ea
chore(deps-dev): bump @types/object-hash from 2.2.1 to 3.0.6 ( #5805 )
...
Bumps [@types/object-hash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/object-hash ) from 2.2.1 to 3.0.6.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/object-hash )
---
updated-dependencies:
- dependency-name: "@types/object-hash"
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-20 17:03:17 +02:00
dependabot[bot]
f625eabf70
chore(deps): bump rate-limiter-flexible from 2.3.7 to 5.0.3 ( #5806 )
...
Bumps [rate-limiter-flexible](https://github.com/animir/node-rate-limiter-flexible ) from 2.3.7 to 5.0.3.
- [Release notes](https://github.com/animir/node-rate-limiter-flexible/releases )
- [Commits](https://github.com/animir/node-rate-limiter-flexible/commits/v5.0.3 )
---
updated-dependencies:
- dependency-name: rate-limiter-flexible
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christian Fehmer <fehmer@users.noreply.github.com>
2024-08-20 17:02:31 +02:00
Miodec
4f9ddd1a47
chore: bump swagger-stats to 0.99.7
2024-08-15 11:09:44 +02:00
dependabot[bot]
dca7a84c84
chore(deps): bump prom-client from 14.0.1 to 15.1.3 ( #5785 )
...
Bumps [prom-client](https://github.com/siimon/prom-client ) from 14.0.1 to 15.1.3.
- [Release notes](https://github.com/siimon/prom-client/releases )
- [Changelog](https://github.com/siimon/prom-client/blob/master/CHANGELOG.md )
- [Commits](https://github.com/siimon/prom-client/compare/v14.0.1...v15.1.3 )
---
updated-dependencies:
- dependency-name: prom-client
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-15 10:44:45 +02:00