Skip to content

Conversation

@wesleytodd
Copy link
Member

@wesleytodd wesleytodd commented Sep 12, 2024

@socket-security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/encodeurl@2.0.0 None 0 6.98 kB blakeembrey

🚮 Removed packages: npm/encodeurl@1.0.2

View full report↗︎

"depd": "2.0.0",
"destroy": "1.2.0",
"encodeurl": "~1.0.2",
"encodeurl": "~2.0.0",
Copy link

@NewEraCracker NewEraCracker Oct 7, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@UlisesGascon Please do not forget this before doing a new express security release.

The send with this merge request should be published first on npm. Thank you.

PS: Ping @rxmarbles as well.

@blakeembrey blakeembrey merged commit 0a9fa80 into 0.x Oct 7, 2024
@blakeembrey blakeembrey deleted the encodeurl-2 branch October 7, 2024 20:15
@blakeembrey
Copy link
Member

Just published this as 0.19.1, in case @UlisesGascon you want to bump it in Express v4 some time. It looks like it's still pinned here: https://github.com/expressjs/express/blob/8e229f92752ad51462c868b99f6e6c2e559801b0/package.json#L55

Or we can unpin, I'm sure a PR is welcome on express for this.

@UlisesGascon UlisesGascon mentioned this pull request Nov 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants