Skip to content

fix(deps): encodeurl@~2.0.0 - #240

Merged
blakeembrey merged 1 commit into
0.xfrom
encodeurl-2
Oct 7, 2024
Merged

fix(deps): encodeurl@~2.0.0#240
blakeembrey merged 1 commit into
0.xfrom
encodeurl-2

Conversation

@wesleytodd

@wesleytoddwesleytodd commented Sep 12, 2024

Copy link
Copy Markdown
Member

@socket-security

Copy link
Copy Markdown

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

PackageNew capabilitiesTransitivesSizePublisher
npm/encodeurl@2.0.0None06.98 kBblakeembrey

🚮 Removed packages:npm/encodeurl@1.0.2

View full report↗︎

Comment threadpackage.json
"depd": "2.0.0",
"destroy": "1.2.0",
"encodeurl": "~1.0.2",
"encodeurl": "~2.0.0",

@NewEraCrackerNewEraCrackerOct 7, 2024

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@UlisesGascon Please do not forget this before doing a new express security release.

The send with this merge request should be published first on npm. Thank you.

PS: Ping @rxmarbles as well.

@blakeembrey
blakeembrey merged commit 0a9fa80 into 0.xOct 7, 2024
@blakeembrey
blakeembrey deleted the encodeurl-2 branch October 7, 2024 20:15
@blakeembrey

Copy link
Copy Markdown
Member

Just published this as 0.19.1, in case @UlisesGascon you want to bump it in Express v4 some time. It looks like it's still pinned here: https://github.com/expressjs/express/blob/8e229f92752ad51462c868b99f6e6c2e559801b0/package.json#L55

Or we can unpin, I'm sure a PR is welcome on express for this.

@UlisesGasconUlisesGascon mentioned this pull request Nov 26, 2025
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants

@wesleytodd@blakeembrey@NewEraCracker@UlisesGascon@rxmarbles