Bump express and @types/express #1324

New Issue

MrUnknownDE · 2026-04-05T18:57:27+02:00

MrUnknownDE commented

2026-04-05 18:57:27 +02:00

Originally created by @dependabot[bot] on 6/20/2025

Bumps express and @types/express. These dependencies needed to be updated together.
Updates express from 4.21.2 to 5.1.0

Release notes

Sourced from express's releases.

v5.1.0

What's Changed

Update captains by @UlisesGascon in expressjs/express#6027

build: Node.js 23.0 by @bjohansebas in expressjs/express#6075

Add funding field (v5) by @bjohansebas in expressjs/express#6064

✅ add discarded middleware test by @ctcpip in expressjs/express#5819

update homepage link http to https by @bjohansebas in expressjs/express#5920

Improve readme by @bjohansebas in expressjs/express#5994

Add bjohansebas as repo captain for expressjs.com by @crandmck in expressjs/express#6058

Remove Object.setPrototypeOf polyfill by @Phillip9587 in expressjs/express#6081

fix(buffer): use node:buffer instead of safe-buffer by @bhavya3024 in expressjs/express#6071

docs: Add DCO by @UlisesGascon in expressjs/express#6048

cleanup: remove promise support check from tests by @Phillip9587 in expressjs/express#6148

Use loop for acceptParams by @blakeembrey in expressjs/express#6066

Improve documentation step in release process by @bjohansebas in expressjs/express#6150

cleanup: remove unnecessary require for global Buffer by @Phillip9587 in expressjs/express#6146

cleanup: remove AsyncLocalStorage check by @Phillip9587 in expressjs/express#6147

update history.md for acceptParams change by @jonchurch in expressjs/express#6177

docs: add @rxmarbles to the triage team by @UlisesGascon in expressjs/express#6151

refactor: improve readability by @sazk07 in expressjs/express#6173

docs: clarify the security process in the triage role by @bjohansebas in expressjs/express#6217

chore: replace methods dependency with standard library by @jonkoops in expressjs/express#6196

Remove utils-merge dependency - use spread syntax instead by @Phillip9587 in expressjs/express#6091

fix(securite): fix vulnerabilities by @Abdel-Monaam-Aouini in expressjs/express#6211

refactor: prefix built-in node module imports by @slagiewka in expressjs/express#6236

fix: remove download size badges by @wesleytodd in expressjs/express#6266

Remove unused depd dependency by @jonkoops in expressjs/express#6197

fix: usage of Invalid action input 'persist-credentials' for actions/setup-node@v4 in ci.yml by @hamirmahal in expressjs/express#6256

Add support for OSSF scorecard reporting by @UlisesGascon in expressjs/express#5431

docs: add @Phillip9587 to the triage team by @bjohansebas in expressjs/express#6276

fix: added a missing semicolon in css styles in examples/auth by @pr4j3sh in expressjs/express#6297

docs: include team email in the security policy by @UlisesGascon in expressjs/express#6278

refactor: simplify normalizeTypes function by @Ayoub-Mabrouk in expressjs/express#6097

ci: updated github actions ci workflow by @Phillip9587 in expressjs/express#6314

ci: fix npm install --include typo by @Phillip9587 in expressjs/express#6324

ci: updated scorecard actions by @Phillip9587 in expressjs/express#6322

build(deps): use carat notation for dependency versions by @dpopp07 in expressjs/express#6317

chore(deps): update debug to ^4.4.0 by @Phillip9587 in expressjs/express#6313

docs: retroactively note 5.0.0-beta.1 api change in history file by @dpopp07 in expressjs/express#6333

feat(deps): body-parser@^2.1.0 by @wesleytodd in expressjs/express#6332

feat(deps): router@^2.1.0 by @wesleytodd in expressjs/express#6331

Update repo captains by @UlisesGascon in expressjs/express#6234

deps: upgrade nyc by @agungjati in expressjs/express#6122

fix (deps): update deps by @wesleytodd in expressjs/express#6337

response: add support for ETag option in res.sendFile by @juanarbol in expressjs/express#6073

Update multiple links to use https instead of http by @Phillip9587 in expressjs/express#6338

Extend res.links() to allow adding multiple links with the same rel #2729 by @andvea in expressjs/express#4885

docs: update emeritus triagers by @UlisesGascon in expressjs/express#6345

docs: update guidance for triager nominations by @bjohansebas in expressjs/express#6349

docs: clarify guidelines for becoming a committer by @bjohansebas in expressjs/express#6364

... (truncated)

Changelog

Sourced from express's changelog.

5.1.0 / 2025-03-31

Add support for Uint8Array in res.send()

Add support for ETag option in res.sendFile()

Add support for multiple links with the same rel in res.links()

Add funding field to package.json

perf: use loop for acceptParams

refactor: prefix built-in node module imports

deps: remove setprototypeof

deps: remove safe-buffer

deps: remove utils-merge

deps: remove methods

deps: remove depd

deps: debug@^4.4.0

deps: body-parser@^2.2.0

deps: router@^2.2.0

deps: content-type@^1.0.5

deps: finalhandler@^2.1.0

deps: qs@^6.14.0

deps: server-static@2.2.0

deps: type-is@2.0.1

5.0.1 / 2024-10-08

Update cookie semver lock to address CVE-2024-47764

5.0.0 / 2024-09-10

remove:

path-is-absolute dependency - use path.isAbsolute instead

breaking:

res.status() accepts only integers, and input must be greater than 99 and less than 1000

will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range

will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs

deps: send@1.0.0

res.redirect('back') and res.location('back') is no longer a supported magic string, explicitly use req.get('Referrer') || '/'.

change:

res.clearCookie will ignore user provided maxAge and expires options

deps: cookie-signature@^1.2.1

deps: debug@4.3.6

deps: merge-descriptors@^2.0.0

deps: serve-static@^2.1.0

deps: qs@6.13.0

deps: accepts@^2.0.0

deps: mime-types@^3.0.0

application/javascript => text/javascript

deps: type-is@^2.0.0

deps: content-disposition@^1.0.0

... (truncated)

Commits

cd7d439 5.1.0
4c4f3ea fix(deps): serve-static@^2.2.0 (#6418)
cb4c56e fix(docs): remove @mertcanaltin from Triagers (#6408)
7b44e1d ci: use full SHAs for github action versions
eb6d125 deps: router@^2.2.0 (#6417)
f1a2dc8 deps: type-is@^2.0.1 (#6420)
6b51e8e deps: body-parser@^2.2.0 (#6419)
1f311c5 build(deps-dev): bump cookie-session from 2.0.0 to 2.1.0 (#6399)
9e97144 feat(deps): finalhandler@2.1.0 (#6373)
29d0980 build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (#6397)
Additional commits viewable in compare view

Updates @types/express from 5.0.0 to 5.0.3

Commits

See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

*Originally created by @dependabot[bot] on 6/20/2025* Bumps [express](https://github.com/expressjs/express) and [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express). These dependencies needed to be updated together. Updates `express` from 4.21.2 to 5.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p> <blockquote> <h2>v5.1.0</h2> <h2>What's Changed</h2> <ul> <li>Update captains by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6027">expressjs/express#6027</a></li> <li>build: Node.js 23.0 by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6075">expressjs/express#6075</a></li> <li>Add funding field (v5) by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6064">expressjs/express#6064</a></li> <li>✅ add discarded middleware test by <a href="https://github.com/ctcpip"><code>@ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5819">expressjs/express#5819</a></li> <li>update homepage link http to https by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5920">expressjs/express#5920</a></li> <li>Improve readme by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5994">expressjs/express#5994</a></li> <li>Add bjohansebas as repo captain for expressjs.com by <a href="https://github.com/crandmck"><code>@crandmck</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6058">expressjs/express#6058</a></li> <li>Remove Object.setPrototypeOf polyfill by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6081">expressjs/express#6081</a></li> <li>fix(buffer): use node:buffer instead of safe-buffer by <a href="https://github.com/bhavya3024"><code>@bhavya3024</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6071">expressjs/express#6071</a></li> <li>docs: Add DCO by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6048">expressjs/express#6048</a></li> <li>cleanup: remove promise support check from tests by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6148">expressjs/express#6148</a></li> <li>Use loop for acceptParams by <a href="https://github.com/blakeembrey"><code>@blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6066">expressjs/express#6066</a></li> <li>Improve documentation step in release process by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6150">expressjs/express#6150</a></li> <li>cleanup: remove unnecessary require for global Buffer by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6146">expressjs/express#6146</a></li> <li>cleanup: remove AsyncLocalStorage check by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6147">expressjs/express#6147</a></li> <li>update history.md for acceptParams change by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6177">expressjs/express#6177</a></li> <li>docs: add <a href="https://github.com/rxmarbles"><code>@rxmarbles</code></a> to the triage team by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6151">expressjs/express#6151</a></li> <li>refactor: improve readability by <a href="https://github.com/sazk07"><code>@sazk07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6173">expressjs/express#6173</a></li> <li>docs: clarify the security process in the triage role by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6217">expressjs/express#6217</a></li> <li>chore: replace <code>methods</code> dependency with standard library by <a href="https://github.com/jonkoops"><code>@jonkoops</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6196">expressjs/express#6196</a></li> <li>Remove <code>utils-merge</code> dependency - use spread syntax instead by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6091">expressjs/express#6091</a></li> <li>fix(securite): fix vulnerabilities by <a href="https://github.com/Abdel-Monaam-Aouini"><code>@Abdel-Monaam-Aouini</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6211">expressjs/express#6211</a></li> <li>refactor: prefix built-in node module imports by <a href="https://github.com/slagiewka"><code>@slagiewka</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6236">expressjs/express#6236</a></li> <li>fix: remove download size badges by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6266">expressjs/express#6266</a></li> <li>Remove unused <code>depd</code> dependency by <a href="https://github.com/jonkoops"><code>@jonkoops</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6197">expressjs/express#6197</a></li> <li>fix: usage of <code>Invalid action input 'persist-credentials'</code> for <code>actions/setup-node@v4</code> in <code>ci.yml</code> by <a href="https://github.com/hamirmahal"><code>@hamirmahal</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6256">expressjs/express#6256</a></li> <li>Add support for OSSF scorecard reporting by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5431">expressjs/express#5431</a></li> <li>docs: add <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> to the triage team by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6276">expressjs/express#6276</a></li> <li>fix: added a missing semicolon in css styles in examples/auth by <a href="https://github.com/pr4j3sh"><code>@pr4j3sh</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6297">expressjs/express#6297</a></li> <li>docs: include team email in the security policy by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6278">expressjs/express#6278</a></li> <li>refactor: simplify <code>normalizeTypes</code> function by <a href="https://github.com/Ayoub-Mabrouk"><code>@Ayoub-Mabrouk</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6097">expressjs/express#6097</a></li> <li>ci: updated github actions ci workflow by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6314">expressjs/express#6314</a></li> <li>ci: fix npm install --include typo by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6324">expressjs/express#6324</a></li> <li>ci: updated scorecard actions by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6322">expressjs/express#6322</a></li> <li>build(deps): use carat notation for dependency versions by <a href="https://github.com/dpopp07"><code>@dpopp07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6317">expressjs/express#6317</a></li> <li>chore(deps): update <code>debug</code> to ^4.4.0 by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6313">expressjs/express#6313</a></li> <li>docs: retroactively note 5.0.0-beta.1 api change in history file by <a href="https://github.com/dpopp07"><code>@dpopp07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6333">expressjs/express#6333</a></li> <li>feat(deps): body-parser@^2.1.0 by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6332">expressjs/express#6332</a></li> <li>feat(deps): router@^2.1.0 by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6331">expressjs/express#6331</a></li> <li>Update repo captains by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6234">expressjs/express#6234</a></li> <li>deps: upgrade nyc by <a href="https://github.com/agungjati"><code>@agungjati</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6122">expressjs/express#6122</a></li> <li>fix (deps): update deps by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6337">expressjs/express#6337</a></li> <li>response: add support for ETag option in res.sendFile by <a href="https://github.com/juanarbol"><code>@juanarbol</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6073">expressjs/express#6073</a></li> <li>Update multiple links to use <code>https</code> instead of <code>http</code> by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6338">expressjs/express#6338</a></li> <li>Extend res.links() to allow adding multiple links with the same rel <a href="https://redirect.github.com/expressjs/express/issues/2729">#2729</a> by <a href="https://github.com/andvea"><code>@andvea</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/4885">expressjs/express#4885</a></li> <li>docs: update emeritus triagers by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6345">expressjs/express#6345</a></li> <li>docs: update guidance for triager nominations by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6349">expressjs/express#6349</a></li> <li>docs: clarify guidelines for becoming a committer by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6364">expressjs/express#6364</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p> <blockquote> <h1>5.1.0 / 2025-03-31</h1> <ul> <li>Add support for <code>Uint8Array</code> in <code>res.send()</code></li> <li>Add support for ETag option in <code>res.sendFile()</code></li> <li>Add support for multiple links with the same rel in <code>res.links()</code></li> <li>Add funding field to package.json</li> <li>perf: use loop for acceptParams</li> <li>refactor: prefix built-in node module imports</li> <li>deps: remove <code>setprototypeof</code></li> <li>deps: remove <code>safe-buffer</code></li> <li>deps: remove <code>utils-merge</code></li> <li>deps: remove <code>methods</code></li> <li>deps: remove <code>depd</code></li> <li>deps: <code>debug@^4.4.0</code></li> <li>deps: <code>body-parser@^2.2.0</code></li> <li>deps: <code>router@^2.2.0</code></li> <li>deps: <code>content-type@^1.0.5</code></li> <li>deps: <code>finalhandler@^2.1.0</code></li> <li>deps: <code>qs@^6.14.0</code></li> <li>deps: <code>server-static@2.2.0</code></li> <li>deps: <code>type-is@2.0.1</code></li> </ul> <h1>5.0.1 / 2024-10-08</h1> <ul> <li>Update <code>cookie</code> semver lock to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-47764">CVE-2024-47764</a></li> </ul> <h1>5.0.0 / 2024-09-10</h1> <ul> <li>remove: <ul> <li><code>path-is-absolute</code> dependency - use <code>path.isAbsolute</code> instead</li> </ul> </li> <li>breaking: <ul> <li><code>res.status()</code> accepts only integers, and input must be greater than 99 and less than 1000 <ul> <li>will throw a <code>RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.</code> for inputs outside this range</li> <li>will throw a <code>TypeError: Invalid status code: ${code}. Status code must be an integer.</code> for non integer inputs</li> </ul> </li> <li>deps: send@1.0.0</li> <li><code>res.redirect('back')</code> and <code>res.location('back')</code> is no longer a supported magic string, explicitly use <code>req.get('Referrer') || '/'</code>.</li> </ul> </li> <li>change: <ul> <li><code>res.clearCookie</code> will ignore user provided <code>maxAge</code> and <code>expires</code> options</li> </ul> </li> <li>deps: cookie-signature@^1.2.1</li> <li>deps: debug@4.3.6</li> <li>deps: merge-descriptors@^2.0.0</li> <li>deps: serve-static@^2.1.0</li> <li>deps: qs@6.13.0</li> <li>deps: accepts@^2.0.0</li> <li>deps: mime-types@^3.0.0 <ul> <li><code>application/javascript</code> => <code>text/javascript</code></li> </ul> </li> <li>deps: type-is@^2.0.0</li> <li>deps: content-disposition@^1.0.0</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/express/commit/cd7d4397c398a3f3ecadeaf9ef6ac1377bd414c4"><code>cd7d439</code></a> 5.1.0</li> <li><a href="https://github.com/expressjs/express/commit/4c4f3ea1059319d217dbb8177dfec902d2917424"><code>4c4f3ea</code></a> fix(deps): serve-static@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6418">#6418</a>)</li> <li><a href="https://github.com/expressjs/express/commit/cb4c56e9a7ebc208730886e010b75475bf816fd9"><code>cb4c56e</code></a> fix(docs): remove <a href="https://github.com/mertcanaltin"><code>@mertcanaltin</code></a> from Triagers (<a href="https://redirect.github.com/expressjs/express/issues/6408">#6408</a>)</li> <li><a href="https://github.com/expressjs/express/commit/7b44e1d8501d7b8a15de5bbee7d10a67d86f2630"><code>7b44e1d</code></a> ci: use full SHAs for github action versions</li> <li><a href="https://github.com/expressjs/express/commit/eb6d12587a2fdb907bd91cbedcd3b92f434fadd0"><code>eb6d125</code></a> deps: router@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6417">#6417</a>)</li> <li><a href="https://github.com/expressjs/express/commit/f1a2dc884de77fe9e84cdc8807407bd57a2e1008"><code>f1a2dc8</code></a> deps: type-is@^2.0.1 (<a href="https://redirect.github.com/expressjs/express/issues/6420">#6420</a>)</li> <li><a href="https://github.com/expressjs/express/commit/6b51e8ef979d0aa6dc42ee0d61c8eb4c3e3196df"><code>6b51e8e</code></a> deps: body-parser@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6419">#6419</a>)</li> <li><a href="https://github.com/expressjs/express/commit/1f311c59d4b9cb94562ae0dd9917351e556f1602"><code>1f311c5</code></a> build(deps-dev): bump cookie-session from 2.0.0 to 2.1.0 (<a href="https://redirect.github.com/expressjs/express/issues/6399">#6399</a>)</li> <li><a href="https://github.com/expressjs/express/commit/9e97144222cb4c29df0a96b689781e87fc3e781c"><code>9e97144</code></a> feat(deps): finalhandler@2.1.0 (<a href="https://redirect.github.com/expressjs/express/issues/6373">#6373</a>)</li> <li><a href="https://github.com/expressjs/express/commit/29d09803c11641d910107793947cefe4c0133358"><code>29d0980</code></a> build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (<a href="https://redirect.github.com/expressjs/express/issues/6397">#6397</a>)</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.21.2...v5.1.0">compare view</a></li> </ul> </details> <br /> Updates `@types/express` from 5.0.0 to 5.0.3 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express">compare view</a></li> </ul> </details> <br /> You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

MrUnknownDE closed this issue

2026-04-05 18:57:27 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1324