Skip to content

Bump express from 4.17.1 to 4.22.0 - #83

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/express-4.19.2
Open

Bump express from 4.17.1 to 4.22.0#83
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/express-4.19.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 26, 2024 •
edited
Loading

Copy link
Copy Markdown

Bumps express from 4.17.1 to 4.22.0.

Release notes

Sourced from express's releases.

4.22.0

Important: Security

What's Changed

Full Changelog: expressjs/express@4.21.2...4.22.0

4.21.2

What's Changed

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from express's changelog.

4.22.0 / 2025-12-01

4.21.2 / 2024-11-06

  • deps: path-to-regexp@0.1.12
    • Fix backtracking protection
  • deps: path-to-regexp@0.1.11
    • Throws an error on invalid path values

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

  • Deprecate res.location("back") and res.redirect("back") magic string
  • deps: serve-static@1.16.2
    • includes send@0.19.0
  • deps: finalhandler@1.3.1
  • deps: qs@6.13.0

4.20.0 / 2024-09-10

  • deps: serve-static@0.16.0
    • Remove link renderization in html while redirecting
  • deps: send@0.19.0
    • Remove link renderization in html while redirecting
  • deps: body-parser@0.6.0
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: path-to-regexp@0.1.10
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

4.19.2 / 2024-03-25

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for express since your current version.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Mar 26, 2024
@rvandermeulen

rvandermeulen commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
Bump express from 4.17.1 to 4.22.0
0e2243a 
Bumps [express](https://github.com/expressjs/express) from 4.17.1 to 4.22.0.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.22.0/History.md)
- [Commits](expressjs/express@4.17.1...4.22.0)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 4.19.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump express from 4.17.1 to 4.19.2 Bump express from 4.17.1 to 4.22.0 Aug 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/express-4.19.2 branch from 2aa880f to 0e2243a Compare August 12, 2026 03:13
@rvandermeulen

rvandermeulen commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

@Archaeopteryx Is this something we should take?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rvandermeulen