Skip to content

chore(deps): bump axios@1.20.0, express-rate-limit@8.7.0, graphql@17, others - #586

Merged
petruki merged 1 commit into
masterfrom
staging
Aug 30, 2026
Merged

chore(deps): bump axios@1.20.0, express-rate-limit@8.7.0, graphql@17, others#586
petruki merged 1 commit into
masterfrom
staging

Conversation

@petruki

@petruki petruki commented Aug 30, 2026

Copy link
Copy Markdown
Member

This pull request updates several GitHub Actions workflows and dependency versions to keep the project up to date with the latest features, improvements, and security patches. The most important changes are grouped below.

GitHub Actions Workflow Updates:

  • Updated all actions/checkout steps from version v6 to v7 in .github/workflows/master.yml, .github/workflows/release.yml, .github/workflows/re-release.yml, and .github/workflows/sonar.yml to use the latest version of the checkout action. [1] [2] [3] [4] [5] [6] [7]
  • Updated all actions/setup-node steps from version v6 to v7 in the same workflow files to use the latest Node.js setup action. [1] [2] [3] [4]
  • Updated sonarsource/sonarqube-scan-action from v8.1.0 to v8.2.1 in .github/workflows/master.yml and .github/workflows/sonar.yml for improved SonarCloud integration. [1] [2]

Dependency Updates:

  • Upgraded several dependencies in package.json to their latest minor or patch versions, including axios, express-rate-limit, graphql, graphql-http, graphql-tag, helmet, mongodb, and mongoose for bug fixes and security improvements.
  • Upgraded development dependencies in package.json, such as eslint, jest, and sinon, to their latest versions for better tooling and compatibility.

@petruki petruki added this to the v1.4.1 milestone Aug 30, 2026
@petruki petruki self-assigned this Aug 30, 2026
@petruki petruki added the dependencies Pull requests that update a dependency file label Aug 30, 2026
@sonarqubecloud

Copy link
Copy Markdown

@petruki
petruki merged commit 95dd6b6 into master Aug 30, 2026
5 checks passed
@petruki
petruki deleted the staging branch August 30, 2026 21:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant