From 349d2abe7df06a8712ea5f0c7a3af26cba817c7e Mon Sep 17 00:00:00 2001 From: billchurch Date: Wed, 27 Sep 2017 14:38:10 -0400 Subject: [PATCH] Upgrade express to 4.15.5 --- .snyk | 49 ++++++++++++++++++++++++++++--------------------- ChangeLog.md | 1 + package.json | 4 ++-- 3 files changed, 31 insertions(+), 23 deletions(-) diff --git a/.snyk b/.snyk index 9d45cb7..eac4b80 100644 --- a/.snyk +++ b/.snyk @@ -6,45 +6,24 @@ ignore: - socket.io > socket.io-adapter > socket.io-parser > debug > ms: reason: no patch avail expires: '2017-12-31T14:21:30.266Z' - socket.io > socket.io-client > debug > ms: - reason: no sutiable socket.io versions for node 0.12.x - expires: '2017-10-26T19:22:38.259Z' - standard > eslint-plugin-import > eslint-module-utils > debug > ms: reason: no patch avail expires: '2017-12-31T14:21:30.266Z' - socket.io > debug > ms: - reason: no sutiable socket.io versions for node 0.12.x - expires: '2017-10-26T19:22:38.259Z' - socket.io > socket.io-adapter > debug > ms: reason: no patch avail expires: '2017-12-31T14:21:30.267Z' - socket.io > engine.io > debug > ms: - reason: no sutiable socket.io versions for node 0.12.x - expires: '2017-10-26T19:22:38.259Z' - socket.io > socket.io-client > debug > ms: reason: no patch avail expires: '2017-12-31T14:21:30.267Z' - socket.io > socket.io-adapter > debug > ms: - reason: no sutiable socket.io versions for node 0.12.x - expires: '2017-10-26T19:22:38.259Z' - socket.io > socket.io-adapter > debug > ms: reason: no patch avail expires: '2017-12-31T23:54:38.169Z' - socket.io > socket.io-client > engine.io-client > debug > ms: - reason: no sutiable socket.io versions for node 0.12.x - expires: '2017-10-26T19:22:38.259Z' - socket.io > socket.io-client > debug > ms: reason: no patch avail expires: '2017-12-31T23:54:38.169Z' - socket.io > socket.io-parser > debug > ms: - reason: no sutiable socket.io versions for node 0.12.x - expires: '2017-10-26T19:22:38.259Z' - socket.io > socket.io-adapter > socket.io-parser > debug > ms: reason: no patch avail expires: '2017-12-31T23:54:38.170Z' - socket.io > socket.io-client > socket.io-parser > debug > ms: - reason: no sutiable socket.io versions for node 0.12.x - expires: '2017-10-26T19:22:38.259Z' - socket.io > socket.io-adapter > socket.io-parser > debug > ms: reason: no suitable upgrades expires: '2017-10-26T19:22:38.259Z' @@ -90,6 +69,27 @@ ignore: - socket.io > socket.io-client > socket.io-parser > debug > ms: reason: no sutiable socket.io versions for node 0.12.x expires: '2017-10-26T19:13:27.320Z' + - socket.io > socket.io-client > debug > ms: + reason: no sutiable socket.io versions for node 0.12.x + expires: '2017-10-26T19:22:38.259Z' + - socket.io > debug > ms: + reason: no sutiable socket.io versions for node 0.12.x + expires: '2017-10-26T19:22:38.259Z' + - socket.io > engine.io > debug > ms: + reason: no sutiable socket.io versions for node 0.12.x + expires: '2017-10-26T19:22:38.259Z' + - socket.io > socket.io-adapter > debug > ms: + reason: no sutiable socket.io versions for node 0.12.x + expires: '2017-10-26T19:22:38.259Z' + - socket.io > socket.io-client > engine.io-client > debug > ms: + reason: no sutiable socket.io versions for node 0.12.x + expires: '2017-10-26T19:22:38.259Z' + - socket.io > socket.io-parser > debug > ms: + reason: no sutiable socket.io versions for node 0.12.x + expires: '2017-10-26T19:22:38.259Z' + - socket.io > socket.io-client > socket.io-parser > debug > ms: + reason: no sutiable socket.io versions for node 0.12.x + expires: '2017-10-26T19:22:38.259Z' 'npm:shelljs:20140723': - standard > eslint > shelljs: reason: no patch avail @@ -123,4 +123,11 @@ ignore: - socket.io > socket.io-client > engine.io-client > parsejson: reason: no suitable upgrades expires: '2017-10-26T19:22:38.259Z' + 'npm:mime:20170907': + - express > send > mime: + reason: no suitable upgrade path + expires: '2017-10-27T18:37:13.178Z' + - express > serve-static > send > mime: + reason: no suitable upgrade path + expires: '2017-10-27T18:37:13.178Z' patch: {} diff --git a/ChangeLog.md b/ChangeLog.md index 1ec3dde..993f330 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -2,6 +2,7 @@ ## [0.1.3] TBD ### Changed - Revert to debug@2.6.9 to eliminate ReDoS in %o formatter +- Upgrade Express to 4.15.5 ## [0.1.2] 2017-07-31 ### Added - ssh.readyTimeout option in config.json (time in ms, default 20000, 20sec) diff --git a/package.json b/package.json index 1767d15..1f6a17f 100644 --- a/package.json +++ b/package.json @@ -30,7 +30,7 @@ "basic-auth": "^1.1.0", "colors": "^1.1.2", "debug": "^2.6.9", - "express": "^4.15.4", + "express": "^4.15.5", "express-session": "^1.15.5", "morgan": "^1.8.2", "read-config": "^1.6.0", @@ -64,4 +64,4 @@ "public/src/js/*.js" ] } -} +} \ No newline at end of file