Skip to content

Update dependency express to v5#1868

Open
renovate[bot] wants to merge 1 commit into
developfrom
renovate/express-5.x
Open

Update dependency express to v5#1868
renovate[bot] wants to merge 1 commit into
developfrom
renovate/express-5.x

Conversation

@renovate

@renovate renovate Bot commented Feb 28, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
express (source) 4.22.15.2.1 age confidence

Release Notes

expressjs/express (express)

v5.2.1

Compare Source

=======================

v5.2.0

Compare Source

========================

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

v5.1.0

Compare Source

========================

  • Add support for Uint8Array in res.send()
  • Add support for ETag option in res.sendFile()
  • Add support for multiple links with the same rel in res.links()
  • Add funding field to package.json
  • perf: use loop for acceptParams
  • refactor: prefix built-in node module imports
  • deps: remove setprototypeof
  • deps: remove safe-buffer
  • deps: remove utils-merge
  • deps: remove methods
  • deps: remove depd
  • deps: debug@^4.4.0
  • deps: body-parser@^2.2.0
  • deps: router@^2.2.0
  • deps: content-type@^1.0.5
  • deps: finalhandler@^2.1.0
  • deps: qs@^6.14.0
  • deps: server-static@2.2.0
  • deps: type-is@2.0.1

v5.0.1

Compare Source

==========

v5.0.0

Compare Source

=========================

  • remove:
    • path-is-absolute dependency - use path.isAbsolute instead
  • breaking:
    • res.status() accepts only integers, and input must be greater than 99 and less than 1000
      • will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range
      • will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs
    • deps: send@​1.0.0
    • res.redirect('back') and res.location('back') is no longer a supported magic string, explicitly use req.get('Referrer') || '/'.
  • change:
    • res.clearCookie will ignore user provided maxAge and expires options
  • deps: cookie-signature@^1.2.1
  • deps: debug@​4.3.6
  • deps: merge-descriptors@^2.0.0
  • deps: serve-static@^2.1.0
  • deps: qs@​6.13.0
  • deps: accepts@^2.0.0
  • deps: mime-types@^3.0.0
    • application/javascript => text/javascript
  • deps: type-is@^2.0.0
  • deps: content-disposition@^1.0.0
  • deps: finalhandler@^2.0.0
  • deps: fresh@^2.0.0
  • deps: body-parser@^2.0.1
  • deps: send@^1.1.0

v4.22.2

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
    • Only on Sunday and Saturday (* * * * 0,6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Feb 28, 2026
@codecov

codecov Bot commented Feb 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.72%. Comparing base (74ef7ee) to head (2d23c6c).
⚠️ Report is 1 commits behind head on develop.

Additional details and impacted files
@@           Coverage Diff            @@
##           develop    #1868   +/-   ##
========================================
  Coverage    96.72%   96.72%           
========================================
  Files          220      220           
  Lines        31297    31297           
  Branches      4707     4707           
========================================
  Hits         30271    30271           
  Misses        1021     1021           
  Partials         5        5           
Flag Coverage Δ
common 95.48% <ø> (ø)
dataview 98.49% <ø> (ø)
download 96.92% <ø> (ø)
search 95.64% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate Bot force-pushed the renovate/express-5.x branch 2 times, most recently from fa53cce to 6dc6f87 Compare March 10, 2026 17:23
@renovate renovate Bot force-pushed the renovate/express-5.x branch 3 times, most recently from 1a3ff1c to 193eb93 Compare March 19, 2026 09:24
@renovate renovate Bot force-pushed the renovate/express-5.x branch from 193eb93 to 418cb87 Compare April 1, 2026 16:53
@renovate renovate Bot force-pushed the renovate/express-5.x branch from 418cb87 to 0f3e27a Compare April 8, 2026 20:18
@renovate renovate Bot force-pushed the renovate/express-5.x branch from 0f3e27a to f03b193 Compare April 29, 2026 15:08
@renovate renovate Bot force-pushed the renovate/express-5.x branch 2 times, most recently from 797cb41 to 2aabc60 Compare May 18, 2026 10:03
@renovate renovate Bot force-pushed the renovate/express-5.x branch 2 times, most recently from 4c62779 to 027d04c Compare June 1, 2026 19:05
@renovate renovate Bot force-pushed the renovate/express-5.x branch 2 times, most recently from 81aade9 to 95c4f01 Compare June 12, 2026 08:49
@renovate renovate Bot force-pushed the renovate/express-5.x branch from 95c4f01 to 2d23c6c Compare June 23, 2026 08:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants