dependabot[bot] opened a new pull request, #3108: URL: https://github.com/apache/jena/pull/3108
Bumps [express](https://github.com/expressjs/express) from 4.21.2 to 5.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p> <blockquote> <h2>v5.1.0</h2> <h2>What's Changed</h2> <ul> <li>Update captains by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6027">expressjs/express#6027</a></li> <li>build: Node.js 23.0 by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6075">expressjs/express#6075</a></li> <li>Add funding field (v5) by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6064">expressjs/express#6064</a></li> <li>✅ add discarded middleware test by <a href="https://github.com/ctcpip"><code>@ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5819">expressjs/express#5819</a></li> <li>update homepage link http to https by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5920">expressjs/express#5920</a></li> <li>Improve readme by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5994">expressjs/express#5994</a></li> <li>Add bjohansebas as repo captain for expressjs.com by <a href="https://github.com/crandmck"><code>@crandmck</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6058">expressjs/express#6058</a></li> <li>Remove Object.setPrototypeOf polyfill by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6081">expressjs/express#6081</a></li> <li>fix(buffer): use node:buffer instead of safe-buffer by <a href="https://github.com/bhavya3024"><code>@bhavya3024</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6071">expressjs/express#6071</a></li> <li>docs: Add DCO by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6048">expressjs/express#6048</a></li> <li>cleanup: remove promise support check from tests by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6148">expressjs/express#6148</a></li> <li>Use loop for acceptParams by <a href="https://github.com/blakeembrey"><code>@blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6066">expressjs/express#6066</a></li> <li>Improve documentation step in release process by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6150">expressjs/express#6150</a></li> <li>cleanup: remove unnecessary require for global Buffer by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6146">expressjs/express#6146</a></li> <li>cleanup: remove AsyncLocalStorage check by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6147">expressjs/express#6147</a></li> <li>update history.md for acceptParams change by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6177">expressjs/express#6177</a></li> <li>docs: add <a href="https://github.com/rxmarbles"><code>@rxmarbles</code></a> to the triage team by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6151">expressjs/express#6151</a></li> <li>refactor: improve readability by <a href="https://github.com/sazk07"><code>@sazk07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6173">expressjs/express#6173</a></li> <li>docs: clarify the security process in the triage role by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6217">expressjs/express#6217</a></li> <li>chore: replace <code>methods</code> dependency with standard library by <a href="https://github.com/jonkoops"><code>@jonkoops</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6196">expressjs/express#6196</a></li> <li>Remove <code>utils-merge</code> dependency - use spread syntax instead by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6091">expressjs/express#6091</a></li> <li>fix(securite): fix vulnerabilities by <a href="https://github.com/Abdel-Monaam-Aouini"><code>@Abdel-Monaam-Aouini</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6211">expressjs/express#6211</a></li> <li>refactor: prefix built-in node module imports by <a href="https://github.com/slagiewka"><code>@slagiewka</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6236">expressjs/express#6236</a></li> <li>fix: remove download size badges by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6266">expressjs/express#6266</a></li> <li>Remove unused <code>depd</code> dependency by <a href="https://github.com/jonkoops"><code>@jonkoops</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6197">expressjs/express#6197</a></li> <li>fix: usage of <code>Invalid action input 'persist-credentials'</code> for <code>actions/setup-node@v4</code> in <code>ci.yml</code> by <a href="https://github.com/hamirmahal"><code>@hamirmahal</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6256">expressjs/express#6256</a></li> <li>Add support for OSSF scorecard reporting by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5431">expressjs/express#5431</a></li> <li>docs: add <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> to the triage team by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6276">expressjs/express#6276</a></li> <li>fix: added a missing semicolon in css styles in examples/auth by <a href="https://github.com/pr4j3sh"><code>@pr4j3sh</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6297">expressjs/express#6297</a></li> <li>docs: include team email in the security policy by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6278">expressjs/express#6278</a></li> <li>refactor: simplify <code>normalizeTypes</code> function by <a href="https://github.com/Ayoub-Mabrouk"><code>@Ayoub-Mabrouk</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6097">expressjs/express#6097</a></li> <li>ci: updated github actions ci workflow by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6314">expressjs/express#6314</a></li> <li>ci: fix npm install --include typo by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6324">expressjs/express#6324</a></li> <li>ci: updated scorecard actions by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6322">expressjs/express#6322</a></li> <li>build(deps): use carat notation for dependency versions by <a href="https://github.com/dpopp07"><code>@dpopp07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6317">expressjs/express#6317</a></li> <li>chore(deps): update <code>debug</code> to ^4.4.0 by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6313">expressjs/express#6313</a></li> <li>docs: retroactively note 5.0.0-beta.1 api change in history file by <a href="https://github.com/dpopp07"><code>@dpopp07</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6333">expressjs/express#6333</a></li> <li>feat(deps): body-parser@^2.1.0 by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6332">expressjs/express#6332</a></li> <li>feat(deps): router@^2.1.0 by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6331">expressjs/express#6331</a></li> <li>Update repo captains by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6234">expressjs/express#6234</a></li> <li>deps: upgrade nyc by <a href="https://github.com/agungjati"><code>@agungjati</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6122">expressjs/express#6122</a></li> <li>fix (deps): update deps by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6337">expressjs/express#6337</a></li> <li>response: add support for ETag option in res.sendFile by <a href="https://github.com/juanarbol"><code>@juanarbol</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6073">expressjs/express#6073</a></li> <li>Update multiple links to use <code>https</code> instead of <code>http</code> by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6338">expressjs/express#6338</a></li> <li>Extend res.links() to allow adding multiple links with the same rel <a href="https://redirect.github.com/expressjs/express/issues/2729">#2729</a> by <a href="https://github.com/andvea"><code>@andvea</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/4885">expressjs/express#4885</a></li> <li>docs: update emeritus triagers by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6345">expressjs/express#6345</a></li> <li>docs: update guidance for triager nominations by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6349">expressjs/express#6349</a></li> <li>docs: clarify guidelines for becoming a committer by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6364">expressjs/express#6364</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p> <blockquote> <h1>5.1.0 / 2025-03-31</h1> <ul> <li>Add support for <code>Uint8Array</code> in <code>res.send()</code></li> <li>Add support for ETag option in <code>res.sendFile()</code></li> <li>Add support for multiple links with the same rel in <code>res.links()</code></li> <li>Add funding field to package.json</li> <li>perf: use loop for acceptParams</li> <li>refactor: prefix built-in node module imports</li> <li>deps: remove <code>setprototypeof</code></li> <li>deps: remove <code>safe-buffer</code></li> <li>deps: remove <code>utils-merge</code></li> <li>deps: remove <code>methods</code></li> <li>deps: remove <code>depd</code></li> <li>deps: <code>debug@^4.4.0</code></li> <li>deps: <code>body-parser@^2.2.0</code></li> <li>deps: <code>router@^2.2.0</code></li> <li>deps: <code>content-type@^1.0.5</code></li> <li>deps: <code>finalhandler@^2.1.0</code></li> <li>deps: <code>qs@^6.14.0</code></li> <li>deps: <code>[email protected]</code></li> <li>deps: <code>[email protected]</code></li> </ul> <h1>5.0.1 / 2024-10-08</h1> <ul> <li>Update <code>cookie</code> semver lock to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-47764">CVE-2024-47764</a></li> </ul> <h1>5.0.0 / 2024-09-10</h1> <ul> <li>remove: <ul> <li><code>path-is-absolute</code> dependency - use <code>path.isAbsolute</code> instead</li> </ul> </li> <li>breaking: <ul> <li><code>res.status()</code> accepts only integers, and input must be greater than 99 and less than 1000 <ul> <li>will throw a <code>RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.</code> for inputs outside this range</li> <li>will throw a <code>TypeError: Invalid status code: ${code}. Status code must be an integer.</code> for non integer inputs</li> </ul> </li> <li>deps: [email protected]</li> <li><code>res.redirect('back')</code> and <code>res.location('back')</code> is no longer a supported magic string, explicitly use <code>req.get('Referrer') || '/'</code>.</li> </ul> </li> <li>change: <ul> <li><code>res.clearCookie</code> will ignore user provided <code>maxAge</code> and <code>expires</code> options</li> </ul> </li> <li>deps: cookie-signature@^1.2.1</li> <li>deps: [email protected]</li> <li>deps: merge-descriptors@^2.0.0</li> <li>deps: serve-static@^2.1.0</li> <li>deps: [email protected]</li> <li>deps: accepts@^2.0.0</li> <li>deps: mime-types@^3.0.0 <ul> <li><code>application/javascript</code> => <code>text/javascript</code></li> </ul> </li> <li>deps: type-is@^2.0.0</li> <li>deps: content-disposition@^1.0.0</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/express/commit/cd7d4397c398a3f3ecadeaf9ef6ac1377bd414c4"><code>cd7d439</code></a> 5.1.0</li> <li><a href="https://github.com/expressjs/express/commit/4c4f3ea1059319d217dbb8177dfec902d2917424"><code>4c4f3ea</code></a> fix(deps): serve-static@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6418">#6418</a>)</li> <li><a href="https://github.com/expressjs/express/commit/cb4c56e9a7ebc208730886e010b75475bf816fd9"><code>cb4c56e</code></a> fix(docs): remove <a href="https://github.com/mertcanaltin"><code>@mertcanaltin</code></a> from Triagers (<a href="https://redirect.github.com/expressjs/express/issues/6408">#6408</a>)</li> <li><a href="https://github.com/expressjs/express/commit/7b44e1d8501d7b8a15de5bbee7d10a67d86f2630"><code>7b44e1d</code></a> ci: use full SHAs for github action versions</li> <li><a href="https://github.com/expressjs/express/commit/eb6d12587a2fdb907bd91cbedcd3b92f434fadd0"><code>eb6d125</code></a> deps: router@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6417">#6417</a>)</li> <li><a href="https://github.com/expressjs/express/commit/f1a2dc884de77fe9e84cdc8807407bd57a2e1008"><code>f1a2dc8</code></a> deps: type-is@^2.0.1 (<a href="https://redirect.github.com/expressjs/express/issues/6420">#6420</a>)</li> <li><a href="https://github.com/expressjs/express/commit/6b51e8ef979d0aa6dc42ee0d61c8eb4c3e3196df"><code>6b51e8e</code></a> deps: body-parser@^2.2.0 (<a href="https://redirect.github.com/expressjs/express/issues/6419">#6419</a>)</li> <li><a href="https://github.com/expressjs/express/commit/1f311c59d4b9cb94562ae0dd9917351e556f1602"><code>1f311c5</code></a> build(deps-dev): bump cookie-session from 2.0.0 to 2.1.0 (<a href="https://redirect.github.com/expressjs/express/issues/6399">#6399</a>)</li> <li><a href="https://github.com/expressjs/express/commit/9e97144222cb4c29df0a96b689781e87fc3e781c"><code>9e97144</code></a> feat(deps): [email protected] (<a href="https://redirect.github.com/expressjs/express/issues/6373">#6373</a>)</li> <li><a href="https://github.com/expressjs/express/commit/29d09803c11641d910107793947cefe4c0133358"><code>29d0980</code></a> build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (<a href="https://redirect.github.com/expressjs/express/issues/6397">#6397</a>)</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.21.2...v5.1.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
