Skip to content

Bump express and lockfile dependencies for node-app-3#373

Merged
shukitchan merged 2 commits into
apache:masterfrom
shukitchan:copilot/update-dependencies-in-docker-images
Jul 13, 2026
Merged

Bump express and lockfile dependencies for node-app-3#373
shukitchan merged 2 commits into
apache:masterfrom
shukitchan:copilot/update-dependencies-in-docker-images

Conversation

@shukitchan

Copy link
Copy Markdown
Contributor

This pull request updates several dependencies in the node-app-3 service to address bug fixes, security patches, and general improvements. The main focus is on updating express and its related dependencies, as well as other commonly used libraries. These updates help keep the project secure and compatible with the latest features.

Dependency Updates:

  • Upgraded express from version 4.22.1 to 4.22.2 in both package.json and package-lock.json, ensuring the app uses the latest stable release. [1] [2] [3]
  • Updated body-parser from 1.20.4 to 1.20.6 and its dependency qs from ~6.14.0/6.14.2 to ~6.15.1/6.15.3, and added es-define-property as a new dependency for qs. [1] [2] [3] [4]
  • Upgraded several supporting libraries: es-object-atoms to 1.1.2, hasown to 2.0.4, object-inspect to 1.13.4, side-channel to 1.1.1, and side-channel-list to 1.0.1. [1] [2] [3] [4] [5]

Metadata Improvements:

  • Added missing license fields to several dependencies (content-type, media-typer, object-inspect, type-is) for better compliance and clarity. [1] [2] [3] [4]

These updates are routine maintenance and do not introduce breaking changes, but they improve the overall security and maintainability of the service.

@shukitchan
shukitchan merged commit 69e1c06 into apache:master Jul 13, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants