[Snyk] Upgrade express-validator from 5.3.0 to 7.1.0 #8
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade express-validator from 5.3.0 to 7.1.0. See this package in npm: express-validator See this project in Snyk: https://app.snyk.io/org/okeamah/project/ec433d3a-7447-4663-81df-5844d2f51e48?utm_source=github&utm_medium=referral&page=upgrade-pr
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade express-validator from 5.3.0 to 7.1.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 36 versions ahead of your current version.
The recommended version was released on 3 months ago.
Issues fixed by the recommended upgrade:
SNYK-JS-LODASH-1040724
SNYK-JS-LODASH-450202
SNYK-JS-LODASH-567746
SNYK-JS-LODASH-608086
SNYK-JS-LODASH-6139239
SNYK-JS-EXPRESSVALIDATOR-174763
SNYK-JS-LODASH-1018905
SNYK-JS-VALIDATOR-1090599
SNYK-JS-VALIDATOR-1090601
SNYK-JS-VALIDATOR-1090602
Release notes
Package name: express-validator
-
7.1.0 - 2024-05-19
- Upgraded validator to v13.12.0 (see their release notes: https://github.com/validatorjs/validator.js/releases/tag/13.12.0)
- Added missing fields to
- Added
- Several improvements to docs
-
7.0.1 - 2023-04-16
- Fixed
-
7.0.0 - 2023-04-15
- Minimum supported Node.js version is now 14+
- Removed deprecated APIs - #993
- Import paths
- Sanitization-only middlewares (e.g.
- Deprecated TypeScript types (
- Validation errors changed shape
- Field validation errors
- (TypeScript only) The
- Added validation for no unknown fields - #558, #578, #612, #1148, #809, #927, #1204
- Added globstars (deep wildcard) support - #790, #1137, #1216
- Added support for multiple custom validators/sanitizers in
- Added request-level bail - #1100, #1214
- Added a
- Added
- Added new error types to
- Validating/sanitizing arrays no longer drops all but the first value - #791, #755, #704, #1002
- Added missing
- Don't silently fail when setting
- @ Yoowatney made their first contribution in #1219
-
6.15.0 - 2023-02-16
- chore(deps): bump ua-parser-js from 0.7.32 to 0.7.33 by @ dependabot in #1208
- chore(deps): bump eta from 1.12.3 to 2.0.0 by @ dependabot in #1211
- chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 by @ dependabot in #1210
- feat: update to support validator 13.9.0 by @ fedeci in #1212
-
6.14.3 - 2023-01-20
- docs: fixed typo in sanitization chain example by @ ankushknr19 in #1195
- fixed infinite recursion when the request has a field called
- @ ankushknr19 made their first contribution in #1195
-
6.14.2 - 2022-06-19
- correctly run
- @ tonysamperi made their first contribution in #1156
-
6.14.1 - 2022-05-22
- Add
- chore(deps): bump shelljs from 0.8.4 to 0.8.5 by @ dependabot in #1128
- chore(deps): bump ajv from 6.11.0 to 6.12.6 by @ dependabot in #1129
- chore(deps): bump prismjs from 1.25.0 to 1.27.0 by @ dependabot in #1135
- docs: remove dependencies status badge by @ gustavohenke in #1131
- chore(deps): bump minimist from 1.2.5 to 1.2.6 by @ dependabot in #1142
- chore(deps): bump async from 2.6.3 to 2.6.4 by @ dependabot in #1147
- Add missing
- @ daenamkim made their first contribution in #1120
-
6.14.0 - 2021-12-11
- feat: update
- chore(deps): bump tmpl from 1.0.4 to 1.0.5 by @ dependabot in #1116
- chore(deps): bump path-parse from 1.0.6 to 1.0.7 by @ dependabot in #1118
- chore(deps): bump prismjs from 1.24.0 to 1.25.0 by @ dependabot in #1117
-
6.13.0 - 2021-10-12
- docs: warn users about bad practice by @ hariprasadkc in #1094
- schema usage according to documentation results in Error by @ fkarg in #1095
- v6.13 features by @ fedeci in #1091
- @ hariprasadkc made their first contribution in #1094
- @ fkarg made their first contribution in #1095
-
6.12.2 - 2021-09-26
- #1072: add type for
- #1092, #1086: correctly allow falsy values as options in
-
6.12.1 - 2021-07-23
-
6.12.0 - 2021-06-14
-
6.11.1 - 2021-05-08
-
6.11.0 - 2021-05-08
-
6.10.1 - 2021-04-24
-
6.10.0 - 2021-02-23
-
6.9.2 - 2021-01-04
-
6.9.1 - 2021-01-03
-
6.9.0 - 2020-12-25
-
6.8.2 - 2020-12-25
-
6.8.1 - 2020-12-21
-
6.8.0 - 2020-12-08
-
6.7.0 - 2020-11-23
-
6.6.1 - 2020-08-02
-
6.6.0 - 2020-06-21
-
6.5.0 - 2020-05-17
-
6.4.1 - 2020-05-01
-
6.4.0 - 2020-02-01
-
6.3.1 - 2019-12-29
-
6.3.0 - 2019-11-24
-
6.2.0 - 2019-08-30
-
6.1.1 - 2019-07-01
-
6.1.0 - 2019-06-27
-
6.0.1 - 2019-06-21
-
6.0.0 - 2019-06-20
-
5.3.1 - 2018-12-23
-
5.3.0 - 2018-07-23
from express-validator GitHub release notesIsURLOptions(#1258, #1259)isULID()validator (#1248)checkSchema()warning that known validators are unknown when its value isfalse- #1223🚀 🙌 First major version in almost 4 years! 🚀 🤯
Thanks everybody for having the patience. Hopefully this version brings many improvements to your developer experience!
Breaking changes 💥
express-validator/checkandexpress-validator/filtersanitize(),sanitizeBody(), etc)ValidationParamSchemaandValidationSchema)isObject()validator now assumesoptions.strict = trueby defaultparamproperty has been renamed topathoneOf()validation errors no longer have aparam: '_error'propertyValidationErrortype is now a discriminated union, it might be necessary to useswitchorifstatements to check that you're dealing with the type that you want to debug/formatoneOf()signature changed: fromoneOf(chains, message)tooneOf(chains, options: { message, errorType })oneOf()default error structure now groups errors by their... validation group!, instead of in a flat listCheckout the migration guide for examples on how to work around some of these:
https://express-validator.github.io/docs/migration-v6-to-v7
New features ✨
checkSchema()- #552, #1180ExpressValidatorclass which allows adding "persistent" custom validators, sanitizers, and options - #1077, #1079, #1209oneOf()support to.if()- #1170oneOf()- #956, #1022Bug fixes 🐛
ko-KRtoMobilePhoneLocale- #1218, #1219withMessageandnotin schemas - #664New Contributors
Full Changelog: v6.15.0...v7.0.0
What's Changed
Full Changelog: v6.14.3...v6.15.0
What's Changed
*(#1205)New Contributors
Full Changelog: v6.14.2...v6.14.3
What's Changed
.matcheswhen passing regex object by @ tonysamperi in #1156New Contributors
Full Changelog: v6.14.1...v6.14.2
What's Changed
validationResult()for schema validation example by @ daenamkim in #1120SKpostal code - #1144New Contributors
Full Changelog: v6.14.0...v6.14.1
What's Changed
validatorto13.7by @ fedeci in #1115Full Changelog: v6.13.0...v6.14.0
What's Changed
New Contributors
Full Changelog: v6.12.2...v6.13.0
Fixes:
checkSchemafunction returncheckSchemaImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: