devdeps(express-access-log-middleware): update express-access-log-middleware dev dependencies by mapcolonies-devops · Pull Request #319 · MapColonies/infra-packages

mapcolonies-devops · 2026-09-17T13:03:24Z

This PR contains the following updates:

Package	Change	Age	Confidence
express (source)	`4.22.2` → `4.22.3`
pino (source)	`10.3.1` → `10.4.0`

Release Notes

expressjs/express (express)

`v4.22.3`

Compare Source

What's Changed

Update path-to-regexp to 0.1.13 to fix CVE-2026-4867 by @baryman in #7135
feat: allow conditional revalidation for QUERY requests (v4) by @Cherry in #7377
deps: qs@~6.16.0 by @lazerg in #7440
ci: add npm staged publication with dist-tag support by @UlisesGascon in #7465
4.22.3 by @UlisesGascon in #7466

New Contributors

@baryman made their first contribution in #7135
@lazerg made their first contribution in #7440

Full Changelog: expressjs/express@v4.22.2...v4.22.3

pinojs/pino (pino)

`v10.4.0`

Compare Source

What's Changed

Add warning on incompatible formatters.level with multi-target transports by @lraveri in #2381
chore: use TSTyche for type testing by @mrazauskas in #2376
Add Sentry Native Integration Docs by @KyleTryon in #2394
docs: add flush limitation warning for pino-pretty, fix #1015 by @mcollina in #2402
feat(browser): add redaction support by @abhu85 in #2396
chore: lint the type declaration file by @mrazauskas in #2408
chore: remove TSTyche config file by @mrazauskas in #2409
docs: clarify multi-target formatter limitation by @mcollina in #2410
No bots allowed by @mcollina in #2412
build(deps): bump real-require from 0.2.0 to 1.0.0 by @dependabot[bot] in #2414
build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @dependabot[bot] in #2418
fix: use util.getCallSites when able to allow frozen intrinsics by @CarlOlson in #2294
Update AWS Lambda reference in asynchronous docs by @urbanautomaton in #2413
chore: update license by @Tony133 in #2375
fix: add named default export by @mrazauskas in #2421
Update contrib doc by @jsumners in #2424
docs: use @hono/structured-logger for Pino with Hono by @brunorodmoreira in #2425
chore(deps): remove pre-commit by @kshitijanurag in #2423
build(deps): bump actions/github-script from 8 to 9 by @dependabot[bot] in #2427
build(deps-dev): bump eslint-plugin-promise from 6.6.0 to 7.3.0 by @dependabot[bot] in #2428
build(deps-dev): bump tstyche from 6.2.0 to 7.1.0 by @dependabot[bot] in #2429
test: fix flaky transport config test by @mcollina in #2434
chore: upgrade typescript to v6.0.2 by @Tony133 in #2419
docs: fix typo "compatability" → "compatibility" in README by @premsreelathasugeendran in #2435
docs: warn against untrusted top-level log keys by @mcollina in #2450
test(transport): keep event loop alive while awaiting async flush by @YBJ0000 in #2470
docs: clarify Node.js version support policy in LTS doc by @youdie006 in #2472
fix: honor per-target level filter on single-element targets array by @mcollina in #2432
fix(multistream): resolve string level labels in write() by @xianjianlf2 in #2474
fix: escape child binding keys by @mcollina in #2452
docs: clarify stringification limits by @mcollina in #2475
fix: add setBindings to the browser logger by @ankit1324 in #2471
build(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in #2486
build(deps-dev): bump through2 from 4.0.2 to 5.0.10 by @dependabot[bot] in #2488
build(deps-dev): bump bole from 5.0.29 to 6.0.7 by @dependabot[bot] in #2489
build(deps-dev): bump eslint-plugin-n from 17.23.2 to 18.2.2 by @dependabot[bot] in #2492
build(deps): bump actions/checkout from 6.0.2 to 7.0.1 by @dependabot[bot] in #2485
fix: log objects with an own proto key instead of crashing by @spokodev in #2457
fix: build the redaction shape without Object.prototype by @luantaraschi in #2495
ci: add Node.js 26 to test matrix by @aquie00t in #2480
fix(multistream): fix clone add crash and missing end/remove methods by @spellsaif in #2493
ci: check pull requests target main by @marktran0710 in #2500
build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 by @dependabot[bot] in #2513
build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 by @dependabot[bot] in #2515
Delete .github/dependabot.yml by @jsumners in #2517
docs: document the APIs that are unavailable in the browser by @kavish-19 in #2521
ci: pin lock-threads to upstream v6.0.2 to fix token validation failure by @simpleqt in #2525
Add bindings() method to browser logger by @RT1811 in #2504
docs: Note that serializers run on child bindings at creation time by @itz-puneet in #2518
docs: fix the pino-pretty flush explanation after thread-stream#198 by @k-adm in #2524

New Contributors

@lraveri made their first contribution in #2381
@KyleTryon made their first contribution in #2394
@abhu85 made their first contribution in #2396
@CarlOlson made their first contribution in #2294
@urbanautomaton made their first contribution in #2413
@brunorodmoreira made their first contribution in #2425
@kshitijanurag made their first contribution in #2423
@premsreelathasugeendran made their first contribution in #2435
@YBJ0000 made their first contribution in #2470
@youdie006 made their first contribution in #2472
@xianjianlf2 made their first contribution in #2474
@ankit1324 made their first contribution in #2471
@spokodev made their first contribution in #2457
@luantaraschi made their first contribution in #2495
@aquie00t made their first contribution in #2480
@spellsaif made their first contribution in #2493
@marktran0710 made their first contribution in #2500
@kavish-19 made their first contribution in #2521
@simpleqt made their first contribution in #2525
@RT1811 made their first contribution in #2504
@itz-puneet made their first contribution in #2518
@k-adm made their first contribution in #2524

Full Changelog: pinojs/pino@v10.3.1...v10.4.0

Configuration

📅 Schedule: (in timezone UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

…dleware dev dependencies

devdeps(express-access-log-middleware): update express-access-log-mid…

e4d13ea

…dleware dev dependencies

mapcolonies-devops force-pushed the renovate/express-access-log-middleware-dev-dependencies branch from 0b6a028 to e4d13ea Compare October 6, 2026 14:45

mapcolonies-devops changed the title ~~devdeps(express-access-log-middleware): update dependency express to v4.22.3~~ devdeps(express-access-log-middleware): update express-access-log-middleware dev dependencies Oct 6, 2026

Navigation Menu

Repository navigation

devdeps(express-access-log-middleware): update express-access-log-middleware dev dependencies - #319

devdeps(express-access-log-middleware): update express-access-log-middleware dev dependencies#319
mapcolonies-devops wants to merge 1 commit into
masterfrom
renovate/express-access-log-middleware-dev-dependencies

mapcolonies-devops commented Sep 17, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

mapcolonies-devops commented Sep 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.22.3

What's Changed

New Contributors

v10.4.0

What's Changed

New Contributors

Configuration

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

mapcolonies-devops commented Sep 17, 2026 •

edited

Loading

`v4.22.3`

`v10.4.0`