From 235d94478f66e768033421705d0b6c45c0598636 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 7 Mar 2026 19:48:56 +0000 Subject: [PATCH] Bump express-rate-limit from 8.2.1 to 8.2.2 (#7140) * Bump express-rate-limit from 8.2.1 to 8.2.2 Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 8.2.1 to 8.2.2. - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](https://github.com/express-rate-limit/express-rate-limit/compare/v8.2.1...v8.2.2) --- updated-dependencies: - dependency-name: express-rate-limit dependency-version: 8.2.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] * [AI] Update express-rate-limit to 8.3.0 to fix GHSA-46wh-pxpv-q5gq vulnerability Co-authored-by: Matiss Janis Aboltins * Add release notes for PR #7140 * [AI] Update release notes to reflect version 8.3.0 Co-authored-by: Matiss Janis Aboltins --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Cursor Agent Co-authored-by: Matiss Janis Aboltins Co-authored-by: github-actions[bot] --- packages/sync-server/package.json | 2 +- upcoming-release-notes/7140.md | 6 ++++++ yarn.lock | 21 ++++++++++++++------- 3 files changed, 21 insertions(+), 8 deletions(-) create mode 100644 upcoming-release-notes/7140.md diff --git a/packages/sync-server/package.json b/packages/sync-server/package.json index ec2c0edf8b..7e8232088f 100644 --- a/packages/sync-server/package.json +++ b/packages/sync-server/package.json @@ -38,7 +38,7 @@ "date-fns": "^4.1.0", "debug": "^4.4.3", "express": "^5.2.1", - "express-rate-limit": "^8.2.1", + "express-rate-limit": "^8.3.0", "express-winston": "^4.2.0", "ipaddr.js": "^2.3.0", "jws": "^4.0.1", diff --git a/upcoming-release-notes/7140.md b/upcoming-release-notes/7140.md new file mode 100644 index 0000000000..74d88b02c1 --- /dev/null +++ b/upcoming-release-notes/7140.md @@ -0,0 +1,6 @@ +--- +category: Maintenance +authors: [dependabot[bot]] +--- + +Bump `express-rate-limit` dependency version from 8.2.1 to 8.3.0 for improvements. diff --git a/yarn.lock b/yarn.lock index ea920d857f..27cddf742e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -118,7 +118,7 @@ __metadata: date-fns: "npm:^4.1.0" debug: "npm:^4.4.3" express: "npm:^5.2.1" - express-rate-limit: "npm:^8.2.1" + express-rate-limit: "npm:^8.3.0" express-winston: "npm:^4.2.0" http-proxy-middleware: "npm:^3.0.5" ipaddr.js: "npm:^2.3.0" @@ -15910,14 +15910,14 @@ __metadata: languageName: node linkType: hard -"express-rate-limit@npm:^8.2.1": - version: 8.2.1 - resolution: "express-rate-limit@npm:8.2.1" +"express-rate-limit@npm:^8.3.0": + version: 8.3.0 + resolution: "express-rate-limit@npm:8.3.0" dependencies: - ip-address: "npm:10.0.1" + ip-address: "npm:10.1.0" peerDependencies: express: ">= 4.11" - checksum: 10/7cbf70df2e88e590e463d2d8f93380775b2ea181d97f2c50c2ff9f2c666c247f83109a852b21d9c99ccc5762119101f281f54a27252a2f1a0a918be6d71f955b + checksum: 10/e896a66fecc10639e65873186fdfb71f19d6af650220eb7ea5450725215c3eed8dc6ddcfa1e68a9db8c9facc3326fbc281512ad3ccd8f107f42a2466ce12c18c languageName: node linkType: hard @@ -18138,7 +18138,14 @@ __metadata: languageName: node linkType: hard -"ip-address@npm:10.0.1, ip-address@npm:^10.0.1": +"ip-address@npm:10.1.0": + version: 10.1.0 + resolution: "ip-address@npm:10.1.0" + checksum: 10/a6979629d1ad9c1fb424bc25182203fad739b40225aebc55ec6243bbff5035faf7b9ed6efab3a097de6e713acbbfde944baacfa73e11852bb43989c45a68d79e + languageName: node + linkType: hard + +"ip-address@npm:^10.0.1": version: 10.0.1 resolution: "ip-address@npm:10.0.1" checksum: 10/09731acda32cd8e14c46830c137e7e5940f47b36d63ffb87c737331270287d631cf25aa95570907a67d3f919fdb25f4470c404eda21e62f22e0a55927f4dd0fb