Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/pangolin/pull/1278
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 8/14/2025
**Status:** ✅ Merged
**Merged:** 8/19/2025
**Merged by:** [@oschwartz10612](https://github.com/oschwartz10612)
**Base:** `main` ← **Head:** `dependabot/npm_and_yarn/express-rate-limit-8.0.1`
---
### 📝 Commits (1)
- [`396e643`](https://github.com/fosrl/pangolin/commit/396e643b06c662769df4eed79a5c1370a9c8986a) Bump express-rate-limit from 7.5.1 to 8.0.1
### 📊 Changes
**2 files changed** (+17 additions, -5 deletions)
<details>
<summary>View changed files</summary>
📝 `package-lock.json` (+16 -4)
📝 `package.json` (+1 -1)
</details>
### 📄 Description
Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 7.5.1 to 8.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/express-rate-limit/express-rate-limit/releases">express-rate-limit's releases</a>.</em></p>
<blockquote>
<h2>v8.0.1</h2>
<p>You can view the changelog <a href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p>
<h2>v8.0.0</h2>
<p>You can view the changelog <a href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/b70f456969776326614713cfab01b6ddc076120c"><code>b70f456</code></a> 8.0.1</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/f7a079bc3e1a52d94cfb4bfb08d5de80b96612d9"><code>f7a079b</code></a> fix: replace vulnerable ip library with ip-address lib (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/536">#536</a>)</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/0e6b264514f49d9d7107b47d4d04fc16f76dfc08"><code>0e6b264</code></a> chore: biome migrate and format</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/2aa115a1048a292f1135102c7564adbb5dd5494e"><code>2aa115a</code></a> chore: biome config migration (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/528">#528</a>)</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/ec67446ec27e11ecc598394b2e9a40062535e1f1"><code>ec67446</code></a> docs: v8.0.1 changelog</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/e880dd1ad49357b1f814fdbb5b3848275af9bece"><code>e880dd1</code></a> fix: express Request and Response types (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/534">#534</a>)</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/51eeab2ee15cd26b1d25f10885891d89115b2593"><code>51eeab2</code></a> fix: export ipKeyGenerator in cjs build (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/532">#532</a>)</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/5687f295f4bd07e8b2c9331af630a230a925a000"><code>5687f29</code></a> typo</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/8213eae6da30d6ada5054e4d459e8a5631e537e1"><code>8213eae</code></a> docs: Don't return response.send from RequestHandler in example (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/531">#531</a>)</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/c299d5c89f9a75e52bfc28b81c22df0f059520e8"><code>c299d5c</code></a> 8.0.0</li>
<li>Additional commits viewable in <a href="https://github.com/express-rate-limit/express-rate-limit/compare/v7.5.1...v8.0.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/1278
Author: @dependabot[bot]
Created: 8/14/2025
Status: ✅ Merged
Merged: 8/19/2025
Merged by: @oschwartz10612
Base:
main← Head:dependabot/npm_and_yarn/express-rate-limit-8.0.1📝 Commits (1)
396e643Bump express-rate-limit from 7.5.1 to 8.0.1📊 Changes
2 files changed (+17 additions, -5 deletions)
View changed files
📝
package-lock.json(+16 -4)📝
package.json(+1 -1)📄 Description
Bumps express-rate-limit from 7.5.1 to 8.0.1.
Release notes
Sourced from express-rate-limit's releases.
Commits
b70f4568.0.1f7a079bfix: replace vulnerable ip library with ip-address lib (#536)0e6b264chore: biome migrate and format2aa115achore: biome config migration (#528)ec67446docs: v8.0.1 changeloge880dd1fix: express Request and Response types (#534)51eeab2fix: export ipKeyGenerator in cjs build (#532)5687f29typo8213eaedocs: Don't return response.send from RequestHandler in example (#531)c299d5c8.0.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.