[PR #1278] [MERGED] Bump express-rate-limit from 7.5.1 to 8.0.1 #32665

New Issue

Closed

opened 2026-06-15 10:11:34 -05:00 by GiteaMirror · 0 comments

GiteaMirror commented 2026-06-15 10:11:34 -05:00

Owner

Copy Link

📋 Pull Request Information

Original PR: https://github.com/fosrl/pangolin/pull/1278
Author: @dependabot[bot]
Created: 8/14/2025
Status: ✅ Merged
Merged: 8/19/2025
Merged by: @oschwartz10612

Base: main ← Head: dependabot/npm_and_yarn/express-rate-limit-8.0.1

---

📝 Commits (1)

• 396e643 Bump express-rate-limit from 7.5.1 to 8.0.1

📊 Changes

2 files changed (+17 additions, -5 deletions)

View changed files

📝 package-lock.json (+16 -4)
📝 package.json (+1 -1)

📄 Description

Bumps express-rate-limit from 7.5.1 to 8.0.1.

Release notes

Sourced from express-rate-limit's releases.

v8.0.1

You can view the changelog here.

v8.0.0

You can view the changelog here.

Commits

• b70f456 8.0.1
• f7a079b fix: replace vulnerable ip library with ip-address lib (#536)
• 0e6b264 chore: biome migrate and format
• 2aa115a chore: biome config migration (#528)
• ec67446 docs: v8.0.1 changelog
• e880dd1 fix: express Request and Response types (#534)
• 51eeab2 fix: export ipKeyGenerator in cjs build (#532)
• 5687f29 typo
• 8213eae docs: Don't return response.send from RequestHandler in example (#531)
• c299d5c 8.0.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fosrl/pangolin/pull/1278 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 8/14/2025 **Status:** ✅ Merged **Merged:** 8/19/2025 **Merged by:** [@oschwartz10612](https://github.com/oschwartz10612) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/express-rate-limit-8.0.1` --- ### 📝 Commits (1) - [`396e643`](https://github.com/fosrl/pangolin/commit/396e643b06c662769df4eed79a5c1370a9c8986a) Bump express-rate-limit from 7.5.1 to 8.0.1 ### 📊 Changes **2 files changed** (+17 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+16 -4) 📝 `package.json` (+1 -1) </details> ### 📄 Description Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 7.5.1 to 8.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/express-rate-limit/express-rate-limit/releases">express-rate-limit's releases</a>.</em></p> <blockquote> <h2>v8.0.1</h2> <p>You can view the changelog <a href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p> <h2>v8.0.0</h2> <p>You can view the changelog <a href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/b70f456969776326614713cfab01b6ddc076120c"><code>b70f456</code></a> 8.0.1</li> <li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/f7a079bc3e1a52d94cfb4bfb08d5de80b96612d9"><code>f7a079b</code></a> fix: replace vulnerable ip library with ip-address lib (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/536">#536</a>)</li> <li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/0e6b264514f49d9d7107b47d4d04fc16f76dfc08"><code>0e6b264</code></a> chore: biome migrate and format</li> <li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/2aa115a1048a292f1135102c7564adbb5dd5494e"><code>2aa115a</code></a> chore: biome config migration (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/528">#528</a>)</li> <li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/ec67446ec27e11ecc598394b2e9a40062535e1f1"><code>ec67446</code></a> docs: v8.0.1 changelog</li> <li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/e880dd1ad49357b1f814fdbb5b3848275af9bece"><code>e880dd1</code></a> fix: express Request and Response types (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/534">#534</a>)</li> <li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/51eeab2ee15cd26b1d25f10885891d89115b2593"><code>51eeab2</code></a> fix: export ipKeyGenerator in cjs build (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/532">#532</a>)</li> <li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/5687f295f4bd07e8b2c9331af630a230a925a000"><code>5687f29</code></a> typo</li> <li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/8213eae6da30d6ada5054e4d459e8a5631e537e1"><code>8213eae</code></a> docs: Don't return response.send from RequestHandler in example (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/531">#531</a>)</li> <li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/c299d5c89f9a75e52bfc28b81c22df0f059520e8"><code>c299d5c</code></a> 8.0.0</li> <li>Additional commits viewable in <a href="https://github.com/express-rate-limit/express-rate-limit/compare/v7.5.1...v8.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- _{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

GiteaMirror added the pull-request label 2026-06-15 10:11:34 -05:00

GiteaMirror closed this issue 2026-06-15 10:11:36 -05:00

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

crowdin_dev

dev

dependabot/npm_and_yarn/npm-dependencies-338850a190

dependabot/go_modules/install/go-install-dependencies-3804ca7238

dependabot/docker/docker-dependencies-4faa477378

dependabot/github_actions/github-actions-dependencies-6d79802a48

api-improvements

feat/remember-last-idp-on-smart-login-form

refactor/batch-status-requests

dependabot/npm_and_yarn/multi-5f1280885e

fix/non-semver-version-error

private-resource-page

resource-launcher

backhaul

exit-node-reconnect

feat/command-palette

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

1.20.0

1.20.0-rc.0

1.19.4

1.19.3

1.19.2

1.19.1

1.19.0

1.19.0-rc.1

1.19.0-rc.0

1.18.4

1.18.3

1.18.2

1.18.1

1.18.0

1.18.0-rc.0

1.17.1

1.17.0

1.17.0-rc.0

1.16.2

1.16.1

1.16.0

1.16.0-rc.0

1.15.4

1.15.3

1.15.2

1.15.1

1.15.0

1.15.0-rc.0

1.14.1

1.14.0

1.14.0-rc.0

1.13.1

1.13.0

1.13.0-rc.0

1.12.3

1.12.2

1.12.1

1.12.0

1.12.0-rc.0

1.11.1

1.11.0

1.10.3

1.10.2

1.10.1

1.10.0

1.9.4

1.9.3

1.9.2

1.9.1

1.9.0

1.8.0

1.7.3

1.7.2

1.7.1

1.7.0

1.6.2

1.6.1

1.6.0

1.5.1

1.5.0

1.4.0

1.3.2

1.3.1

1.3.0

1.2.0

1.1.0

1.0.1

1.0.0

1.0.0-beta.15

1.0.0-beta.14

1.0.0-beta.13

1.0.0-beta.12

1.0.0-beta.11

1.0.0-beta.10

1.0.0-beta.9

1.0.0-beta.8

1.0.0-beta.7

1.0.0-beta.6

1.0.0-beta.5

1.0.0-beta.4

1.0.0-beta.3

1.0.0-beta.2

1.0.0-beta.1

Labels

Clear labels

api

authentication

bug

config

dependencies

docker

documentation

enhancement

good first issue

help wanted

Improvement

Look Into

needs investigating

networking

new feature

non-critical bug

potential bug

pull-request

Mirrored from GitHub Pull Request

question

reverse proxy

Security

stale

ui

wontfix

No Label pull-request

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

GiteaMirror ninjasurge

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/pangolin#32665