Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aes256	^1.0.4 -> ^1.1.0
cookie	^0.4.0 -> ^0.5.0
cookie-parser	1.4.4 -> 1.4.6
dotenv	8.0.0 -> 8.6.0
express (source)	^4.17.1 -> ^4.18.1
jest (source)	24.8.0 -> 24.9.0
jwks-rsa	^1.6.0 -> ^1.12.3
lerna (source)	3.16.4 -> 3.22.1
prettier (source)	1.18.2 -> 1.19.1
redlock	^4.0.0 -> ^4.2.0
tslint (source)	5.18.0 -> 5.20.1
uuid	^3.3.2 -> ^3.4.0

---

Release Notes

JamesMGreene/node-aes256

v1.1.0

Compare Source

jshttp/cookie

v0.5.0

Compare Source

==================

• Add priority option
• Fix expires option to reject invalid dates
• pref: improve default decode speed
• pref: remove slow string split in parse

v0.4.2

Compare Source

==================

• pref: read value only when assigning in parse
• pref: remove unnecessary regexp in parse

v0.4.1

Compare Source

==================

• Fix maxAge option to reject invalid values

expressjs/cookie-parser

v1.4.6

Compare Source

==================

• deps: cookie@0.4.1

v1.4.5

Compare Source

==================

• deps: cookie@0.4.0

motdotla/dotenv

v8.6.0

Compare Source

Added

• define package.json in exports

v8.5.1

Compare Source

Changed

• updated dev dependencies via npm audit

v8.5.0

Compare Source

Added

• allow for import "dotenv/config"

v8.4.0

Compare Source

Changed

• point to exact types file to work with VS Code

v8.3.0

Compare Source

Changed

• Breaking: drop support for Node v8 (mistake to be released as minor bump. later bumped to 9.0.0. see above.)

v8.2.0

Compare Source

Added

• TypeScript types

v8.1.0

Compare Source

Changed

• Breaking: drop support for Node v6 (#​392)

expressjs/express

v4.18.1

Compare Source

===================

• Fix hanging on large stack of sync routes

v4.18.0

Compare Source

===================

• Add "root" option to res.download
• Allow options without filename in res.download
• Deprecate string and non-integer arguments to res.status
• Fix behavior of null/undefined as maxAge in res.cookie
• Fix handling very large stacks of sync middleware
• Ignore Object.prototype values in settings through app.set/app.get
• Invoke default with same arguments as types in res.format
• Support proper 205 responses using res.send
• Use http-errors for res.format error
• deps: body-parser@1.20.0
  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: depd@2.0.0
  • deps: http-errors@2.0.0
  • deps: on-finished@2.4.1
  • deps: qs@6.10.3
  • deps: raw-body@2.5.1
• deps: cookie@0.5.0
  • Add priority option
  • Fix expires option to reject invalid dates
• deps: depd@2.0.0
  • Replace internal eval usage with Function constructor
  • Use instance methods on process to check for listeners
• deps: finalhandler@1.2.0
  • Remove set content headers that break response
  • deps: on-finished@2.4.1
  • deps: statuses@2.0.1
• deps: on-finished@2.4.1
  • Prevent loss of async hooks context
• deps: qs@6.10.3
• deps: send@0.18.0
  • Fix emitted 416 error missing headers property
  • Limit the headers removed for 304 response
  • deps: depd@2.0.0
  • deps: destroy@1.2.0
  • deps: http-errors@2.0.0
  • deps: on-finished@2.4.1
  • deps: statuses@2.0.1
• deps: serve-static@1.15.0
  • deps: send@0.18.0
• deps: statuses@2.0.1
  • Remove code 306
  • Rename 425 Unordered Collection to standard 425 Too Early

v4.17.3

Compare Source

===================

• deps: accepts@~1.3.8
  • deps: mime-types@~2.1.34
  • deps: negotiator@0.6.3
• deps: body-parser@1.19.2
  • deps: bytes@3.1.2
  • deps: qs@6.9.7
  • deps: raw-body@2.4.3
• deps: cookie@0.4.2
• deps: qs@6.9.7
  • Fix handling of __proto__ keys
• pref: remove unnecessary regexp for trust proxy

v4.17.2

Compare Source

===================

• Fix handling of undefined in res.jsonp
• Fix handling of undefined when "json escape" is enabled
• Fix incorrect middleware execution with unanchored RegExps
• Fix res.jsonp(obj, status) deprecation message
• Fix typo in res.is JSDoc
• deps: body-parser@1.19.1
  • deps: bytes@3.1.1
  • deps: http-errors@1.8.1
  • deps: qs@6.9.6
  • deps: raw-body@2.4.2
  • deps: safe-buffer@5.2.1
  • deps: type-is@~1.6.18
• deps: content-disposition@0.5.4
  • deps: safe-buffer@5.2.1
• deps: cookie@0.4.1
  • Fix maxAge option to reject invalid values
• deps: proxy-addr@~2.0.7
  • Use req.socket over deprecated req.connection
  • deps: forwarded@0.2.0
  • deps: ipaddr.js@1.9.1
• deps: qs@6.9.6
• deps: safe-buffer@5.2.1
• deps: send@0.17.2
  • deps: http-errors@1.8.1
  • deps: ms@2.1.3
  • pref: ignore empty http tokens
• deps: serve-static@1.14.2
  • deps: send@0.17.2
• deps: setprototypeof@1.2.0

facebook/jest

v24.9.0

Compare Source

Features

• [expect] Highlight substring differences when matcher fails, part 1 (#​8448)
• [expect] Highlight substring differences when matcher fails, part 2 (#​8528)
• [expect] Improve report when mock-spy matcher fails, part 1 (#​8640)
• [expect] Improve report when mock-spy matcher fails, part 2 (#​8649)
• [expect] Improve report when mock-spy matcher fails, part 3 (#​8697)
• [expect] Improve report when mock-spy matcher fails, part 4 (#​8710)
• [expect] Throw matcher error when received cannot be jasmine spy (#​8747)
• [expect] Improve report when negative CalledWith assertion fails (#​8755)
• [expect] Improve report when positive CalledWith assertion fails (#​8771)
• [expect] Display equal values for ReturnedWith similar to CalledWith (#​8791)
• [expect, jest-snapshot] Change color from green for some args in matcher hints (#​8812)
• [jest-snapshot] Highlight substring differences when matcher fails, part 3 (#​8569)
• [jest-core] Improve report when snapshots are obsolete (#​8448)
• [jest-cli] Improve chai support (with detailed output, to match jest exceptions) (#​8454)
• [*] Manage the global timeout with --testTimeout command line argument. (#​8456)
• [pretty-format] Render custom displayName of memoized components (#​8546)
• [jest-validate] Allow maxWorkers as part of the jest.config.js (#​8565)
• [jest-runtime] Allow passing configuration objects to transformers (#​7288)
• [@jest/core, @​jest/test-sequencer] Support async sort in custom testSequencer (#​8642)
• [jest-runtime, @​jest/fake-timers] Add jest.advanceTimersToNextTimer (#​8713)
• [@jest-transform] Extract transforming require logic within jest-core into @jest-transform (#​8756)
• [jest-matcher-utils] Add color options to matcherHint (#​8795)
• [jest-circus/jest-jasmine2] Give clearer output for Node assert errors (#​8792)
• [jest-runner] Export all types in the type signature of jest-runner (#​8825)

Fixes

• [jest-cli] Detect side-effect only imports when running --onlyChanged or --changedSince (#​8670)
• [jest-cli] Allow --maxWorkers to work with % input again (#​8565)
• [babel-plugin-jest-hoist] Expand list of whitelisted globals in global mocks (#​8429)
• [jest-core] Make watch plugin initialization errors look nice (#​8422)
• [jest-snapshot] Prevent inline snapshots from drifting when inline snapshots are updated (#​8492)
• [jest-haste-map] Don't throw on missing mapper in Node crawler (#​8558)
• [jest-core] Fix incorrect passWithNoTests warning (#​8595)
• [jest-snapshots] Fix test retries that contain snapshots (#​8629)
• [jest-mock] Fix incorrect assignments when restoring mocks in instances where they originally didn't exist (#​8631)
• [expect] Fix stack overflow when matching objects with circular references (#​8687)
• [jest-haste-map] Workaround a node >=12.5.0 bug that causes the process not to exit after tests have completed and cancerous memory growth (#​8787)

Chore & Maintenance

• [docs] Replace FlowType with TypeScript in CONTRIBUTING.MD code conventions
• [jest-leak-detector] remove code repeat (#​8438)
• [docs] Add example to jest.requireActual (#​8482)
• [docs] Add example to jest.mock for mocking ES6 modules with the factory parameter (#​8550)
• [docs] Add information about using jest.doMock with ES6 imports (#​8573)
• [docs] Fix variable name in custom-matcher-api code example (#​8582)
• [docs] Fix example used in custom environment docs (#​8617)
• [docs] Updated react tutorial to refer to new package of react-testing-library (@​testing-library/react) (#​8753)
• [docs] Updated imports of react-testing-library to @​testing-library/react in website (#​8757)
• [jest-core] Add getVersion (moved from jest-cli) (#​8706)
• [docs] Fix MockFunctions example that was using toContain instead of toContainEqual (#​8765)
• [*] Make sure copyright header comment includes license (#​8783)
• [*] Check copyright and license as one joined substring (#​8815)
• [docs] Fix WatchPlugins jestHooks.shouldRunTestSuite example that receives an object (#​8784)
• [*] Enforce LF line endings (#​8809)
• [pretty-format] Delete obsolete link and simplify structure in README (#​8824)
• [docs] Fix broken transform link on webpack page (#​9155)

Performance

• [jest-watcher] Minor optimization for JestHook (#​8746)
• [@jest/reporters] Prevent runaway CPU usage with --notify on macOS (#​8831)

auth0/node-jwks-rsa

v1.12.3

Compare Source

Added

• Add alg to SigningKey types #​220 (okko)

Fixed

• Fix npmjs resolves #​221 (adamjmcgrath)
• Fix Import default Axios instance #​216 (dsebastien)

v1.12.2

Compare Source

Fixed

• Added coverage folders to .npmignore

v1.12.1

Compare Source

Security

• Bump Axios to ^0.21.1 #​208 (72636c)

v1.12.0

Compare Source

Added

• Provide an alternative source for supplying keysets #​202 (davidpatrick)

Deprecation
We are deprecating passing in a jwksObject to the client for reasons laid out in #​202. In order to load keys from anything other than the jwksUri, please use the getKeysInterceptor.

  const client = new JwksClient({ 
    jwksUri: 'https://my-enterprise-id-provider/.well-known/jwks.json',
    getKeysInterceptor: (cb) => {
      const file = fs.readFileSync(jwksFile);
      return cb(null, file.keys);
    }
  });

v1.11.0

Compare Source

Added

• Add ability to configure proxy with env vars #​188 (lubomir-haralampiev)

v1.10.1

Compare Source

Fixed

• fix proxy agent for http #​182 (NShahri)
• fix dependencies for --production flag with npm #​180 (alexrqs)

v1.10.0

Compare Source

Added

• getSigningKeys return algorithm #​168 (moander)

Fixed

• Add missing async methods to Typescript type definitions #​163 (mwgamble)
• Fixing proxy on Axios #​176 (davidpatrick)
• Fix caching and rateLimiting on getSigningKeyAsync #​177 (davidpatrick)

v1.9.0

Compare Source

Added

• Add promisified methods to JwksClient #​161 (jimmyjames)
• Update express-jwt ^6.0.0 #​157 (davidpatrick)

Fixed

• Update Buffer initialization to non-deprecated method #​154 (cwardcode)
• Use axios url parameter instead of baseURL #​153 (novascreen)

Security

• Bump lodash from 4.17.15 to 4.17.19 [#​152](https://github.com/auth0/node-jwks

v1.8.1

Compare Source

Fixed

• Fix #​139 strictSsl: false option being ignored #​146 (kopancek)

Security

• Update dependencies to latest #​147 (lbalmaceda)

v1.8.0

Compare Source

Added

• Added timeout with default value of 30s #​132 (Cooke)

Changed

• Migrate from Deprecated Request Lib #​135 (davidpatrick)

Fixed

• Allow JWT to not contain a "kid" value#​55 (dejan9393)

v1.7.0

Compare Source

This release includes a change to the default caching mechanism. Caching is on now by default, with the decrease of the default time of 10hours to 10minutes. This change introduces better support for signing key rotation.

Added

• Add proxy option to jwksClient #​125 (Ogdentrod)

Changed

• [SDK-1221] Modify Cache Defaults #​123 (davidpatrick)

Fixed

• Add Linter step to CI #​129 (davidpatrick)
• Send the explicit commit SHA to Codecov #​128 (lbalmaceda)

v1.6.2

Compare Source

This patch release includes an alias for accessing the public key of a given JSON Web Key (JWK). This is in response to an unintended breaking change that was introduced as part of the last Typescript definitions change, included in the release with version 1.6.0.

Now, no matter what the public key algorithm is, you can obtain it like this:

client.getSigningKey(kid, (err, jwk) => {
  const publicKey = jwk.getPublicKey();
});

Fixed

• Add alias for obtaining the public key #​119 (lbalmaceda)
• Handling case when Jwk doesn't have 'use' parameter #​116 (manpreet-compro)

v1.6.1

Compare Source

Changed

• NPM dependencies update #​112 (ecasilla)
• Update lru-memoizer to 2.0.1 #​106 (sobil)

lerna/lerna

v3.22.1

Compare Source

Note: Version bump only for package lerna

v3.22.0

Compare Source

Note: Version bump only for package lerna

v3.21.0

Compare Source

Note: Version bump only for package lerna

3.20.2 (2020-01-02)

Note: Version bump only for package lerna

3.20.1 (2019-12-29)

Note: Version bump only for package lerna

v3.20.2

Compare Source

Note: Version bump only for package lerna

v3.20.1

Compare Source

Note: Version bump only for package lerna

v3.20.0

Compare Source

Features

• cli: Add new info command to output information about local environment (#​2106) (7abfe43)

v3.19.0

Compare Source

Note: Version bump only for package lerna

3.18.5 (2019-11-20)

Note: Version bump only for package lerna

3.18.4 (2019-11-08)

Note: Version bump only for package lerna

3.18.3 (2019-10-22)

Note: Version bump only for package lerna

3.18.2 (2019-10-21)

Note: Version bump only for package lerna

3.18.1 (2019-10-15)

Note: Version bump only for package lerna

v3.18.5

Compare Source

Note: Version bump only for package lerna

v3.18.4

Compare Source

Note: Version bump only for package lerna

v3.18.3

Compare Source

Note: Version bump only for package lerna

v3.18.2

Compare Source

Note: Version bump only for package lerna

v3.18.1

Compare Source

Note: Version bump only for package lerna

v3.18.0

Compare Source

Features

• Upgrade to yargs@14 (5e60213)

v3.17.0

Compare Source

Note: Version bump only for package lerna

3.16.5 (2019-10-07)

Note: Version bump only for package lerna

3.16.4 (2019-07-24)

Note: Version bump only for package lerna

3.16.3 (2019-07-23)

Note: Version bump only for package lerna

3.16.2 (2019-07-22)

Note: Version bump only for package lerna

3.16.1 (2019-07-19)

Note: Version bump only for package lerna

v3.16.5

Compare Source

Note: Version bump only for package lerna

prettier/prettier

v1.19.1

Compare Source

diff

CLI

Fix --stdin regression in 1.19.0 (#​6894 by @​lydell)

// Prettier stable
$ echo "test" | prettier --stdin --parser babel
[error] regeneratorRuntime is not defined

// Prettier master
$ echo "test" | prettier --stdin --parser babel
test;

TypeScript

Fix formatting of union type as arrow function return type (#​6896 by @​thorn0)

// Input
export const getVehicleDescriptor = async (
  vehicleId: string,
): Promise<Collections.Parts.PrintedCircuitBoardAssembly['attributes'] | undefined> => {}

// Prettier stable
export const getVehicleDescriptor = async (
  vehicleId: string
): Promise<| Collections.Parts.PrintedCircuitBoardAssembly["attributes"]
| undefined> => {};

// Prettier master
export const getVehicleDescriptor = async (
  vehicleId: string
): Promise<
  Collections.Parts.PrintedCircuitBoardAssembly["attributes"] | undefined
> => {};

v1.19.0

Compare Source

diff

🔗 Release Notes

mike-marcacci/node-redlock

v4.2.0

Compare Source

• Update dependencies.
• Stop testing on node version 8. (Due to dev dependency requirements only.)
• Update docs (@​ricmatsui via #​80).
• Use evalsha for scripts (@​yosiat via #​77).

v4.1.0

Compare Source

• Update scripts for compatibility with LUA 5.2 (via #​63).

palantir/tslint

v5.20.1

Compare Source

No changes from v5.20.0, just re-released to correctly mark with the latest dist-tag on NPM.

v5.20.0

Compare Source

• [bugfix] fix strict-boolean-expressions false positive with "ignore-rhs" option (#​4833)
• [bugfix] fix no-unnecessary-type-assertion no error when "strict": true in compiler flags (#​4841)
• [bugfix] "ignore" option for file-name-casing rule works correctly (#​4848)
• [bugfix] fix array-type false positive for simple parenthesized types with "array-simple" option (#​4844)
• [new-rule-option]object-literal-shorthand supports {"property"?: "never", "method"?: "never"} as config options (#​4842)
• [new-rule-option]: allow-generics option for invalid-void rule (#​4839)
• [new-rule-option] check-super-calls option for unnecessary-constructor rule (#​4813)
• [chore] Upgrade diff dependency to v4.0.1 (#​4845, #​4852)

Thanks to our contributors!

• Bas Bosman
• Tanmoy Bhowmik
• David Zulaica
• Maxime Kjaer
• @​guidsdo
• Pavel Birukov
• Josh Goldberg
• Akshaya Srivatsa

v5.19.0

Compare Source

• [bugfix] relax promise-function-async for short parenthesized arrow functions (#​4765)
• [bugfix] fix no-async-without-await false positive for abstract methods (#​4782)
• [bugfix] fix strict-comparisons false positive for null and undefined literals (#​4786)
• [bugfix] improve no-angle-bracket-type-assertion autofix semantics with more parentheses (#​4823)
• [enhancement] add BigInt support to restrict-plus-operands rule (#​4814)
• [enhancement]await-promise now supports new TypeScript 3.6 AST API symbols for async iterators (#​4800)
• [new-rule-option] check-strings and check-regex options for max-line-length rule (#​4798)
• [new-rule-option] variable-declaration-ignore-function option for typedef rule (#​4769)
• [new-rule-option] ignore-blank-lines option for object-literal-sort-keys rule (#​4808)
• [new-rule]no-for-in (#​4747)
• [new-rule]invalid-void (#​4736)
• [new-rule]strict-string-expressions reports errors on type coercions found in string expressions (#​4807)
• [new-rule]no-promise-as-boolean (#​4790)
• [docs] link to OSS fellowship medium post in README (#​4821)

Thanks to our contributors!

• Josh Pike
• Tanmoy Bhowmik
• Michael Withagen
• Evgeniy Timokhov
• Vitalij Krotov
• Josh Goldberg
• Veda
• Guido
• Robert Fink
• Max Sysoev

uuidjs/uuid

v3.4.0

Compare Source

Features

• rename repository to github:uuidjs/uuid (#​351) (e2d7314), closes #​338

v3.3.3

Compare Source

Bug Fixes

• no longer run ci tests on node v4
• upgrade dependencies

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.