Repository navigation
build(deps): bump compression from 1.7.4 to 1.8.2 - #2031
Conversation
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM, straightforward dependency bump.
What was reviewed: the yarn.lock diff for the compression 1.7.4 → 1.8.2 bump and its transitive dependency changes (bytes, compressible, negotiator, on-headers, safe-buffer, accepts range). No application source, tests, or config were touched; the lockfile changes are consistent with compression's own published dependency updates.
Extended reasoning...
Single-file yarn.lock change bumping compression 1.7.4 to 1.8.2 (a dependabot PR fixing a stated CVE) with corresponding transitive dependency updates; no application code, tests, or config changed. No security-sensitive application surface is touched directly—only lockfile metadata—and the diff is mechanical and matches the PR description, so a human need not review this.
|
coverage: 87.341%. remained the same — dependabot/npm_and_yarn/compression-1.8.2 into main |
4587e68 to
4e597ff
Compare
Bumps [compression](https://github.com/expressjs/compression) from 1.7.4 to 1.8.2. - [Release notes](https://github.com/expressjs/compression/releases) - [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md) - [Commits](expressjs/compression@1.7.4...v1.8.2) --- updated-dependencies: - dependency-name: compression dependency-version: 1.8.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
4e597ff to
ec3f19c
Compare
2 participants
Bumps compression from 1.7.4 to 1.8.2.
Release notes
Sourced from compression's releases.
... (truncated)
Changelog
Sourced from compression's changelog.
Commits
0f970741.8.2 (#287)151f63efix: destroy compression stream on response close0a76495fix: match Cache-Control no-transform directive case-insensitively (#286)c17b6e5docs: update outdated Brotli note and fix npm install docs URL (#276)112911achore(ci): npm-publish via reusable workflows (#269)1bf5eb0build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#267)d8fe64dbuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (#266)b218ff5build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (#265)8a1cf8ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (#268)4a19855build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#257)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for compression since your current version.