Update dependency compression to ~1.8.0 #4

Open
renovate wants to merge 1 commit from renovate/compression-1.x into master
Collaborator

This PR contains the following updates:

Package Change Age Confidence
compression ~1.1.0 → ~1.8.0 age confidence

Release Notes

expressjs/compression (compression)

v1.8.2

Compare Source

=====

v1.8.1

Compare Source

=====

v1.8.0

Compare Source

=====

  • Use res.headersSent when available
  • Replace _implicitHeader with writeHead property
  • add brotli support for versions of node that support it
  • Add the enforceEncoding option for requests without Accept-Encoding header

v1.7.5

Compare Source

=====

  • deps: Replace accepts with negotiator@~0.6.4
    • Add preference option
  • deps: bytes@​3.1.2
    • Add petabyte (pb) support
    • Fix "thousandsSeparator" incorrecting formatting fractional part
    • Fix return value for un-parsable strings
  • deps: compressible@~2.0.18
    • Mark font/ttf as compressible
    • Remove compressible from multipart/mixed
    • deps: mime-db@'>= 1.43.0 < 2'
  • deps: safe-buffer@​5.2.1

v1.7.4

Compare Source

=====

  • deps: compressible@~2.0.16
    • Mark text/less as compressible
    • deps: mime-db@'>= 1.38.0 < 2'
  • deps: on-headers@~1.0.2
    • Fix res.writeHead patch missing return value
  • perf: prevent unnecessary buffer copy

v1.7.3

Compare Source

=====

  • deps: accepts@~1.3.5
    • deps: mime-types@~2.1.18
  • deps: compressible@~2.0.14
    • Mark all XML-derived types as compressible
    • deps: mime-db@'>= 1.34.0 < 2'
  • deps: safe-buffer@​5.1.2

v1.7.2

Compare Source

=====

  • deps: compressible@~2.0.13
    • deps: mime-db@'>= 1.33.0 < 2'

v1.7.1

Compare Source

=====

  • deps: accepts@~1.3.4
    • deps: mime-types@~2.1.16
  • deps: bytes@​3.0.0
  • deps: compressible@~2.0.11
    • deps: mime-db@'>= 1.29.0 < 2'
  • deps: debug@​2.6.9
  • deps: vary@~1.1.2
    • perf: improve header token parsing speed

v1.7.0

Compare Source

=====

  • Use safe-buffer for improved Buffer API
  • deps: bytes@​2.5.0
  • deps: compressible@~2.0.10
    • Fix regex fallback to not override compressible: false in db
    • deps: mime-db@'>= 1.27.0 < 2'
  • deps: debug@​2.6.8
    • Allow colors in workers
    • Deprecated DEBUG_FD environment variable set to 3 or higher
    • Fix error when running under React Native
    • Fix DEBUG_MAX_ARRAY_LENGTH
    • Use same color for same namespace
    • deps: ms@​2.0.0
  • deps: vary@~1.1.1
    • perf: hoist regular expression

v1.6.2

Compare Source

=====

  • deps: accepts@~1.3.3
    • deps: mime-types@~2.1.11
    • deps: negotiator@​0.6.1
  • deps: bytes@​2.3.0
    • Drop partial bytes on all parsed units
    • Fix parsing byte string that looks like hex
    • perf: hoist regular expressions
  • deps: compressible@~2.0.8
    • deps: mime-db@'>= 1.23.0 < 2'

v1.6.1

Compare Source

=====

  • deps: bytes@​2.2.0
  • deps: compressible@~2.0.7
    • deps: mime-db@'>= 1.21.0 < 2'
  • deps: accepts@~1.3.1
    • deps: mime-types@~2.1.9

v1.6.0

Compare Source

=====

  • Skip compression when response has Cache-Control: no-transform
  • deps: accepts@~1.3.0
    • deps: mime-types@~2.1.7
    • deps: negotiator@​0.6.0
  • deps: compressible@~2.0.6
    • deps: mime-db@'>= 1.19.0 < 2'
  • deps: on-headers@~1.0.1
    • perf: enable strict mode
  • deps: vary@~1.1.0
    • Only accept valid field names in the field argument

v1.5.2

Compare Source

=====

  • deps: accepts@~1.2.12
    • deps: mime-types@~2.1.4
  • deps: compressible@~2.0.5
    • deps: mime-db@'>= 1.16.0 < 2'
  • deps: vary@~1.0.1
    • Fix setting empty header from empty field
    • perf: enable strict mode
    • perf: remove argument reassignments

v1.5.1

Compare Source

=====

  • deps: accepts@~1.2.10
    • deps: mime-types@~2.1.2
  • deps: compressible@~2.0.4
    • deps: mime-db@'>= 1.14.0 < 2'
    • perf: enable strict mode

v1.5.0

Compare Source

=====

  • Fix return value from .end and .write after end
  • Improve detection of zero-length body without Content-Length
  • deps: accepts@~1.2.9
    • deps: mime-types@~2.1.1
    • perf: avoid argument reassignment & argument slice
    • perf: avoid negotiator recursive construction
    • perf: enable strict mode
    • perf: remove unnecessary bitwise operator
  • deps: bytes@​2.1.0
    • Slight optimizations
    • Units no longer case sensitive when parsing
  • deps: compressible@~2.0.3
    • Fix regex fallback to work if type exists, but is undefined
    • deps: mime-db@'>= 1.13.0 < 2'
    • perf: hoist regex declaration
    • perf: use regex to extract mime
  • perf: enable strict mode
  • perf: remove flush reassignment
  • perf: simplify threshold detection

v1.4.4

Compare Source

=====

  • deps: accepts@~1.2.7
    • deps: mime-types@~2.0.11
    • deps: negotiator@​0.5.3
  • deps: debug@~2.2.0
    • deps: ms@​0.7.1

v1.4.3

Compare Source

=====

  • deps: accepts@~1.2.5
    • deps: mime-types@~2.0.10
  • deps: debug@~2.1.3
    • Fix high intensity foreground color for bold
    • deps: ms@​0.7.0

v1.4.2

Compare Source

=====

  • Fix error when code calls res.end(str, encoding)
    • Specific to Node.js 0.8
  • deps: debug@~2.1.2
    • deps: ms@​0.7.0

v1.4.1

Compare Source

=====

  • deps: accepts@~1.2.4
    • deps: mime-types@~2.0.9
    • deps: negotiator@​0.5.1

v1.4.0

Compare Source

=====

  • Prefer gzip over deflate on the server
    • Not all clients agree on what "deflate" coding means

v1.3.1

Compare Source

=====

  • deps: accepts@~1.2.3
    • deps: mime-types@~2.0.8
  • deps: compressible@~2.0.2
    • deps: mime-db@'>= 1.1.2 < 2'

v1.3.0

Compare Source

=====

  • Export the default filter function for wrapping
  • deps: accepts@~1.2.2
    • deps: mime-types@~2.0.7
    • deps: negotiator@​0.5.0
  • deps: debug@~2.1.1

v1.2.2

Compare Source

=====

  • Fix .end to only proxy to .end
    • Fixes an issue with Node.js 0.11.14
  • deps: accepts@~1.1.4
    • deps: mime-types@~2.0.4

v1.2.1

Compare Source

=====

  • deps: accepts@~1.1.3
    • deps: mime-types@~2.0.3

v1.2.0

Compare Source

=====

  • deps: debug@~2.1.0
    • Implement DEBUG_FD env variable support

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [compression](https://github.com/expressjs/compression) | [`~1.1.0` → `~1.8.0`](https://renovatebot.com/diffs/npm/compression/1.1.2/1.8.2) | ![age](https://developer.mend.io/api/mc/badges/age/npm/compression/1.8.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/compression/1.1.2/1.8.2?slim=true) | --- ### Release Notes <details> <summary>expressjs/compression (compression)</summary> ### [`v1.8.2`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#182) [Compare Source](https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2) \===== - Fix [CVE-2026-87776](https://www.cve.org/CVERecord?id=CVE-2026-87776) ([GHSA-vc2v-76pw-4v95](https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95)) - deps: add destroy\@&#8203;1.2.0 - Match `Cache-Control: no-transform` directive case-insensitively ### [`v1.8.1`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#181) [Compare Source](https://github.com/expressjs/compression/compare/1.8.0...v1.8.1) \===== - deps: on-headers@\~1.1.0 - Fix [CVE-2025-7339](https://www.cve.org/CVERecord?id=CVE-2025-7339) ([GHSA-76c9-3jph-rj3q](https://github.com/expressjs/on-headers/security/advisories/GHSA-76c9-3jph-rj3q)) ### [`v1.8.0`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#180) [Compare Source](https://github.com/expressjs/compression/compare/1.7.5...1.8.0) \===== - Use `res.headersSent` when available - Replace `_implicitHeader` with `writeHead` property - add brotli support for versions of node that support it - Add the enforceEncoding option for requests without `Accept-Encoding` header ### [`v1.7.5`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#175) [Compare Source](https://github.com/expressjs/compression/compare/1.7.4...1.7.5) \===== - deps: Replace accepts with negotiator@\~0.6.4 - Add preference option - deps: bytes\@&#8203;3.1.2 - Add petabyte (`pb`) support - Fix "thousandsSeparator" incorrecting formatting fractional part - Fix return value for un-parsable strings - deps: compressible@\~2.0.18 - Mark `font/ttf` as compressible - Remove compressible from `multipart/mixed` - deps: mime-db@'>= 1.43.0 < 2' - deps: safe-buffer\@&#8203;5.2.1 ### [`v1.7.4`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#174) [Compare Source](https://github.com/expressjs/compression/compare/1.7.3...1.7.4) \===== - deps: compressible@\~2.0.16 - Mark `text/less` as compressible - deps: mime-db@'>= 1.38.0 < 2' - deps: on-headers@\~1.0.2 - Fix `res.writeHead` patch missing return value - perf: prevent unnecessary buffer copy ### [`v1.7.3`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#173) [Compare Source](https://github.com/expressjs/compression/compare/1.7.2...1.7.3) \===== - deps: accepts@\~1.3.5 - deps: mime-types@\~2.1.18 - deps: compressible@\~2.0.14 - Mark all XML-derived types as compressible - deps: mime-db@'>= 1.34.0 < 2' - deps: safe-buffer\@&#8203;5.1.2 ### [`v1.7.2`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#172) [Compare Source](https://github.com/expressjs/compression/compare/1.7.1...1.7.2) \===== - deps: compressible@\~2.0.13 - deps: mime-db@'>= 1.33.0 < 2' ### [`v1.7.1`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#171) [Compare Source](https://github.com/expressjs/compression/compare/1.7.0...1.7.1) \===== - deps: accepts@\~1.3.4 - deps: mime-types@\~2.1.16 - deps: bytes\@&#8203;3.0.0 - deps: compressible@\~2.0.11 - deps: mime-db@'>= 1.29.0 < 2' - deps: debug\@&#8203;2.6.9 - deps: vary@\~1.1.2 - perf: improve header token parsing speed ### [`v1.7.0`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#170) [Compare Source](https://github.com/expressjs/compression/compare/1.6.2...1.7.0) \===== - Use `safe-buffer` for improved Buffer API - deps: bytes\@&#8203;2.5.0 - deps: compressible@\~2.0.10 - Fix regex fallback to not override `compressible: false` in db - deps: mime-db@'>= 1.27.0 < 2' - deps: debug\@&#8203;2.6.8 - Allow colors in workers - Deprecated `DEBUG_FD` environment variable set to `3` or higher - Fix error when running under React Native - Fix `DEBUG_MAX_ARRAY_LENGTH` - Use same color for same namespace - deps: ms\@&#8203;2.0.0 - deps: vary@\~1.1.1 - perf: hoist regular expression ### [`v1.6.2`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#162) [Compare Source](https://github.com/expressjs/compression/compare/1.6.1...1.6.2) \===== - deps: accepts@\~1.3.3 - deps: mime-types@\~2.1.11 - deps: negotiator\@&#8203;0.6.1 - deps: bytes\@&#8203;2.3.0 - Drop partial bytes on all parsed units - Fix parsing byte string that looks like hex - perf: hoist regular expressions - deps: compressible@\~2.0.8 - deps: mime-db@'>= 1.23.0 < 2' ### [`v1.6.1`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#161) [Compare Source](https://github.com/expressjs/compression/compare/1.6.0...1.6.1) \===== - deps: bytes\@&#8203;2.2.0 - deps: compressible@\~2.0.7 - deps: mime-db@'>= 1.21.0 < 2' - deps: accepts@\~1.3.1 - deps: mime-types@\~2.1.9 ### [`v1.6.0`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#160) [Compare Source](https://github.com/expressjs/compression/compare/1.5.2...1.6.0) \===== - Skip compression when response has `Cache-Control: no-transform` - deps: accepts@\~1.3.0 - deps: mime-types@\~2.1.7 - deps: negotiator\@&#8203;0.6.0 - deps: compressible@\~2.0.6 - deps: mime-db@'>= 1.19.0 < 2' - deps: on-headers@\~1.0.1 - perf: enable strict mode - deps: vary@\~1.1.0 - Only accept valid field names in the `field` argument ### [`v1.5.2`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#152) [Compare Source](https://github.com/expressjs/compression/compare/1.5.1...1.5.2) \===== - deps: accepts@\~1.2.12 - deps: mime-types@\~2.1.4 - deps: compressible@\~2.0.5 - deps: mime-db@'>= 1.16.0 < 2' - deps: vary@\~1.0.1 - Fix setting empty header from empty `field` - perf: enable strict mode - perf: remove argument reassignments ### [`v1.5.1`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#151) [Compare Source](https://github.com/expressjs/compression/compare/1.5.0...1.5.1) \===== - deps: accepts@\~1.2.10 - deps: mime-types@\~2.1.2 - deps: compressible@\~2.0.4 - deps: mime-db@'>= 1.14.0 < 2' - perf: enable strict mode ### [`v1.5.0`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#150) [Compare Source](https://github.com/expressjs/compression/compare/1.4.4...1.5.0) \===== - Fix return value from `.end` and `.write` after end - Improve detection of zero-length body without `Content-Length` - deps: accepts@\~1.2.9 - deps: mime-types@\~2.1.1 - perf: avoid argument reassignment & argument slice - perf: avoid negotiator recursive construction - perf: enable strict mode - perf: remove unnecessary bitwise operator - deps: bytes\@&#8203;2.1.0 - Slight optimizations - Units no longer case sensitive when parsing - deps: compressible@\~2.0.3 - Fix regex fallback to work if type exists, but is undefined - deps: mime-db@'>= 1.13.0 < 2' - perf: hoist regex declaration - perf: use regex to extract mime - perf: enable strict mode - perf: remove flush reassignment - perf: simplify threshold detection ### [`v1.4.4`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#144) [Compare Source](https://github.com/expressjs/compression/compare/1.4.3...1.4.4) \===== - deps: accepts@\~1.2.7 - deps: mime-types@\~2.0.11 - deps: negotiator\@&#8203;0.5.3 - deps: debug@\~2.2.0 - deps: ms\@&#8203;0.7.1 ### [`v1.4.3`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#143) [Compare Source](https://github.com/expressjs/compression/compare/1.4.2...1.4.3) \===== - deps: accepts@\~1.2.5 - deps: mime-types@\~2.0.10 - deps: debug@\~2.1.3 - Fix high intensity foreground color for bold - deps: ms\@&#8203;0.7.0 ### [`v1.4.2`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#142) [Compare Source](https://github.com/expressjs/compression/compare/1.4.1...1.4.2) \===== - Fix error when code calls `res.end(str, encoding)` - Specific to Node.js 0.8 - deps: debug@\~2.1.2 - deps: ms\@&#8203;0.7.0 ### [`v1.4.1`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#141) [Compare Source](https://github.com/expressjs/compression/compare/1.4.0...1.4.1) \===== - deps: accepts@\~1.2.4 - deps: mime-types@\~2.0.9 - deps: negotiator\@&#8203;0.5.1 ### [`v1.4.0`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#140) [Compare Source](https://github.com/expressjs/compression/compare/1.3.1...1.4.0) \===== - Prefer `gzip` over `deflate` on the server - Not all clients agree on what "deflate" coding means ### [`v1.3.1`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#131) [Compare Source](https://github.com/expressjs/compression/compare/1.3.0...1.3.1) \===== - deps: accepts@\~1.2.3 - deps: mime-types@\~2.0.8 - deps: compressible@\~2.0.2 - deps: mime-db@'>= 1.1.2 < 2' ### [`v1.3.0`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#130) [Compare Source](https://github.com/expressjs/compression/compare/1.2.2...1.3.0) \===== - Export the default `filter` function for wrapping - deps: accepts@\~1.2.2 - deps: mime-types@\~2.0.7 - deps: negotiator\@&#8203;0.5.0 - deps: debug@\~2.1.1 ### [`v1.2.2`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#122) [Compare Source](https://github.com/expressjs/compression/compare/1.2.1...1.2.2) \===== - Fix `.end` to only proxy to `.end` - Fixes an issue with Node.js 0.11.14 - deps: accepts@\~1.1.4 - deps: mime-types@\~2.0.4 ### [`v1.2.1`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#121) [Compare Source](https://github.com/expressjs/compression/compare/1.2.0...1.2.1) \===== - deps: accepts@\~1.1.3 - deps: mime-types@\~2.0.3 ### [`v1.2.0`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#120) [Compare Source](https://github.com/expressjs/compression/compare/1.1.2...1.2.0) \===== - deps: debug@\~2.1.0 - Implement `DEBUG_FD` env variable support </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODYuNCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4Ni40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin "renovate/compression-1.x:renovate/compression-1.x"
git switch "renovate/compression-1.x"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "master"
git merge --no-ff "renovate/compression-1.x"
git switch "renovate/compression-1.x"
git rebase "master"
git switch "master"
git merge --ff-only "renovate/compression-1.x"
git switch "renovate/compression-1.x"
git rebase "master"
git switch "master"
git merge --no-ff "renovate/compression-1.x"
git switch "master"
git merge --squash "renovate/compression-1.x"
git switch "master"
git merge --ff-only "renovate/compression-1.x"
git switch "master"
git merge "renovate/compression-1.x"
git push origin "master"
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
andylockran/Libero!4
No description provided.