andylockran/eventloop-adventures

Watch

Fork 0

Update dependency compression to v1.8.2 #4

Open

renovate wants to merge 1 commit from renovate/compression-1.x-lockfile into main

renovate commented

2026-10-27 00:15:45 +00:00

Collaborator

This PR contains the following updates:

Package	Change	Age	Confidence
compression	`1.7.4` → `1.8.2`

Release Notes

expressjs/compression (compression)

`v1.8.2`

Compare Source

=====

Fix CVE-2026-87776 (GHSA-vc2v-76pw-4v95)
deps: add destroy@1.2.0
Match Cache-Control: no-transform directive case-insensitively

`v1.8.1`

Compare Source

=====

deps: on-headers@~1.1.0
- Fix CVE-2025-7339 (GHSA-76c9-3jph-rj3q)

`v1.8.0`

Compare Source

=====

Use res.headersSent when available
Replace _implicitHeader with writeHead property
add brotli support for versions of node that support it
Add the enforceEncoding option for requests without Accept-Encoding header

`v1.7.5`

Compare Source

=====

deps: Replace accepts with negotiator@~0.6.4
- Add preference option
deps: bytes@3.1.2
- Add petabyte (pb) support
- Fix "thousandsSeparator" incorrecting formatting fractional part
- Fix return value for un-parsable strings
deps: compressible@~2.0.18
- Mark font/ttf as compressible
- Remove compressible from multipart/mixed
- deps: mime-db@'>= 1.43.0 < 2'
deps: safe-buffer@5.2.1

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [compression](https://github.com/expressjs/compression) | [`1.7.4` → `1.8.2`](https://renovatebot.com/diffs/npm/compression/1.7.4/1.8.2) | ![age](https://developer.mend.io/api/mc/badges/age/npm/compression/1.8.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/compression/1.7.4/1.8.2?slim=true) | --- ### Release Notes <details> <summary>expressjs/compression (compression)</summary> ### [`v1.8.2`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#182) [Compare Source](https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2) \===== - Fix [CVE-2026-87776](https://www.cve.org/CVERecord?id=CVE-2026-87776) ([GHSA-vc2v-76pw-4v95](https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95)) - deps: add destroy\@1.2.0 - Match `Cache-Control: no-transform` directive case-insensitively ### [`v1.8.1`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#181) [Compare Source](https://github.com/expressjs/compression/compare/1.8.0...v1.8.1) \===== - deps: on-headers@\~1.1.0 - Fix [CVE-2025-7339](https://www.cve.org/CVERecord?id=CVE-2025-7339) ([GHSA-76c9-3jph-rj3q](https://github.com/expressjs/on-headers/security/advisories/GHSA-76c9-3jph-rj3q)) ### [`v1.8.0`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#180) [Compare Source](https://github.com/expressjs/compression/compare/1.7.5...1.8.0) \===== - Use `res.headersSent` when available - Replace `_implicitHeader` with `writeHead` property - add brotli support for versions of node that support it - Add the enforceEncoding option for requests without `Accept-Encoding` header ### [`v1.7.5`](https://github.com/expressjs/compression/blob/HEAD/HISTORY.md#175) [Compare Source](https://github.com/expressjs/compression/compare/1.7.4...1.7.5) \===== - deps: Replace accepts with negotiator@\~0.6.4 - Add preference option - deps: bytes\@3.1.2 - Add petabyte (`pb`) support - Fix "thousandsSeparator" incorrecting formatting fractional part - Fix return value for un-parsable strings - deps: compressible@\~2.0.18 - Mark `font/ttf` as compressible - Remove compressible from `multipart/mixed` - deps: mime-db@'>= 1.43.0 < 2' - deps: safe-buffer\@5.2.1 </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate added 1 commit

2026-10-27 00:15:45 +00:00

Update dependency compression to v1.8.2 478da17fc6

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin "renovate/compression-1.x-lockfile:renovate/compression-1.x-lockfile"

git switch "renovate/compression-1.x-lockfile"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "main"

git merge --no-ff "renovate/compression-1.x-lockfile"

git switch "renovate/compression-1.x-lockfile"

git rebase "main"

git switch "main"

git merge --ff-only "renovate/compression-1.x-lockfile"

git switch "renovate/compression-1.x-lockfile"

git rebase "main"

git switch "main"

git merge --no-ff "renovate/compression-1.x-lockfile"

git switch "main"

git merge --squash "renovate/compression-1.x-lockfile"