fix(deps): update dependency express to v4.17.2 (#2779)

packages/api/package.json

@@ -51,7 +51,7 @@
     "cookies": "0.8.0",
     "debug": "4.3.3",
     "body-parser": "1.19.1",
-    "express": "4.17.1",
+    "express": "4.17.2",
     "lodash": "4.17.21",
     "mime": "2.6.0",
     "semver": "7.3.5"

packages/auth/package.json

@@ -45,7 +45,7 @@
     "@verdaccio/logger": "workspace:6.0.0-6-next.8",
     "@verdaccio/utils": "workspace:6.0.0-6-next.10",
     "debug": "4.3.3",
-    "express": "4.17.1",
+    "express": "4.17.2",
     "jsonwebtoken": "8.5.1",
     "lodash": "4.17.21",
     "verdaccio-htpasswd": "workspace:11.0.0-6-next.11"

packages/plugins/audit/package.json

@@ -31,7 +31,7 @@
     "npm": ">=6"
   },
   "dependencies": {
-    "express": "4.17.1",
+    "express": "4.17.2",
     "body-parser": "1.19.1",
     "https-proxy-agent": "5.0.0",
     "node-fetch": "3.0.0-beta.6-exportfix"

packages/server/package.json

@@ -44,7 +44,7 @@
     "compression": "1.7.4",
     "cors": "2.8.5",
     "debug": "4.3.3",
-    "express": "4.17.1",
+    "express": "4.17.2",
     "express-rate-limit": "5.3.0",
     "lodash": "4.17.21"
   },

packages/web/package.json

@@ -38,7 +38,7 @@
     "@verdaccio/utils": "workspace:6.0.0-6-next.10",
     "body-parser": "1.19.1",
     "debug": "4.3.3",
-    "express": "4.17.1",
+    "express": "4.17.2",
     "lodash": "4.17.21",
     "lru-cache": "6.0.0"
   },

pnpm-lock.yaml

@@ -202,7 +202,7 @@ importers:
       body-parser: 1.19.1
       cookies: 0.8.0
       debug: 4.3.3
-      express: 4.17.1
+      express: 4.17.2
       lodash: 4.17.21
       mime: 2.6.0
       semver: 7.3.5
@@ -220,7 +220,7 @@ importers:
       body-parser: 1.19.1
       cookies: 0.8.0
       debug: 4.3.3
-      express: 4.17.1
+      express: 4.17.2
       lodash: 4.17.21
       mime: 2.6.0
       semver: 7.3.5
@@ -241,7 +241,7 @@ importers:
       '@verdaccio/types': workspace:11.0.0-6-next.10
       '@verdaccio/utils': workspace:6.0.0-6-next.10
       debug: 4.3.3
-      express: 4.17.1
+      express: 4.17.2
       jsonwebtoken: 8.5.1
       lodash: 4.17.21
       verdaccio-htpasswd: workspace:11.0.0-6-next.11
@@ -252,7 +252,7 @@ importers:
       '@verdaccio/logger': link:../logger
       '@verdaccio/utils': link:../utils
       debug: 4.3.3
-      express: 4.17.1
+      express: 4.17.2
       jsonwebtoken: 8.5.1
       lodash: 4.17.21
       verdaccio-htpasswd: link:../plugins/htpasswd
@@ -588,14 +588,14 @@ importers:
     specifiers:
       '@verdaccio/types': workspace:11.0.0-6-next.10
       body-parser: 1.19.1
-      express: 4.17.1
+      express: 4.17.2
       https-proxy-agent: 5.0.0
       nock: 12.0.3
       node-fetch: 3.0.0-beta.6-exportfix
       supertest: 6.1.6
     dependencies:
       body-parser: 1.19.1
-      express: 4.17.1
+      express: 4.17.2
       https-proxy-agent: 5.0.0
       node-fetch: 3.0.0-beta.6-exportfix
     devDependencies:
@@ -956,7 +956,7 @@ importers:
       compression: 1.7.4
       cors: 2.8.5
       debug: 4.3.3
-      express: 4.17.1
+      express: 4.17.2
       express-rate-limit: 5.3.0
       http-errors: 1.8.1
       lodash: 4.17.21
@@ -976,7 +976,7 @@ importers:
       compression: 1.7.4
       cors: 2.8.5
       debug: 4.3.3
-      express: 4.17.1
+      express: 4.17.2
       express-rate-limit: 5.3.0
       lodash: 4.17.21
       verdaccio-audit: link:../plugins/audit
@@ -1217,7 +1217,7 @@ importers:
       '@verdaccio/utils': workspace:6.0.0-6-next.10
       body-parser: 1.19.1
       debug: 4.3.3
-      express: 4.17.1
+      express: 4.17.2
       lodash: 4.17.21
       lru-cache: 6.0.0
       node-html-parser: 4.1.5
@@ -1238,7 +1238,7 @@ importers:
       '@verdaccio/utils': link:../utils
       body-parser: 1.19.1
       debug: 4.3.3
-      express: 4.17.1
+      express: 4.17.2
       lodash: 4.17.21
       lru-cache: 6.0.0
     devDependencies:
@@ -11215,6 +11215,13 @@ packages:
     dependencies:
       safe-buffer: 5.1.2
 
+  /content-disposition/0.5.4:
+    resolution: {integrity: sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==}
+    engines: {node: '>= 0.6'}
+    dependencies:
+      safe-buffer: 5.2.1
+    dev: false
+
   /content-type/1.0.4:
     resolution: {integrity: sha512-hIP3EEPs8tB9AT1L+NUqtwOAps4mk2Zob89MWXMHjHWg9milF/j4osnnQLXBCBFBk/tvIG/tUc9mOUJiPBhPXA==}
     engines: {node: '>= 0.6'}
@@ -13505,6 +13512,42 @@ packages:
       utils-merge: 1.0.1
       vary: 1.1.2
 
+  /express/4.17.2:
+    resolution: {integrity: sha512-oxlxJxcQlYwqPWKVJJtvQiwHgosH/LrLSPA+H4UxpyvSS6jC5aH+5MoHFM+KABgTOt0APue4w66Ha8jCUo9QGg==}
+    engines: {node: '>= 0.10.0'}
+    dependencies:
+      accepts: 1.3.7
+      array-flatten: 1.1.1
+      body-parser: 1.19.1
+      content-disposition: 0.5.4
+      content-type: 1.0.4
+      cookie: 0.4.1
+      cookie-signature: 1.0.6
+      debug: 2.6.9
+      depd: 1.1.2
+      encodeurl: 1.0.2
+      escape-html: 1.0.3
+      etag: 1.8.1
+      finalhandler: 1.1.2
+      fresh: 0.5.2
+      merge-descriptors: 1.0.1
+      methods: 1.1.2
+      on-finished: 2.3.0
+      parseurl: 1.3.3
+      path-to-regexp: 0.1.7
+      proxy-addr: 2.0.7
+      qs: 6.9.6
+      range-parser: 1.2.1
+      safe-buffer: 5.2.1
+      send: 0.17.2
+      serve-static: 1.14.2
+      setprototypeof: 1.2.0
+      statuses: 1.5.0
+      type-is: 1.6.18
+      utils-merge: 1.0.1
+      vary: 1.1.2
+    dev: false
+
   /ext/1.4.0:
     resolution: {integrity: sha512-Key5NIsUxdqKg3vIsdw9dSuXpPCQ297y6wBjL30edxwPgt2E44WcWBZey/ZvUc6sERLTxKdyCu4gZFmUbk1Q7A==}
     dependencies:
@@ -21155,6 +21198,25 @@ packages:
       range-parser: 1.2.1
       statuses: 1.5.0
 
+  /send/0.17.2:
+    resolution: {integrity: sha512-UJYB6wFSJE3G00nEivR5rgWp8c2xXvJ3OPWPhmuteU0IKj8nKbG3DrjiOmLwpnHGYWAVwA69zmTm++YG0Hmwww==}
+    engines: {node: '>= 0.8.0'}
+    dependencies:
+      debug: 2.6.9
+      depd: 1.1.2
+      destroy: 1.0.4
+      encodeurl: 1.0.2
+      escape-html: 1.0.3
+      etag: 1.8.1
+      fresh: 0.5.2
+      http-errors: 1.8.1
+      mime: 1.6.0
+      ms: 2.1.3
+      on-finished: 2.3.0
+      range-parser: 1.2.1
+      statuses: 1.5.0
+    dev: false
+
   /serialize-javascript/5.0.1:
     resolution: {integrity: sha512-SaaNal9imEO737H2c05Og0/8LUXG7EnsZyMa8MzkmuHoELfT6txuj0cMqRj6zfPKnmQ1yasR4PCJc8x+M4JSPA==}
     dependencies:
@@ -21200,6 +21262,16 @@ packages:
       parseurl: 1.3.3
       send: 0.17.1
 
+  /serve-static/1.14.2:
+    resolution: {integrity: sha512-+TMNA9AFxUEGuC0z2mevogSnn9MXKb4fa7ngeRMJaaGv8vTwnIEkKi+QGvPt33HSnf8pRS+WGM0EbMtCJLKMBQ==}
+    engines: {node: '>= 0.8.0'}
+    dependencies:
+      encodeurl: 1.0.2
+      escape-html: 1.0.3
+      parseurl: 1.3.3
+      send: 0.17.2
+    dev: false
+
   /set-blocking/2.0.0:
     resolution: {integrity: sha1-BF+XgtARrppoA93TgrJDkrPYkPc=}