Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump express-openapi-validator from 5.3.4 to 5.3.5 in /hedera-mirror-rest #9297

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 9, 2024

Bumps express-openapi-validator from 5.3.4 to 5.3.5.

Release notes

Sourced from express-openapi-validator's releases.

v5.3.5

(2024-09-06)

  • fix: Dereference path parameters (#962) (0aebe5d), closes #962
  • fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#951) (5b0058d), closes #951
  • [StepSecurity] ci: Harden GitHub Actions (#959) (78e55be), closes #959
  • Fix changelog breaking changes notice (#961) (0a8dc2f), closes #961
  • update README (7334ccd)
  • chore(deps-dev): bump braces in /examples/5-custom-operation-resolver (#958) (eda5612), closes #958
  • chore(deps): bump braces in /examples/4-eov-operations-babel (#957) (749a8c8), closes #957
  • chore(deps): bump webpack and @​nestjs/cli in /examples/9-nestjs (#953) (299aad6), closes #953

(2024-08-31)

breaking change

By default, request and response validation now stops after the first failure. Only one error will be reported even when multiple may exist. This follows best practices from AJV:

To report all validation errors (only recommended in development), option allErrors can be set in options validateRequests and/or validateResponses. For example:

app.use(
  OpenApiValidator.middleware({
    apiSpec: 'path/to/openapi.json',
    validateRequests: {
      allErrors: true,
    },
    validateResponses: {
      allErrors: true,
    },
  })
);

(2024-08-24)

  • chore(deps-dev): bump @​babel/traverse in /examples/9-nestjs (#948) (edd054f), closes #948
  • chore(deps-dev): bump braces in /examples/8-top-level-discriminator (#929) (e3a9526), closes #929
  • chore(deps-dev): bump ws from 7.5.5 to 7.5.10 in /examples/9-nestjs (#930) (9d5895b), closes #930
  • fix: correct security schema logic for OR verification (#946) (2265a10), closes #946

... (truncated)

Commits
  • 8852536 v5.3.5
  • 0aebe5d fix: Dereference path parameters (#962)
  • 0a8dc2f Fix changelog breaking changes notice (#961)
  • 5b0058d fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#951)
  • eda5612 chore(deps-dev): bump braces in /examples/5-custom-operation-resolver (#958)
  • 749a8c8 chore(deps): bump braces in /examples/4-eov-operations-babel (#957)
  • 299aad6 chore(deps): bump webpack and @​nestjs/cli in /examples/9-nestjs (#953)
  • 78e55be [StepSecurity] ci: Harden GitHub Actions (#959)
  • 7334ccd update README
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [express-openapi-validator](https://github.com/cdimascio/express-openapi-validator) from 5.3.4 to 5.3.5.
- [Release notes](https://github.com/cdimascio/express-openapi-validator/releases)
- [Changelog](https://github.com/cdimascio/express-openapi-validator/blob/master/CHANGE_HISTORY.md)
- [Commits](cdimascio/express-openapi-validator@v5.3.4...v5.3.5)

---
updated-dependencies:
- dependency-name: express-openapi-validator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Type: Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2024
@steven-sheehy steven-sheehy added this to the 0.114.0 milestone Sep 9, 2024
@steven-sheehy steven-sheehy merged commit 72a3a58 into main Sep 9, 2024
30 checks passed
@steven-sheehy steven-sheehy deleted the dependabot/npm_and_yarn/hedera-mirror-rest/express-openapi-validator-5.3.5 branch September 9, 2024 18:16
bilyana-gospodinova pushed a commit that referenced this pull request Sep 10, 2024
…rest (#9297)

Bump express-openapi-validator in /hedera-mirror-rest

Bumps [express-openapi-validator](https://github.com/cdimascio/express-openapi-validator) from 5.3.4 to 5.3.5.
- [Release notes](https://github.com/cdimascio/express-openapi-validator/releases)
- [Changelog](https://github.com/cdimascio/express-openapi-validator/blob/master/CHANGE_HISTORY.md)
- [Commits](cdimascio/express-openapi-validator@v5.3.4...v5.3.5)

---
updated-dependencies:
- dependency-name: express-openapi-validator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Type: Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant