From 512a488f752d5d462a29ccb33820a5fcd8af1a67 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Mon, 3 May 2021 10:25:27 +0000 Subject: [PATCH] Bump helmet from 4.1.0 to 4.6.0 Bumps [helmet](https://github.com/helmetjs/helmet) from 4.1.0 to 4.6.0. - [Release notes](https://github.com/helmetjs/helmet/releases) - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](https://github.com/helmetjs/helmet/compare/v4.1.0...v4.6.0) Signed-off-by: dependabot-preview[bot] --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 38c205d..4f0f9b7 100644 --- a/package.json +++ b/package.json @@ -13,7 +13,7 @@ "body-parser": "^1.19.0", "deepmerge": "^4.2.2", "express": "^4.17.1", - "helmet": "^4.1.0", + "helmet": "^4.6.0", "nodemon": "^2.0.4", "prom-client": "^12.0.0", "response-time": "^2.3.2", diff --git a/yarn.lock b/yarn.lock index 51e19be..6a9d0b0 100644 --- a/yarn.lock +++ b/yarn.lock @@ -519,10 +519,10 @@ has-yarn@^2.1.0: resolved "https://registry.yarnpkg.com/has-yarn/-/has-yarn-2.1.0.tgz#137e11354a7b5bf11aa5cb649cf0c6f3ff2b2e77" integrity sha512-UqBRqi4ju7T+TqGNdqAO0PaSVGsDGJUBQvk9eUWNGRY1CFGDzYhLWoM7JQEemnlvVcv/YEmc2wNW8BC24EnUsw== -helmet@^4.1.0: - version "4.1.0" - resolved "https://registry.yarnpkg.com/helmet/-/helmet-4.1.0.tgz#6f3a34e8f18502d6e52518428b23aa4ddaf84b38" - integrity sha512-KWy75fYN8hOG2Rhl8e5B3WhOzb0by1boQum85TiddIE9iu6gV+TXbUjVC17wfej0o/ZUpqB9kxM0NFCZRMzf+Q== +helmet@^4.6.0: + version "4.6.0" + resolved "https://registry.yarnpkg.com/helmet/-/helmet-4.6.0.tgz#579971196ba93c5978eb019e4e8ec0e50076b4df" + integrity sha512-HVqALKZlR95ROkrnesdhbbZJFi/rIVSoNq6f3jA/9u6MIbTsPh3xZwihjeI5+DO/2sOV6HMHooXcEOuwskHpTg== http-cache-semantics@^4.0.0: version "4.1.0"