From 046bbffc898597d74520c2c7402a18b77a2c5768 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Thu, 22 Apr 2021 12:28:57 +0000 Subject: [PATCH] chore(deps): bump helmet from 4.0.0 to 4.5.0 Bumps [helmet](https://github.com/helmetjs/helmet) from 4.0.0 to 4.5.0. - [Release notes](https://github.com/helmetjs/helmet/releases) - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](https://github.com/helmetjs/helmet/compare/v4.0.0...v4.5.0) Signed-off-by: dependabot-preview[bot] --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 7207192..a676969 100644 --- a/package.json +++ b/package.json @@ -38,7 +38,7 @@ "express-csp-header": "^4.0.0", "express-rate-limit": "^5.1.3", "googleapis": "^58.0.0", - "helmet": "^4.0.0", + "helmet": "^4.5.0", "metaget": "^1.0.7", "moment": "^2.27.0", "mongodb": "^3.5.6", diff --git a/yarn.lock b/yarn.lock index 14ac8cd..4091238 100644 --- a/yarn.lock +++ b/yarn.lock @@ -889,10 +889,10 @@ has-flag@^3.0.0: resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-3.0.0.tgz#b5d454dc2199ae225699f3467e5a07f3b955bafd" integrity sha1-tdRU3CGZriJWmfNGfloH87lVuv0= -helmet@^4.0.0: - version "4.0.0" - resolved "https://registry.yarnpkg.com/helmet/-/helmet-4.0.0.tgz#34c187894ed001834f997c688f2b2df19846b193" - integrity sha512-HyoRKKHhWhO6+EBfgRLkuZR4/+NXc1nJB7x0bWwW89i9eoPciK0qUqyZNOA/zowpgrW9C4+J5toqMkZrpBOlkg== +helmet@^4.5.0: + version "4.5.0" + resolved "https://registry.yarnpkg.com/helmet/-/helmet-4.5.0.tgz#da5a75d30cbd9f60628e9463a85dc7725806c2ea" + integrity sha512-GfxdTaKarneWOpxmiVb/1YsY+fIwDOxVUGrvNEM1MC8W6Z2PREfkXiWF4XHQdvkyXwUTHuY4DRwB0uH/Q6BVyQ== htmlparser2@^3.9.1: version "3.10.1"