Skip to content

Commit 2afd6cc

Browse files
committed
fix(deps): upgrade express
Upgrade the braintrust package to Express 5.2.1 to remove vulnerable transitive production dependencies from Express 4, including path-to-regexp 0.1.x and older qs versions.
1 parent 08b95f2 commit 2afd6cc

4 files changed

Lines changed: 12 additions & 50 deletions

File tree

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
"braintrust": patch
3+
---
4+
5+
fix(deps): Upgrade Express to remove vulnerable transitive dependencies

‎integrations/browser-js/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@
2525
},
2626
"dependencies": {
2727
"als-browser": "^1.0.1",
28-
"braintrust": ">=3.0.0-rc.29"
28+
"braintrust": "workspace:^"
2929
},
3030
"devDependencies": {
3131
"@types/node": "^20.10.5",

‎js/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -209,7 +209,7 @@
209209
"dotenv": "^16.4.5",
210210
"esbuild": "0.28.0",
211211
"eventsource-parser": "^1.1.2",
212-
"express": "^4.21.2",
212+
"express": "^5.2.1",
213213
"graceful-fs": "^4.2.11",
214214
"http-errors": "^2.0.0",
215215
"minimatch": "^10.2.5",

‎pnpm-lock.yaml‎

Lines changed: 5 additions & 48 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)