Bump ms, express-session and pm2

[dependabot]

Bumps ms to 2.0.0 and updates ancestor dependencies ms, express-session and pm2. These dependencies need to be updated together.

Updates ms from 0.7.0 to 2.0.0

Release notes

Sourced from ms's releases.

2.0.0

Major Changes

• Limit str to 100 to avoid ReDoS of 0.3s: #89

Patches

• Ignored logs coming from npm: b1eaab752203e978492a4d540a7ae1d26e6306b1
• Bumped dependencies to the latest version: bcf57157678fd5afc691383145a35e116f9704d0
• Invalidated cache for slack badge: 94b995c1d6d5d13ec976a0c6849a3cca9b277e6b

Credits

Huge thanks to @​karenyavine for their help!

1.0.0

Major Changes

• Removed component specification: 1fbbe974cdcad96e592dcb65a7b2a8649f690420

Patches

• Test on LTS version of Node: c9b1fd319f0f9198d85ecf4ba83e46cc1216be04
• Removed XO: 94068ea6d518387670df277f740b1abada80ed48
• Use prettier and eslint: 57b3ef8e3423cae6254f94c5564a11b4492cff43
• Badge for XO removed: 389840b329436117741b2ef13a172725082695b9
• Removed browser testing: e818c3581aca3119c00d81901bfe8fe653bcfda4
• More suitable name for file containing tests: ee91f307a8dc3581ebdad614ec0533ddb3d8bf56

0.7.3

Patches

• Mark "options" param as optional in jsdoc: #77
• Lowercased text files: 5f0653ab192a30301aed8668b4588a87975b41ab
• Pinned dependencies: 126d7f094a1836b991c8d0abfeb4d0ce09ac280f
• Chore(package): update serve to version 5.0.1: #81

Credits

Huge thanks to @​Jokero for their help!

0.7.2

Patches 💅

• Added license field to package.json file: zeit/ms#42
• Renamed long and short (reserved keywords): zeit/ms#53
• Capitalized important files: b2d9f9d
• Specified version numbers for devDependencies in package.json: abd3616
• Updated license file to the latest version: 5d53ae8
• Only upload important files to npm, instead of excluding certain ones: 2b2f02a
• Adjusted name of repository in package.json: e84f95d

... (truncated)

Commits

• 9b88d15 2.0.0
• 94b995c Invalidated cache for slack badge
• bcf5715 Bumped dependencies to the latest version
• b1eaab7 Ignored logs coming from npm
• caae298 Limit str to 100 to avoid ReDoS of 0.3s (#89)
• b83b36d chore(package): update eslint to version 3.19.0 (#88)
• 3f2a4d7 chore(package): update husky to version 0.13.3 (#86)
• 7daf984 1.0.0
• ee91f30 More suitable name for file containing tests
• e818c35 Removed browser testing
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by leo, a new releaser for ms since your current version.

Updates express-session from 1.9.3 to 1.17.3

Release notes

Sourced from express-session's releases.

1.17.3

• Fix resaving already-saved new session at end of request
• deps: [email protected]

1.17.2

• Fix res.end patch to always commit headers
• deps: [email protected]
• deps: [email protected]

1.17.1

• Fix internal method wrapping error on failed reloads

1.17.0

• deps: [email protected]
  • Add SameSite=None support
• deps: [email protected]

1.16.2

• Fix restoring cookie.originalMaxAge when store returns Date
• deps: parseurl@~1.3.3

1.16.1

• Fix error passing data option to Cookie constructor
• Fix uncaught error from bad session data

1.16.0

• Catch invalid cookie.maxAge value earlier
• Deprecate setting cookie.maxAge to a Date object
• Fix issue where resave: false may not save altered sessions
• Remove utils-merge dependency
• Use safe-buffer for improved Buffer API
• Use Set-Cookie as cookie header name for compatibility
• deps: depd@~2.0.0
  • Replace internal eval usage with Function constructor
  • Use instance methods on process to check for listeners
  • perf: remove argument reassignment
• deps: on-headers@~1.0.2
  • Fix res.writeHead patch missing return value

1.15.6

• deps: [email protected]
• deps: parseurl@~1.3.2
  • perf: reduce overhead for full URLs
  • perf: unroll the "fast-path" RegExp
• deps: uid-safe@~2.1.5
  • perf: remove only trailing =
• deps: [email protected]

1.15.5

• Fix TypeError when req.url is an empty string

... (truncated)

Changelog

Sourced from express-session's changelog.

1.17.3 / 2022-05-11

• Fix resaving already-saved new session at end of request
• deps: [email protected]

1.17.2 / 2021-05-19

• Fix res.end patch to always commit headers
• deps: [email protected]
• deps: [email protected]

1.17.1 / 2020-04-16

• Fix internal method wrapping error on failed reloads

1.17.0 / 2019-10-10

• deps: [email protected]
  • Add SameSite=None support
• deps: [email protected]

1.16.2 / 2019-06-12

• Fix restoring cookie.originalMaxAge when store returns Date
• deps: parseurl@~1.3.3

1.16.1 / 2019-04-11

• Fix error passing data option to Cookie constructor
• Fix uncaught error from bad session data

1.16.0 / 2019-04-10

• Catch invalid cookie.maxAge value earlier
• Deprecate setting cookie.maxAge to a Date object
• Fix issue where resave: false may not save altered sessions
• Remove utils-merge dependency
• Use safe-buffer for improved Buffer API
• Use Set-Cookie as cookie header name for compatibility
• deps: depd@~2.0.0
  • Replace internal eval usage with Function constructor
  • Use instance methods on process to check for listeners
  • perf: remove argument reassignment

... (truncated)

Commits

• 1010fad 1.17.3
• 99d6cde Fix resaving already-saved new session at end of request
• a06b0be build: remove unnecessary entry from package files
• a1aebf2 build: [email protected]
• 08f5dca build: [email protected]
• 86ed9f3 build: [email protected]
• 18a1011 build: support Node.js 18.x
• 78d1acd build: [email protected]
• 0704929 docs: add user login example
• 5df613c docs: document default cookie.sameSite
• Additional commits viewable in compare view

Updates pm2 from 1.1.3 to 5.3.0

Release notes

Sourced from pm2's releases.

5.3.0

• fix: replace non-working condition that blocks flush from clearing the logs #5533 @​Sailboat265
• fix: ESM script loader #5524 @​BlueWater86

5.2.2

• fix cluster error avoiding process restart (#5396)
• ensure increment_var value is a number (#5435)
• update dependencies
• add node latest to travis testing

5.2.0

• replace node-cron by croner (#5183 #5035)
• upgrade mocha deps
• fix pm2 report when daemon not running
• remove semver check for legacy node.js versions
• update node version in setup.deb.sh by using lts (#5201) + openrc
• replace legacy util._extend by Object.assign (#5239)
• add missing start options types (#5242)
• recursive detection of package.json (#5267)
• make tarball module uninstall cross-platform (#5269)
• Fix unnecessary "ENOENT" console.error when serving a spa (#5272)
• fix: used env variable instead of hardcode datetime format (#5277)
• copyright update (#5278)
• fix: remove constants import from VersionCheck (not needed) (#5279)
• Reduce async import (#5280)

5.1.2

• cron-restart improvements

5.1.1

• add back Node 10.x support
• make pm2-sysmonit module optional
• remove fast-printf and replace with sprintfjs

5.0.3

• fixes for system monitoring

5.0.0

System Monitoring

A new local system monitoring feature has been added, allowing to monitor numerous vital server metrics.

Most important metrics will be displayed when doing a pm2 ls:

┌─────┬─────────────────┬─────────────┬─────────┬─────────┬──────────┬────────┬──────┬───────────┬──────────┬──────────┬──────────┬──────────┐
│ id  │ name            │ namespace   │ version │ mode    │ pid      │ uptime │ ↺    │ status    │ cpu      │ mem      │ user     │ watching │
├─────┼─────────────────┼─────────────┼─────────┼─────────┼──────────┼────────┼──────┼───────────┼──────────┼──────────┼──────────┼──────────┤
│ 4   │ app             │ default     │ 1.0.0   │ fork    │ 164618   │ 2s     │ 1670 │ online    │ 0%       │ 41.8mb   │ unitech  │ disabled │
└─────┴─────────────────┴─────────────┴─────────┴─────────┴──────────┴────────┴──────┴───────────┴──────────┴──────────┴──────────┴──────────┘
</tr></table> 

... (truncated)

Changelog

Sourced from pm2's changelog.

5.3.0

• fix: replace non-working condition that blocks flush from clearing the logs #5533 @​Sailboat265
• fix: ESM script loader #5524 @​BlueWater86

5.2.2

• fix: correct pm2 ls display when there is a (very) long process id (@​dko-slapdash)
• typo: corrections

5.2.1

• fix cluster error avoiding process restart (#5396)
• ensure increment_var value is a number (#5435)
• update dependencies
• add node latest to travis testing

5.2.0

• replace node-cron by croner (#5183 #5035)
• upgrade mocha deps
• fix pm2 report when daemon not running
• remove semver check for legacy node.js versions
• update node version in setup.deb.sh by using lts (#5201) + openrc
• replace legacy util._extend by Object.assign (#5239)
• add missing start options types (#5242)
• recursive detection of package.json (#5267)
• make tarball module uninstall cross-platform (#5269)
• Fix unnecessary "ENOENT" console.error when serving a spa (#5272)
• fix: used env variable instead of hardcode datetime format (#5277)
• copyright update (#5278)
• fix: remove constants import from VersionCheck (not needed) (#5279)
• Reduce async import (#5280)

5.1.2

• easily disable cron-restart strategy via $ pm2 restart --cron-restart 0
• allow to update cron-restart on restart

5.1.1

• remove fast-printf and replace with sprintfjs

5.1.0

• add back Node 10.x support
• make pm2-sysmonit module optional

5.0.3

... (truncated)

Commits

• c7a84c2 [email protected]
• d61f139 Merge branch 'development'
• 1b5e0ab Merge pull request #5533 from Sailboat265/development-flush-patch
• 4cabf82 Merge pull request #5524 from BlueWater86/development
• 3a6b48d hotfix: replace non-working if-else condition to use fs.existsSync while hand...
• ca36f30 Update ProcessContainer.js
• 5dbb561 Update .travis.yml
• 5e70845 [email protected]
• 5278057 Merge pull request #5456 from dko-slapdash/fix-large-id-erasure-in-pm2-list
• dcffe8d Merge branch 'development' of github.com:Unitech/pm2 into development
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.