feat: bump express to ^4.19.2

Due to CVE-2024-29041, we should bump express to version 4.19.2 or higher
remix-run · Apr 2, 2024 · 6ad3406 · 6ad3406
1 parent 8838b45
commit 6ad3406
Show file tree

Hide file tree

Showing 10 changed files with 19 additions and 10 deletions.
diff --git a/.changeset/afraid-bears-fry.md b/.changeset/afraid-bears-fry.md
@@ -0,0 +1,9 @@
+---
+"integration-tests": patch
+"remix": patch
+"@remix-run/dev": patch
+"@remix-run/express": patch
+"@remix-run/serve": patch
+---
+
+feat: bump express to ^4.19.2
diff --git a/integration/helpers/node-template/package.json b/integration/helpers/node-template/package.json
@@ -16,7 +16,7 @@
     "@remix-run/react": "workspace:*",
     "@remix-run/serve": "workspace:*",
     "@remix-run/server-runtime": "workspace:*",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "isbot": "^4.1.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"

diff --git a/integration/helpers/vite-template/package.json b/integration/helpers/vite-template/package.json
@@ -17,7 +17,7 @@
     "@remix-run/serve": "workspace:*",
     "@vanilla-extract/css": "^1.10.0",
     "@vanilla-extract/vite-plugin": "^3.9.2",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "isbot": "^4.1.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",

diff --git a/integration/package.json b/integration/package.json
@@ -23,7 +23,7 @@
     "cross-spawn": "^7.0.3",
     "dedent": "^0.7.0",
     "execa": "^5.1.1",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "fs-extra": "^10.0.0",
     "get-port": "^5.1.1",
     "glob": "8.0.3",

diff --git a/packages/remix-dev/package.json b/packages/remix-dev/package.json
@@ -47,7 +47,7 @@
     "esbuild-plugins-node-modules-polyfill": "^1.6.0",
     "execa": "5.1.1",
     "exit-hook": "2.2.1",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "fs-extra": "^10.0.0",
     "get-port": "^5.1.1",
     "gunzip-maybe": "^1.4.2",

diff --git a/packages/remix-express/package.json b/packages/remix-express/package.json
@@ -23,13 +23,13 @@
     "@types/express": "^4.17.9",
     "@types/node": "^18.17.1",
     "@types/supertest": "^2.0.10",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "node-mocks-http": "^1.10.1",
     "supertest": "^6.3.3",
     "typescript": "^5.1.6"
   },
   "peerDependencies": {
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "typescript": "^5.1.0"
   },
   "peerDependenciesMeta": {

diff --git a/packages/remix-serve/package.json b/packages/remix-serve/package.json
@@ -22,7 +22,7 @@
     "@remix-run/node": "workspace:*",
     "chokidar": "^3.5.3",
     "compression": "^1.7.4",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "get-port": "5.1.1",
     "morgan": "^1.10.0",
     "source-map-support": "^0.5.21"

diff --git a/scripts/playground/template/package.json b/scripts/playground/template/package.json
@@ -24,7 +24,7 @@
     "@remix-run/serve": "*",
     "@remix-run/server-runtime": "*",
     "bcryptjs": "^2.4.3",
-    "express": "^4.18.1",
+    "express": "^4.19.2",
     "get-port": "^6.1.2",
     "isbot": "^4.1.0",
     "morgan": "^1.10.0",

diff --git a/templates/express/package.json b/templates/express/package.json
@@ -16,7 +16,7 @@
     "@remix-run/react": "*",
     "compression": "^1.7.4",
     "cross-env": "^7.0.3",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "isbot": "^4.1.0",
     "morgan": "^1.10.0",
     "react": "^18.2.0",

diff --git a/templates/vite-express/package.json b/templates/vite-express/package.json
@@ -14,7 +14,7 @@
     "@remix-run/node": "*",
     "@remix-run/react": "*",
     "compression": "^1.7.4",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "isbot": "^4.1.0",
     "morgan": "^1.10.0",
     "react": "^18.2.0",