feat: bump express to ^4.19.2

Due to CVE-2024-29041, we should bump express to version 4.19.2 or higher
remix-run · Apr 2, 2024 · 93a19ea · 93a19ea
1 parent 460bb3e
commit 93a19ea
Show file tree

Hide file tree

Showing 8 changed files with 17 additions and 8 deletions.
diff --git a/.changeset/afraid-bears-fry.md b/.changeset/afraid-bears-fry.md
@@ -0,0 +1,9 @@
+---
+"integration-tests": patch
+"remix": patch
+"@remix-run/dev": patch
+"@remix-run/express": patch
+"@remix-run/serve": patch
+---
+
+feat: bump express to ^4.19.2
diff --git a/integration/package.json b/integration/package.json
@@ -15,7 +15,7 @@
     "cross-spawn": "^7.0.3",
     "dedent": "^0.7.0",
     "execa": "^5.1.1",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "fs-extra": "^10.0.0",
     "get-port": "^5.1.1",
     "glob": "8.0.3",

diff --git a/packages/remix-dev/package.json b/packages/remix-dev/package.json
@@ -44,7 +44,7 @@
     "esbuild-plugins-node-modules-polyfill": "^1.6.0",
     "execa": "5.1.1",
     "exit-hook": "2.2.1",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "fs-extra": "^10.0.0",
     "get-port": "^5.1.1",
     "gunzip-maybe": "^1.4.2",

diff --git a/packages/remix-express/package.json b/packages/remix-express/package.json
@@ -20,13 +20,13 @@
     "@types/express": "^4.17.9",
     "@types/node": "^18.17.1",
     "@types/supertest": "^2.0.10",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "node-mocks-http": "^1.10.1",
     "supertest": "^6.3.3",
     "typescript": "^5.1.6"
   },
   "peerDependencies": {
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "typescript": "^5.1.0"
   },
   "peerDependenciesMeta": {

diff --git a/packages/remix-serve/package.json b/packages/remix-serve/package.json
@@ -19,7 +19,7 @@
     "@remix-run/node": "2.2.0",
     "chokidar": "^3.5.3",
     "compression": "^1.7.4",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "get-port": "5.1.1",
     "morgan": "^1.10.0",
     "source-map-support": "^0.5.21"

diff --git a/scripts/playground/template/package.json b/scripts/playground/template/package.json
@@ -24,7 +24,7 @@
     "@remix-run/serve": "*",
     "@remix-run/server-runtime": "*",
     "bcryptjs": "^2.4.3",
-    "express": "^4.18.1",
+    "express": "^4.19.2",
     "get-port": "^6.1.2",
     "isbot": "^3.5.1",
     "morgan": "^1.10.0",

diff --git a/templates/express/package.json b/templates/express/package.json
@@ -15,7 +15,7 @@
     "@remix-run/react": "*",
     "compression": "^1.7.4",
     "cross-env": "^7.0.3",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "isbot": "^3.6.8",
     "morgan": "^1.10.0",
     "react": "^18.2.0",

diff --git a/templates/unstable-vite-express/package.json b/templates/unstable-vite-express/package.json
@@ -13,7 +13,7 @@
     "@remix-run/express": "*",
     "@remix-run/node": "*",
     "@remix-run/react": "*",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "isbot": "^3.6.8",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"