Skip to content

chore(deps): bump ip-address and express-rate-limit in /server - #21

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/multi-42c01067f9
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/multi-42c01067f9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2026

Copy link
Copy Markdown

Bumps ip-address to 10.7.5 and updates ancestor dependency express-rate-limit. These dependencies need to be updated together.

Updates ip-address from 10.0.1 to 10.7.5

Release notes

Sourced from ip-address's releases.

v10.7.5

Full Changelog: beaugunderson/ip-address@v10.7.4...v10.7.5

v10.7.4

Full Changelog: beaugunderson/ip-address@v10.7.3...v10.7.4

v10.7.3

What's Changed

Full Changelog: beaugunderson/ip-address@v10.7.2...v10.7.3

v10.7.2

What's Changed

Full Changelog: beaugunderson/ip-address@v10.7.1...v10.7.2

v10.7.1

What's Changed

Full Changelog: beaugunderson/ip-address@v10.7.0...v10.7.1

v10.7.0

What's Changed

Full Changelog: beaugunderson/ip-address@v10.6.0...v10.7.0

v10.6.0

What's Changed

Full Changelog: beaugunderson/ip-address@v10.5.1...v10.6.0

v10.5.1

Full Changelog: beaugunderson/ip-address@v10.5.0...v10.5.1

v10.5.0

What's Changed

... (truncated)

Commits
  • db0dbda 10.7.5
  • 82a72d7 Read Teredo flags from the bits inspectTeredo names
  • 172afdd Update mocha to 12 and patch vulnerable transitive dev dependencies
  • 8c0ec94 Test that every parser rejects fullwidth and other non-ASCII digits
  • 651c1dd 10.7.4
  • ec80fcd Find an IPv6 zone by index so a rejected zone costs one pass
  • e22eb4a Check generated docs without writing or hiding partial staging
  • c7f838e 10.7.3
  • 09b8072 Reject an in-addr.arpa name longer than 32 characters before splitting it (#228)
  • 974b48d 10.7.2
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ip-address since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates express-rate-limit from 8.2.1 to 8.7.2

Release notes

Sourced from express-rate-limit's releases.

v8.7.2

You can view the changelog here.

v8.7.1

You can view the changelog here.

v8.7.0

You can view the changelog here.

v8.6.2

You can view the changelog here.

v8.6.1

You can view the changelog here.

v8.6.0

You can view the changelog here.

v8.5.2

You can view the changelog here.

v8.5.1

You can view the changelog here.

v8.5.0

You can view the changelog here.

v8.4.1

You can view the changelog here.

v8.4.0

You can view the changelog here.

v8.3.2

You can view the changelog here.

v8.3.1

You can view the changelog here.

v8.3.0

You can view the changelog here.

Commits
  • 3fa4577 8.7.2
  • 7427a5c v8.7.2 changelog
  • da5b115 fix: don't un-count requests that complete after the window resets (#707)
  • 28331a7 docs: Restore hyphenated anchor links for error codes (#705)
  • 404bc3a docs: show how to reset the key of an IPv6 client (#704)
  • e0b3886 docs: fix inverted skipSuccessfulRequests and ipv6Subnet descriptions (#703)
  • 97bc073 chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 (#702)
  • 991c16d chore(deps): bump ip-address from 10.7.1 to 10.7.3 (#699)
  • a6ace2a chore(deps-dev): bump the development-dependencies group with 9 updates (#698)
  • 518a0d5 chore(deps): bump ip-address from 10.7.0 to 10.7.1 (#696)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express-rate-limit since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [ip-address](https://github.com/beaugunderson/ip-address) to 10.7.5 and updates ancestor dependency [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit). These dependencies need to be updated together.


Updates `ip-address` from 10.0.1 to 10.7.5
- [Release notes](https://github.com/beaugunderson/ip-address/releases)
- [Commits](beaugunderson/ip-address@v10.0.1...v10.7.5)

Updates `express-rate-limit` from 8.2.1 to 8.7.2
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.2.1...v8.7.2)

---
updated-dependencies:
- dependency-name: ip-address
  dependency-version: 10.7.5
  dependency-type: indirect
- dependency-name: express-rate-limit
  dependency-version: 8.7.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from Hesara2003 as a code owner October 31, 2026 09:35
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 31, 2026
@coderabbitai

coderabbitai Bot commented Oct 31, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 605c3908-50e0-43c4-8580-bf208de72caa

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants