Skip to content

build(deps): bump underscore, express-winston and grunt#3

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-327fb65305
Open

build(deps): bump underscore, express-winston and grunt#3
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-327fb65305

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 23, 2026

Removes underscore. It's no longer used after updating ancestor dependencies underscore, express-winston and grunt. These dependencies need to be updated together.

Removes underscore

Updates express-winston from 0.3.1 to 4.2.0

Release notes

Sourced from express-winston's releases.

v4.2.0

  • Upgraded lodash to 4.17.21 minimum (#264)
  • Fixed typos and Readme format (#262)

Published as + express-winston@4.2.0

v4.1.0

  • Update chalk and lodash due minor security impact (#252)
  • Allow filter out whitelisted request body (#258)
  • Fix metaField/requestField/responseField typescript types (#259)

Thanks to all contributors.

express-winston@4.1.0

v4.0.5

Sames as v4.0.4 but without breaking the typescript interface:

  • Fix excess semicolon breaking Typescript compilation (#249)

Published as express-winston@4.0.5

v4.0.4 [security upgrade]

  • Update lodash to 4.17.19 (#245)
  • Update statusLevels to accept Boolean or StatusLevel object in TypeScript definition (#244)

Published as express-winston@4.0.4

v4.0.3 [security upgrade]

  • Update lodash to 4.17.15 (#232)
  • Add missing exceptionToMeta and skip to TypeScript definition (#234)

Published as express-winston@4.0.3

v4.0.2

  • Add blacklist fields to BaseErrorLoggerOptions interface (#230)

Published as express-winston@4.0.2

v4.0.1

  • Added headerBlacklist to BaseLoggerOptions for better typescript support (#228)

Published as express-winston@4.0.1

v4.0.0

  • Changed metaField configuration property functionality (see Readme.md) (#209) - BREAKING CHANGE
  • Moved type definitions to be embedded inside library (#123)
  • Added "files" to package.json to reduce unnecessary files in released package
  • Added StackDriver/Google Cloud Logging specific instructions to Readme.md
  • Added requestField and responseField options to allow storing the request and response in different metadata fields (or not at all)

... (truncated)

Changelog

Sourced from express-winston's changelog.

4.2.0

  • Upgraded lodash to 4.17.21 minimum (#264)
  • Fixed typos and Readme format (#262)

4.1.0

  • Update chalk and lodash due minor security impact (#252)
  • Allow filter out whitelisted request body (#258)
  • Fix metaField/requestField/responseField typescript types (#259)

4.0.5

  • Fix excess semicolon breaking Typescript compilation (#249)

4.0.4

  • Update lodash to 4.17.19 (#245)
  • Update statusLevels to accept Boolean or StatusLevel object in TypeScript definition (#244)

4.0.3

  • Update lodash to 4.17.15 (#232)
  • Add missing exceptionToMeta and skip to TypeScript definition (#234)

4.0.2

  • Add blacklist fields to BaseErrorLoggerOptions interface (#230)

4.0.1

  • Added headerBlacklist to BaseLoggerOptions for better typescript support (#228)

4.0.0

  • Changed metaField configuration property functionality (see Readme.md) (#209) - BREAKING CHANGE
  • Moved type definitions to be embedded inside library (#123)
  • Added "files" to package.json to reduce unnecessary files in released package
  • Added StackDriver/Google Cloud Logging specific instructions to Readme.md
  • Added requestField and responseField options to allow storing the request and response in different metadata fields (or not at all)
  • Fixed meta configuration option on errorLogger (was not functioning at all)
  • Added .editorconfig and reformatted library to match

3.4.0

3.3.0

3.2.1

3.2.0

... (truncated)

Commits
  • e17d87b Version bump 4.2.0
  • bdba1d3 Fix #264: Upgrade lodash to 4.17.21 minimum
  • 10cd3a4 Fix Readme typos and format (#262)
  • 2260eda Version bump 4.1.0
  • d7d1b3c Merge pull request #259 from davidgoli/fix-types
  • 1546449 fix metaField/requestField/responseField types
  • 425e93c Merge pull request #252 from mikelax/main
  • 5d4a3c5 Merge pull request #258 from nati-mask/main
  • 6d4de71 Allow filter out whitelisted request body
  • 05ae066 fix: update patch libs, add travis node 12,14
  • Additional commits viewable in compare view

Updates grunt from 0.4.5 to 1.6.1

Release notes

Sourced from grunt's releases.

v1.6.1

  • Changelog updates 72f6f03
  • Merge pull request #1755 from gruntjs/rm-dep 8d4c183
  • Add recursive 1c7d483
  • Merge pull request #1756 from gruntjs/downgrade-glob 2d4fd38
  • Downgrade glob 902db7c
  • Fix syntax 494f243
  • remove mkdirp b01389e
  • remove dep on rimraf and mkdirp 0072510

gruntjs/grunt@v1.6.0...v1.6.1

v1.6.0

  • Merge pull request #1750 from gruntjs/dep-update-jan28 2805dc3
  • README updates 3f1e423
  • Bump to 16 8fd096d
  • Update more deps 42c5f95
  • Bump eslint and node version 1d88050

gruntjs/grunt@v1.5.3...v1.6.0

v1.5.3

  • Merge pull request #1745 from gruntjs/fix-copy-op 572d79b
  • Patch up race condition in symlink copying. 58016ff
  • Merge pull request #1746 from JamieSlome/patch-1 0749e1d
  • Create SECURITY.md 69b7c50

gruntjs/grunt@v1.5.2...v1.5.3

v1.5.2

  • Update Changelog 7f15fd5
  • Merge pull request #1743 from gruntjs/cleanup-link b0ec6e1
  • Clean up link handling 433f91b

gruntjs/grunt@v1.5.1...v1.5.2

v1.5.1

  • Merge pull request #1742 from gruntjs/update-symlink-test ad22608
  • Fix symlink test 0652305

gruntjs/grunt@v1.5.0...v1.5.1

v1.5.0

  • Updated changelog b2b2c2b
  • Merge pull request #1740 from gruntjs/update-deps-22-10 3eda6ae
  • Update testing matrix 47d32de
  • More updates 2e9161c
  • Remove console log 04b960e
  • Update dependencies, tests... aad3d45
  • Merge pull request #1736 from justlep/main fdc7056

... (truncated)

Changelog

Sourced from grunt's changelog.

v1.6.1 date: 2023-01-31 changes: - Downgrades to glob 7 for Windows compatability - Removes mkdirp and rimraf in favour of node.js APIs. v1.6.0 date: 2023-01-28 changes: - Requires node.js 16+. - template.date now uses dateformat ~4.6.2. - other dependency updates such as glob, rimraf, etc. v1.5.3 date: 2022-04-23 changes: - Patch up race condition in symlink copying. v1.5.2 date: 2022-04-12 changes: - Unlink symlinks when copy destination is a symlink. v1.5.1 date: 2022-04-11 changes: - Fixed symlink destination handling. v1.5.0 date: 2022-04-10 changes: - Updated dependencies. - Add symlink handling for copying files. v1.4.1 date: 2021-05-24 changes: - Fix --preload option to be a known option - Switch to GitHub Actions v1.4.0 date: 2021-04-21 changes: - Security fixes in production and dev dependencies - Liftup/Liftoff upgrade breaking change. Update your scripts to use --preload instead of --require. Ref: gulpjs/liftoff@e7a969d. v1.3.0 date: 2020-08-18 changes: - Switch to use safeLoad for loading YML files via file.readYAML. - Upgrade legacy-log to ~3.0.0. - Upgrade legacy-util to ~2.0.0. v1.2.1 date: 2020-07-07 changes: - Remove path-is-absolute dependency. (PR: gruntjs/grunt#1715) v1.2.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by vladikoff, a new releaser for grunt since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [underscore](https://github.com/jashkenas/underscore). It's no longer used after updating ancestor dependencies [underscore](https://github.com/jashkenas/underscore), [express-winston](https://github.com/bithavoc/express-winston) and [grunt](https://github.com/gruntjs/grunt). These dependencies need to be updated together.


Removes `underscore`

Updates `express-winston` from 0.3.1 to 4.2.0
- [Release notes](https://github.com/bithavoc/express-winston/releases)
- [Changelog](https://github.com/bithavoc/express-winston/blob/main/CHANGELOG.md)
- [Commits](bithavoc/express-winston@v0.3.1...v4.2.0)

Updates `grunt` from 0.4.5 to 1.6.1
- [Release notes](https://github.com/gruntjs/grunt/releases)
- [Changelog](https://github.com/gruntjs/grunt/blob/main/CHANGELOG)
- [Commits](gruntjs/grunt@v0.4.5...v1.6.1)

---
updated-dependencies:
- dependency-name: underscore
  dependency-version: 
  dependency-type: indirect
- dependency-name: express-winston
  dependency-version: 4.2.0
  dependency-type: direct:production
- dependency-name: grunt
  dependency-version: 1.6.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-327fb65305 branch from 36ac6a2 to 1c4a8ae Compare March 23, 2026 19:57
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants