fix(deps): update dependency express-validator to v7 (!53) · Merge requests · Kevin Gyorick / rsvp · GitLab

Renovate requested to merge renovate/express-validator-7.x into staging Sep 24, 2024

This MR contains the following updates:

Package	Type	Update	Change
express-validator (source)	dependencies	major	`^5.3.1` -> `^7.2.0`

Release Notes

express-validator/express-validator (express-validator)

`v7.2.0`

Add hide() method (#1304, #1305)
Add wildcard values to custom validator's metadata (#1297, #1308)
Correctly select properties of primitives (#1245, #1279)

`v7.1.0`

Upgraded validator to v13.12.0 (see their release notes: https://github.com/validatorjs/validator.js/releases/tag/13.12.0)
Added missing fields to IsURLOptions (#1258, #1259)
Added isULID() validator (#1248)
Several improvements to docs

`v7.0.1`

Fixed checkSchema() warning that known validators are unknown when its value is false - #1223

`v7.0.0`

🚀 🙌 First major version in almost 4 years! 🚀 🤯 Thanks everybody for having the patience. Hopefully this version brings many improvements to your developer experience!

Breaking changes 💥

Minimum supported Node.js version is now 14+
Removed deprecated APIs - #993
- Import paths express-validator/check and express-validator/filter
- Sanitization-only middlewares (e.g. sanitize(), sanitizeBody(), etc)
- Deprecated TypeScript types (ValidationParamSchema and ValidationSchema)
isObject() validator now assumes options.strict = true by default
Validation errors changed shape
- Field validation errors param property has been renamed to path
- oneOf() validation errors no longer have a param: '_error' property
(TypeScript only) The ValidationError type is now a discriminated union, it might be necessary to use switch or if statements to check that you're dealing with the type that you want to debug/format
oneOf() signature changed: from oneOf(chains, message) to oneOf(chains, options: { message, errorType })
oneOf() default error structure now groups errors by their... validation group!, instead of in a flat list

Checkout the migration guide for examples on how to work around some of these: https://express-validator.github.io/docs/migration-v6-to-v7

New features ✨

Added validation for no unknown fields - #558, #578, #612, #1148, #809, #927, #1204
Added globstars (deep wildcard) support - #790, #1137, #1216
Added support for multiple custom validators/sanitizers in checkSchema() - #552, #1180
Added request-level bail - #1100, #1214
Added a ExpressValidator class which allows adding "persistent" custom validators, sanitizers, and options - #1077, #1079, #1209
Added oneOf() support to .if() - #1170
Added new error types to oneOf() - #956, #1022

Bug fixes 🐛

Validating/sanitizing arrays no longer drops all but the first value - #791, #755, #704, #1002
Added missing ko-KR to MobilePhoneLocale - #1218, #1219
Don't silently fail when setting withMessage and not in schemas - #664

New Contributors

@Yoowatney made their first contribution in https://github.com/express-validator/express-validator/pull/1219

Full Changelog: https://github.com/express-validator/express-validator/compare/v6.15.0...v7.0.0

`v6.15.0`

What's Changed

chore(deps): bump ua-parser-js from 0.7.32 to 0.7.33 by @dependabot in https://github.com/express-validator/express-validator/pull/1208
chore(deps): bump eta from 1.12.3 to 2.0.0 by @dependabot in https://github.com/express-validator/express-validator/pull/1211
chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 by @dependabot in https://github.com/express-validator/express-validator/pull/1210
feat: update to support validator 13.9.0 by @fedeci in https://github.com/express-validator/express-validator/pull/1212

Full Changelog: https://github.com/express-validator/express-validator/compare/v6.14.3...v6.15.0

`v6.14.3`

What's Changed

docs: fixed typo in sanitization chain example by @ankushknr19 in https://github.com/express-validator/express-validator/pull/1195
fixed infinite recursion when the request has a field called * (#1205)

New Contributors

@ankushknr19 made their first contribution in https://github.com/express-validator/express-validator/pull/1195

Full Changelog: https://github.com/express-validator/express-validator/compare/v6.14.2...v6.14.3

`v6.14.2`

What's Changed

correctly run .matches when passing regex object by @tonysamperi in https://github.com/express-validator/express-validator/pull/1156

New Contributors

@tonysamperi made their first contribution in https://github.com/express-validator/express-validator/pull/1156

Full Changelog: https://github.com/express-validator/express-validator/compare/v6.14.1...v6.14.2

`v6.14.1`

What's Changed

Add validationResult() for schema validation example by @daenamkim in https://github.com/express-validator/express-validator/pull/1120
chore(deps): bump shelljs from 0.8.4 to 0.8.5 by @dependabot in https://github.com/express-validator/express-validator/pull/1128
chore(deps): bump ajv from 6.11.0 to 6.12.6 by @dependabot in https://github.com/express-validator/express-validator/pull/1129
chore(deps): bump prismjs from 1.25.0 to 1.27.0 by @dependabot in https://github.com/express-validator/express-validator/pull/1135
docs: remove dependencies status badge by @gustavohenke in https://github.com/express-validator/express-validator/pull/1131
chore(deps): bump minimist from 1.2.5 to 1.2.6 by @dependabot in https://github.com/express-validator/express-validator/pull/1142
chore(deps): bump async from 2.6.3 to 2.6.4 by @dependabot in https://github.com/express-validator/express-validator/pull/1147
Add missing SK postal code - #1144

New Contributors

@daenamkim made their first contribution in https://github.com/express-validator/express-validator/pull/1120

Full Changelog: https://github.com/express-validator/express-validator/compare/v6.14.0...v6.14.1

`v6.14.0`

What's Changed

feat: update validator to 13.7 by @fedeci in https://github.com/express-validator/express-validator/pull/1115
chore(deps): bump tmpl from 1.0.4 to 1.0.5 by @dependabot in https://github.com/express-validator/express-validator/pull/1116
chore(deps): bump path-parse from 1.0.6 to 1.0.7 by @dependabot in https://github.com/express-validator/express-validator/pull/1118
chore(deps): bump prismjs from 1.24.0 to 1.25.0 by @dependabot in https://github.com/express-validator/express-validator/pull/1117

Full Changelog: https://github.com/express-validator/express-validator/compare/v6.13.0...v6.14.0

`v6.13.0`

What's Changed

docs: warn users about bad practice by @hariprasadkc in https://github.com/express-validator/express-validator/pull/1094
schema usage according to documentation results in Error by @fkarg in https://github.com/express-validator/express-validator/pull/1095
v6.13 features by @fedeci in https://github.com/express-validator/express-validator/pull/1091

New Contributors

@hariprasadkc made their first contribution in https://github.com/express-validator/express-validator/pull/1094
@fkarg made their first contribution in https://github.com/express-validator/express-validator/pull/1095

Full Changelog: https://github.com/express-validator/express-validator/compare/v6.12.2...v6.13.0

`v6.12.2`

Fixes:

#1072: add type for checkSchema function return
#1092, #1086: correctly allow falsy values as options in checkSchema

`v6.12.1`

#1061, #1059 - allow using readonly arrays in TypeScript

`v6.12.0`

#1047, #1049 - make withMessage actually override a custom validator's message
#1026, #1037 - add missing arguments of isAlphanumeric

`v6.11.1`

#1034, #1035 - Fix publishing mistake with npm 7

`v6.11.0`

#995, #999 - Make oneOf() work imperatively

`v6.10.1`

#1001, #1004 - Updated dependencies

`v6.10.0`

#735, #871, #948 - add migration example from v5 to v6
#822, #974, #976 - add ability to run oneOf() imperatively
#822, #977 - add ability to run checkSchema() imperatively
#975 - fix objects whose toString property is not a function
#882, #978 - add isObject validator
#986, #987 - TypeScript - make isURL accept non-standard protocols

big kudos to @fedeci for the many improvements! 🎉

`v6.9.2`

#973 - TypeScript - republish of v6.9.1 without the source .ts files

`v6.9.1`

#963 - TypeScript - Updated signature of isAlpha() to work again with the underlying validator

`v6.9.0`

#848, #851 - Add support for bail in schemas

`v6.8.2`

#963 - TypeScript - Update IsAlphaOptions#ignore to allow RegExps, in addition to string[]

`v6.8.1`

#958, #959 - Upgrade validator to ^13.5.2

`v6.8.0`

#952 - Upgraded validator to v13.5.x

`v6.7.0`

#581, #899 - Add toLowerCase() and toUpperCase() sanitizers
#919 - Make customSanitizer await on async functions
#856, #929, #930 - Add default sanitizer
#924, #925 - Add replace sanitizer

`v6.6.1`

#907 - upgrade lodash due to security concerns

`v6.6.0`

#886 - Update validator to v13.1
#887 - fix bug in Getting Started docs example
#888 - Add ability to dry-run validations with check().run(req, { dryRun: boolean }). See docs for more information.

`v6.5.0`

#862, #874 - upgrade validator to v13.0
#875, #877 - don't modify req object from an invalid validation chain passed to oneOf

`v6.4.1`

#544 - Create field paths considering . to be a special character

`v6.4.0`

#781 - Warn on use of sanitization-only middlewares
#792 - Upgrade validator to v12.1
#826 - Compile TS code to ES2017. This should not be a breaking change, as Node 8 should fully support the output code.

`v6.3.1`

#813 - don't use Symbol internally to avoid breaking express-validator reuse

`v6.3.0`

#476 - Bring notEmpty validator back
#772, #776 - Add missing pt-BR mobile phone locale
#794, #795 - Make all properties available in all union branches of ValidationError

`v6.2.0`

#500, #638, #751 - Bail validation when there's an error
#761 - Add min/max options to isArray() validator
#693, #742, #765 - Fix typing for optional when using checkSchema
#762 - Don't log a validation error when using .if() with another validation chain
#745 - Upgrade Lodash to fix vulnerability and validator to v11.1
#748 - Correct typo in a validator name in the docs

`v6.1.1`

#729 - Fix optional data being sanitized

`v6.1.0`

#439, #655, #658 - Conditional validation support
#625 - Improve field selection performance massively
#728, #731 - Fix imperative validations (await body('email').isEmail().run(req)) not generating any errors
#730, #733 - docs: some improvements to the "Running imperatively" page

`v6.0.1`

#726 - Fix TypeScript declarations incorrectly importing validator module

`v6.0.0`

BREAKING CHANGES 💥

Legacy APIs (req.check(), req.checkBody(), req.filter(), etc) have been removed;
require('express-validator/check') and require('express-validator/filter) are now deprecated. Instead, just use require('express-validator');
#616, #722 - Validators and sanitizers will now run in the order they are specified, instead of always running sanitizers first, then validators;
#592, #641, #632, #630, #580, #651, #711 - non-string values will now be sanitized;
Node.js version 6 is no longer supported. Use version 8 or newer.

New features ✨

#698 - express-validator is now written in TypeScript!
#407 - express-validator now works with other libraries like Restify or similar;
#679, #713 - Add a toArray() sanitizer;
Validations can now be run imperatively with check('field').run(req). See docs.

Other changes 🐛

#590, #620, #643, #645, #706, #712 - Overall better docs
#572, #573, #691 - Don't reject promises with non-Error
#723 - Update validator to v11.0.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.