[Snyk] Upgrade express-validator from 6.15.0 to 7.0.1 #10412

rpt-uk-github · 2023-12-12T20:40:14Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade express-validator from 6.15.0 to 7.0.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 2 versions ahead of your current version.
The recommended version was released 8 months ago, on 2023-04-16.

Release notes

Package name: express-validator

7.0.1 - 2023-04-16
- Fixed checkSchema() warning that known validators are unknown when its value is false - #1223
7.0.0 - 2023-04-15
🚀 🙌 First major version in almost 4 years! 🚀 🤯
Thanks everybody for having the patience. Hopefully this version brings many improvements to your developer experience!

Breaking changes 💥
- Minimum supported Node.js version is now 14+
- Removed deprecated APIs - #993
  - Import paths express-validator/check and express-validator/filter
  - Sanitization-only middlewares (e.g. sanitize(), sanitizeBody(), etc)
  - Deprecated TypeScript types (ValidationParamSchema and ValidationSchema)
- isObject() validator now assumes options.strict = true by default
- Validation errors changed shape
  - Field validation errors param property has been renamed to path
  - oneOf() validation errors no longer have a param: '_error' property
- (TypeScript only) The ValidationError type is now a discriminated union, it might be necessary to use switch or if statements to check that you're dealing with the type that you want to debug/format
- oneOf() signature changed: from oneOf(chains, message) to oneOf(chains, options: { message, errorType })
- oneOf() default error structure now groups errors by their... validation group!, instead of in a flat list
Checkout the migration guide for examples on how to work around some of these:
https://express-validator.github.io/docs/migration-v6-to-v7

New features ✨
- Added validation for no unknown fields - #558, #578, #612, #1148, #809, #927, #1204
- Added globstars (deep wildcard) support - #790, #1137, #1216
- Added support for multiple custom validators/sanitizers in checkSchema() - #552, #1180
- Added request-level bail - #1100, #1214
- Added a ExpressValidator class which allows adding "persistent" custom validators, sanitizers, and options - #1077, #1079, #1209
- Added oneOf() support to .if() - #1170
- Added new error types to oneOf() - #956, #1022
Bug fixes 🐛
- Validating/sanitizing arrays no longer drops all but the first value - #791, #755, #704, #1002
- Added missing ko-KR to MobilePhoneLocale - #1218, #1219
- Don't silently fail when setting withMessage and not in schemas - #664
New Contributors
- @ Yoowatney made their first contribution in #1219
Full Changelog: v6.15.0...v7.0.0
6.15.0 - 2023-02-16
What's Changed
- chore(deps): bump ua-parser-js from 0.7.32 to 0.7.33 by @ dependabot in #1208
- chore(deps): bump eta from 1.12.3 to 2.0.0 by @ dependabot in #1211
- chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 by @ dependabot in #1210
- feat: update to support validator 13.9.0 by @ fedeci in #1212
Full Changelog: v6.14.3...v6.15.0