fix(devtools-server): bump express to ^4.21.0 (#6354) (resolves #…

…6321) Co-authored-by: Ali Emir Şen <[email protected]>
refinedev · Sep 23, 2024 · da9da4e · da9da4e
1 parent ac31926
commit da9da4e
Show file tree

Hide file tree

Showing 6 changed files with 129 additions and 158 deletions.
diff --git a/.changeset/large-pots-smell.md b/.changeset/large-pots-smell.md
@@ -0,0 +1,9 @@
+---
+"@refinedev/devtools-server": patch
+---
+
+chore: bump express version to latest
+
+Bump `express` dependecy to `^4.21.0` to fix vulnerability in `serve-static`.
+
+[Resolves #6321](https://github.com/refinedev/refine/issues/6321)
diff --git a/.changeset/mean-comics-live.md b/.changeset/mean-comics-live.md
@@ -0,0 +1,9 @@
+---
+"@refinedev/cli": patch
+---
+
+chore(cli): remove unused express dependency
+
+Removed `express` dependency which triggers a vulnerability warning from `serve-static`.
+
+[Resolves #6321](https://github.com/refinedev/refine/issues/6321)
diff --git a/examples/mern-dashboard-server/package.json b/examples/mern-dashboard-server/package.json
@@ -15,7 +15,7 @@
     "cloudinary": "^1.33.0",
     "cors": "^2.8.5",
     "dotenv": "^16.0.3",
-    "express": "^4.18.2",
+    "express": "^4.21.0",
     "mongoose": "^6.9.0",
     "nodemon": "^2.0.20"
   }

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -48,7 +48,6 @@
     "dotenv": "^16.0.3",
     "envinfo": "^7.8.1",
     "execa": "^5.1.1",
-    "express": "^4.18.2",
     "figlet": "^1.5.2",
     "fs-extra": "^10.1.0",
     "globby": "^11.1.0",

diff --git a/packages/devtools-server/package.json b/packages/devtools-server/package.json
@@ -54,7 +54,7 @@
     "dotenv": "^16.0.3",
     "error-stack-parser": "^2.1.4",
     "execa": "^5.1.1",
-    "express": "^4.18.2",
+    "express": "^4.21.0",
     "fs-extra": "^10.1.0",
     "globby": "^11.1.0",
     "gray-matter": "^4.0.3",