chore(deps): update dependency morgan to v1.11.0 #35

Merged

spacebot merged 1 commit from renovate/morgan-1.x-lockfile into main

2026-06-03 09:05:34 +02:00

spacebot commented

2026-06-02 21:09:34 +02:00

Owner

This PR contains the following updates:

Package	Change	Age	Confidence
morgan	`1.10.1` → `1.11.0`

Release Notes

expressjs/morgan (morgan)

`v1.11.0`

Compare Source

===================

add :pid token

Security Fix:

Escape control characters in :remote-user token to prevent log injection
- Fixes CVE-2026-5078 GHSA-4vj7-5mj6-jm8m

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [morgan](https://github.com/expressjs/morgan) | [`1.10.1` → `1.11.0`](https://renovatebot.com/diffs/npm/morgan/1.10.1/1.11.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/morgan/1.11.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/morgan/1.10.1/1.11.0?slim=true) | --- ### Release Notes <details> <summary>expressjs/morgan (morgan)</summary> ### [`v1.11.0`](https://github.com/expressjs/morgan/blob/HEAD/HISTORY.md#1110--2026-06-02) [Compare Source](https://github.com/expressjs/morgan/compare/1.10.1...1.11.0) \=================== - add `:pid` token Security Fix: - Escape control characters in `:remote-user` token to prevent log injection - Fixes [CVE-2026-5078](https://www.cve.org/CVERecord?id=CVE-2026-5078) [GHSA-4vj7-5mj6-jm8m](https://github.com/expressjs/morgan/security/advisories/GHSA-4vj7-5mj6-jm8m) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [x] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

spacebot added 1 commit

2026-06-02 21:09:34 +02:00

chore(deps): update dependency morgan to v1.11.0

backend / docker (push) Successful in 3m19s

Details

ab469e203f

spacebot scheduled this pull request to auto merge when all checks succeed

2026-06-02 21:09:34 +02:00

spacebot merged commit d916aaece5 into main

2026-06-03 09:05:34 +02:00

spacebot deleted branch renovate/morgan-1.x-lockfile

2026-06-03 09:05:35 +02:00