From 02959e81f7c92a42391e95d6dff6ae48ef556105 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 4 Nov 2024 11:55:53 +0000 Subject: [PATCH] BAU: Bump helmet from 7.1.0 to 8.0.0 Bumps [helmet](https://github.com/helmetjs/helmet) from 7.1.0 to 8.0.0. - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](https://github.com/helmetjs/helmet/compare/v7.1.0...v8.0.0) --- updated-dependencies: - dependency-name: helmet dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index c9ae15fb7..a6436a1b1 100644 --- a/package.json +++ b/package.json @@ -82,7 +82,7 @@ "express-session": "^1.17.2", "express-validator": "^6.13.0", "govuk-frontend": "^4.8.0", - "helmet": "7.1.0", + "helmet": "8.0.0", "i18next": "^21.6.5", "i18next-fs-backend": "^2.3.1", "i18next-http-middleware": "^3.2.0", diff --git a/yarn.lock b/yarn.lock index 9e4ca2b7f..d57f1d9c6 100644 --- a/yarn.lock +++ b/yarn.lock @@ -4140,10 +4140,10 @@ he@^1.2.0: resolved "https://registry.yarnpkg.com/he/-/he-1.2.0.tgz#84ae65fa7eafb165fddb61566ae14baf05664f0f" integrity sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw== -helmet@7.1.0: - version "7.1.0" - resolved "https://registry.yarnpkg.com/helmet/-/helmet-7.1.0.tgz#287279e00f8a3763d5dccbaf1e5ee39b8c3784ca" - integrity sha512-g+HZqgfbpXdCkme/Cd/mZkV0aV3BZZZSugecH03kl38m/Kmdx8jKjBikpDj2cr+Iynv4KpYEviojNdTJActJAg== +helmet@8.0.0: + version "8.0.0" + resolved "https://registry.yarnpkg.com/helmet/-/helmet-8.0.0.tgz#05370fb1953aa7b81bd0ddfa459221247be6ea5c" + integrity sha512-VyusHLEIIO5mjQPUI1wpOAEu+wl6Q0998jzTxqUYGE45xCIcAxy3MsbEK/yyJUJ3ADeMoB6MornPH6GMWAf+Pw== help-me@^5.0.0: version "5.0.0"