Skip to content

chore(deps): Bump express-rate-limit from 8.7.0 to 8.7.1 - #273

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/express-rate-limit-8.7.1
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/express-rate-limit-8.7.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps express-rate-limit from 8.7.0 to 8.7.1.

Release notes

Sourced from express-rate-limit's releases.

v8.7.1

You can view the changelog here.

Commits
  • c2e30b3 8.7.1
  • b40a390 v8.7.1 changelog
  • ccbee88 fix: correct es2020/es2022 version mismatch between tsconfig and esbuild comm...
  • 11a143a chore: fix duplicate entries in pnpm-lockfile.yaml (#685)
  • 92f685d chore(deps): bump softprops/action-gh-release from 1 to 3 (#692)
  • 0c7c066 chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 (#694)
  • 9735b69 chore(deps): bump pnpm/action-setup from 3.0.0 to 6.1.0 (#695)
  • 7f401b7 chore(deps): bump actions/setup-node from 4.4.0 to 7.0.0 (#693)
  • 7a49bb0 ci: add guard that fails the build on unpinned GitHub Actions (companion to #...
  • 784c447 ci: pin GitHub Actions to immutable commit SHAs (#690)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 8.7.0 to 8.7.1.
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.7.0...v8.7.1)

---
updated-dependencies:
- dependency-name: express-rate-limit
  dependency-version: 8.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 12, 2026
@elnora-automation-bot

Copy link
Copy Markdown
Contributor

Automated Dependency Review

Verdict: SAFE
Ecosystem: pnpm · Bump: patch
Package: express-rate-limit (8.7.0 → 8.7.1)

Rationale

  • Patch update per upstream notes
  • CI: build ✓ · test ✓

Recommendation

Merge in the next batch PR.

@elnora-automation-bot elnora-automation-bot Bot added the auto-review: safe Automated review: safe to merge label Oct 13, 2026
rjamul-elnora-ai pushed a commit that referenced this pull request Oct 13, 2026
## Included Bumps

| PR | Ecosystem | Package | Old → New | Type |
|---|---|---|---|---|
| #273 | pnpm | express-rate-limit | 8.7.0 → 8.7.1 | patch |
| #274 | pnpm | express | 5.2.1 → 5.3.0 | minor |

## Verification

**pnpm**: build ✓ · test ✓

## How to Merge

Merging closes the individual Dependabot PRs above whose changes are now
in main.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: elnora-automation-bot[bot] <294956319+elnora-automation-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Code <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

Looks like express-rate-limit is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 13, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/express-rate-limit-8.7.1 branch October 13, 2026 20:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-review: safe Automated review: safe to merge dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants