This run took 37 seconds.
From 65cd6aa146021d9d885feba4022e9431ffa47491 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Tue, 2 Dec 2025 04:44:11 +0000
Subject: [PATCH] build: Updating express to 5.2.1
Change-Id: Id1a9f56bd971c7da66ceace986d47f1740f3f71e
---
package-lock.json | 11 ++++++-----
package.json | 2 +-
2 files changed, 7 insertions(+), 6 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index 33e2d87..4de883d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
},
"devDependencies": {
"eslint-config-wikimedia": "0.32.2",
- "express": "5.1.0",
+ "express": "5.2.1",
"jsdoc": "4.0.5",
"jsdoc-class-hierarchy": "1.1.2",
"jsdoc-wmf-theme": "1.1.0",
@@ -2804,18 +2804,19 @@
}
},
"node_modules/express": {
- "version": "5.1.0",
- "resolved": "https://registry.npmjs.org/express/-/express-5.1.0.tgz",
- "integrity": "sha512-DT9ck5YIRU+8GYzzU5kT3eHGA5iL+1Zd0EutOmTE9Dtk+Tvuzd23VBU+ec7HPNSTxXYO55gPV/hq4pSBJDjFpA==",
+ "version": "5.2.1",
+ "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
+ "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==",
"dev": true,
"dependencies": {
"accepts": "^2.0.0",
- "body-parser": "^2.2.0",
+ "body-parser": "^2.2.1",
"content-disposition": "^1.0.0",
"content-type": "^1.0.5",
"cookie": "^0.7.1",
"cookie-signature": "^1.2.1",
"debug": "^4.4.0",
+ "depd": "^2.0.0",
"encodeurl": "^2.0.0",
"escape-html": "^1.0.3",
"etag": "^1.8.1",
diff --git a/package.json b/package.json
index a3a1991..4347c8f 100644
--- a/package.json
+++ b/package.json
@@ -24,7 +24,7 @@
},
"devDependencies": {
"eslint-config-wikimedia": "0.32.2",
- "express": "5.1.0",
+ "express": "5.2.1",
"jsdoc": "4.0.5",
"jsdoc-class-hierarchy": "1.1.2",
"jsdoc-wmf-theme": "1.1.0",
--
2.47.3
$ date
--- stdout ---
Tue Dec 2 04:43:48 UTC 2025
--- end ---
$ git clone file:///srv/git/mediawiki-tools-api-testing.git repo --depth=1 -b master
--- stderr ---
Cloning into 'repo'...
--- stdout ---
--- end ---
$ git config user.name libraryupgrader
--- stdout ---
--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---
--- end ---
$ git submodule update --init
--- stdout ---
--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.
--- end ---
$ git show-ref refs/heads/master
--- stdout ---
19dfff01061918866cb407aad25913b4043a78bd refs/heads/master
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"express": {
"name": "express",
"severity": "low",
"isDirect": true,
"via": [
{
"source": 1111086,
"name": "express",
"dependency": "express",
"title": "express improperly controls modification of query properties",
"url": "https://github.com/advisories/GHSA-pj86-cfqh-vqx6",
"severity": "low",
"cwe": [
"CWE-915"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": ">=5.0.0 <5.2.0"
}
],
"effects": [],
"range": "5.0.0 - 5.1.0",
"nodes": [
"node_modules/express"
],
"fixAvailable": {
"name": "express",
"version": "5.2.1",
"isSemVerMajor": false
}
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 1,
"moderate": 0,
"high": 0,
"critical": 0,
"total": 1
},
"dependencies": {
"prod": 52,
"dev": 484,
"optional": 2,
"peer": 1,
"peerOptional": 0,
"total": 535
}
}
}
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"express": {
"name": "express",
"severity": "low",
"isDirect": true,
"via": [
{
"source": 1111086,
"name": "express",
"dependency": "express",
"title": "express improperly controls modification of query properties",
"url": "https://github.com/advisories/GHSA-pj86-cfqh-vqx6",
"severity": "low",
"cwe": [
"CWE-915"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": ">=5.0.0 <5.2.0"
}
],
"effects": [],
"range": "5.0.0 - 5.1.0",
"nodes": [
"node_modules/express"
],
"fixAvailable": {
"name": "express",
"version": "5.2.1",
"isSemVerMajor": false
}
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 1,
"moderate": 0,
"high": 0,
"critical": 0,
"total": 1
},
"dependencies": {
"prod": 52,
"dev": 484,
"optional": 2,
"peer": 1,
"peerOptional": 0,
"total": 535
}
}
}
--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
{
"added": 535,
"removed": 0,
"changed": 0,
"audited": 536,
"funding": 117,
"audit": {
"auditReportVersion": 2,
"vulnerabilities": {
"express": {
"name": "express",
"severity": "low",
"isDirect": true,
"via": [
{
"source": 1111086,
"name": "express",
"dependency": "express",
"title": "express improperly controls modification of query properties",
"url": "https://github.com/advisories/GHSA-pj86-cfqh-vqx6",
"severity": "low",
"cwe": [
"CWE-915"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": ">=5.0.0 <5.2.0"
}
],
"effects": [],
"range": "5.0.0 - 5.1.0",
"nodes": [
"node_modules/express"
],
"fixAvailable": {
"name": "express",
"version": "5.2.1",
"isSemVerMajor": false
}
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 1,
"moderate": 0,
"high": 0,
"critical": 0,
"total": 1
},
"dependencies": {
"prod": 52,
"dev": 484,
"optional": 2,
"peer": 1,
"peerOptional": 0,
"total": 535
}
}
}
}
--- end ---
{"added": 535, "removed": 0, "changed": 0, "audited": 536, "funding": 117, "audit": {"auditReportVersion": 2, "vulnerabilities": {"express": {"name": "express", "severity": "low", "isDirect": true, "via": [{"source": 1111086, "name": "express", "dependency": "express", "title": "express improperly controls modification of query properties", "url": "https://github.com/advisories/GHSA-pj86-cfqh-vqx6", "severity": "low", "cwe": ["CWE-915"], "cvss": {"score": 0, "vectorString": null}, "range": ">=5.0.0 <5.2.0"}], "effects": [], "range": "5.0.0 - 5.1.0", "nodes": ["node_modules/express"], "fixAvailable": {"name": "express", "version": "5.2.1", "isSemVerMajor": false}}}, "metadata": {"vulnerabilities": {"info": 0, "low": 1, "moderate": 0, "high": 0, "critical": 0, "total": 1}, "dependencies": {"prod": 52, "dev": 484, "optional": 2, "peer": 1, "peerOptional": 0, "total": 535}}}}
{}
Upgrading n:express from 5.1.0 -> 5.2.1
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
added 534 packages, and audited 535 packages in 5s
117 packages are looking for funding
run `npm fund` for details
found 0 vulnerabilities
--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stdout ---
added 534 packages, and audited 535 packages in 5s
117 packages are looking for funding
run `npm fund` for details
found 0 vulnerabilities
--- end ---
$ /usr/bin/npm test
--- stdout ---
> api-testing@1.7.1 test
> npm run lint && nyc --reporter=lcov --reporter=text-summary --reporter=text _mocha --recursive
> api-testing@1.7.1 lint
> eslint --cache .
The action api
framework
✔ should be able to make a request to the action API
✔ should return the original error text if something goes wrong
tag management helpers
✔ should create a new tag and return existing
✔ should be idempotent with respect to new tag creation if force is true
✔ should handle deleting a non-existent tag gracefully
Client Factory
✔ Should share supertest agent between REST and Action API Clients
✔ Should return a test client representing an anonymous user when agent is not supplied to constructor
✔ Should return a REST test client for a specific endpoint
✔ Should return a supertest agent with an empty cookie jar
✔ Should return a supertest agent with a cookie jar set
Configuration
using /tmp/BVM2uTUsS6 as the configuration root folder
Loading api-testing config from /tmp/BVM2uTUsS6/.api-testing.config.json
✔ Use .api-testing.config.json file if API_TESTING_CONFIG_FILE does not exist
Loading api-testing config from /tmp/BVM2uTUsS6/configs/quibble.json
✔ Select full path config set in API_TESTING_CONFIG_FILE env variable over local config
✔ Throw exception if config file set in API_TESTING_CONFIG_FILE does not exist
✔ Throws exception if ".api-testing.config.json" doesnt exist and API_TESTING_CONFIG_FILE is not set
Using REST_BASE_URL for configuration
✔ should return a json when REST_BASE_URL is set
Dynamic modification
✔ should apply after calling set()
✔ should apply after calling replace()
Loading api-testing config from /tmp/BVM2uTUsS6/configs/quibble.json
✔ should apply after calling load()
18 passing (149ms)
=============================== Coverage summary ===============================
Statements : 71.58% ( 257/359 )
Branches : 58.9% ( 86/146 )
Functions : 63.15% ( 48/76 )
Lines : 71.83% ( 255/355 )
================================================================================
-------------------|---------|----------|---------|---------|---------------------------------------
File | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s
-------------------|---------|----------|---------|---------|---------------------------------------
All files | 71.58 | 58.9 | 63.15 | 71.83 |
REST.js | 34.37 | 21.05 | 12.5 | 34.37 | 52-139
action_clients.js | 85.07 | 82.14 | 63.63 | 85.07 | 30,118-121,125-130,148-160
actionapi.js | 61.6 | 61.11 | 63.63 | 61.29 | ...26,269-277,389-452,476-477,493-503
assert.js | 57.14 | 0 | 20 | 57.14 | 23,35-38,51,62
clientFactory.js | 100 | 100 | 100 | 100 |
config.js | 95.23 | 85.71 | 92.3 | 95.23 | 40,156
utils.js | 67.85 | 50 | 62.5 | 69.23 | 44-54,65,71,83,87,107,114
wiki.js | 85 | 36.36 | 83.33 | 87.17 | 30,49,88-92,112
-------------------|---------|----------|---------|---------|---------------------------------------
--- end ---
$ package-lock-lint /src/repo/package-lock.json
--- stdout ---
Checking /src/repo/package-lock.json
--- end ---
build: Updating express to 5.2.1
$ git add .
--- stdout ---
--- end ---
$ git commit -F /tmp/tmp2puykk7r
--- stdout ---
[master 65cd6aa] build: Updating express to 5.2.1
2 files changed, 7 insertions(+), 6 deletions(-)
--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From 65cd6aa146021d9d885feba4022e9431ffa47491 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Tue, 2 Dec 2025 04:44:11 +0000
Subject: [PATCH] build: Updating express to 5.2.1
Change-Id: Id1a9f56bd971c7da66ceace986d47f1740f3f71e
---
package-lock.json | 11 ++++++-----
package.json | 2 +-
2 files changed, 7 insertions(+), 6 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index 33e2d87..4de883d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
},
"devDependencies": {
"eslint-config-wikimedia": "0.32.2",
- "express": "5.1.0",
+ "express": "5.2.1",
"jsdoc": "4.0.5",
"jsdoc-class-hierarchy": "1.1.2",
"jsdoc-wmf-theme": "1.1.0",
@@ -2804,18 +2804,19 @@
}
},
"node_modules/express": {
- "version": "5.1.0",
- "resolved": "https://registry.npmjs.org/express/-/express-5.1.0.tgz",
- "integrity": "sha512-DT9ck5YIRU+8GYzzU5kT3eHGA5iL+1Zd0EutOmTE9Dtk+Tvuzd23VBU+ec7HPNSTxXYO55gPV/hq4pSBJDjFpA==",
+ "version": "5.2.1",
+ "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
+ "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==",
"dev": true,
"dependencies": {
"accepts": "^2.0.0",
- "body-parser": "^2.2.0",
+ "body-parser": "^2.2.1",
"content-disposition": "^1.0.0",
"content-type": "^1.0.5",
"cookie": "^0.7.1",
"cookie-signature": "^1.2.1",
"debug": "^4.4.0",
+ "depd": "^2.0.0",
"encodeurl": "^2.0.0",
"escape-html": "^1.0.3",
"etag": "^1.8.1",
diff --git a/package.json b/package.json
index a3a1991..4347c8f 100644
--- a/package.json
+++ b/package.json
@@ -24,7 +24,7 @@
},
"devDependencies": {
"eslint-config-wikimedia": "0.32.2",
- "express": "5.1.0",
+ "express": "5.2.1",
"jsdoc": "4.0.5",
"jsdoc-class-hierarchy": "1.1.2",
"jsdoc-wmf-theme": "1.1.0",
--
2.47.3
--- end ---