Skip to content

deps: update debug from 2.6.9 to ~4.4.0#279

Open
Offwhite-Del wants to merge 1 commit into
expressjs:masterfrom
Offwhite-Del:deps/update-debug-to-v4
Open

deps: update debug from 2.6.9 to ~4.4.0#279
Offwhite-Del wants to merge 1 commit into
expressjs:masterfrom
Offwhite-Del:deps/update-debug-to-v4

Conversation

@Offwhite-Del

Copy link
Copy Markdown

Summary

Updates the debug runtime dependency from 2.6.9 (May 2017) to latest stable 4.4.x.

Why

  • debug@2.6.9 is 9 years old — predates Node.js security improvements
  • compression has 20M+ weekly npm downloads
  • Same fix as submitted to expressjs/morgan (#364)

What Changed

Package Before After
debug 2.6.9 ~4.4.0

Verification

npm install && npm test

56 passing, 0 failures

debug 2.6.9 was released in May 2017. This upgrade brings 9 years of
security fixes, performance improvements, and bug fixes from v3.x/v4.x.

Backward compatible — compression uses debug in the simplest way:
  require('debug')('compression')
  debug('message')
Verified: 56 tests pass (0 failures).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant