Update helmet: 4.4.1 → 4.5.0 (minor)

[depfu]

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ helmet (4.4.1 → 4.5.0) · Repo · Changelog

Release Notes

4.5.0 (from changelog)

Added

• helmet.crossOriginEmbedderPolicy: a new middleware for the Cross-Origin-Embedder-Policy header, disabled by default
• helmet.crossOriginOpenerPolicy: a new middleware for the Cross-Origin-Opener-Policy header, disabled by default
• helmet.crossOriginResourcePolicy: a new middleware for the Cross-Origin-Resource-Policy header, disabled by default

Changed

• true enables a middleware with default options. Previously, this would fail with an error if the middleware was already enabled by default.
• Log a warning when passing options to originAgentCluster at the top level

Fixed

• Incorrect documentation

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 13 commits:

• 4.5.0
• Update changelog for 4.5.0 release
• 4.5.0-rc.1
• Publish new middlewares
• Remove internal MiddlewareOption type
• Add Cross-Origin-Opener-Policy middleware
• Add Cross-Origin-Resource-Policy middleware
• Add Cross-Origin-Embedder-Policy middleware
• Upgrade devDependencies to latest versions
• Update devDependencies to latest versions
• Use "real" hyphens instead of en dashes in changelog links
• Fix minor typo in changelog
• Update CSP documentation

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)

[depfu]

Closed in favor of #122.

[depfu]

Closed in favor of #122.