Skip to content

Bump express-rate-limit from 8.5.2 to 8.6.0 - #28

Closed
dependabot[bot] wants to merge 1 commit into
Mainfrom
dependabot/npm_and_yarn/express-rate-limit-8.6.0
Closed

dependabot[bot] wants to merge 1 commit into
Mainfrom
dependabot/npm_and_yarn/express-rate-limit-8.6.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps express-rate-limit from 8.5.2 to 8.6.0.

Release notes

Sourced from express-rate-limit's releases.

v8.6.0

You can view the changelog here.

Commits
  • fffb3c4 8.6.0
  • f366b2d docs: debugging guide, time constants, & v8.6.0 changelog (#652)
  • 593ddd2 fix: make debug output easier to read (#653)
  • ef8c129 fix: Pin safe version of @​asyncapi/specs dev dep (#659)
  • 7b05e0d feat: add time constants to support more readable values for windowMs (#655)
  • 863e730 chore(deps-dev): bump the development-dependencies group with 3 updates (#657)
  • e0e711e fix: correct wording in usage documentation for express-rate-limit (#656)
  • fcd3aa7 chore(deps-dev): bump the development-dependencies group with 3 updates (#651)
  • 99d4298 feat: use debug for debug logging (#641)
  • 23e4dde feat: Run validations once each (#650)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 17, 2026
@socket-security

socket-security Bot commented Jul 17, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedexpress-rate-limit@​8.5.2 ⏵ 8.6.09910010093 +5100

View full report

@johnconstant99-dev
johnconstant99-dev self-requested a review July 17, 2026 14:35

@johnconstant99-dev johnconstant99-dev left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Express update

Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 8.5.2 to 8.6.0.
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.5.2...v8.6.0)

---
updated-dependencies:
- dependency-name: express-rate-limit
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/express-rate-limit-8.6.0 branch from 85ee2a6 to af87258 Compare July 18, 2026 06:00
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #31.

@dependabot dependabot Bot closed this Jul 27, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/express-rate-limit-8.6.0 branch July 27, 2026 07:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant