Skip to content

chore(deps): bump morgan from 1.10.1 to 1.12.0 - #4174

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/morgan-1.12.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/morgan-1.12.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps morgan from 1.10.1 to 1.12.0.

Release notes

Sourced from morgan's releases.

1.12.0

What's Changed

New Contributors

Full Changelog: expressjs/morgan@1.11.0...1.12.0

1.11.0

What's Changed

Security Fix:

New Contributors

Full Changelog: expressjs/morgan@1.10.0...1.11.0

Changelog

Sourced from morgan's changelog.

1.12.0

  • Security fix for CVE-2026-15603(GHSA-jxfw-x594-9x9m)
  • Allow format functions to return objects for streams in objectMode
  • Respect the NO_COLOR environment variable in the dev format

1.11.0

  • add :pid token

Security Fix:

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for morgan since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 8, 2026
@github-actions

github-actions Bot commented Sep 8, 2026

Copy link
Copy Markdown

Overview

Image reference testlagoon/api:main lagoon/api:ci-latest
- digest c843f015b4e5 046408830817
- tag main ci-latest
- vulnerabilities critical: 13 high: 122 medium: 94 low: 11 unspecified: 2 critical: 13 high: 122 medium: 93 low: 11 unspecified: 2
- platform linux/amd64 linux/amd64
- size 142 MB 171 MB (+29 MB)
- packages 1478 1477 (-1)
Base Image node:22-alpine3.23
also known as:
22.23-alpine3.23
22.23.2-alpine3.23
jod-alpine3.23
node:22-alpine3.23
also known as:
22.23-alpine3.23
22.23.2-alpine3.23
jod-alpine3.23
- vulnerabilities critical: 3 high: 16 medium: 9 low: 1 critical: 3 high: 16 medium: 9 low: 1
Packages and Vulnerabilities (1 package changes and 0 vulnerability changes)
  • ♾️ 1 packages changed
  • 1267 packages unchanged
Changes for packages of type npm (1 changes)
Package Version
testlagoon/api:main
Version
lagoon/api:ci-latest
♾️ morgan 1.10.1 1.12.0

Bumps [morgan](https://github.com/expressjs/morgan) from 1.10.1 to 1.12.0.
- [Release notes](https://github.com/expressjs/morgan/releases)
- [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md)
- [Commits](expressjs/morgan@1.10.1...1.12.0)

---
updated-dependencies:
- dependency-name: morgan
  dependency-version: 1.12.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/morgan-1.12.0 branch from e67afa8 to 46e31c7 Compare September 17, 2026 22:58

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants