Skip to content

Conversation

@rastislavcore
Copy link

Updates multiple dependencies to their latest versions, including express, pg, bcryptjs, and others, to enhance security and performance.

Also corrects the PostgreSQL Docker Compose configuration to remove an unnecessary newline character.

Updates multiple dependencies to their latest versions, including express, pg, bcryptjs, and others, to enhance security and performance.

Also corrects the PostgreSQL Docker Compose configuration to remove an unnecessary newline character.
Updates `express` and other dependencies to address potential security vulnerabilities and improve compatibility.

Replaces the `nanoid` package with `node:crypto`'s `randomUUID` or a custom ID generation function for creating API keys and short link IDs.
This removes a dependency and enhances security by leveraging the built-in crypto module.
@trgwii
Copy link
Member

trgwii commented Nov 28, 2025

This PR also swaps useragent for ua-parser-js, and does a whole bunch of whitespace changes, and modifies the lockfile too much I think.

Which specific security and performance issues did you mean to address by updating these specific dependencies to these specific versions? We can reopen on demand.

@trgwii trgwii closed this Nov 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants