Skip to content

deps(deps): bump express from 5.1.0 to 5.2.1#19

Open
dependabot[bot] wants to merge 51 commits into
releasefrom
dependabot/npm_and_yarn/express-5.2.1
Open

deps(deps): bump express from 5.1.0 to 5.2.1#19
dependabot[bot] wants to merge 51 commits into
releasefrom
dependabot/npm_and_yarn/express-5.2.1

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Dec 2, 2025

Bumps express from 5.1.0 to 5.2.1.

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

What's Changed

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

5.2.0 / 2025-12-01

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.
Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Swetha S and others added 30 commits November 4, 2025 16:26
…mentation

- Simplified and clarified project description and features
- Added comprehensive Shelly GitHub integration documentation
- Included gap analysis and improvement roadmap
- Enhanced troubleshooting section with Shelly-specific solutions
- Improved architecture diagram and command reference
- Streamlined installation and configuration instructions
- Updated all OpenAI references to Vertex AI throughout README
- Changed configuration examples to use Google Cloud credentials
- Updated environment variables for Vertex AI setup
- Fixed architecture diagram to show Vertex AI PaLM
- Corrected troubleshooting commands for Google Cloud
- Updated planned improvements to mention PaLM 2 and Gemini Pro
- Create detailed commit policy document for Juspay organization standards
- Define conventional commit message format with NeuroPulse-specific scopes
- Include workflow guidelines for contributors and maintainers
- Add integration guidelines for Jira, AI, and Slack workflows
- Specify emergency procedures and exception handling
- Include tools and automation for policy enforcement
- Add training resources and onboarding checklist

Establishes professional git standards for enterprise-level development
…roubleshooting

- Update repository URL to juspay/NeuroPulse organization
- Replace misleading 'solved gaps' with honest current status tracking
- Document actual GitHub authentication errors encountered
- Add comprehensive troubleshooting for enterprise security policies
- Include step-by-step solutions for fine-grained token setup
- Add emergency procedures and rollback instructions
- Provide detailed Vertex AI configuration troubleshooting
- Include real error messages and specific command-line solutions

Ensures documentation reflects reality and helps users solve actual problems
- Move comprehensive troubleshooting from README to docs/TROUBLESHOOTING.md
- Keep concise troubleshooting section in README with quick fixes
- Add clear links to detailed troubleshooting guide
- Enhance TROUBLESHOOTING.md with enterprise-specific solutions
- Include step-by-step guides for all major issues encountered
- Add emergency procedures and performance optimization guides
- Improve documentation organization and accessibility

Makes README more focused while providing comprehensive help in dedicated file
- Add working .mcp-config.json configuration (resolves 'Found 0 MCP servers')
- Add .mcp-config.json.example template for user setup
- Create comprehensive docs/MCP_SETUP.md setup guide
- Add SLACK_JIRA_INTEGRATION.md with step-by-step connection instructions
- Document Shelly GitHub authentication issues in SHELLY_GITHUB_ISSUE.md
- Update README.md with MCP Server Integration section
- Enhance docs/TROUBLESHOOTING.md with MCP error resolution

This resolves the critical 'Found 0 MCP servers' error that was blocking
AI tool integration with NeuroLink. The filesystem server now connects
successfully with 14 available tools.

Fixes: #11
Related: Enterprise GitHub authentication challenges
Swetha-160303 and others added 21 commits November 6, 2025 12:17
- Update NeuroLink to v7.53.5 to resolve MCP protocol compatibility
- Add detailed MCP troubleshooting guide to docs/MCP_SETUP.md
- Fix MCP error -32601 'Method not found' issue
- Add working configuration for Slack, Jira, and filesystem MCP servers
- Include SLACK_TEAM_ID requirement for Slack MCP server
- Document version compatibility matrix and solutions
- Resolve conflicts in README.md and docs/PROJECT_STRUCTURE.md
- Integrate remote changes with local MCP documentation updates
- Maintain comprehensive documentation structure from both branches
- Remove .mcp-config.json from repository to prevent accidental token exposure
- Add .mcp-config.json to .gitignore for future protection
- Users should copy .mcp-config.json.example to .mcp-config.json locally
- Resolves GitHub push protection violations for secret scanning
- Remove SHELLY_GITHUB_ISSUE.md
- Remove SLACK_JIRA_INTEGRATION.md

These files are no longer needed in the repository.
Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Dec 2, 2025

Assignees

The following users could not be added as assignees: juspay-maintainers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant