GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Bump compression from 1.8.1 to 1.8.2 by dependabot[bot] · Pull Request #398 · QuantStack/quantstack.github.io

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link

Copy Markdown

Contributor

Bumps compression from 1.8.1 to 1.8.2.

Release notes

Sourced from compression's releases.

v1.8.2

Important

Fix CVE-2026-87776 (GHSA-vc2v-76pw-4v95)

What's Changed

chore: add funding to package.json by @bjohansebas in expressjs/compression#248

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in expressjs/compression#249

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in expressjs/compression#253

build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by @dependabot[bot] in expressjs/compression#252

build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by @dependabot[bot] in expressjs/compression#251

build(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by @dependabot[bot] in expressjs/compression#261

build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by @dependabot[bot] in expressjs/compression#260

build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in expressjs/compression#259

build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in expressjs/compression#258

build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by @dependabot[bot] in expressjs/compression#264

build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in expressjs/compression#263

build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by @dependabot[bot] in expressjs/compression#262

chore: up node version to 25.x in CI by @imangas in expressjs/compression#272

doc(package): remove history.md and add readme.md to published files by @sheplu in expressjs/compression#270

Update link to CONTRIBUTING.md by @krzysdz in expressjs/compression#281

test: run CI on Windows and macOS by @kilisamemarisaaa in expressjs/compression#283

build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in expressjs/compression#257

build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in expressjs/compression#268

build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by @dependabot[bot] in expressjs/compression#265

build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in expressjs/compression#266

build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in expressjs/compression#267

chore(ci): npm-publish via reusable workflows by @sheplu in expressjs/compression#269

docs: update outdated Brotli note and fix npm install docs URL by @Vansh1811 in expressjs/compression#276

fix: match Cache-Control no-transform directive case-insensitively by @vaibhavmashal in expressjs/compression#286

1.8.2 by @UlisesGascon in expressjs/compression#287

New Contributors

@imangas made their first contribution in expressjs/compression#272

@sheplu made their first contribution in expressjs/compression#270

@krzysdz made their first contribution in expressjs/compression#281

@kilisamemarisaaa made their first contribution in expressjs/compression#283

@Vansh1811 made their first contribution in expressjs/compression#276

@vaibhavmashal made their first contribution in expressjs/compression#286

Full Changelog: expressjs/compression@v1.8.1...v1.8.2

Changelog

Sourced from compression's changelog.

1.8.2

Fix CVE-2026-87776 (GHSA-vc2v-76pw-4v95)

deps: add [email protected]

Match Cache-Control: no-transform directive case-insensitively

Commits

0f97074 1.8.2 (#287)
151f63e fix: destroy compression stream on response close
0a76495 fix: match Cache-Control no-transform directive case-insensitively (#286)
c17b6e5 docs: update outdated Brotli note and fix npm install docs URL (#276)
112911a chore(ci): npm-publish via reusable workflows (#269)
1bf5eb0 build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#267)
d8fe64d build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (#266)
b218ff5 build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (#265)
8a1cf8e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (#268)
4a19855 build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#257)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for compression since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          Bump compression from 1.8.1 to 1.8.2

6252c26

Bumps [compression](https://github.com/expressjs/compression) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/expressjs/compression/releases)
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)
- [Commits](expressjs/compression@v1.8.1...v1.8.2)

---
updated-dependencies:
- dependency-name: compression
  dependency-version: 1.8.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

vercel Bot commented Oct 12, 2026 •

edited

Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link

Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
quantstack-github-io	Ready	Preview	Oct 12, 2026 7:16am UTC

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

dependabot Bot added dependencies

Pull requests that update a dependency file

javascript Pull requests that update javascript code labels

Oct 12, 2026

vercel Bot deployed to Preview

October 12, 2026 07:16

View deployment

This branch was successfully deployed

1 active deployment

Preview — 6252c266 Deployed Oct 12, 2026 by vercel[bot]

View deployment

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

dependencies

Pull requests that update a dependency file

javascript

Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

0 participants

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.

GeezerVison

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026

v1.8.2

Important

What's Changed

New Contributors

1.8.2

Uh oh!

vercel Bot commented Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

vercel Bot commented Oct 12, 2026 •

edited

Loading

Uh oh!

There was an error while loading. Please reload this page.