Skip to content

Bump express-validator from 6.14.0 to 7.2.1#147

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/express-validator-7.2.1
Closed

Bump express-validator from 6.14.0 to 7.2.1#147
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/express-validator-7.2.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 14, 2025

Bumps express-validator from 6.14.0 to 7.2.1.

Release notes

Sourced from express-validator's releases.

v7.2.1

  • Clone non-primitive replacement values when using #default()/#replace() to avoid object reference reuse (#1316)

v7.2.0

  • Add hide() method (#1304, #1305)
  • Add wildcard values to custom validator's metadata (#1297, #1308)
  • Correctly select properties of primitives (#1245, #1279)

v7.1.0

v7.0.1

  • Fixed checkSchema() warning that known validators are unknown when its value is false - #1223

v7.0.0

🚀 🙌 First major version in almost 4 years! 🚀 🤯 Thanks everybody for having the patience. Hopefully this version brings many improvements to your developer experience!

Breaking changes 💥

  • Minimum supported Node.js version is now 14+
  • Removed deprecated APIs - #993
    • Import paths express-validator/check and express-validator/filter
    • Sanitization-only middlewares (e.g. sanitize(), sanitizeBody(), etc)
    • Deprecated TypeScript types (ValidationParamSchema and ValidationSchema)
  • isObject() validator now assumes options.strict = true by default
  • Validation errors changed shape
    • Field validation errors param property has been renamed to path
    • oneOf() validation errors no longer have a param: '_error' property
  • (TypeScript only) The ValidationError type is now a discriminated union, it might be necessary to use switch or if statements to check that you're dealing with the type that you want to debug/format
  • oneOf() signature changed: from oneOf(chains, message) to oneOf(chains, options: { message, errorType })
  • oneOf() default error structure now groups errors by their... validation group!, instead of in a flat list

Checkout the migration guide for examples on how to work around some of these: https://express-validator.github.io/docs/migration-v6-to-v7

New features ✨

  • Added validation for no unknown fields - #558, #578, #612, #1148, #809, #927, #1204
  • Added globstars (deep wildcard) support - #790, #1137, #1216
  • Added support for multiple custom validators/sanitizers in checkSchema() - #552, #1180
  • Added request-level bail - #1100, #1214
  • Added a ExpressValidator class which allows adding "persistent" custom validators, sanitizers, and options - #1077, #1079, #1209
  • Added oneOf() support to .if() - #1170
  • Added new error types to oneOf() - #956, #1022

Bug fixes 🐛

  • Validating/sanitizing arrays no longer drops all but the first value - #791, #755, #704, #1002
  • Added missing ko-KR to MobilePhoneLocale - #1218, #1219

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [express-validator](https://github.com/express-validator/express-validator) from 6.14.0 to 7.2.1.
- [Release notes](https://github.com/express-validator/express-validator/releases)
- [Commits](express-validator/express-validator@v6.14.0...v7.2.1)

---
updated-dependencies:
- dependency-name: express-validator
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 14, 2025
@chrisbloe
Copy link
Contributor

@dependabot recreate

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 25, 2026

Looks like express-validator is no longer a dependency, so this is no longer needed.

@dependabot dependabot bot closed this Mar 25, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/express-validator-7.2.1 branch March 25, 2026 14:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant