A starter project with Netlify Lambda, Tailwind CSS and static pages.

By Hugo
Last update: Sep 11, 2021
Comments: 17

Netlify Lambda Tailwind Static Starter demo

A starter project with Netlify Lambda, Tailwind CSS and static pages.

There's a lambda generating random emoji 👍 at ./src/lambda/emoji.js

The index page is just HTML with inline scripts.

A JavaScript function intercepts form submits and sends them using fetch instead. There's also a helper to get field values using their name, see getFieldValue(form, fieldName) on GitHub.

This is a good starting point for quick Lambda demos.

Development setup

You should run yarn before starting.

The following scripts are available:

yarn start: start the Lambda(s) and serving the static directory using Netlify Dev . Important: before start, yarn build:tw runs.
yarn build:tw: build the full set of Tailwind CSS utilities (useful for development), make sure to check what your site looks will look like live using yarn build:css
yarn build: run netlify-lambda build + Tailwind CSS production build (removes unused classes using PurgeCSS)
yarn build:css: Tailwind CSS production build (removes unused classes using PurgeCSS)
yarn lint and yarn format: runs XO, the "JavaScript linter with great defaults" (see github.com/xojs/xo) with or without the --fix flag respectively

Github

https://github.com/HugoDF/netlify-lambda-tailwind-static-starter

Comments(17)

1

Bump follow-redirects from 1.13.0 to 1.14.7
Bumps follow-redirects from 1.13.0 to 1.14.7.
Commits
- 2ede36d Release version 1.14.7 of the npm package.
- 8b347cb Drop Cookie header across domains.
- 6f5029a Release version 1.14.6 of the npm package.
- af706be Ignore null headers.
- d01ab7a Release version 1.14.5 of the npm package.
- 40052ea Make compatible with Node 17.
- 86f7572 Fix: clear internal timer on request abort to avoid leakage
- 2e1eaf0 Keep Authorization header on subdomain redirects.
- 2ad9e82 Carry over Host header on relative redirects (#172)
- 77e2a58 Release version 1.14.4 of the npm package.
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
2

Bump tar from 4.4.8 to 4.4.15
Bumps tar from 4.4.8 to 4.4.15.
Commits
- 843c897 4.4.15
- 46fe350 Remove paths from dirCache when no longer dirs
- df3aa4d 4.4.14
- 6d28013 add publishConfig tag
- efc6bb0 fix: strip absolute paths more comprehensively
- 65edb39 4.4.13
- d04c3ff Always provide a callback to fs.close()
- dbd6f52 4.4.12
- 0240086 update tap and minipass
- 9232b3d 4.4.11
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
3

Bump lodash from 4.17.15 to 4.17.19
Bumps lodash from 4.17.15 to 4.17.19.

Release notes

Sourced from lodash's releases.

4.17.16
Commits
- d7fbc52 Bump to v4.17.19
- 2e1c0f2 Add npm-package
- 1b6c282 Bump to v4.17.18
- a370ac8 Bump to v4.17.17
- 1144918 Rebuild lodash and docs
- 3a3b0fd Bump to v4.17.16
- c84fe82 fix(zipObjectDeep): prototype pollution (#4759)
- e7b28ea Sanitize sourceURL so it cannot affect evaled code (#4518)
- 0cec225 Fix lodash.isEqual for circular references (#4320) (#4515)
- 94c3a81 Document matches* shorthands for over* methods (#4510) (#4514)
- Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by mathias, a new releaser for lodash since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
4

Bump tar from 4.4.8 to 4.4.19
Bumps tar from 4.4.8 to 4.4.19.
Commits
- 9a6faa0 4.4.19
- 70ef812 drop dirCache for symlink on all platforms
- 3e35515 4.4.18
- 52b09e3 fix: prevent path escape using drive-relative paths
- bb93ba2 fix: reserve paths properly for unicode, windows
- 2f1bca0 fix: prune dirCache properly for unicode, windows
- 9bf70a8 4.4.17
- 6aafff0 fix: skip extract if linkpath is stripped entirely
- 5c5059a fix: reserve paths case-insensitively
- fd6accb 4.4.16
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
5

Bump browserslist from 4.6.0 to 4.16.6
Bumps browserslist from 4.6.0 to 4.16.6.
Changelog

Sourced from browserslist's changelog.
4.16.6
- Fixed npm-shrinkwrap.json support in --update-db (by Geoff Newman).
4.16.5
- Fixed unsafe RegExp (by Yeting Li).
4.16.4
- Fixed unsafe RegExp.
- Added artifactory support to --update-db (by Ittai Baratz).
4.16.3
- Fixed --update-db.
4.16.2
- Fixed --update-db (by @ialarmedalien).
4.16.1
- Fixed Chrome 4 with mobileToDesktop (by Aron Woost).
4.16
- Add browserslist config query.
4.15
- Add TypeScript types (by Dmitry Semigradsky).
4.14.7
- Fixed Yarn Workspaces support to --update-db (by Fausto Núñez Alberro).
- Added browser changes to --update-db (by @AleksandrSl).
- Added color output to --update-db.
- Updated package.funding to have link to our Open Collective.
4.14.6
- Fixed Yarn support in --update-db (by Ivan Storck).
- Fixed npm 7 support in --update-db.
4.14.5
- Fixed last 2 electron versions query (by Sergey Melyukov).
4.14.4
- Fixed Unknown version 59 of op_mob error.
4.14.3
- Update Firefox ESR.
4.14.2
- Fixed --update-db on Windows (by James Ross).
- Improved --update-db output.
4.14.1
- Added --update-db explanation (by Justin Zelinsky).
... (truncated)
Commits
- 6fe3614 Release 4.16.6 version
- 33ebac9 Update dependencies
- 2128170 Add support for npm-shrinkwrap files alongside package-lock (#595)
- 7cc2aed Release 4.16.5 version
- 27e4afd Update dependencies
- 1013a18 Fix version RegExp
- b879a1a Use Node.js 16 on CI
- bd1e9e0 Fix ReDoS (#593)
- 209adf9 Release 4.16.4 version
- 3e2ae3b Fix types
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
6

Bump dot-prop from 4.2.0 to 4.2.1
Bumps dot-prop from 4.2.0 to 4.2.1.
Release notes

Sourced from dot-prop's releases.
v4.2.1
- Backport https://github.com/sindresorhus/dot-prop/commit/3039c8c07f6fdaa8b595ec869ae0895686a7a0f2 to the v4.x release line.
Commits
- c914124 feat: patch 4.2.0 with fixes for CVE-2020-8116
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
7

Bump ini from 1.3.5 to 1.3.7
Bumps ini from 1.3.5 to 1.3.7.
Commits
- c74c8af 1.3.7
- 024b8b5 update deps, add linting
- 032fbaf Use Object.create(null) to avoid default object property hazards
- 2da9039 1.3.6
- cfea636 better git push script, before publish instead of after
- 56d2805 do not allow invalid hazardous string as section name
- See full diff in compare view
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for ini since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
8

Bump lodash from 4.17.15 to 4.17.20
Bumps lodash from 4.17.15 to 4.17.20.
Commits
- ded9bc6 Bump to v4.17.20.
- 63150ef Documentation fixes.
- 00f0f62 test.js: Remove trailing comma.
- 846e434 Temporarily use a custom fork of lodash-cli.
- 5d046f3 Re-enable Travis tests on 4.17 branch.
- aa816b3 Remove /npm-package.
- d7fbc52 Bump to v4.17.19
- 2e1c0f2 Add npm-package
- 1b6c282 Bump to v4.17.18
- a370ac8 Bump to v4.17.17
- Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
9

Bump node-fetch from 2.6.0 to 2.6.1
Bumps node-fetch from 2.6.0 to 2.6.1.

Release notes

Sourced from node-fetch's releases.

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.
Changelog

Sourced from node-fetch's changelog.
v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.
- Fix: honor the size option after following a redirect.
Commits
- b5e2e41 update version number
- 2358a6c Honor the size option after following a redirect and revert data uri support
- 8c197f8 docs: Fix typos and grammatical errors in README.md (#686)
- 1e99050 fix: Change error message thrown with redirect mode set to error (#653)
- 244e6f6 docs: Show backers in README
- 6a5d192 fix: Properly parse meta tag when parameters are reversed (#682)
- 47a24a0 chore: Add opencollective badge
- 7b13662 chore: Add funding link
- 5535c2e fix: Check for global.fetch before binding it (#674)
- 1d5778a docs: Add Discord badge
- Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by akepinski, a new releaser for node-fetch since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
10

Bump http-proxy from 1.17.0 to 1.18.1
Bumps http-proxy from 1.17.0 to 1.18.1.
Changelog

Sourced from http-proxy's changelog.
v1.18.1 - 2020-05-17

Merged
- Skip sending the proxyReq event when the expect header is present [#1447](https://github.com/http-party/node-http-proxy/issues/1447)
- Remove node6 support, add node12 to build [#1397](https://github.com/http-party/node-http-proxy/issues/1397)
1.18.0 - 2019-09-18

Merged
- Added in auto-changelog module set to keepachangelog format [#1373](https://github.com/http-party/node-http-proxy/issues/1373)
- fix 'Modify Response' readme section to avoid unnecessary array copying [#1300](https://github.com/http-party/node-http-proxy/issues/1300)
- Fix incorrect target name for reverse proxy example [#1135](https://github.com/http-party/node-http-proxy/issues/1135)
- Fix modify response middleware example [#1139](https://github.com/http-party/node-http-proxy/issues/1139)
- [dist] Update dependency async to v3 [#1359](https://github.com/http-party/node-http-proxy/issues/1359)
- Fix path to local http-proxy in examples. [#1072](https://github.com/http-party/node-http-proxy/issues/1072)
- fix reverse-proxy example require path [#1067](https://github.com/http-party/node-http-proxy/issues/1067)
- Update README.md [#970](https://github.com/http-party/node-http-proxy/issues/970)
- [dist] Update dependency request to ~2.88.0 [SECURITY] [#1357](https://github.com/http-party/node-http-proxy/issues/1357)
- [dist] Update dependency eventemitter3 to v4 [#1365](https://github.com/http-party/node-http-proxy/issues/1365)
- [dist] Update dependency colors to v1 [#1360](https://github.com/http-party/node-http-proxy/issues/1360)
- [dist] Update all non-major dependencies [#1356](https://github.com/http-party/node-http-proxy/issues/1356)
- [dist] Update dependency agentkeepalive to v4 [#1358](https://github.com/http-party/node-http-proxy/issues/1358)
- [dist] Update dependency nyc to v14 [#1367](https://github.com/http-party/node-http-proxy/issues/1367)
- [dist] Update dependency concat-stream to v2 [#1363](https://github.com/http-party/node-http-proxy/issues/1363)
- x-forwarded-host overwrite for mutli level proxies [#1267](https://github.com/http-party/node-http-proxy/issues/1267)
- [refactor doc] Complete rename to http-party org. [#1362](https://github.com/http-party/node-http-proxy/issues/1362)
- Highlight correct lines for createProxyServer [#1117](https://github.com/http-party/node-http-proxy/issues/1117)
- Fix docs for rewrite options - 201 also handled [#1147](https://github.com/http-party/node-http-proxy/issues/1147)
- Update .nyc_output [#1339](https://github.com/http-party/node-http-proxy/issues/1339)
- Configure Renovate [#1355](https://github.com/http-party/node-http-proxy/issues/1355)
- [examples] Restream body before proxying, support for Content-Type of application/x-www-form-urlencoded [#1264](https://github.com/http-party/node-http-proxy/issues/1264)
Commits
- [dist] New test fixtures. 7e4a0e5
- [dist] End of an era. a9b09cc
- [dist] Version bump. 1.18.0 9bbe486
- [fix] Latest versions. 59c4403
- [fix test] Update tests. dd1d08b
- [dist] Update dependency ws to v3 [SECURITY] b00911c
- [dist] .gitattributes all the things. fc93520
- [dist] Regenerate package-lock.json. 16d4f8a
Commits
- 9b96cd7 1.18.1
- 335aeeb Skip sending the proxyReq event when the expect header is present (#1447)
- dba3966 Remove node6 support, add node12 to build (#1397)
- 9bbe486 [dist] Version bump. 1.18.0
- 6e4bef4 Added in auto-changelog module set to keepachangelog format (#1373)
- d056241 fix 'Modify Response' readme section to avoid unnecessary array copying (#1300)
- 244303b Fix incorrect target name for reverse proxy example (#1135)
- b4028ba Fix modify response middleware example (#1139)
- 77a9815 [dist] Update dependency async to v3 (#1359)
- c662f9e Fix path to local http-proxy in examples. (#1072)
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
11

Bump decompress from 4.2.0 to 4.2.1
Bumps decompress from 4.2.0 to 4.2.1.
Release notes

Sourced from decompress's releases.
v4.2.1
- Prevent directory traversal (#73) 967146e
https://github.com/kevva/decompress/compare/v4.2.0...v4.2.1
Commits
- 84a8c10 4.2.1
- fafff47 Meta tweaks
- 967146e Prevent directory traversal (#73)
- 74a462a Meta tweaks
- 7ddadd9 Add note about filter option
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
12

Bump express from 4.17.1 to 4.18.2
Bumps express from 4.17.1 to 4.18.2.
Release notes

Sourced from express's releases.
4.18.2
- Fix regression routing a large stack in a single route
- deps: [email protected]
  
  deps: [email protected]
  
  perf: remove unnecessary object clone
- deps: [email protected]
4.18.1
- Fix hanging on large stack of sync routes
4.18.0
- Add "root" option to res.download
- Allow options without filename in res.download
- Deprecate string and non-integer arguments to res.status
- Fix behavior of null/undefined as maxAge in res.cookie
- Fix handling very large stacks of sync middleware
- Ignore Object.prototype values in settings through app.set/app.get
- Invoke default with same arguments as types in res.format
- Support proper 205 responses using res.send
- Use http-errors for res.format error
- deps: [email protected]
  
  Fix error message for json parse whitespace in strict
  
  Fix internal error when inflated body exceeds limit
  
  Prevent loss of async hooks context
  
  Prevent hanging when request already read
  
  deps: [email protected]
  
  deps: [email protected]
  
  deps: [email protected]
  
  deps: [email protected]
  
  deps: [email protected]
- deps: [email protected]
  
  Add priority option
  
  Fix expires option to reject invalid dates
- deps: [email protected]
  
  Replace internal eval usage with Function constructor
  
  Use instance methods on process to check for listeners
- deps: [email protected]
  
  Remove set content headers that break response
  
  deps: [email protected]
  
  deps: [email protected]
- deps: [email protected]
  
  Prevent loss of async hooks context
- deps: [email protected]
- deps: [email protected]
  
  Fix emitted 416 error missing headers property
  
  Limit the headers removed for 304 response
  
  deps: [email protected]
  
  deps: [email protected]
  
  deps: [email protected]
  
  deps: [email protected]
... (truncated)
Changelog

Sourced from express's changelog.
4.18.2 / 2022-10-08
- Fix regression routing a large stack in a single route
- deps: [email protected]
  
  deps: [email protected]
  
  perf: remove unnecessary object clone
- deps: [email protected]
4.18.1 / 2022-04-29
- Fix hanging on large stack of sync routes
4.18.0 / 2022-04-25
- Add "root" option to res.download
- Allow options without filename in res.download
- Deprecate string and non-integer arguments to res.status
- Fix behavior of null/undefined as maxAge in res.cookie
- Fix handling very large stacks of sync middleware
- Ignore Object.prototype values in settings through app.set/app.get
- Invoke default with same arguments as types in res.format
- Support proper 205 responses using res.send
- Use http-errors for res.format error
- deps: [email protected]
  
  Fix error message for json parse whitespace in strict
  
  Fix internal error when inflated body exceeds limit
  
  Prevent loss of async hooks context
  
  Prevent hanging when request already read
  
  deps: [email protected]
  
  deps: [email protected]
  
  deps: [email protected]
  
  deps: [email protected]
  
  deps: [email protected]
- deps: [email protected]
  
  Add priority option
  
  Fix expires option to reject invalid dates
- deps: [email protected]
  
  Replace internal eval usage with Function constructor
  
  Use instance methods on process to check for listeners
- deps: [email protected]
  
  Remove set content headers that break response
  
  deps: [email protected]
  
  deps: [email protected]
- deps: [email protected]
  
  Prevent loss of async hooks context
- deps: [email protected]
- deps: [email protected]
... (truncated)
Commits
- 8368dc1 4.18.2
- 61f4049 docs: replace Freenode with Libera Chat
- bb7907b build: [email protected]
- f56ce73 build: [email protected]
- 24b3dc5 deps: [email protected]
- 689d175 deps: [email protected]
- 340be0f build: [email protected]
- 33e8dc3 docs: use Node.js name style
- 644f646 build: [email protected]
- ecd7572 build: [email protected]
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
13

Bump decode-uri-component from 0.2.0 to 0.2.2
Bumps decode-uri-component from 0.2.0 to 0.2.2.
Release notes

Sourced from decode-uri-component's releases.
v0.2.2
- Prevent overwriting previously decoded tokens 980e0bf
https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

v0.2.1
- Switch to GitHub workflows 76abc93
- Fix issue where decode throws - fixes #6 746ca5d
- Update license (#1) 486d7e2
- Tidelift tasks a650457
- Meta tweaks 66e1c28
https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1
Commits
- a0eea46 0.2.2
- 980e0bf Prevent overwriting previously decoded tokens
- 3c8a373 0.2.1
- 76abc93 Switch to GitHub workflows
- 746ca5d Fix issue where decode throws - fixes #6
- 486d7e2 Update license (#1)
- a650457 Tidelift tasks
- 66e1c28 Meta tweaks
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
14

Bump loader-utils from 1.2.3 to 1.4.2
Bumps loader-utils from 1.2.3 to 1.4.2.
Release notes

Sourced from loader-utils's releases.
v1.4.2

1.4.2 (2022-11-11)

Bug Fixes
- ReDoS problem (#226) (17cbf8f)
v1.4.1

1.4.1 (2022-11-07)

Bug Fixes
- security problem (#220) (4504e34)
v1.4.0

1.4.0 (2020-02-19)

Features
- the resourceQuery is passed to the interpolateName method (#163) (cd0e428)
v1.3.0

1.3.0 (2020-02-19)

Features
- support the [query] template for the interpolatedName method (#162) (469eeba)
Changelog

Sourced from loader-utils's changelog.
1.4.2 (2022-11-11)

Bug Fixes
- ReDoS problem (#226) (17cbf8f)
1.4.1 (2022-11-07)

Bug Fixes
- security problem (#220) (4504e34)
1.4.0 (2020-02-19)

Features
- the resourceQuery is passed to the interpolateName method (#163) (cd0e428)
1.3.0 (2020-02-19)

Features
- support the [query] template for the interpolatedName method (#162) (469eeba)
Commits
- 331ad50 chore(release): 1.4.2
- 17cbf8f fix: ReDoS problem (#226)
- 8f082b3 chore(release): 1.4.1
- 4504e34 fix: security problem (#220)
- d95b8b5 chore(release): 1.4.0
- cd0e428 feat: the resourceQuery is passed to the interpolateName method (#163)
- 06d36cf chore(release): 1.3.0
- 469eeba feat: support the [query] template for the interpolatedName method (#162)
- 909c99d chore: funding.yml config and CI fix (#159)
- b5b74f0 Set up CI with Azure Pipelines
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
15

Bump terser from 4.0.0 to 4.8.1
Bumps terser from 4.0.0 to 4.8.1.
Changelog

Sourced from terser's changelog.
v4.8.1 (backport)
- Security fix for RegExps that should not be evaluated (regexp DDOS)
v4.8.0
- Support for numeric separators (million = 1_000_000) was added.
- Assigning properties to a class is now assumed to be pure.
- Fixed bug where yield wasn't considered a valid property key in generators.
v4.7.0
- A bug was fixed where an arrow function would have the wrong size
- arguments object is now considered safe to retrieve properties from (useful for length, or 0) even when pure_getters is not set.
- Fixed erroneous const declarations without value (which is invalid) in some corner cases when using collapse_vars.
v4.6.13
- Fixed issue where ES5 object properties were being turned into ES6 object properties due to more lax unicode rules.
- Fixed parsing of BigInt with lowercase e in them.
v4.6.12
- Fixed subtree comparison code, making it see that [1,[2, 3]] is different from [1, 2, [3]]
- Printing of unicode identifiers has been improved
v4.6.11
- Read unused classes' properties and method keys, to figure out if they use other variables.
- Prevent inlining into block scopes when there are name collisions
- Functions are no longer inlined into parameter defaults, because they live in their own special scope.
- When inlining identity functions, take into account the fact they may be used to drop this in function calls.
- Nullish coalescing operator (x ?? y), plus basic optimization for it.
- Template literals in binary expressions such as + have been further optimized
v4.6.10
- Do not use reduce_vars when classes are present
v4.6.9
- Check if block scopes actually exist in blocks
v4.6.8
- Take into account "executed bits" of classes like static properties or computed keys, when checking if a class evaluation might throw or have side effects.
v4.6.7
- Some new performance gains through a AST_Node.size() method which measures a node's source code length without printing it to a string first.
... (truncated)
Commits
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
16

Bump node-fetch from 2.6.1 to 2.6.7
Bumps node-fetch from 2.6.1 to 2.6.7.
Release notes

Sourced from node-fetch's releases.
v2.6.7

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed
- fix: don't forward secure headers to 3th party by @jimmywarting in node-fetch/node-fetch#1453
Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.7

v2.6.6

What's Changed
- fix(URL): prefer built in URL version when available and fallback to whatwg by @jimmywarting in node-fetch/node-fetch#1352
Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.5...v2.6.6

v2.6.2

fixed main path in package.json
Commits
- 1ef4b56 backport of #1449 (#1453)
- 8fe5c4e 2.x: Specify encoding as an optional peer dependency in package.json (#1310)
- f56b0c6 fix(URL): prefer built in URL version when available and fallback to whatwg (...
- b5417ae fix: import whatwg-url in a way compatible with ESM Node (#1303)
- 18193c5 fix v2.6.3 that did not sending query params (#1301)
- ace7536 fix: properly encode url with unicode characters (#1291)
- 152214c Fix(package.json): Corrected main file path in package.json (#1274)
- See full diff in compare view
Maintainer changes

This version was pushed to npm by endless, a new releaser for node-fetch since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
17

Bump async from 2.6.2 to 2.6.4
Bumps async from 2.6.2 to 2.6.4.
Changelog

Sourced from async's changelog.
v2.6.4
- Fix potential prototype pollution exploit (#1828)
v2.6.3
- Updated lodash to squelch a security warning (#1675)
Commits
- c6bdaca Version 2.6.4
- 8870da9 Update built files
- 4df6754 update changelog
- 8f7f903 Fix prototype pollution vulnerability (#1828)
- f1d8383 Version 2.6.3
- 2b674c1 update changelog
- eab740f fix: udpate lodash. closes #1675
- See full diff in compare view
Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.