build(deps): bump the npm-production-minor-patch group across 1 directory with 4 updates

[dependabot]

Bumps the npm-production-minor-patch group with 4 updates in the / directory: cheerio, cors, express-rate-limit and redis.

Updates cheerio from 1.0.0-rc.12 to 1.2.0

Release notes

Sourced from cheerio's releases.

v1.2.0

What's Changed

• .val() now supports button values by @​kaioduarte in cheeriojs/cheerio#4175
• .find() now properly scopes :scope selectors by @​T0nd0Tara in cheeriojs/cheerio#4967
• The isHtml utility now runtime-validates input types by @​Mallikarjun-0 in cheeriojs/cheerio#4523

New Contributors

• @​noritaka1166 made their first contribution in cheeriojs/cheerio#4740
• @​kaioduarte made their first contribution in cheeriojs/cheerio#4175
• @​Mallikarjun-0 made their first contribution in cheeriojs/cheerio#4523
• @​T0nd0Tara made their first contribution in cheeriojs/cheerio#4967

Full Changelog: cheeriojs/cheerio@v1.1.2...v1.2.0

v1.1.2

What's Changed

• Fix fromURL baseURI issues by @​fb55 in cheeriojs/cheerio#4696

Full Changelog: cheeriojs/cheerio@v1.1.1...v1.1.2

v1.1.1

• Fix Undici issues (#4689) 91a2b3d7

---

cheeriojs/cheerio@v1.1.0...v1.1.1

v1.1.0

What's Changed

• fix(attributes): support .prop on document nodes by @​fb55 in cheeriojs/cheerio#4320
• fix(types): fix ExtractedValue type by @​ben-tilden in cheeriojs/cheerio#4334
• Add a field browser to package.json root by @​UNIDY2002 in cheeriojs/cheerio#4033
• Upgraded dependencies

Doc Improvements

• docs(blog): fix loading documents url by @​TonyRL in cheeriojs/cheerio#4002
• docs: fix function load() link by @​ya-luotao in cheeriojs/cheerio#4013
• docs: correct loadBuffer() name in example by @​arichardsmith in cheeriojs/cheerio#4270
• Update attr setter jsdoc by @​thyming in cheeriojs/cheerio#4469
• docs: use code block for install, mention yarn and bun by @​Electroid in cheeriojs/cheerio#4454
• docs: Replace .html with .prop for outerHTML by @​fb55 in cheeriojs/cheerio#4321

New Contributors

• @​TonyRL made their first contribution in cheeriojs/cheerio#4002
• @​ya-luotao made their first contribution in cheeriojs/cheerio#4013
• @​arichardsmith made their first contribution in cheeriojs/cheerio#4270
• @​UNIDY2002 made their first contribution in cheeriojs/cheerio#4033
• @​AzeemSup made their first contribution in cheeriojs/cheerio#4189

... (truncated)

Commits

• e3c7aaf 1.2.0
• 96bfd3e chore(package): Exclude tests from published bundle
• 08d396c docs(readme): Update Sponsors (#5014)
• bd9d3dd build(deps-dev): bump eslint-plugin-jsdoc from 62.3.0 to 62.3.1 (#5022)
• f4c8a58 build(deps): bump unist-util-visit from 5.0.0 to 5.1.0 in /website (#5027)
• 8fa46d5 build(deps): bump astro from 5.16.12 to 5.16.14 in /website (#5026)
• 8e132a6 build(deps-dev): bump @​vitest/coverage-v8 from 4.0.17 to 4.0.18 (#5023)
• 6d31bfc build(deps-dev): bump globals from 17.0.0 to 17.1.0 (#5025)
• 65aa6c8 build(deps): bump @​docsearch/css from 4.5.0 to 4.5.3 in /website (#5020)
• 5567e65 build(deps): bump astro from 5.16.11 to 5.16.12 in /website (#5021)
• Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

• Build: Node.js@12.16 and Node.js.13.12 by @​smondal in expressjs/cors#189
• Update README.md for origin function callback parameters by @​dstudzinski in expressjs/cors#180
• Suggest passing false for disallowed domains, not erroring by @​shackpank in expressjs/cors#175
• Changed the term whitelist to allowlist in Documentation by @​jkasun in expressjs/cors#200
• Fix typo in README by @​alex-grover in expressjs/cors#207
• Added new link & website in the README by @​manjunath00 in expressjs/cors#269
• Fix functions call with extra parameter by @​LuisEGR in expressjs/cors#245
• 🐛 Fix readme status badge by @​homersimpsons in expressjs/cors#306
• chore: add support for OSSF scorecard reporting by @​inigomarquinez in expressjs/cors#321
• ci: fix errors in ci github action for node 8 by @​inigomarquinez in expressjs/cors#322
• test: improved test robustness by @​Alex-GF in expressjs/cors#320
• chore: upgrade scorecard workflow pinned action versions by @​carpasse in expressjs/cors#341
• ci: add CodeQL (SAST) by @​bjohansebas in expressjs/cors#340
• docs: remove broken link to demo site by @​dpopp07 in expressjs/cors#344
• OSSF Scorecard recommendations by @​UlisesGascon in expressjs/cors#350
• build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 by @​dependabot[bot] in expressjs/cors#351
• build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @​dependabot[bot] in expressjs/cors#353
• build(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @​dependabot[bot] in expressjs/cors#354
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 by @​dependabot[bot] in expressjs/cors#355
• build(deps-dev): bump express from 4.17.1 to 4.21.2 by @​dependabot[bot] in expressjs/cors#356
• build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by @​dependabot[bot] in expressjs/cors#352
• build(deps-dev): bump mocha from 9.1.1 to 9.2.2 by @​dependabot[bot] in expressjs/cors#358
• update the docs for per request config by @​jonchurch in expressjs/cors#338
• (fix): readme updated for #271 origin option for * by @​dhananjaysa92 in expressjs/cors#289
• ci: upgrade Node versions by @​UlisesGascon in expressjs/cors#359
• chore: add funding to package.json by @​bjohansebas in expressjs/cors#363
• build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 by @​dependabot[bot] in expressjs/cors#371
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @​dependabot[bot] in expressjs/cors#370
• docs: Cleanup README by @​efekrskl in expressjs/cors#374
• chore: add node v25 by @​imangas in expressjs/cors#375
• Extend CI test matrix by @​imangas in expressjs/cors#376
• docs: simplify code examples with header comments by @​jonchurch in expressjs/cors#386
• docs: tweak intro, add note w/ browser enforcement, FAQ by @​jonchurch in expressjs/cors#385
• chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball by @​Phillip9587 in expressjs/cors#388
• Release: 2.8.6 by @​UlisesGascon in expressjs/cors#390

New Contributors

• @​smondal made their first contribution in expressjs/cors#189
• @​dstudzinski made their first contribution in expressjs/cors#180
• @​shackpank made their first contribution in expressjs/cors#175
• @​jkasun made their first contribution in expressjs/cors#200
• @​alex-grover made their first contribution in expressjs/cors#207
• @​manjunath00 made their first contribution in expressjs/cors#269
• @​LuisEGR made their first contribution in expressjs/cors#245
• @​homersimpsons made their first contribution in expressjs/cors#306
• @​inigomarquinez made their first contribution in expressjs/cors#321
• @​Alex-GF made their first contribution in expressjs/cors#320
• @​carpasse made their first contribution in expressjs/cors#341

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

• Improve documentation (API, context, examples...)
• Remove additional markdown files from tarball

Commits

• f00a8c1 2.8.6 (#390)
• 848e2bd chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball (#388)
• cf8947e docs: tweak intro, add note w/ browser enforcement, FAQ (#385)
• bbf62a5 docs: simplify code examples with header comments (#386)
• f442e77 Extend CI test matrix (#376)
• d5cf6cd ci: add support for node@25 (#375)
• 7e6f7ee docs: revamp content (#374)
• b25644c build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#370)
• f881e91 build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 (#371)
• 9a9a760 chore: add funding to package.json (#363)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.

Updates express-rate-limit from 8.5.2 to 8.6.1

Release notes

Sourced from express-rate-limit's releases.

v8.6.1

You can view the changelog here.

v8.6.0

You can view the changelog here.

Commits

• c7fced5 8.6.1
• b21110e chore: deprecate millisecond-based time constants (#662)
• fad3d85 chore(deps-dev): bump the development-dependencies group with 4 updates (#660)
• fffb3c4 8.6.0
• f366b2d docs: debugging guide, time constants, & v8.6.0 changelog (#652)
• 593ddd2 fix: make debug output easier to read (#653)
• ef8c129 fix: Pin safe version of @​asyncapi/specs dev dep (#659)
• 7b05e0d feat: add time constants to support more readable values for windowMs (#655)
• 863e730 chore(deps-dev): bump the development-dependencies group with 3 updates (#657)
• e0e711e fix: correct wording in usage documentation for express-rate-limit (#656)
• Additional commits viewable in compare view

Updates redis from 6.0.0 to 6.1.0

Release notes

Sourced from redis's releases.

redis@6.1.0

What's Changed

• feat: add key prefixing (fixes #2982) by @​gajus in redis/node-redis#3312
• feat(cluster): add getNodeClientForKey for WATCH/MULTI/EXEC by @​nkaradzhov in redis/node-redis#3315

New Contributors

• @​gajus made their first contribution in redis/node-redis#3312

Full Changelog: https://github.com/redis/node-redis/compare/redis@6.0.1...redis@6.1.0

redis@6.0.1

What's Changed

• ci: bump GitHub Actions to Node 24-compatible versions by @​nkaradzhov in redis/node-redis#3298
• chore(tests): bump default docker test image to 8.8.0 by @​nkaradzhov in redis/node-redis#3297
• fix(client): align RedisClientOptions RESP default with RedisClientType by @​aartisonigra in redis/node-redis#3303
• test(client): fix three flaky tests around socket/connect lifecycle by @​nkaradzhov in redis/node-redis#3299
• fix: embed sources in emitted sourcemaps by @​raashish1601 in redis/node-redis#3274
• Sentinel scan iterator by @​harshrai654 in redis/node-redis#3141
• ci: replace brittle Codecov uploader with codecov-action by @​nkaradzhov in redis/node-redis#3314
• Fix/issue 3311 by @​aartisonigra in redis/node-redis#3313
• fix(sentinel): preserve seed nodes in sentinelRootNodes after topology update (#3237) by @​aartisonigra in redis/node-redis#3306

New Contributors

• @​aartisonigra made their first contribution in redis/node-redis#3303
• @​harshrai654 made their first contribution in redis/node-redis#3141

Full Changelog: https://github.com/redis/node-redis/compare/redis@6.0.0...redis@6.0.1

Commits

• 9ba65dd Release redis@6.1.0
• d400bc9 Release entraid@6.1.0
• 27c0b71 Release time-series@6.1.0
• 5044e44 Release search@6.1.0
• 57aba53 Release json@6.1.0
• c19ba5b Release bloom@6.1.0
• 323e2bc Release client@6.1.0
• a476aa6 feat(cluster): add getNodeClientForKey for WATCH/MULTI/EXEC (#3315)
• 7ae4652 feat: add key prefixing (#3312)
• 65e9453 Release redis@6.0.1
• Additional commits viewable in compare view

[jsugg]

@dependabot recreate

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.