Bump helmet from 7.1.0 to 8.0.0 (#12171)

* Bump helmet from 7.1.0 to 8.0.0 Bumps [helmet](https://github.com/helmetjs/helmet) from 7.1.0 to 8.0.0. - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](helmetjs/helmet@v7.1.0...v8.0.0) --- updated-dependencies: - dependency-name: helmet dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> * Set `strict-transport-security` header values explicitly * Update index.jsx --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aaron Moore <[email protected]>
bbc · Nov 14, 2024 · e5520b1 · e5520b1
1 parent 3e67bd5
commit e5520b1
Show file tree

Hide file tree

Showing 7 changed files with 7 additions and 6 deletions.
diff --git a/...nux-x64-gnu-npm-14.2.10-c8787ddfc6-10.zip → ...-darwin-x64-npm-14.2.10-a1396b1353-10.zip b/...nux-x64-gnu-npm-14.2.10-c8787ddfc6-10.zip → ...-darwin-x64-npm-14.2.10-a1396b1353-10.zip
diff --git a/.yarn/cache/fsevents-patch-6b67494872-10.zip b/.yarn/cache/fsevents-patch-6b67494872-10.zip
diff --git a/.yarn/cache/helmet-npm-7.1.0-0f9f70fa93-aa13b0907d.zip b/.yarn/cache/helmet-npm-7.1.0-0f9f70fa93-aa13b0907d.zip
diff --git a/.yarn/cache/helmet-npm-8.0.0-ba86ece81a-cf30579d1d.zip b/.yarn/cache/helmet-npm-8.0.0-ba86ece81a-cf30579d1d.zip
diff --git a/package.json b/package.json
@@ -108,7 +108,7 @@
     "dotenv": "16.4.5",
     "express": "4.21.1",
     "express-static-gzip": "2.1.8",
-    "helmet": "7.1.0",
+    "helmet": "8.0.0",
     "helmet-csp": "4.0.0",
     "intersection-observer": "0.12.2",
     "jalaali-js": "1.2.7",

diff --git a/src/server/index.jsx b/src/server/index.jsx
@@ -92,6 +92,7 @@ server
       crossOriginOpenerPolicy: false,
       crossOriginResourcePolicy: false,
       originAgentCluster: false,
+      strictTransportSecurity: { maxAge: 15552000 },
     }),
   )
   .use(logResponseTime)

diff --git a/yarn.lock b/yarn.lock
@@ -10597,10 +10597,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"helmet@npm:7.1.0":
-  version: 7.1.0
-  resolution: "helmet@npm:7.1.0"
-  checksum: 10/aa13b0907d9d31b65e4ec73093b58d7e94e83c06818cc06869f5eb95d205574a14f01ed71cadfac4a68b736a1a6d7ef2290f3f6ef77ac664c7e75b8f9eddf88c
+"helmet@npm:8.0.0":
+  version: 8.0.0
+  resolution: "helmet@npm:8.0.0"
+  checksum: 10/cf30579d1dbd095e301458265fb6b3446d1ee0598c99b5e946afda8a72c035a6a7ebf2176168d5ca2541e6e522a88fb58d06f0eeec4ab378646960de9aea6584
   languageName: node
   linkType: hard
 
@@ -15891,7 +15891,7 @@ __metadata:
     express: "npm:4.21.1"
     express-static-gzip: "npm:2.1.8"
     glob: "npm:11.0.0"
-    helmet: "npm:7.1.0"
+    helmet: "npm:8.0.0"
     helmet-csp: "npm:4.0.0"
     husky: "npm:9.1.4"
     inspectpack: "npm:4.7.1"