Update helmet to the latest version 🚀

[greenkeeper]

Version 3.7.0 of helmet just got published.

Dependency	helmet
Current Version	3.6.1
Type	devDependency

The version 3.7.0 is not covered by your current version range.

Without accepting this pull request your project will work just like it did before. There might be a bunch of new features, fixes and perf improvements that the maintainers worked on for you though.

I recommend you look into these changes and try to get onto the latest version of helmet.
Given that you have a decent test suite, a passing build is a strong indicator that you can take advantage of these changes by merging the proposed change into your project. Otherwise this branch is a great starting point for you to work on the update.

---

Commits

The new version differs by 15 commits.

• 146594f 3.7.0
• 39b7f11 Update changelog for 3.7.0 release
• d46443a Update helmet-csp to 2.5.0
• fb407df Update security reporting instructions
• f6270e3 Minor: fix typo in test description
• 0624fea Update changelog for incorrect usage change
• 35a247f Update error message when doing app.use(helmet)
• 4ecf148 Add a test when called directly
• e213d87 warn if a helmet constructor is used directly as handler
• 7255042 Travis: test on Node 8
• d09b414 Add some useless Markdown files to npmignore
• d5dce64 Minor: move default middleware definition into index.js
• 267ac75 Use --fix flag with Standard to auto-fix errors
• 64e815b Minor: clean up main function for clarity
• f034913 Update Sinon and Standard

See the full diff

Not sure how things should work exactly?

There is a collection of frequently asked questions and of course you may always ask my humans.

---

Your Greenkeeper Bot 🌴

[greenkeeper]

Version 3.8.0 just got published.

Update to this version instead 🚀

Commits

The new version differs by 2 commits.

• 3ca8991 3.8.0
• 33fff29 Update to [email protected]

See the full diff

[greenkeeper]

Version 3.8.1 just got published.

Update to this version instead 🚀

Commits

The new version differs by 2 commits.

• 5587ecc 3.8.1
• 3b95345 Prepare for 3.8.1 release

See the full diff

[greenkeeper]

Version 3.8.2 just got published.

Update to this version instead 🚀

Commits

The new version differs by 3 commits.

• c2d0810 3.8.2
• 3da2f55 Update changelog for 3.8.2 release
• 35e7d97 Update connect to 3.6.5

See the full diff

[greenkeeper]

Version 3.9.0 just got published.

Update to this version instead 🚀

Commits

The new version differs by 3 commits.

• 27029cd 3.9.0
• fd8376c Update helmet-csp to 2.6.0
• 421dcdf Remove connect dependency

See the full diff

[greenkeeper]

Version 3.10.0 just got published.

Update to this version instead 🚀

Commits

The new version differs by 4 commits.

• 1369653 3.10.0
• 9985bdd Update changelog for 3.10.0 release
• 3ec7e70 Update devDependencies
• 05c3183 Update helmet-csp to latest version

See the full diff

[greenkeeper]

Version 3.11.0 just got published.

Update to this version instead 🚀

Commits

The new version differs by 4 commits.

• 2db13e9 3.11.0
• bef8c96 Update changelog for 3.11.0 release
• 091d126 Update license year for 2018
• 73a5dd7 Make sure middleware function is named

See the full diff

[greenkeeper]

Version 3.12.0 just got published.

Update to this version instead 🚀

Commits

The new version differs by 3 commits.

• 89f6b90 3.12.0
• fa896f8 Update changelog for 3.12.0 release
• be113c3 Update x-xss-protection to 1.1.0

See the full diff

[greenkeeper]

Version 3.12.1 just got published.

Update to this version instead 🚀

Commits

The new version differs by 3 commits.

• 65d04cb 3.12.1
• 7025ed6 Update expectCt to latest; prep for 3.12.1 release
• d382a90 Update Standard and Supertest to latest versions

See the full diff

[greenkeeper]

Version 3.12.2 just got published.

Update to this version instead 🚀

Commits

The new version differs by 4 commits.

• 119a5c9 3.12.2
• 43c6293 Update changelog for 3.12.2 release
• 1e4330b Update to [email protected]
• 9148f5b Fix CONTRIBUTING.md not being npm ignored

See the full diff

[greenkeeper]

Version 3.13.0 just got published.

Update to this version instead 🚀

Commits

The new version differs by 10 commits.

• d75a4a3 3.13.0
• 56fbf16 Update changelog for 3.13.0 release
• 5d0a9ef Travis should test on Node 10 instead of Node 8
• 46a2071 var → const in README
• 4bc6077 Remove Standard badge from readme
• fb77bd8 security.md -> SECURITY.md
• 80409f7 Use const instead of var in tests
• fd4931e Add helmet.permittedCrossDomainPolicies middleware
• f89953a Revert "Travis should test on Node 0.10 because we still technically support it"
• 3ce2198 Travis should test on Node 0.10 because we still technically support it

See the full diff

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.14.0.

Update to this version instead 🚀

Commits

The new version differs by 5 commits.

• d81dc40 3.14.0
• c734b30 Update changelog for 3.14.0 release
• ebf80d7 Travis shouldn't test on EOL'd Node 4; should test on 8
• db8fdc7 Add featurePolicy middleware
• 0468c37 Add mocha.opts to check for a few rare bugs

See the full diff

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.15.0.

Update to this version instead 🚀

Commits

The new version differs by 3 commits.

• d36ae47 3.15.0
• d03d6bf Prepare 3.15.0 release
• 42cefd5 Clarify that Helmet is for HTTP response headers

See the full diff

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.15.1.

Update to this version instead 🚀

Commits

The new version differs by 4 commits.

• f545a94 3.15.1
• ca50146 Deprecate hpkp
• 6458cd5 Update license year for 2019
• 2dba625 Update devDependencies to latest versions and fix warnings

See the full diff

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.16.0.

Update to this version instead 🚀

Commits

The new version differs by 18 commits.

• 123e93c 3.16.0
• e9c6eab Update changelog for 3.16.0 release
• 1cff218 Update ienoopen to v1.1.0
• c8578fe Minor: use xssFilter instead of noCache in readme example
• 09c90d2 Update changelog with a few more changes
• 94e92d0 Minor: reference the "drop support for Node <4" commit in the changelog
• 1dab41f Fix link to CHANGELOG.md from HISTORY.md
• a49cec3 Drop support for Node <4
• 9f13f08 Add email to bugs field in package.json
• ce70edc Minor: add more specificity to .npmignore
• 3a37f1f Update Adam Baldwin's contact information
• 1be1cbc Update hsts to 2.2.0
• 354e80e Update devDependencies to latest versions
• b7f7359 Note that the changelog is now in Keep A Changelog format
• b381760 Update changelog to match https://keepachangelog.com/ standard

There are 18 commits in total.

See the full diff

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.17.0.

Update to this version instead 🚀

Commits

The new version differs by 4 commits.

• 87f8d15 3.17.0
• d13893c Update devDependencies to latest versions
• ea6c415 Update referrer-policy to 1.2.0
• f7a531a Whitelist published files with files

See the full diff

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.18.0.

Update to this version instead 🚀

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.19.0.

Update to this version instead 🚀

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.20.0.

Update to this version instead 🚀

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.20.1.

Update to this version instead 🚀

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.21.0.

Update to this version instead 🚀

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.21.1.

Update to this version instead 🚀

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.21.2.

Update to this version instead 🚀

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.21.3.

Update to this version instead 🚀

[greenkeeper]

• The devDependency helmet was updated from 3.6.1 to 3.22.0.

Update to this version instead 🚀