Merge pull request 'Update dependency multer to v1.4.5-lts.2' (#2) from renovate/multer-1.x-lockfile into master

Reviewed-on: #2

.gitea/workflows/docker.yml

@@ -0,0 +1,48 @@
+name: Build & Push Docker image
+
+on:
+  push:
+    branches:
+      - master
+  schedule:
+    - cron: '0 15 1 * *'  # Jeden 1. des Monats um 15:00 UTC
+
+jobs:
+  docker-build:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+        with:
+          ref: master
+          fetch-depth: 0
+
+      - name: Set up Docker buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to registry
+        if: ${{ secrets.REGISTRY_USER != '' }}
+        uses: docker/login-action@v3
+        with:
+          registry: localregistry.nauheimtech.duckdns.org
+          username: ${{ secrets.REGISTRY_USER }}
+          password: ${{ secrets.REGISTRY_PASSWORD }}
+
+      - name: Extract variables
+        id: vars
+        run: |
+          echo "date_tag=$(date +'%Y%m%d')" >> $GITHUB_OUTPUT
+
+      - name: Build and tag image
+        run: |
+          IMAGE_REPO="localregistry.nauheimtech.duckdns.org/send2ereader"
+          docker build --no-cache \
+            -t ${IMAGE_REPO}:${{ steps.vars.outputs.date_tag }} \
+            -t ${IMAGE_REPO}:latest \
+            .
+
+      - name: Push image to local registry
+        run: |
+          IMAGE_REPO="localregistry.nauheimtech.duckdns.org/send2ereader"
+          docker push ${IMAGE_REPO}:${{ steps.vars.outputs.date_tag }}
+          docker push ${IMAGE_REPO}:latest

package-lock.json

@@ -13,7 +13,7 @@
         "@koa/multer": "^3.0.2",
         "@koa/router": "^13.1.0",
         "file-type": "^16.5.4",
-        "koa": "^2.16.1",
+        "koa": "^2.15.3",
         "koa-logger": "^3.2.1",
         "koa-sendfile": "^3.0.0",
         "koa-static": "^5.0.0",
@@ -399,11 +399,13 @@
       }
     },
     "node_modules/@koa/router": {
-      "version": "13.1.0",
-      "resolved": "https://registry.npmjs.org/@koa/router/-/router-13.1.0.tgz",
-      "integrity": "sha512-mNVu1nvkpSd8Q8gMebGbCkDWJ51ODetrFvLKYusej+V0ByD4btqHYnPIzTBLXnQMVUlm/oxVwqmWBY3zQfZilw==",
+      "version": "13.1.1",
+      "resolved": "https://registry.npmjs.org/@koa/router/-/router-13.1.1.tgz",
+      "integrity": "sha512-JQEuMANYRVHs7lm7KY9PCIjkgJk73h4m4J+g2mkw2Vo1ugPZ17UJVqEH8F+HeAdjKz5do1OaLe7ArDz+z308gw==",
+      "deprecated": "Please upgrade to v15 or higher. All reported bugs in this version are fixed in newer releases, dependencies have been updated, and security has been improved.",
       "license": "MIT",
       "dependencies": {
+        "debug": "^4.4.1",
         "http-errors": "^2.0.0",
         "koa-compose": "^4.1.0",
         "path-to-regexp": "^6.3.0"
@@ -761,9 +763,9 @@
       }
     },
     "node_modules/debug": {
-      "version": "4.3.7",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz",
-      "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==",
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "license": "MIT",
       "dependencies": {
         "ms": "^2.1.3"
@@ -1419,9 +1421,9 @@
       }
     },
     "node_modules/koa": {
-      "version": "2.16.1",
-      "resolved": "https://registry.npmjs.org/koa/-/koa-2.16.1.tgz",
-      "integrity": "sha512-umfX9d3iuSxTQP4pnzLOz0HKnPg0FaUUIKcye2lOiz3KPu1Y3M3xlz76dISdFPQs37P9eJz1wUpcTS6KDPn9fA==",
+      "version": "2.15.3",
+      "resolved": "https://registry.npmjs.org/koa/-/koa-2.15.3.tgz",
+      "integrity": "sha512-j/8tY9j5t+GVMLeioLaxweJiKUayFhlGqNTzf2ZGwL0ZCQijd2RLHK0SLW5Tsko8YyyqCZC2cojIb0/s62qTAg==",
       "license": "MIT",
       "dependencies": {
         "accepts": "^1.3.5",
@@ -1698,9 +1700,10 @@
       "license": "MIT"
     },
     "node_modules/multer": {
-      "version": "1.4.5-lts.1",
-      "resolved": "https://registry.npmjs.org/multer/-/multer-1.4.5-lts.1.tgz",
-      "integrity": "sha512-ywPWvcDMeH+z9gQq5qYHCCy+ethsk4goepZ45GLD63fOu0YcNecQxi64nDs3qluZB+murG3/D4dJ7+dGctcCQQ==",
+      "version": "1.4.5-lts.2",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-1.4.5-lts.2.tgz",
+      "integrity": "sha512-VzGiVigcG9zUAoCNU+xShztrlr1auZOlurXynNvO9GiWD1/mTBbUljOKY+qMeazBqXgRnjzeEgJI/wyjJUHg9A==",
+      "deprecated": "Multer 1.x is impacted by a number of vulnerabilities, which have been patched in 2.x. You should upgrade to the latest 2.x version.",
       "license": "MIT",
       "dependencies": {
         "append-field": "^1.0.0",

package.json

@@ -13,7 +13,7 @@
     "@koa/multer": "^3.0.2",
     "@koa/router": "^13.1.0",
     "file-type": "^16.5.4",
-    "koa": "^2.16.1",
+    "koa": "^2.15.3",
     "koa-logger": "^3.2.1",
     "koa-sendfile": "^3.0.0",
     "koa-static": "^5.0.0",

renovate.json

@@ -0,0 +1,3 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}