Update dependency multer to v1.4.5-lts.2

.gitea/workflows/docker.yml

@@ -0,0 +1,48 @@
+name: Build & Push Docker image
+
+on:
+  push:
+    branches:
+      - master
+  schedule:
+    - cron: '0 15 1 * *'  # Jeden 1. des Monats um 15:00 UTC
+
+jobs:
+  docker-build:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+        with:
+          ref: master
+          fetch-depth: 0
+
+      - name: Set up Docker buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to registry
+        if: ${{ secrets.REGISTRY_USER != '' }}
+        uses: docker/login-action@v3
+        with:
+          registry: localregistry.nauheimtech.duckdns.org
+          username: ${{ secrets.REGISTRY_USER }}
+          password: ${{ secrets.REGISTRY_PASSWORD }}
+
+      - name: Extract variables
+        id: vars
+        run: |
+          echo "date_tag=$(date +'%Y%m%d')" >> $GITHUB_OUTPUT
+
+      - name: Build and tag image
+        run: |
+          IMAGE_REPO="localregistry.nauheimtech.duckdns.org/send2ereader"
+          docker build --no-cache \
+            -t ${IMAGE_REPO}:${{ steps.vars.outputs.date_tag }} \
+            -t ${IMAGE_REPO}:latest \
+            .
+
+      - name: Push image to local registry
+        run: |
+          IMAGE_REPO="localregistry.nauheimtech.duckdns.org/send2ereader"
+          docker push ${IMAGE_REPO}:${{ steps.vars.outputs.date_tag }}
+          docker push ${IMAGE_REPO}:latest

package-lock.json

@@ -13,7 +13,7 @@
         "@koa/multer": "^3.0.2",
         "@koa/router": "^13.1.0",
         "file-type": "^16.5.4",
-        "koa": "^2.16.1",
+        "koa": "^2.15.3",
         "koa-logger": "^3.2.1",
         "koa-sendfile": "^3.0.0",
         "koa-static": "^5.0.0",
@@ -1419,9 +1419,9 @@
       }
     },
     "node_modules/koa": {
-      "version": "2.16.1",
-      "resolved": "https://registry.npmjs.org/koa/-/koa-2.16.1.tgz",
-      "integrity": "sha512-umfX9d3iuSxTQP4pnzLOz0HKnPg0FaUUIKcye2lOiz3KPu1Y3M3xlz76dISdFPQs37P9eJz1wUpcTS6KDPn9fA==",
+      "version": "2.15.3",
+      "resolved": "https://registry.npmjs.org/koa/-/koa-2.15.3.tgz",
+      "integrity": "sha512-j/8tY9j5t+GVMLeioLaxweJiKUayFhlGqNTzf2ZGwL0ZCQijd2RLHK0SLW5Tsko8YyyqCZC2cojIb0/s62qTAg==",
       "license": "MIT",
       "dependencies": {
         "accepts": "^1.3.5",
@@ -1698,9 +1698,10 @@
       "license": "MIT"
     },
     "node_modules/multer": {
-      "version": "1.4.5-lts.1",
-      "resolved": "https://registry.npmjs.org/multer/-/multer-1.4.5-lts.1.tgz",
-      "integrity": "sha512-ywPWvcDMeH+z9gQq5qYHCCy+ethsk4goepZ45GLD63fOu0YcNecQxi64nDs3qluZB+murG3/D4dJ7+dGctcCQQ==",
+      "version": "1.4.5-lts.2",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-1.4.5-lts.2.tgz",
+      "integrity": "sha512-VzGiVigcG9zUAoCNU+xShztrlr1auZOlurXynNvO9GiWD1/mTBbUljOKY+qMeazBqXgRnjzeEgJI/wyjJUHg9A==",
+      "deprecated": "Multer 1.x is impacted by a number of vulnerabilities, which have been patched in 2.x. You should upgrade to the latest 2.x version.",
       "license": "MIT",
       "dependencies": {
         "append-field": "^1.0.0",

package.json

@@ -13,7 +13,7 @@
     "@koa/multer": "^3.0.2",
     "@koa/router": "^13.1.0",
     "file-type": "^16.5.4",
-    "koa": "^2.16.1",
+    "koa": "^2.15.3",
     "koa-logger": "^3.2.1",
     "koa-sendfile": "^3.0.0",
     "koa-static": "^5.0.0",

renovate.json

@@ -0,0 +1,3 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}