Update dependency helmet to v8.3.0 - autoclosed #10

Closed

andras wants to merge 1 commit from renovate/helmet-8.x-lockfile into main

andras commented

2026-09-19 14:56:48 +01:00

Owner

This PR contains the following updates:

Package	Type	Update	Change
helmet (source)	dependencies	minor	`8.2.0` → `8.3.0`

Release Notes

helmetjs/helmet (helmet)

`v8.3.0`

Compare Source

Changed

Content-Security-Policy: improved performance by ~7% when there are no dynamic directives
Content-Security-Policy: improved error handling for invalid directive names

Fixed

Content-Security-Policy: useDefaults: false with no directives is no longer valid, both at runtime and the type level
Content-Security-Policy: dynamically-computed directive values would throw, not call next, when invalid
Content-Security-Policy: dynamically-computed directive value entries would throw, not call next, when function threw

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [helmet](https://helmet.js.org/) ([source](https://github.com/helmetjs/helmet)) | dependencies | minor | [`8.2.0` → `8.3.0`](https://renovatebot.com/diffs/npm/helmet/8.2.0/8.3.0) | --- ### Release Notes <details> <summary>helmetjs/helmet (helmet)</summary> ### [`v8.3.0`](https://github.com/helmetjs/helmet/blob/HEAD/CHANGELOG.md#830---2026-07-11) [Compare Source](https://github.com/helmetjs/helmet/compare/v8.2.0...v8.3.0) ##### Changed - `Content-Security-Policy`: improved performance by \~7% when there are no dynamic directives - `Content-Security-Policy`: improved error handling for invalid directive names ##### Fixed - `Content-Security-Policy`: `useDefaults: false` with no directives is no longer valid, both at runtime and the type level - `Content-Security-Policy`: dynamically-computed directive values would `throw`, not call `next`, when invalid - `Content-Security-Policy`: dynamically-computed directive value entries would `throw`, not call `next`, when function threw </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

andras added 1 commit

2026-09-19 14:56:48 +01:00

Update dependency helmet to v8.3.0

Deploy to Pages / deploy (pull_request) Successful in 2s

Details

Test / test (pull_request) Successful in 4s

Details

Build and Publish Docker Image / build-and-push (pull_request) Successful in 14s

Details

28589fbfe9

andras force-pushed renovate/helmet-8.x-lockfile from 28589fbfe9

Deploy to Pages / deploy (pull_request) Successful in 2s