chore(deps): update dependency express-rate-limit --> v6

This MR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
express-rate-limit	^5.2.6 -> ^6.0.0

---

Release Notes

express-rate-limit/express-rate-limit

v6.7.0

Compare Source

Changed

• Updated links to point to new express-rate-limit organization on GitHub.
• Added advertisement to Readme for project sponsor Zuplo.
• Updated TypeScript version and other dev dependencies
• Changed CI test suite: dropped node.js 12, added node.js 19

No functional changes.

v6.6.0

Compare Source

Added

• Added shutdown method to the Store interface and the MemoryStore.

v6.5.2

Compare Source

Fixed

• Fixed an issue with missing types in ESM monorepos.

v6.5.1

Compare Source

Added

• The message option can now be a (sync/asynx) function that returns a value (#​311)

Changed

• Updated all dependencies

Note: 6.5.0 was not released due to CI automation issues.

v6.4.0

Compare Source

Added

• Adds Express 5 (5.0.0-beta.1) as a supported peer dependency (#​304)

Changed

• Tests are now run on Node 12, 14, 16 and 18 on CI (#​305)
• Updated all development dependencies (#​306)

v6.3.0

Compare Source

Changed

• Changes the build target to es2019 so that ESBuild outputs code that can run with Node 12.
• Changes the minimum required Node version to 12.9.0.

v6.2.1

Compare Source

Fixed

• Use the default value for an option when undefined is passed to the rate limiter.

v6.2.0

Compare Source

Added

• Export the MemoryStore, so it can now be imported as a named import (import { MemoryStore } from 'express-rate-limit').

Fixed

• Deprecate the onLimitReached option (this was supposed to be deprecated in v6.0.0 itself); developers should use a custom handler function that checks if the rate limit has been exceeded instead.

v6.1.0

Compare Source

Added

• Added a named export rateLimit in case the default import does not work.

Fixed

• Added a named export default, so Typescript CommonJS developers can default-import the library (import rateLimit from 'express-rate-limit').

v6.0.5

Compare Source

Fixed

• Use named imports for ExpressJS types so users do not need to enable the esModuleInterop flag in their Typescript compiler configuration.

v6.0.4

Compare Source

Fixed

• Upload the built package as a .tgz to GitHub releases.

Changed

• Add main and module fields to package.json. This helps tools such as ESLint that do not yet support the exports field.
• Bumped the minimum node.js version in package-lock.json to match package.json

v6.0.3

Compare Source

Changed

• Bumped minimum Node version from 12.9 to 14.5 in package.json because the transpiled output uses the nullish coalescing operator (??), which isn't supported in node.js prior to 14.x.

v6.0.2

Compare Source

Fixed

• Ensure CommonJS projects can import the module.

Added

• Add additional tests that test:
  • importing the library in js-cjs, js-esm, ts-cjs, ts-esm environments.
  • usage of the library with external stores (redis, mongo, memcached, precise).

Changed

• Use esbuild to generate ESM and CJS output. This reduces the size of the built package from 138 kb to 13kb and build time to 4 ms! 🚀
• Use dts-bundle-generator to generate a single Typescript declaration file.

v6.0.1

Compare Source

Fixed

• Ensure CommonJS projects can import the module.

v6.0.0

Compare Source

Added

• express 4.x as a peer dependency.
• Better Typescript support (the library was rewritten in Typescript).
• Export the package as both ESM and CJS.
• Publish the built package (.tgz file) on GitHub releases as well as the npm registry.
• Issue and MR templates.
• A contributing guide.

Changed

• Rename the draft_polli_ratelimit_headers option to standardHeaders.
• Rename the headers option to legacyHeaders.
• Retry-After header is now sent if either legacyHeaders or standardHeaders is set.
• Allow keyGenerator to be an async function/return a promise.
• Change the way custom stores are defined.
  • Add the init method for stores to set themselves up using options passed to the middleware.
  • Rename the incr method to increment.
  • Allow the increment, decrement, resetKey and resetAll methods to return a promise.
  • Old stores will automatically be promisified and used.
• The package can now only be used with NodeJS version 12.9.0 or greater.
• The onLimitReached configuration option is now deprecated. Replace it with a custom handler that checks the number of hits.

Removed

• Remove the deprecated limiter.resetIp method (use the limiter.resetKey method instead).
• Remove the deprecated options delayMs, delayAfter (the delay functionality was moved to the express-slow-down package) and global (use a key generator that returns a constant value).

v5.5.1

Compare Source

v5.5.0

Compare Source

v5.4.1

Compare Source

v5.4.0

Compare Source

v5.3.0

Compare Source

---

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box.