Bump express-rate-limit from 6.9.0 to 7.1.4

[dependabot]

Bumps express-rate-limit from 6.9.0 to 7.1.4.

Release notes

Sourced from express-rate-limit's releases.

v7.1.4

You can view the changelog here.

v7.1.3

You can view the changelog here.

v7.1.2

You can view the changelog here.

v7.1.1

Misc

• Enabled provenance statement generation, see https://github.com/express-rate-limit/express-rate-limit#406.

---

You can view the full changelog here.

v7.1.0

You can view the changelog here.

v7.0.2

You can view the changelog here.

v7.0.1

You can view the changelog here.

v7.0.0

Breaking

• Changed behavior when max is set to 0:
  • Previously, max: 0 was treated as a 'disable' flag and would allow all requests through.
  • Starting with v7, all requests will be blocked when max is set to 0.
  • To replicate the old behavior, use the skip function instead.
• Renamed req.rateLimit.current to req.rateLimit.used.
  • current is now a hidden getter that will return the used value, but it will not appear when iterating over the keys or calling JSON.stringify().
• Changed the minimum required Node version from v14 to v16.
  • express-rate-limit now targets es2022 in TypeScript/ESBuild.
• Bumped TypeScript from v4 to v5 and dts-bundle-generator from v7 to v8.

Deprecated

• Removed the draft_polli_ratelimit_headers option (it was deprecated in v6).
  • Use standardHeaders: 'draft-6' instead.
• Removed the onLimitReached option (it was deprecated in v6).
  • This is an example of how to replicate it's behavior with a custom handler option.

Changed

• The MemoryStore now uses precise, per-user reset times rather than a global window that resets all users at once.

... (truncated)

Changelog

Sourced from express-rate-limit's changelog.

7.1.4

Fixed

• Ensure header values are strings rather than numbers, for compatibility with Bun

7.1.3

Changed

• Loosened peer dependencies to explicitly allow the Express 5 beta. (See #415)

7.1.2

Changed

• Re-organized documentation from readme into docs/ folder and added documentation website.

v7.1.1

Added

• Enabled provenance statement generation, see https://github.com/express-rate-limit/express-rate-limit#406.

7.1.0

Changed

• The getKey method is now always defined. If the store does not have the required get method, getKey will throw an error explaining this.

7.0.2

Added

• Added cluster-memory-store to the readme and made a couple of other minor clarifications.

7.0.1

Added

• Added rate-limit-postgresql to the stores list in the readme.

7.0.0

... (truncated)

Commits

• 6f81e8e 7.1.4
• 01ff7ca 7.1.4 changelog
• 9d08a03 fix: Ratelimit headers empty while running on Bun v1.0.x #418 (#419)
• 888e139 chore: npm pkg fix
• a5c66a6 7.1.3
• c4ca76c v7.1.3 changelog
• 2e88f24 chore: loosen peer dependencies (#416)
• 04a6f18 7.1.2
• 8a66816 7.1.2 changelog
• 5ce5b71 docs: minor tweaks (#413)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)