v2.4.1

What's Changed

• add missing @types/* packages for TypeScript support by @JamieMagee in #1373
• feat: update nodejs and other packages by @elaine-mattos in #1340
• Fix redis connection timeout on service startup by @qtomlinson in #1382
• Update Dockerfile entrypoint to use node directly by @qtomlinson in #1384
• Update version for MongoDB Node.js driver by @qtomlinson in #1385
• Make noisy logs debug only by @ryanbrandenburg in #1376
• Add types for scancodeMap by @JamieMagee in #1390
• update to node 24 packages by @brettfo in #1366
• Bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in #1380
• Bump peter-evans/create-pull-request from 6.0.5 to 8.0.0 by @dependabot[bot] in #1379
• Bump tmp by @dependabot[bot] in #1343
• Fix intermittent failures in unit tests by @qtomlinson in #1391
• Bump spdx-license-list from 6.10.0 to 6.11.0 by @dependabot[bot] in #1396
• feat(types): add TypeScript definitions for remaining lib/ modules by @JamieMagee in #1394
• feat: Add TypeScript types for abstract store providers by @JamieMagee in #1395
• Bump actions/checkout from 5.0.1 to 6.0.1 in the github-actions group by @dependabot[bot] in #1402
• Bump @gitbeaker/rest from 42.5.0 to 43.8.0 by @dependabot[bot] in #1401
• Filter before queueing harvest by @qtomlinson in #1392
• Bump the dev-dependencies group across 1 directory with 22 updates by @dependabot[bot] in #1393
• Bump tmp from 0.2.4 to 0.2.5 by @dependabot[bot] in #1405
• chore(deps): run npm audit fix by @JamieMagee in #1406
• chore(deps): update body-parser and semver to latest patch versions by @JamieMagee in #1407
• chore(deps): update vso-node-api to 6.5.0 by @JamieMagee in #1408
• Add logging to harvest filter initialization by @qtomlinson in #1409
• feat(types): add TypeScript definitions for summary providers by @JamieMagee in #1400
• feat(types): add TypeScript definitions for business layer by @JamieMagee in #1403
• Bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in #1415
• Bump express-rate-limit from 7.5.1 to 8.2.1 by @dependabot[bot] in #1399
• Remove unused readdirp dependency by @JamieMagee in #1417
• Bump mongodb from 6.16.0 to 7.0.0 by @dependabot[bot] in #1398
• fix(test): use fake timers to speed up webhook and curation tests by @JamieMagee in #1418
• feat(types): add TypeScript definitions for middleware by @JamieMagee in #1414
• chore(deps): remove @types/winston by @JamieMagee in #1411
• chore(deps): remove unused vso-node-api dependency by @JamieMagee in #1412
• Bump semver from 7.7.2 to 7.7.3 by @dependabot[bot] in #1423
• Bump actions/checkout from 6.0.1 to 6.0.2 in the github-actions group by @dependabot[bot] in #1420
• Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 by @dependabot[bot] in #1421
• Bump cors from 2.8.5 to 2.8.6 by @dependabot[bot] in #1422
• Bump serialize-error from 12.0.0 to 13.0.1 by @dependabot[bot] in #1424
• Bump the dev-dependencies group across 1 directory with 4 updates by @dependabot[bot] in #1416
• Bump applicationinsights from 1.8.10 to 3.13.0 by @dependabot[bot] in #1425
• Revert mongodb 7.x upgrade by @JamieMagee in #1431
• Fix App Insights 3.x connection string configuration by @JamieMagee in #1432
• Fix regex security issues in hostname matching and string replacement by @JamieMagee in #1426
• fix: remove stale cached values for large definitions by @qtomlinson in #1433
• Pin dependency versions to lockfile values by @JamieMagee in #1435
• Bump github/codeql-action from 4.31.10 to 4.32.0 in the github-actions group by @dependabot[bot] in #1436
• Bump axios from 1.13.2 to 1.13.3 by @dependabot[bot] in #1437
• Downgrade @types/node to 24.x by @JamieMagee in #1440
• fix: Add Ajv type coercion for Express 5 query parameter compatibility by @elaine-mattos in #1388
• fix(logging): circular JSON errors in Winston logs by summarizing HTTP/Axios objects by @elaine-mattos in #1389
• feat(cache): add backward compatibility for pako 1.x to 2.x migration by @elaine-mattos in #1383
• Bump axios from 1.13.3 to 1.13.4 by @dependabot[bot] in #1441
• chore(deps): bump github/codeql-action from 4.32.0 to 4.32.2 in the github-actions group by @dependabot[bot] in #1446
• chore(deps): bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 by @dependabot[bot] in #1442
• chore(deps): bump minimatch from 10.1.1 to 10.1.2 by @dependabot[bot] in #1448
• chore(deps): bump axios from 1.13.4 to 1.13.5 by @dependabot[bot] in #1450
• chore(deps): bump semver from 7.7.3 to 7.7.4 by @dependabot[bot] in #1445
• chore(deps-dev): bump the dev-dependencies group across 1 directory with 2 updates by @dependabot[bot] in #1449
• Fix error handling and Buffer parsing in store implementations by @JamieMagee in #1439
• Fix service start error by @qtomlinson in #1451
• Add environment variable HARVEST_CACHE_TTL_IN_SECONDS by @qtomlinson in #1455
• Disable reload in getDefinitions by @qtomlinson in #1452
• Add buildProperties to avoid AppInsight error by @qtomlinson in #1456
• Enable TypeScript tests using Node's native type stripping by @JamieMagee in #1429
• Add cache TTL configuration to crawlerQueue factory by @qtomlinson in #1461
• Fix webhook signature validation by @qtomlinson in #1462
• chore(deps): bump github/codeql-action from 4.32.2 to 4.32.3 in the github-actions group by @dependabot[bot] in #1459
• chore(deps): bump minimatch from 10.1.2 to 10.2.0 by @dependabot[bot] in #1458
• chore(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot[bot] in #1457

New Contributors

• @elaine-mattos made their first contribution in #1340
• @brettfo made their first contribution in #1366

Full Changelog: v2.4.0...v2.4.1