[dependabot]

Bumps proxy-addr from 2.0.7 to 2.0.8.

Release notes

Sourced from proxy-addr's releases.

2.0.8

Important

• Fix CVE-2026-90711 (GHSA-jqcg-44mw-7w3h)

What's Changed

• Add OSSF scorecard action by @​carpasse in jshttp/proxy-addr#27
• Fix ci pipeline and add missing Node.JS versions by @​carpasse in jshttp/proxy-addr#26
• [StepSecurity] Apply security best practices by @​step-security-bot in jshttp/proxy-addr#29
• build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @​dependabot[bot] in jshttp/proxy-addr#30
• build(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by @​dependabot[bot] in jshttp/proxy-addr#31
• build(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by @​dependabot[bot] in jshttp/proxy-addr#32
• build(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by @​dependabot[bot] in jshttp/proxy-addr#33
• build(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by @​dependabot[bot] in jshttp/proxy-addr#35
• build(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by @​dependabot[bot] in jshttp/proxy-addr#34
• build(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by @​dependabot[bot] in jshttp/proxy-addr#36
• chore: add funding to package.json by @​Phillip9587 in jshttp/proxy-addr#40
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by @​dependabot[bot] in jshttp/proxy-addr#41
• build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by @​dependabot[bot] in jshttp/proxy-addr#43
• build(deps): bump actions/checkout from 3.6.0 to 5.0.0 by @​dependabot[bot] in jshttp/proxy-addr#42
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @​dependabot[bot] in jshttp/proxy-addr#47
• build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by @​dependabot[bot] in jshttp/proxy-addr#46
• build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by @​dependabot[bot] in jshttp/proxy-addr#50
• build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by @​dependabot[bot] in jshttp/proxy-addr#49
• build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @​dependabot[bot] in jshttp/proxy-addr#48
• build(deps): bump actions/checkout from 6.0.0 to 6.0.2 by @​dependabot[bot] in jshttp/proxy-addr#56
• build(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by @​dependabot[bot] in jshttp/proxy-addr#55
• build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by @​dependabot[bot] in jshttp/proxy-addr#57
• build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by @​dependabot[bot] in jshttp/proxy-addr#58
• Fix "arugment" typo in README by @​schiwekM in jshttp/proxy-addr#61
• build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by @​dependabot[bot] in jshttp/proxy-addr#64
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @​dependabot[bot] in jshttp/proxy-addr#63
• build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @​dependabot[bot] in jshttp/proxy-addr#45
• build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by @​dependabot[bot] in jshttp/proxy-addr#39
• chore(ci): npm-publish via reusable workflows by @​sheplu in jshttp/proxy-addr#54
• refresh CI by @​UlisesGascon in jshttp/proxy-addr#69
• fix: typo by @​UlisesGascon in jshttp/proxy-addr#71
• Release: 2.0.8 by @​UlisesGascon in jshttp/proxy-addr#70

New Contributors

• @​carpasse made their first contribution in jshttp/proxy-addr#27
• @​step-security-bot made their first contribution in jshttp/proxy-addr#29
• @​dependabot[bot] made their first contribution in jshttp/proxy-addr#30
• @​Phillip9587 made their first contribution in jshttp/proxy-addr#40
• @​schiwekM made their first contribution in jshttp/proxy-addr#61
• @​sheplu made their first contribution in jshttp/proxy-addr#54

Full Changelog: jshttp/proxy-addr@v2.0.7...v2.0.8

Changelog

Sourced from proxy-addr's changelog.

2.0.8

• Fix CVE-2026-90711 (GHSA-jqcg-44mw-7w3h)

Commits

• a11ad82 2.0.8 (#70)
• 780911d fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix
• 92e103e fix(ci): use publised as release trigger event (#71)
• 3e5ac75 ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (#69)
• 4b9db81 chore(ci): npm-publish via workflows (#54)
• 655e895 build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (#39)
• 50ce4d0 build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#45)
• 0fd347f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#63)
• 6a517fa build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (#64)
• 0d45e2a Fix "arugment" typo in README (#61)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for proxy-addr since your current version.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: b7ebb298-0f21-4d71-a842-172334fa4674

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.