[Doppins] Upgrade dependency express to 4.16.2

[doppins-bot]

Hi!

A new version was just released of express, so Doppins
has upgraded your project's dependency ranges.

Make sure that it doesn't break anything, and happy merging!

---

Upgraded express from 3.2.6 to 4.15.3

Changelog:

Version 4.15.3

• Fix error when res.set cannot add charset to Content-Type
• deps: [email protected]
  • Fix DEBUG_MAX_ARRAY_LENGTH
  • deps: [email protected]
• deps: finalhandler@~1.0.3
  • Fix missing </html> in HTML document
  • deps: [email protected]
• deps: proxy-addr@~1.1.4
  • deps: [email protected]
• deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
  • deps: [email protected]
• deps: type-is@~1.6.15
  • deps: mime-types@~2.1.15
• deps: vary@~1.1.1
  • perf: hoist regular expression

Version 4.15.2

• deps: [email protected]
  • Fix regression parsing keys starting with [

Version 4.15.1

• deps: [email protected]
  • Fix issue when Date.parse does not return NaN on invalid date
  • Fix strict violation in broken environments
• deps: [email protected]
  • Fix issue when Date.parse does not return NaN on invalid date
  • deps: [email protected]

Version 5.0.0-alpha.5

This is the fifth Express 5.0 alpha release, based off 4.15.2 and includes
changes from 5.0.0-alpha.4.

Version 5.0.0-alpha.4

This is the fourth Express 5.0 alpha release, based off 4.15.0 and includes
changes from 5.0.0-alpha.3.

• remove:
  • Remove Express 3.x middleware error stubs
• deps: router@~1.3.0
  • Add next("router") to exit from router
  • Fix case where router.use skipped requests routes did not
  • Skip routing when req.url is not set
  • Use %o in path debug to tell types apart
  • deps: [email protected]
  • deps: [email protected]
  • perf: add fast match path for * route

Version 4.15.0

• Add debug message when loading view engine
• Add next("router") to exit from router
• Fix case where router.use skipped requests routes did not
• Remove usage of res._headers private field
  • Improves compatibility with Node.js 8 nightly
• Skip routing when req.url is not set
• Use %o in path debug to tell types apart
• Use Object.create to setup request & response prototypes
• Use setprototypeof module to replace __proto__ setting
• Use statuses instead of http module for status messages
• deps: [email protected]
  • Allow colors in workers
  • Deprecated DEBUG_FD environment variable set to 3 or higher
  • Fix error when running under React Native
  • Use same color for same namespace
  • deps: [email protected]
• deps: etag@~1.8.0
  • Use SHA1 instead of MD5 for ETag hashing
  • Works with FIPS 140-2 OpenSSL configuration
• deps: finalhandler@~1.0.0
  • Fix exception when err cannot be converted to a string
  • Fully URL-encode the pathname in the 404
  • Only include the pathname in the 404 message
  • Send complete HTML document
  • Set Content-Security-Policy: default-src 'self' header
  • deps: [email protected]
• deps: [email protected]
  • Fix false detection of no-cache request directive
  • Fix incorrect result when If-None-Match has both * and ETags
  • Fix weak ETag matching to match spec
  • perf: delay reading header values until needed
  • perf: enable strict mode
  • perf: hoist regular expressions
  • perf: remove duplicate conditional
  • perf: remove unnecessary boolean coercions
  • perf: skip checking modified time if ETag check failed
  • perf: skip parsing If-None-Match when no ETag header
  • perf: use Date.parse instead of new Date
• deps: [email protected]
  • Fix array parsing from skipping empty values
  • Fix compacting nested arrays
• deps: [email protected]
  • Fix false detection of no-cache request directive
  • Fix incorrect result when If-None-Match has both * and ETags
  • Fix weak ETag matching to match spec
  • Remove usage of res._headers private field
  • Support If-Match and If-Unmodified-Since headers
  • Use res.getHeaderNames() when available
  • Use res.headersSent when available
  • deps: [email protected]
  • deps: etag@~1.8.0
  • deps: [email protected]
  • deps: http-errors@~1.6.1
• deps: [email protected]
  • Fix false detection of no-cache request directive
  • Fix incorrect result when If-None-Match has both * and ETags
  • Fix weak ETag matching to match spec
  • Remove usage of res._headers private field
  • Send complete HTML document in redirect response
  • Set default CSP header in redirect response
  • Support If-Match and If-Unmodified-Since headers
  • Use res.getHeaderNames() when available
  • Use res.headersSent when available
  • deps: [email protected]
• perf: add fast match path for * route
• perf: improve req.ips performance

Version 5.0.0-alpha.3

This is the third Express 5.0 alpha release, based off 4.14.1 and includes
changes from 5.0.0-alpha.2.

• remove:
  • res.json(status, obj) signature - use res.status(status).json(obj)
  • res.jsonp(status, obj) signature - use res.status(status).jsonp(obj)
  • res.vary() (no arguments) -- provide a field name as an argument
• deps: [email protected]
• deps: [email protected]
• deps: router@~1.1.5
  • deps: [email protected]
  • deps: methods@~1.1.2
  • deps: parseurl@~1.3.1
  • deps: [email protected]

Version 4.14.1

• deps: [email protected]
• deps: [email protected]
  • Fix exception when err.headers is not an object
  • deps: statuses@~1.3.1
  • perf: hoist regular expressions
  • perf: remove duplicate validation path
• deps: proxy-addr@~1.1.3
  • deps: [email protected]
• deps: [email protected]
  • deps: http-errors@~1.5.1
  • deps: [email protected]
  • deps: statuses@~1.3.1
• deps: serve-static@~1.11.2
  • deps: [email protected]
• deps: type-is@~1.6.14
  • deps: mime-types@~2.1.13

Version 4.14.0

• Add acceptRanges option to res.sendFile/res.sendfile
• Add cacheControl option to res.sendFile/res.sendfile
• Add options argument to req.range
  • Includes the combine option
• Encode URL in res.location/res.redirect if not already encoded
• Fix some redirect handling in res.sendFile/res.sendfile
• Fix Windows absolute path check using forward slashes
• Improve error with invalid arguments to req.get()
• Improve performance for res.json/res.jsonp in most cases
• Improve Range header handling in res.sendFile/res.sendfile
• deps: accepts@~1.3.3
  • Fix including type extensions in parameters in Accept parsing
  • Fix parsing Accept parameters with quoted equals
  • Fix parsing Accept parameters with quoted semicolons
  • Many performance improvments
  • deps: mime-types@~2.1.11
  • deps: [email protected]
• deps: content-type@~1.0.2
  • perf: enable strict mode
• deps: [email protected]
  • Add sameSite option
  • Fix cookie Max-Age to never be a floating point number
  • Improve error message when encode is not a function
  • Improve error message when expires is not a Date
  • Throw better error for invalid argument to parse
  • Throw on invalid values provided to serialize
  • perf: enable strict mode
  • perf: hoist regular expression
  • perf: use for loop in parse
  • perf: use string concatination for serialization
• deps: [email protected]
  • Change invalid or non-numeric status code to 500
  • Overwrite status message to match set status code
  • Prefer err.statusCode if err.status is invalid
  • Set response headers from err.headers object
  • Use statuses instead of http module for status messages
• deps: proxy-addr@~1.1.2
  • Fix accepting various invalid netmasks
  • Fix IPv6-mapped IPv4 validation edge cases
  • IPv4 netmasks must be contingous
  • IPv6 addresses cannot be used as a netmask
  • deps: [email protected]
• deps: [email protected]
  • Add decoder option in parse function
• deps: range-parser@~1.2.0
  • Add combine option to combine overlapping ranges
  • Fix incorrectly returning -1 when there is at least one valid range
  • perf: remove internal function
• deps: [email protected]
  • Add acceptRanges option
  • Add cacheControl option
  • Attempt to combine multiple ranges into single range
  • Correctly inherit from Stream class
  • Fix Content-Range header in 416 responses when using start/end options
  • Fix Content-Range header missing from default 416 responses
  • Fix redirect error when path contains raw non-URL characters
  • Fix redirect when path starts with multiple forward slashes
  • Ignore non-byte Range headers
  • deps: http-errors@~1.5.0
  • deps: range-parser@~1.2.0
  • deps: statuses@~1.3.0
  • perf: remove argument reassignment
• deps: serve-static@~1.11.1
  • Add acceptRanges option
  • Add cacheControl option
  • Attempt to combine multiple ranges into single range
  • Fix redirect error when req.url contains raw non-URL characters
  • Ignore non-byte Range headers
  • Use status code 301 for redirects
  • deps: [email protected]
• deps: type-is@~1.6.13
  • Fix type error when given invalid type to match against
  • deps: mime-types@~2.1.11
• deps: vary@~1.1.0
  • Only accept valid field names in the field argument
• perf: use strict equality when possible

Version 4.13.4

• deps: [email protected]
  • perf: enable strict mode
• deps: [email protected]
  • Throw on invalid values provided to serialize
• deps: depd@~1.1.0
  • Support web browser loading
  • perf: enable strict mode
• deps: escape-html@~1.0.3
  • perf: enable strict mode
  • perf: optimize string replacement
  • perf: use faster string coercion
• deps: [email protected]
  • deps: escape-html@~1.0.3
• deps: [email protected]
  • perf: enable strict mode
• deps: methods@~1.1.2
  • perf: enable strict mode
• deps: parseurl@~1.3.1
  • perf: enable strict mode
• deps: proxy-addr@~1.0.10
  • deps: [email protected]
  • perf: enable strict mode
• deps: range-parser@~1.0.3
  • perf: enable strict mode
• deps: [email protected]
  • deps: depd@~1.1.0
  • deps: destroy@~1.0.4
  • deps: escape-html@~1.0.3
  • deps: range-parser@~1.0.3
• deps: serve-static@~1.10.2
  • deps: escape-html@~1.0.3
  • deps: parseurl@~1.3.0
  • deps: [email protected]

Version 4.13.3

• Fix infinite loop condition using mergeParams: true
• Fix inner numeric indices incorrectly altering parent req.params

Version 4.13.2

• deps: accepts@~1.2.12
  • deps: mime-types@~2.1.4
• deps: [email protected]
  • perf: enable strict mode
• deps: [email protected]
  • Fix regression with escaped round brackets and matching groups
• deps: type-is@~1.6.6
  • deps: mime-types@~2.1.4

Version 3.21.2

• deps: [email protected]
  • deps: body-parser@~1.13.3
  • deps: compression@~1.5.2
  • deps: errorhandler@~1.4.2
  • deps: method-override@~2.3.5
  • deps: serve-index@~1.7.2
  • deps: type-is@~1.6.6
  • deps: vhost@~3.0.1
• deps: vary@~1.0.1
  • Fix setting empty header from empty field
  • perf: enable strict mode
  • perf: remove argument reassignments

Version 5.0.0-alpha.2

This is the second Express 5.0 alpha release, based off 4.13.1 and includes
changes from 5.0.0-alpha.1.

• remove:
  • app.param(fn)
  • req.param() -- use req.params, req.body, or req.query instead
• change:
  • res.render callback is always async, even for sync view engines
  • The leading : character in name for app.param(name, fn) is no longer removed
  • Use router module for routing
  • Use path-is-absolute module for absolute path detection

Version 4.13.1

• deps: accepts@~1.2.10
  • deps: mime-types@~2.1.2
• deps: [email protected]
  • Fix dropping parameters like hasOwnProperty
  • Fix various parsing edge cases
• deps: type-is@~1.6.4
  • deps: mime-types@~2.1.2
  • perf: enable strict mode
  • perf: remove argument reassignment

Version 3.21.1

• deps: basic-auth@~1.0.3
• deps: [email protected]
  • deps: body-parser@~1.13.2
  • deps: compression@~1.5.1
  • deps: errorhandler@~1.4.1
  • deps: morgan@~1.6.1
  • deps: [email protected]
  • deps: [email protected]
  • deps: serve-index@~1.7.1
  • deps: type-is@~1.6.4

Version 4.13.0

• Add settings to debug output
• Fix res.format error when only default provided
• Fix issue where next('route') in app.param would incorrectly skip values
• Fix hiding platform issues with decodeURIComponent
  • Only URIErrors are a 400
• Fix using * before params in routes
• Fix using capture groups before params in routes
• Simplify res.cookie to call res.append
• Use array-flatten module for flattening arrays
• deps: accepts@~1.2.9
  • deps: mime-types@~2.1.1
  • perf: avoid argument reassignment & argument slice
  • perf: avoid negotiator recursive construction
  • perf: enable strict mode
  • perf: remove unnecessary bitwise operator
• deps: [email protected]
  • perf: deduce the scope of try-catch deopt
  • perf: remove argument reassignments
• deps: [email protected]
• deps: etag@~1.7.0
  • Always include entity length in ETags for hash length extensions
  • Generate non-Stats ETags using MD5 only (no longer CRC32)
  • Improve stat performance by removing hashing
  • Improve support for JXcore
  • Remove base64 padding in ETags to shorten
  • Support "fake" stats objects in environments without fs
  • Use MD5 instead of MD4 in weak ETags over 1KB
• deps: [email protected]
  • Fix a false-positive when unpiping in Node.js 0.8
  • Support statusCode property on Error objects
  • Use unpipe module for unpiping requests
  • deps: [email protected]
  • deps: on-finished@~2.3.0
  • perf: enable strict mode
  • perf: remove argument reassignment
• deps: [email protected]
  • Add weak ETag matching support
• deps: on-finished@~2.3.0
  • Add defined behavior for HTTP CONNECT requests
  • Add defined behavior for HTTP Upgrade requests
  • deps: [email protected]
• deps: [email protected]
• deps: [email protected]
  • Allow Node.js HTTP server to set Date response header
  • Fix incorrectly removing Content-Location on 304 response
  • Improve the default redirect response headers
  • Send appropriate headers on default error response
  • Use http-errors for standard emitted errors
  • Use statuses instead of http module for status messages
  • deps: [email protected]
  • deps: etag@~1.7.0
  • deps: [email protected]
  • deps: on-finished@~2.3.0
  • perf: enable strict mode
  • perf: remove unnecessary array allocations
• deps: serve-static@~1.10.0
  • Add fallthrough option
  • Fix reading options from options prototype
  • Improve the default redirect response headers
  • Malformed URLs now next() instead of 400
  • deps: [email protected]
  • deps: [email protected]
  • perf: enable strict mode
  • perf: remove argument reassignment
• deps: type-is@~1.6.3
  • deps: mime-types@~2.1.1
  • perf: reduce try block size
  • perf: remove bitwise operations
• perf: enable strict mode
• perf: isolate app.render try block
• perf: remove argument reassignments in application
• perf: remove argument reassignments in request prototype
• perf: remove argument reassignments in response prototype
• perf: remove argument reassignments in routing
• perf: remove argument reassignments in View
• perf: skip attempting to decode zero length string
• perf: use saved reference to http.STATUS_CODES

Version 3.21.0

• deps: [email protected]
  • perf: enable strict mode
  • perf: hoist regular expression
  • perf: parse with regular expressions
  • perf: remove argument reassignment
• deps: [email protected]
  • deps: body-parser@~1.13.1
  • deps: [email protected]
  • deps: compression@~1.5.0
  • deps: [email protected]
  • deps: cookie-parser@~1.3.5
  • deps: csurf@~1.8.3
  • deps: errorhandler@~1.4.0
  • deps: express-session@~1.11.3
  • deps: [email protected]
  • deps: [email protected]
  • deps: morgan@~1.6.0
  • deps: serve-favicon@~2.3.0
  • deps: serve-index@~1.7.0
  • deps: serve-static@~1.10.0
  • deps: type-is@~1.6.3
• deps: [email protected]
  • perf: deduce the scope of try-catch deopt
  • perf: remove argument reassignments
• deps: [email protected]
• deps: etag@~1.7.0
  • Always include entity length in ETags for hash length extensions
  • Generate non-Stats ETags using MD5 only (no longer CRC32)
  • Improve stat performance by removing hashing
  • Improve support for JXcore
  • Remove base64 padding in ETags to shorten
  • Support "fake" stats objects in environments without fs
  • Use MD5 instead of MD4 in weak ETags over 1KB
• deps: [email protected]
  • Add weak ETag matching support
• deps: [email protected]
  • Work in global strict mode
• deps: [email protected]
  • Allow Node.js HTTP server to set Date response header
  • Fix incorrectly removing Content-Location on 304 response
  • Improve the default redirect response headers
  • Send appropriate headers on default error response
  • Use http-errors for standard emitted errors
  • Use statuses instead of http module for status messages
  • deps: [email protected]
  • deps: etag@~1.7.0
  • deps: [email protected]
  • deps: on-finished@~2.3.0
  • perf: enable strict mode
  • perf: remove unnecessary array allocations

Version 4.12.4

• deps: accepts@~1.2.7
  • deps: mime-types@~2.0.11
  • deps: [email protected]
• deps: debug@~2.2.0
  • deps: [email protected]
• deps: depd@~1.0.1
• deps: etag@~1.6.0
  • Improve support for JXcore
  • Support "fake" stats objects in environments without fs
• deps: [email protected]
  • deps: debug@~2.2.0
  • deps: on-finished@~2.2.1
• deps: on-finished@~2.2.1
  • Fix isFinished(req) when data buffered
• deps: proxy-addr@~1.0.8
  • deps: [email protected]
• deps: [email protected]
  • Fix allowing parameters like constructor
• deps: [email protected]
  • deps: debug@~2.2.0
  • deps: depd@~1.0.1
  • deps: etag@~1.6.0
  • deps: [email protected]
  • deps: on-finished@~2.2.1
• deps: serve-static@~1.9.3
  • deps: [email protected]
• deps: type-is@~1.6.2
  • deps: mime-types@~2.0.11

Version 3.20.3

• deps: [email protected]
  • deps: body-parser@~1.12.4
  • deps: compression@~1.4.4
  • deps: connect-timeout@~1.6.2
  • deps: debug@~2.2.0
  • deps: depd@~1.0.1
  • deps: errorhandler@~1.3.6
  • deps: [email protected]
  • deps: method-override@~2.3.3
  • deps: morgan@~1.5.3
  • deps: [email protected]
  • deps: response-time@~2.3.1
  • deps: serve-favicon@~2.2.1
  • deps: serve-index@~1.6.4
  • deps: serve-static@~1.9.3
  • deps: type-is@~1.6.2
• deps: debug@~2.2.0
  • deps: [email protected]
• deps: depd@~1.0.1
• deps: proxy-addr@~1.0.8
  • deps: [email protected]
• deps: [email protected]
  • deps: debug@~2.2.0
  • deps: depd@~1.0.1
  • deps: etag@~1.6.0
  • deps: [email protected]
  • deps: on-finished@~2.2.1

Version 4.12.3

• deps: accepts@~1.2.5
  • deps: mime-types@~2.0.10
• deps: debug@~2.1.3
  • Fix high intensity foreground color for bold
  • deps: [email protected]
• deps: [email protected]
  • deps: debug@~2.1.3
• deps: proxy-addr@~1.0.7
  • deps: [email protected]
• deps: [email protected]
  • Fix error when parameter hasOwnProperty is present
• deps: [email protected]
  • Throw errors early for invalid extensions or index options
  • deps: debug@~2.1.3
• deps: serve-static@~1.9.2
  • deps: [email protected]
• deps: type-is@~1.6.1
  • deps: mime-types@~2.0.10

Version 3.20.2

• deps: [email protected]
  • deps: body-parser@~1.12.2
  • deps: compression@~1.4.3
  • deps: connect-timeout@~1.6.1
  • deps: debug@~2.1.3
  • deps: errorhandler@~1.3.5
  • deps: express-session@~1.10.4
  • deps: [email protected]
  • deps: method-override@~2.3.2
  • deps: morgan@~1.5.2
  • deps: [email protected]
  • deps: serve-index@~1.6.3
  • deps: serve-static@~1.9.2
  • deps: type-is@~1.6.1
• deps: debug@~2.1.3
  • Fix high intensity foreground color for bold
  • deps: [email protected]
• deps: [email protected]
• deps: proxy-addr@~1.0.7
  • deps: [email protected]
• deps: [email protected]
  • Throw errors early for invalid extensions or index options
  • deps: debug@~2.1.3

Version 4.12.2

• Fix regression where "Request aborted" is logged using res.sendFile

Version 4.12.1

• Fix constructing application with non-configurable prototype properties
• Fix ECONNRESET errors from res.sendFile usage
• Fix req.host when using "trust proxy" hops count
• Fix req.protocol/req.secure when using "trust proxy" hops count
• Fix wrong code on aborted connections from res.sendFile
• deps: [email protected]

Version 3.20.1

• Fix req.host when using "trust proxy" hops count
• Fix req.protocol/req.secure when using "trust proxy" hops count

Version 4.12.0

• Fix "trust proxy" setting to inherit when app is mounted
• Generate ETags for all request responses
  • No longer restricted to only responses for GET and HEAD requests
• Use content-type to parse Content-Type headers
• deps: accepts@~1.2.4
  • Fix preference sorting to be stable for long acceptable lists
  • deps: mime-types@~2.0.9
  • deps: [email protected]
• deps: [email protected]
• deps: [email protected]
  • Always read the stat size from the file
  • Fix mutating passed-in options
  • deps: [email protected]
• deps: serve-static@~1.9.1
  • deps: [email protected]
• deps: type-is@~1.6.0
  • fix argument reassignment
  • fix false-positives in hasBody Transfer-Encoding check
  • support wildcard for both type and subtype (*/*)
  • deps: mime-types@~2.0.9

Version 3.20.0

• Fix "trust proxy" setting to inherit when app is mounted
• Generate ETags for all request responses
  • No longer restricted to only responses for GET and HEAD requests
• Use content-type to parse Content-Type headers
• deps: [email protected]
  • Use content-type to parse Content-Type headers
  • deps: body-parser@~1.12.0
  • deps: compression@~1.4.1
  • deps: connect-timeout@~1.6.0
  • deps: cookie-parser@~1.3.4
  • deps: [email protected]
  • deps: csurf@~1.7.0
  • deps: errorhandler@~1.3.4
  • deps: express-session@~1.10.3
  • deps: http-errors@~1.3.1
  • deps: response-time@~2.3.0
  • deps: serve-index@~1.6.2
  • deps: serve-static@~1.9.1
  • deps: type-is@~1.6.0
• deps: [email protected]
• deps: [email protected]
  • Always read the stat size from the file
  • Fix mutating passed-in options
  • deps: [email protected]

Version 4.11.2

• Fix res.redirect double-calling res.end for HEAD requests
• deps: accepts@~1.2.3
  • deps: mime-types@~2.0.8
• deps: proxy-addr@~1.0.6
  • deps: [email protected]
• deps: type-is@~1.5.6
  • deps: mime-types@~2.0.8

Version 3.19.2

• deps: [email protected]
  • deps: compression@~1.3.1
  • deps: csurf@~1.6.6
  • deps: errorhandler@~1.3.3
  • deps: express-session@~1.10.2
  • deps: serve-index@~1.6.1
  • deps: type-is@~1.5.6
• deps: proxy-addr@~1.0.6
  • deps: [email protected]

Version 4.11.1

• deps: [email protected]
  • Fix root path disclosure
• deps: serve-static@~1.8.1
  • Fix redirect loop in Node.js 0.11.14
  • Fix root path disclosure
  • deps: [email protected]

Version 3.19.1

• deps: [email protected]
  • deps: body-parser@~1.10.2
  • deps: serve-static@~1.8.1
• deps: [email protected]
  • Fix root path disclosure

Version 4.11.0

• Add res.append(field, val) to append headers
• Deprecate leading : in name for app.param(name, fn)
• Deprecate req.param() -- use req.params, req.body, or req.query instead
• Deprecate app.param(fn)
• Fix OPTIONS responses to include the HEAD method properly
• Fix res.sendFile not always detecting aborted connection
• Match routes iteratively to prevent stack overflows
• deps: accepts@~1.2.2
  • deps: mime-types@~2.0.7
  • deps: [email protected]
• deps: [email protected]
  • deps: debug@~2.1.1
  • deps: etag@~1.5.1
  • deps: [email protected]
  • deps: on-finished@~2.2.0
• deps: serve-static@~1.8.0
  • deps: [email protected]

Version 4.10.8

• Fix crash from error within OPTIONS response handler
• deps: proxy-addr@~1.0.5
  • deps: [email protected]

Version 3.19.0

• Fix OPTIONS responses to include the HEAD method property
• Use readline for prompt in express(1)
• deps: [email protected]
• deps: [email protected]
  • deps: body-parser@~1.10.1
  • deps: compression@~1.3.0
  • deps: connect-timeout@~1.5.0
  • deps: csurf@~1.6.4
  • deps: debug@~2.1.1
  • deps: errorhandler@~1.3.2
  • deps: express-session@~1.10.1
  • deps: [email protected]
  • deps: method-override@~2.3.1
  • deps: morgan@~1.5.1
  • deps: serve-favicon@~2.2.0
  • deps: serve-index@~1.6.0
  • deps: serve-static@~1.8.0
  • deps: type-is@~1.5.5
• deps: debug@~2.1.1
• deps: methods@~1.1.1
• deps: proxy-addr@~1.0.5
  • deps: [email protected]
• deps: [email protected]
  • deps: debug@~2.1.1
  • deps: etag@~1.5.1
  • deps: [email protected]
  • deps: on-finished@~2.2.0

Version 4.10.7

• Fix Allow header for OPTIONS to not contain duplicate methods
• Fix incorrect "Request aborted" for res.sendFile when HEAD or 304
• deps: debug@~2.1.1
• deps: [email protected]
  • deps: debug@~2.1.1
  • deps: on-finished@~2.2.0
• deps: methods@~1.1.1
• deps: on-finished@~2.2.0
• deps: serve-static@~1.7.2
  • Fix potential open redirect when mounted at root
• deps: type-is@~1.5.5
  • deps: mime-types@~2.0.7

Version 4.10.6

• Fix exception in req.fresh/req.stale without response headers

Version 3.18.6

• Fix exception in req.fresh/req.stale without response headers

Version 3.18.5

• deps: [email protected]
  • deps: compression@~1.2.2
  • deps: express-session@~1.9.3
  • deps: http-errors@~1.2.8
  • deps: serve-index@~1.5.3
  • deps: type-is@~1.5.4

Version 4.10.5

• Fix res.send double-calling res.end for HEAD requests
• deps: accepts@~1.1.4
  • deps: mime-types@~2.0.4
• deps: type-is@~1.5.4
  • deps: mime-types@~2.0.4

Version 4.10.4

• Fix res.sendfile logging standard write errors

Version 4.10.3

• Fix res.sendFile logging standard write errors
• deps: etag@~1.5.1
• deps: proxy-addr@~1.0.4
  • deps: [email protected]
• deps: [email protected]
  • Fix arrayLimit behavior

Version 3.18.4

• deps: [email protected]
  • deps: body-parser@~1.9.3
  • deps: compression@~1.2.1
  • deps: errorhandler@~1.2.3
  • deps: express-session@~1.9.2
  • deps: [email protected]
  • deps: serve-favicon@~2.1.7
  • deps: serve-static@~1.5.1
  • deps: type-is@~1.5.3
• deps: etag@~1.5.1
• deps: proxy-addr@~1.0.4
  • deps: [email protected]

Version 4.10.2

• Correctly invoke async router callback asynchronously
• deps: accepts@~1.1.3
  • deps: mime-types@~2.0.3
• deps: type-is@~1.5.3
  • deps: mime-types@~2.0.3

Version 3.18.3

• deps: [email protected]
  • Correctly invoke async callback asynchronously
  • deps: csurf@~1.6.3

Version 5.0.0-alpha.1

• remove:
  • app.del - use app.delete
  • req.acceptsCharset - use req.acceptsCharsets
  • req.acceptsEncoding - use req.acceptsEncodings
  • req.acceptsLanguage - use req.acceptsLanguages
  • res.json(obj, status) signature - use res.json(status, obj)
  • res.jsonp(obj, status) signature - use res.jsonp(status, obj)
  • res.send(body, status) signature - use res.send(status, body)
  • res.send(status) signature - use res.sendStatus(status)
  • res.sendfile - use res.sendFile instead
  • express.query middleware
• change:
  • req.host now returns host (hostname:port) - use req.hostname for only hostname
  • req.query is now a getter instead of a plain property
• add:
  • app.router is a reference to the base router

Version 4.10.1

• Fix handling of URLs containing :// in the path
• deps: [email protected]
  • Fix parsing of mixed objects and values

Version 3.18.2

• deps: [email protected]
  • Fix handling of URLs containing :// in the path
  • deps: body-parser@~1.9.2
  • deps: [email protected]

Version 4.10.0

• Add support for app.set('views', array)
  • Views are looked up in sequence in array of directories
• Fix res.send(status) to mention res.sendStatus(status)
• Fix handling of invalid empty URLs
• Use content-disposition module for res.attachment/res.download
  • Sends standards-compliant Content-Disposition header
  • Full Unicode support
• Use path.resolve in view lookup
• deps: debug@~2.1.0
  • Implement DEBUG_FD env variable support
• deps: depd@~1.0.0
• deps: etag@~1.5.0
  • Improve string performance
  • Slightly improve speed for weak ETags over 1KB
• deps: [email protected]
  • Terminate in progress response only on error
  • Use on-finished to determine request status
  • deps: debug@~2.1.0
  • deps: on-finished@~2.1.1
• deps: on-finished@~2.1.1
  • Fix handling of pipelined requests
• deps: [email protected]
  • Fix parsing of mixed implicit and explicit arrays
• deps: [email protected]
  • deps: debug@~2.1.0
  • deps: depd@~1.0.0
  • deps: etag@~1.5.0
  • deps: on-finished@~2.1.1
• deps: serve-static@~1.7.1
  • deps: [email protected]

Version 3.18.1

• Fix internal utils.merge deprecation warnings
• deps: [email protected]
  • deps: body-parser@~1.9.1
  • deps: express-session@~1.9.1
  • deps: [email protected]
  • deps: morgan@~1.4.1
  • deps: [email protected]
  • deps: serve-static@~1.7.1
• deps: [email protected]
  • deps: on-finished@~2.1.1

Version 3.18.0

• Use content-disposition module for res.attachment/res.download
  • Sends standards-compliant Content-Disposition header
  • Full Unicode support
• Use etag module to generate ETag headers
• deps: [email protected]
  • Use http-errors module for creating errors
  • Use utils-merge module for merging objects
  • deps: body-parser@~1.9.0
  • deps: compression@~1.2.0
  • deps: connect-timeout@~1.4.0
  • deps: debug@~2.1.0
  • deps: depd@~1.0.0
  • deps: express-session@~1.9.0
  • deps: [email protected]
  • deps: method-override@~2.3.0
  • deps: morgan@~1.4.0
  • deps: response-time@~2.2.0
  • deps: serve-favicon@~2.1.6
  • deps: serve-index@~1.5.0
  • deps: serve-static@~1.7.0
• deps: debug@~2.1.0
  • Implement DEBUG_FD env variable support
• deps: depd@~1.0.0
• deps: [email protected]
  • deps: debug@~2.1.0
  • deps: depd@~1.0.0
  • deps: etag@~1.5.0

Version 4.9.8

• Fix res.redirect body when redirect status specified
• deps: accepts@~1.1.2
  • Fix error when media type has invalid parameter
  • deps: [email protected]

Version 3.17.8

• deps: [email protected]
  • deps: compression@~1.1.2
  • deps: csurf@~1.6.2
  • deps: errorhandler@~1.2.2

Version 4.9.7

• Fix using same param name in array of paths

Version 4.9.6

• deps: accepts@~1.1.1
  • deps: mime-types@~2.0.2
  • deps: [email protected]
• deps: serve-static@~1.6.4
  • Fix redirect loop when index file serving disabled
• deps: type-is@~1.5.2
  • deps: mime-types@~2.0.2

Version 3.17.7

• deps: [email protected]
  • Fix accepting non-object arguments to logger
  • deps: serve-static@~1.6.4

Version 3.17.6

• deps: [email protected]
  • deps: morgan@~1.3.2
  • deps: type-is@~1.5.2

Version 4.9.5

• deps: etag@~1.4.0
• deps: proxy-addr@~1.0.3
  • Use forwarded npm module
• deps: [email protected]
  • deps: etag@~1.4.0
• deps: serve-static@~1.6.3
  • deps: [email protected]

Version 3.17.5

• deps: [email protected]
  • deps: body-parser@~1.8.4
  • deps: serve-favicon@~2.1.5
  • deps: serve-static@~1.6.3
• deps: proxy-addr@~1.0.3
  • Use forwarded npm module
• deps: [email protected]
  • deps: etag@~1.4.0

Version 4.9.4

• deps: [email protected]
  • Fix issue with object keys starting with numbers truncated

Version 3.17.4

• deps: [email protected]
  • deps: body-parser@~1.8.3
  • deps: [email protected]

Version 4.9.3

• deps: proxy-addr@~1.0.2
  • Fix a global leak when multiple subnets are trusted
  • deps: [email protected]

Version 3.17.3

• deps: proxy-addr@~1.0.2
  • Fix a global leak when multiple subnets are trusted
  • deps: [email protected]

Version 4.9.2

• Fix regression for empty string path in app.use
• Fix router.use to accept array of middleware without path
• Improve error message for bad app.use arguments

Version 4.9.1

• Fix app.use to accept array of middleware without path
• deps: [email protected]
• deps: etag@~1.3.1
• deps: [email protected]
  • deps: [email protected]
  • deps: etag@~1.3.1
  • deps: range-parser@~1.0.2
• deps: serve-static@~1.6.2
  • deps: [email protected]

Version 3.17.2

• Use crc instead of buffer-crc32 for speed
• deps: [email protected]
  • deps: body-parser@~1.8.2
  • deps: [email protected]
  • deps: express-session@~1.8.2
  • deps: morgan@~1.3.1
  • deps: serve-favicon@~2.1.3
  • deps: serve-static@~1.6.2
• deps: [email protected]
• deps: [email protected]
  • deps: [email protected]
  • deps: etag@~1.3.1
  • deps: range-parser@~1.0.2

Version 4.9.0

• Add res.sendStatus
• Invoke callback for sendfile when client aborts
  • Applies to res.sendFile, res.sendfile, and res.download
  • err will be populated with request aborted error
• Support IP address host in req.subdomains
• Use etag to generate ETag headers
• deps: accepts@~1.1.0
  • update mime-types
• deps: [email protected]
• deps: debug@~2.0.0
• deps: [email protected]
  • Set X-Content-Type-Options: nosniff header
  • deps: debug@~2.0.0
• deps: [email protected]
• deps: [email protected]
  • Throw error when parameter format invalid on parse
• deps: [email protected]
  • Fix issue where first empty value in array is discarded
• deps: range-parser@~1.0.2
• deps: [email protected]
  • Add lastModified option
  • Use etag to generate ETag header
  • deps: debug@~2.0.0
  • deps: [email protected]
• deps: serve-static@~1.6.1
  • Add lastModified option
  • deps: [email protected]
• deps: type-is@~1.5.1
  • fix hasbody to be true for content-length: 0
  • deps: [email protected]
  • deps: mime-types@~2.0.1
• deps: vary@~1.0.0
  • Accept valid Vary header string as field

Version 3.17.1

• Fix error in req.subdomains on empty host

Version 3.17.0

• Support IP address host in req.subdomains
• deps: [email protected]
  • deps: body-parser@~1.8.1
  • deps: compression@~1.1.0
  • deps: connect-timeout@~1.3.0
  • deps: cookie-parser@~1.3.3
  • deps: [email protected]
  • deps: csurf@~1.6.1
  • deps: debug@~2.0.0
  • deps: errorhandler@~1.2.0
  • deps: express-session@~1.8.1
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: method-override@~2.2.0
  • deps: morgan@~1.3.0
  • deps: [email protected]
  • deps: serve-favicon@~2.1.3
  • deps: serve-index@~1.2.1
  • deps: serve-static@~1.6.1
  • deps: type-is@~1.5.1
  • deps: vhost@~3.0.0
• deps: [email protected]
• deps: debug@~2.0.0
• deps: [email protected]
• deps: [email protected]
  • Throw error when parameter format invalid on parse
• deps: range-parser@~1.0.2
• deps: [email protected]
  • Add lastModified option
  • Use etag to generate ETag header
  • deps: debug@~2.0.0
  • deps: [email protected]
• deps: vary@~1.0.0
  • Accept valid Vary header string as field

Version 4.8.8

• deps: [email protected]
  • Fix a path traversal issue when using root
  • Fix malicious path detection for empty string path
• deps: serve-static@~1.5.4
  • deps: [email protected]

Version 3.16.10

• deps: [email protected]
  • deps: serve-static@~1.5.4
• deps: [email protected]
  • Fix a path traversal issue when using root
  • Fix malicious path detection for empty string path

Version 4.8.7

• deps: [email protected]
  • Remove unnecessary cloning

Version 3.16.9

• deps: [email protected]
  • deps: body-parser@~1.6.7
  • deps: [email protected]

Version 4.8.6

• deps: [email protected]
  • Array parsing fix
  • Performance improvements

Version 3.16.8

• deps: [email protected]
  • deps: body-parser@~1.6.6
  • deps: csurf@~1.4.1
  • deps: [email protected]

Version 4.8.5

• deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
• deps: serve-static@~1.5.3
  • deps: [email protected]

Version 4.8.4

• deps: [email protected]
• deps: [email protected]
  • Work around fd leak in Node.js 0.10 for fs.ReadStream
• deps: serve-static@~1.5.2
  • deps: [email protected]

Version 3.16.7

• deps: [email protected]
  • deps: body-parser@~1.6.5
  • deps: express-session@~1.7.6
  • deps: morgan@~1.2.3
  • deps: serve-static@~1.5.3
• deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]

Version 3.16.6

• deps: [email protected]
  • deps: body-parser@~1.6.4
  • deps: [email protected]
  • deps: serve-static@~1.5.2
• deps: [email protected]
  • Work around fd leak in Node.js 0.10 for fs.ReadStream

Version 3.16.5

• deps: [email protected]
  • Fix backwards compatibility in logger

Version 4.8.3

• deps: parseurl@~1.3.0
• deps: [email protected]
• deps: serve-static@~1.5.1
  • Fix parsing of weird req.originalUrl values
  • deps: parseurl@~1.3.0
  • deps: [email protected]

Version 3.16.4

• Fix original URL parsing in res.location
• deps: [email protected]
  • Fix query middleware breaking with argument
  • deps: body-parser@~1.6.3
  • deps: compression@~1.0.11
  • deps: connect-timeout@~1.2.2
  • deps: express-session@~1.7.5
  • deps: method-override@~2.1.3
  • deps: on-headers@~1.0.0
  • deps: parseurl@~1.3.0
  • deps: [email protected]
  • deps: response-time@~2.0.1
  • deps: serve-index@~1.1.6
  • deps: serve-static@~1.5.1
• deps: parseurl@~1.3.0

Version 3.16.3

• deps: [email protected]
  • deps: [email protected]

Version 4.8.2

• deps: [email protected]
  • Fix parsing array of objects

Version 3.16.2

• deps: [email protected]
  • deps: body-parser@~1.6.2
  • deps: [email protected]

Version 4.8.1

• fix incorrect deprecation warnings on res.download
• deps: [email protected]
  • Accept urlencoded square brackets
  • Accept empty values in implicit array notation

Version 3.16.1

• deps: [email protected]
  • deps: body-parser@~1.6.1
  • deps: [email protected]

Version 4.8.0

• add res.sendFile
  • accepts a file system path instead of a URL
  • requires an absolute path or root option specified
• deprecate res.sendfile -- use res.sendFile instead
• support mounted app as any argument to app.use()
• deps: [email protected]
  • Complete rewrite
  • Limits array length to 20
  • Limits object depth to 5
  • Limits parameters to 1,000
• deps: [email protected]
  • Add extensions option
• deps: serve-static@~1.5.0
  • Add extensions option
  • deps: [email protected]

Version 3.16.0

• deps: [email protected]
  • deps: body-parser@~1.6.0
  • deps: compression@~1.0.10
  • deps: csurf@~1.4.0
  • deps: express-session@~1.7.4
  • deps: [email protected]
  • deps: serve-static@~1.5.0
• deps: [email protected]
  • Add extensions option

Version 4.7.4

• fix res.sendfile regression for serving directory index files
• deps: [email protected]
  • Fix incorrect 403 on Windows and Node.js 0.11
  • Fix serving index files without root dir
• deps: serve-static@~1.4.4
  • deps: [email protected]

Version 3.15.3

• fix res.sendfile regression for serving directory index files
• deps: [email protected]
  • deps: serve-index@~1.1.5
  • deps: serve-static@~1.4.4
• deps: [email protected]
  • Fix incorrect 403 on Windows and Node.js 0.11
  • Fix serving index files without root dir

Version 4.7.3

• deps: [email protected]
  • Fix incorrect 403 on Windows and Node.js 0.11
• deps: serve-static@~1.4.3
  • Fix incorrect 403 on Windows and Node.js 0.11
  • deps: [email protected]

Version 4.7.2

• deps: [email protected]
  • Work-around v8 generating empty stack traces
• deps: [email protected]
  • deps: [email protected]
• deps: serve-static@~1.4.2

Version 3.15.2

• deps: [email protected]
  • deps: body-parser@~1.5.2
  • deps: [email protected]
  • deps: express-session@~1.7.2
  • deps: morgan@~1.2.2
  • deps: serve-static@~1.4.2
• deps: [email protected]
  • Work-around v8 generating empty stack traces
• deps: [email protected]
  • deps: [email protected]

Version 4.7.1

• deps: [email protected]
  • Fix exception when global Error.stackTraceLimit is too low
• deps: [email protected]
  • deps: [email protected]
• deps: serve-static@~1.4.1

Version 3.15.1

• deps: [email protected]
  • deps: body-parser@~1.5.0
  • deps: [email protected]
  • deps: express-session@~1.7.1
  • deps: morgan@~1.2.1
  • deps: serve-index@~1.1.4
  • deps: serve-static@~1.4.1
• deps: [email protected]
  • Fix exception when global Error.stackTraceLimit is too low
• deps: [email protected]
  • deps: [email protected]

Version 4.7.0

• fix req.protocol for proxy-direct connections
• configurable query parser with app.set('query parser', parser)
  • app.set('query parser', 'extended') parse with "qs" module
  • app.set('query parser', 'simple') parse with "querystring" core module
  • app.set('query parser', false) disable query string parsing
  • app.set('query parser', true) enable simple parsing
• deprecate res.json(status, obj) -- use res.status(status).json(obj) instead
• deprecate res.jsonp(status, obj) -- use res.status(status).jsonp(obj) instead
• deprecate res.send(status, body) -- use res.status(status).send(body) instead
• deps: [email protected]
• deps: [email protected]
  • Add TRACE_DEPRECATION environment variable
  • Remove non-standard grey color from color output
  • Support --no-deprecation argument
  • Support --trace-deprecation argument
• deps: [email protected]
  • Respond after request fully read
  • deps: [email protected]
• deps: parseurl@~1.2.0
  • Cache URLs based on original value
  • Remove no-longer-needed URL mis-parse work-around
  • Simplify the "fast-path" RegExp
• deps: [email protected]
  • Add dotfiles option
  • Cap maxAge value to 1 year
  • deps: [email protected]
  • deps: [email protected]
• deps: serve-static@~1.4.0
  • deps: parseurl@~1.2.0
  • deps: [email protected]
• perf: prevent multiple Buffer creation in res.send

Version 3.15.0

• Fix req.protocol for proxy-direct connections
• Pass options from res.sendfile to send
• deps: [email protected]
  • deps: body-parser@~1.5.0
  • deps: compression@~1.0.9
  • deps: connect-timeout@~1.2.1
  • deps: [email protected]
  • deps: [email protected]
  • deps: express-session@~1.7.0
  • deps: [email protected]
  • deps: method-override@~2.1.2
  • deps: morgan@~1.2.0
  • deps: [email protected]
  • deps: parseurl@~1.2.0
  • deps: serve-static@~1.4.0
• deps: [email protected]
• deps: [email protected]
  • Add TRACE_DEPRECATION environment variable
  • Remove non-standard grey color from color output
  • Support --no-deprecation argument
  • Support --trace-deprecation argument
• deps: parseurl@~1.2.0
  • Cache URLs based on original value
  • Remove no-longer-needed URL mis-parse work-around
  • Simplify the "fast-path" RegExp
• deps: [email protected]
  • Add dotfiles option
  • Cap maxAge value to 1 year
  • deps: [email protected]
  • deps: [email protected]

Version 4.6.1

• fix subapp.mountpath regression for app.use(subapp)

Version 4.6.0

• accept multiple callbacks to app.use()
• add explicit "Rosetta Flash JSONP abuse" protection
  • previous versions are not vulnerable; this is just explicit protection
• catch errors in multiple req.param(name, fn) handlers
• deprecate res.redirect(url, status) -- use res.redirect(status, url) instead
• fix res.send(status, num) to send num as json (not error)
• remove unnecessary escaping when res.jsonp returns JSON response
• support non-string path in app.use(path, fn)
  • supports array of paths
  • supports RegExp
• router: fix optimization on router exit
• router: refactor location of try blocks
• router: speed up standard app.use(fn)
• deps: [email protected]
  • Add support for multiple wildcards in namespaces
• deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
  • add CONNECT
• deps: parseurl@~1.1.3
  • faster parsing of href-only URLs
• deps: [email protected]
• deps: [email protected]
  • deps: [email protected]
• deps: serve-static@~1.3.2
  • deps: parseurl@~1.1.3
  • deps: [email protected]
• perf: fix arguments reassign deopt in some res methods

Version 3.14.0

• add explicit "Rosetta Flash JSONP abuse" protection
  • previous versions are not vulnerable; this is just explicit protection
• deprecate res.redirect(url, status) -- use res.redirect(status, url) instead
• fix res.send(status, num) to send num as json (not error)
• remove unnecessary escaping when res.jsonp returns JSON response
• deps: [email protected]
  • support empty password
  • support empty username
• deps: [email protected]
  • deps: [email protected]
  • deps: express-session@~1.6.4
  • deps: method-override@~2.1.0
  • deps: parseurl@~1.1.3
  • deps: serve-static@~1.3.1
  • deps: [email protected]
    • Add support for multiple wildcards in namespaces
  • deps: [email protected]
    • add CONNECT
  • deps: parseurl@~1.1.3
    • faster parsing of href-only URLs

Version 4.5.1

• fix routing regression when altering req.method

Version 4.5.0

• add deprecation message to non-plural req.accepts*
• add deprecation message to res.send(body, status)
• add deprecation message to res.vary()
• add headers option to res.sendfile
  • use to set headers on successful file transfer
• add mergeParams option to Router
  • merges req.params from parent routes
• add req.hostname -- correct name for what req.host returns
• deprecate things with depd module
• deprecate req.host -- use req.hostname instead
• fix behavior when handling request without routes
• fix handling when route.all is only route
• invoke router.param() only when route matches
• restore req.params after invoking router
• use finalhandler for final response handling
• use media-typer to alter content-type charset
• deps: accepts@~1.0.7
• deps: [email protected]
  • Accept string for maxage (converted by ms)
  • Include link in default redirect response
• deps: serve-static@~1.3.0
  • Accept string for maxAge (converted by ms)
  • Add setHeaders option
  • Include HTML link in redirect response
  • deps: [email protected]
• deps: type-is@~1.3.2

Version 3.13.0

• add deprecation message to app.configure
• add deprecation message to req.auth
• use basic-auth to parse Authorization header
• deps: [email protected]
  • deps: csurf@~1.3.0
  • deps: express-session@~1.6.1
  • deps: [email protected]
  • deps: serve-static@~1.3.0
• deps: [email protected]
  • Accept string for maxage (converted by ms)
  • Include link in default redirect response

Version 4.4.5

• deps: [email protected]
  • fix for timing attacks

Version 3.12.1

• deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: express-session@~1.5.2
  • deps: type-is@~1.3.2
• deps: [email protected]
  • fix for timing attacks

Version 3.12.0

• use media-typer to alter content-type charset
• deps: [email protected]
  • deprecate connect(middleware) -- use app.use(middleware) instead
  • deprecate connect.createServer() -- use connect() instead
  • fix res.setHeader() patch to work with with get -> append -> set pattern
  • deps: compression@~1.0.8
  • deps: errorhandler@~1.1.1
  • deps: express-session@~1.5.0
  • deps: serve-index@~1.1.3

Version 4.4.4

• fix res.attachment Unicode filenames in Safari
• fix "trim prefix" debug message in express:router
• deps: accepts@~1.0.5
• deps: [email protected]

Version 3.11.0

• deprecate things with depd module
• deps: [email protected]
• deps: [email protected]
  • deprecate verify option to json -- use body-parser module directly
  • deprecate verify option to urlencoded -- use body-parser module directly
  • deprecate things with depd module
  • use finalhandler for final response handling
  • use media-typer to parse content-type for charset
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]

Version 4.4.3

• fix persistence of modified req.params[name] from app.param()
• deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
• deps: [email protected]
  • Do not throw un-catchable error on file open race condition
  • Use escape-html for HTML escaping
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
  • Do not throw un-catchable error on file open race condition
  • deps: [email protected]

Version 3.10.5

• deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
• deps: [email protected]
  • Do not throw un-catchable error on file open race condition
  • Use escape-html for HTML escaping
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]

Version 4.4.2

• fix catching errors from top-level handlers
• use vary module for res.vary
• deps: [email protected]
• deps: [email protected]
• deps: [email protected]
  • fix "event emitter leak" warnings
  • deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
  • fix "event emitter leak" warnings
  • deps: [email protected]
• deps: [email protected]

Version 3.10.4

• deps: [email protected]
  • fix "event emitter leak" warnings
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
• deps: [email protected]
  • fix "event emitter leak" warnings
  • deps: [email protected]
  • deps: [email protected]

Version 3.10.3

• use vary module for res.vary
• deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
• deps: [email protected]

Version 3.10.2

• deps: [email protected]
  • deps: [email protected]

Version 3.10.1

• deps: [email protected]
  • deps: [email protected]
• deps: [email protected]

Version 4.4.1

• deps: [email protected]
• deps: [email protected]
  • Send max-age in Cache-Control in correct format
• deps: [email protected]
  • use escape-html for escaping
  • deps: [email protected]

Version 3.10.0

• deps: [email protected]
  • deprecate methodOverride() -- use method-override module directly
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
• deps: [email protected]
• deps: [email protected]
  • Send max-age in Cache-Control in correct format

Version 4.4.0

• custom etag control with app.set('etag', val)
  • app.set('etag', function(body, encoding){ return '"etag"' }) custom etag generation
  • app.set('etag', 'weak') weak tag
  • app.set('etag', 'strong') strong etag
  • app.set('etag', false) turn off
  • app.set('etag', true) standard etag
• mark res.send ETag as weak and reduce collisions
• update accepts to 1.0.2
  • Fix interpretation when header not in request
• update send to 0.4.0
  • Calculate ETag with md5 for reduced collisions
  • Ignore stream errors after request ends
  • deps: [email protected]
• update serve-static to 1.2.0
  • Calculate ETag with md5 for reduced collisions
  • Ignore stream errors after request ends
  • deps: [email protected]

Version 3.9.0

• custom etag control with app.set('etag', val)
  • app.set('etag', function(body, encoding){ return '"etag"' }) custom etag generation
  • app.set('etag', 'weak') weak tag
  • app.set('etag', 'strong') strong etag
  • app.set('etag', false) turn off
  • app.set('etag', true) standard etag
• Include ETag in HEAD requests
• mark res.send ETag as weak and reduce collisions
• update connect to 2.18.0
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
• update send to 0.4.0
  • Calculate ETag with md5 for reduced collisions
  • Ignore stream errors after request ends
  • deps: [email protected]

Version 4.3.2

• fix handling of errors from router.param() callbacks

Version 3.8.1

• update connect to 2.17.3
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]

Version 4.3.1

• revert "fix behavior of multiple app.VERB for the same path"
  • this caused a regression in the order of route execution

Version 4.3.0

• add req.baseUrl to access the path stripped from req.url in routes
• fix behavior of multiple app.VERB for the same path
• fix issue routing requests among sub routers
• invoke router.param() only when necessary instead of every match
• proper proxy trust with app.set('trust proxy', trust)
  • app.set('trust proxy', 1) trust first hop
  • app.set('trust proxy', 'loopback') trust loopback addresses
  • app.set('trust proxy', '10.0.0.1') trust single IP
  • app.set('trust proxy', '10.0.0.1/16') trust subnet
  • app.set('trust proxy', '10.0.0.1, 10.0.0.2') trust list
  • app.set('trust proxy', false) turn off
  • app.set('trust proxy', true) trust everything
• set proper charset in Content-Type for res.send
• update type-is to 1.2.0
  • support suffix matching

Version 3.8.0

• keep previous Content-Type for res.jsonp
• set proper charset in Content-Type for res.send
• update connect to 2.17.1
  • fix res.charset appending charset when content-type has one
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]

Version 3.7.0

• proper proxy trust with app.set('trust proxy', trust)
  • app.set('trust proxy', 1) trust first hop
  • app.set('trust proxy', 'loopback') trust loopback addresses
  • app.set('trust proxy', '10.0.0.1') trust single IP
  • app.set('trust proxy', '10.0.0.1/16') trust subnet
  • app.set('trust proxy', '10.0.0.1, 10.0.0.2') trust list
  • app.set('trust proxy', false) turn off
  • app.set('trust proxy', true) trust everything
• update connect to 2.16.2
  • deprecate res.headerSent -- use res.headersSent
  • deprecate res.on("header") -- use on-headers module instead
  • fix edge-case in res.appendHeader that would append in wrong order
  • json: use body-parser
  • urlencoded: use body-parser
  • dep: [email protected]
  • dep: [email protected]
  • dep: [email protected]
  • dep: [email protected]
  • dep: [email protected]

Version 4.2.0

• deprecate app.del() -- use app.delete() instead
• deprecate res.json(obj, status) -- use res.json(status, obj) instead
  • the edge-case res.json(status, num) requires res.status(status).json(num)
• deprecate res.jsonp(obj, status) -- use res.jsonp(status, obj) instead
  • the edge-case res.jsonp(status, num) requires res.status(status).jsonp(num)
• fix req.next when inside router instance
• include ETag header in HEAD requests
• keep previous Content-Type for res.jsonp
• support PURGE method
  • add app.purge
  • add router.purge
  • include PURGE in app.all
• update debug to 0.8.0
  • add enable() method
  • change from stderr to stdout
• update methods to 1.0.0
  • add PURGE

Version 3.6.0

• deprecate app.del() -- use app.delete() instead
• deprecate res.json(obj, status) -- use res.json(status, obj) instead
  • the edge-case res.json(status, num) requires res.status(status).json(num)
• deprecate res.jsonp(obj, status) -- use res.jsonp(status, obj) instead
  • the edge-case res.jsonp(status, num) requires res.status(status).jsonp(num)
• support PURGE method
  • add app.purge
  • add router.purge
  • include PURGE in app.all
• update connect to 2.15.0
  • Add res.appendHeader
  • Call error stack even when response has been sent
  • Patch res.headerSent to return Boolean
  • Patch res.headersSent for node.js 0.8
  • Prevent default 404 handler after response sent
  • dep: [email protected]
  • dep: [email protected]
  • dep: debug@^0.8.0
  • dep: [email protected]
  • dep: [email protected]
  • dep: [email protected]
  • dep: [email protected]
  • dep: [email protected]
• update debug to 0.8.0
  • add enable() method
  • change from stderr to stdout
• update methods to 1.0.0
  • add PURGE
• update mkdirp to 0.5.0

Version 4.1.2

• fix req.host for IPv6 literals
• fix res.jsonp error if callback param is object

Version 3.5.3

• fix req.host for IPv6 literals
• fix res.jsonp error if callback param is object

[doppins-bot]

An additional new version was just released of express, so we've added an
extra commit upgrading your range to 4.15.4.

Hope that's alright!
— Doppins

[doppins-bot]

An additional new version was just released of express, so we've added an
extra commit upgrading your range to 4.15.5.

Hope that's alright!
— Doppins

[doppins-bot]

An additional new version was just released of express, so we've added an
extra commit upgrading your range to 4.16.0.

Hope that's alright!
— Doppins

[doppins-bot]

An additional new version was just released of express, so we've added an
extra commit upgrading your range to 4.16.1.

Hope that's alright!
— Doppins

[doppins-bot]

An additional new version was just released of express, so we've added an
extra commit upgrading your range to 4.16.2.

Hope that's alright!
— Doppins