Sourced from express's releases.
4.19.2
What's Changed
Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2
4.19.1
What's Changed
- Fix ci after location patch by
@wesleytodd
in expressjs/express#5552- fixed un-edited version in history.md for 4.19.0 by
@wesleytodd
in expressjs/express#5556Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1
4.19.0
What's Changed
- fix typo in release date by
@UlisesGascon
in expressjs/express#5527- docs: nominating
@wesleytodd
to be project captian by@wesleytodd
in expressjs/express#5511- docs: loosen TC activity rules by
@wesleytodd
in expressjs/express#5510- Add note on how to update docs for new release by
@crandmck
in expressjs/express#5541- Prevent open redirect allow list bypass due to encodeurl
- Release 4.19.0 by
@wesleytodd
in expressjs/express#5551New Contributors
@crandmck
made their first contribution in expressjs/express#5541Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0
4.18.3
Main Changes
- Fix routing requests without method
- deps: body-parser@1.20.2
- Fix strict json error message on Node.js 19+
- deps: content-type@~1.0.5
- deps: raw-body@2.5.2
Other Changes
- Use https: protocol instead of deprecated git: protocol by
@vcsjones
in expressjs/express#5032- build: Node.js@16.18 and Node.js@18.12 by
@abenhamdine
in expressjs/express#5034- ci: update actions/checkout to v3 by
@armujahid
in expressjs/express#5027- test: remove unused function arguments in params by
@raksbisht
in expressjs/express#5124- Remove unused originalIndex from acceptParams by
@raksbisht
in expressjs/express#5119- Fixed typos by
@raksbisht
in expressjs/express#5117- examples: remove unused params by
@raksbisht
in expressjs/express#5113- fix: parameter str is not described in JSDoc by
@raksbisht
in expressjs/express#5130- fix: typos in History.md by
@raksbisht
in expressjs/express#5131- build : add Node.js@19.7 by
@abenhamdine
in expressjs/express#5028- test: remove unused function arguments in params by
@raksbisht
in expressjs/express#5137
... (truncated)
Sourced from express's changelog.
4.19.2 / 2024-03-25
- Improved fix for open redirect allow list bypass
4.19.1 / 2024-03-20
- Allow passing non-strings to res.location with new encoding handling checks
4.19.0 / 2024-03-20
- Prevent open redirect allow list bypass due to encodeurl
- deps: cookie@0.6.0
4.18.3 / 2024-02-29
- Fix routing requests without method
- deps: body-parser@1.20.2
- Fix strict json error message on Node.js 19+
- deps: content-type@~1.0.5
- deps: raw-body@2.5.2
- deps: cookie@0.6.0
- Add
partitioned
option4.18.2 / 2022-10-08
- Fix regression routing a large stack in a single route
- deps: body-parser@1.20.1
- deps: qs@6.11.0
- perf: remove unnecessary object clone
- deps: qs@6.11.0
4.18.1 / 2022-04-29
- Fix hanging on large stack of sync routes
4.18.0 / 2022-04-25
- Add "root" option to
res.download
- Allow
options
withoutfilename
inres.download
- Deprecate string and non-integer arguments to
res.status
- Fix behavior of
null
/undefined
asmaxAge
inres.cookie
- Fix handling very large stacks of sync middleware
- Ignore
Object.prototype
values in settings throughapp.set
/app.get
... (truncated)
04bc627
4.19.2da4d763
Improved fix for open redirect allow list bypass4f0f6cc
4.19.1a003cfa
Allow passing non-strings to res.location with new encoding handling
checks f...a1fa90f
fixed un-edited version in history.md for 4.19.011f2b1d
build: fix build due to inconsistent supertest behavior in older
versions084e365
4.19.00867302
Prevent open redirect allow list bypass due to encodeurl567c9c6
Add note on how to update docs for new release (#5541)69a4cf2
deps: cookie@0.6.0This version was pushed to npm by wesleytodd, a new releaser for express since your current version.