0.19.3

• Fixed bug which could cause CSS preprocessor to fail if there are subdirectories in your CSS folder.
• Various dependencies bumped.

0.19.2

• Breaking: clientViews no longer exports a function, instead exporting a JSON object.
• Breaking: clientViews will no longer minify templates by default.
• Fixed bug with clientViews exposeAll feature that would cause it to scoop up any system files that might be present in your views directories.
• Fixed bug with clientViews blocklist mistakenly defaulting to an object instead of an array which could cause crashes in some configurations.
• Fixed bug with CSS preprocessor that would cause it to scoop up any system files that might be present in your CSS directories.
• Various dependencies bumped.

0.19.1

• Added ability to configure helmet dependency.
• Fixed bug that caused frontend reload not to work.
• Fixed a bug in the Express env variable that would cause it to be incorrectly set at times.
• Updated some out of date into in the README.
• Removed some unnecessary code.
• Various dependencies bumped.

0.19.0

• Breaking: Production mode behavior changed significantly:
  • localhostOnly and alwaysHostPublic defaults were flipped to false and true respectively.
  • alwaysHostPublic was renamed to hostPublic.
  • The --host-public command line flag was removed, since it is no logner needed because hostPublic defaults to true now.
  • New command line flag added called production-proxy to let you opt-in to localhostOnly and alwaysHostPublic being set to true and false respectively as before.
• Various dependencies bumped.

0.18.3

• You can now use PHP as your templating engine in a Roosevelt app or any other Express application. PHP should be faster than any JS-based templating engine for complex templates since its parser is written in C rather than JS.
• Breaking: blacklist/whitelist params throughout the API have been renamed to blocklist/allowlist.
• README was copyedited to improve the clarity of the default behaviors of some of the API, remove outdated information, and other small improvements.
• The host-public warning was made more prominent so that production mode default behavior regarding statics is less confusing to people.
• CI improvements.
  • Breaking: Roosevelt is no longer tested on Node 10.x. We didn't do anything to explicitly break older Node versions, but use at your own risk.
• Various dependencies bumped.

0.18.2

• Added helmet middleware to improve security by default.
• Replaced body-parser middleware with native Express integration.
• Various dependencies bumped.

0.18.1

• Changed passphrase option from https.p12.passphrase to https.passphrase so it can be used for certAndKey configurations as well.
• CI improvements.
• Various dependencies bumped.

0.18.0

• Replaced the vnu-jar based HTML validator with express-html-validator 🎉.
  • Roosevelt no longer does any background process management as a result.
• Moved all developer facing dependencies to optionalDependencies.
  • They can be omitted from installion when using npm i --no-optional.
• Refactored frontend reload implementation.
• check-dependencies now only runs in dev mode.
• API changes:
  • Removed separateProcess from htmlValidator.
  • Removed port from htmlValidator.
  • Removed showWarnings from htmlValidator.
  • Added validatorConfig to htmlValidator which respresents a set of rules for the validator to check for.
    • Rules can also be set in a .htmlValidate.json placed in the app root.
  • Removed verbose from frontendReload.
    • These logs are now controlled by the general verbose logging param.
  • Removed ROOSEVELT_VALIDATOR environment variable.
  • Removed ROOSEVELT_AUTOKILLER environment variable.
  • Removed --attach-validator and -a cli flags.
  • Removed --background-validator and -b cli flags.
  • Removed --disable-validator-autokiller, --no-autokiller, and -n cli flags.
  • Removed --enable-validator-autokiller, --html-validator-autokiller, and -k cli flags.
• Removed dependencies:
  • execa
  • fkill
  • html-validator
  • prismjs
  • ps-node
  • tamper
  • vnu-jar
• Various dependencies bumped.

0.17.1

• Fixed a CSS bug where CSS files were still not being written due to a file existence check.
• Fixed a CSS bug where empty CSS files were being written because their LESS equivalent would never generate CSS in that particular file.
• Various dependencies bumped.

0.17.0

• Breaking: Replaced staticsSymlinksToPublic with symlinks.
• Breaking: Replaced routers param with a simplified routePrefix param which defines a subfolder to mount the app to.
• Breaking: Renamed multipart param to formidable.
• Added ability to configure Roosevelt via a rooseveltConfig.json config file placed in app root instead of from a rooseveltConfig object in package.json.
• Added router Express variable that opens up access to internally used router instance.
• Added routePrefix Express variable that exposes currently used routePrefix or an empty string if not used.
• Fixed bug where changes to CSS files were not being written to the output directory.
• Refactored internal fsr module.
• Updated internal usage of formidable API.
• Internal changes to stabilize the automated tests.
• Various dependencies bumped.