Sourced from express's releases.
4.19.2
What's Changed
Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2
4.19.1
What's Changed
- Fix ci after location patch by
@wesleytoddin expressjs/express#5552- fixed un-edited version in history.md for 4.19.0 by
@wesleytoddin expressjs/express#5556Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1
4.19.0
What's Changed
- fix typo in release date by
@UlisesGasconin expressjs/express#5527- docs: nominating
@wesleytoddto be project captian by@wesleytoddin expressjs/express#5511- docs: loosen TC activity rules by
@wesleytoddin expressjs/express#5510- Add note on how to update docs for new release by
@crandmckin expressjs/express#5541- Prevent open redirect allow list bypass due to encodeurl
- Release 4.19.0 by
@wesleytoddin expressjs/express#5551New Contributors
@crandmckmade their first contribution in expressjs/express#5541Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0
4.18.3
Main Changes
- Fix routing requests without method
- deps: body-parser@1.20.2
- Fix strict json error message on Node.js 19+
- deps: content-type@~1.0.5
- deps: raw-body@2.5.2
Other Changes
- Use https: protocol instead of deprecated git: protocol by
@vcsjonesin expressjs/express#5032- build: Node.js@16.18 and Node.js@18.12 by
@abenhamdinein expressjs/express#5034- ci: update actions/checkout to v3 by
@armujahidin expressjs/express#5027- test: remove unused function arguments in params by
@raksbishtin expressjs/express#5124- Remove unused originalIndex from acceptParams by
@raksbishtin expressjs/express#5119- Fixed typos by
@raksbishtin expressjs/express#5117- examples: remove unused params by
@raksbishtin expressjs/express#5113- fix: parameter str is not described in JSDoc by
@raksbishtin expressjs/express#5130- fix: typos in History.md by
@raksbishtin expressjs/express#5131- build : add Node.js@19.7 by
@abenhamdinein expressjs/express#5028- test: remove unused function arguments in params by
@raksbishtin expressjs/express#5137
... (truncated)
Sourced from express's changelog.
4.19.2 / 2024-03-25
- Improved fix for open redirect allow list bypass
4.19.1 / 2024-03-20
- Allow passing non-strings to res.location with new encoding handling checks
4.19.0 / 2024-03-20
- Prevent open redirect allow list bypass due to encodeurl
- deps: cookie@0.6.0
4.18.3 / 2024-02-29
- Fix routing requests without method
- deps: body-parser@1.20.2
- Fix strict json error message on Node.js 19+
- deps: content-type@~1.0.5
- deps: raw-body@2.5.2
- deps: cookie@0.6.0
- Add
partitionedoption4.18.2 / 2022-10-08
- Fix regression routing a large stack in a single route
- deps: body-parser@1.20.1
- deps: qs@6.11.0
- perf: remove unnecessary object clone
- deps: qs@6.11.0
4.18.1 / 2022-04-29
- Fix hanging on large stack of sync routes
4.18.0 / 2022-04-25
- Add "root" option to
res.download- Allow
optionswithoutfilenameinres.download- Deprecate string and non-integer arguments to
res.status- Fix behavior of
null/undefinedasmaxAgeinres.cookie- Fix handling very large stacks of sync middleware
- Ignore
Object.prototypevalues in settings throughapp.set/app.get
... (truncated)
04bc627
4.19.2da4d763
Improved fix for open redirect allow list bypass4f0f6cc
4.19.1a003cfa
Allow passing non-strings to res.location with new encoding handling
checks f...a1fa90f
fixed un-edited version in history.md for 4.19.011f2b1d
build: fix build due to inconsistent supertest behavior in older
versions084e365
4.19.00867302
Prevent open redirect allow list bypass due to encodeurl567c9c6
Add note on how to update docs for new release (#5541)69a4cf2
deps: cookie@0.6.0This version was pushed to npm by wesleytodd, a new releaser for express since your current version.