What's Changed
- 4.19.2 Staging by @wesleytodd in #5561
- remove duplicate location test for data uri by @wesleytodd in #5562
- feat: document beta releases expectations by @marco-ippolito in #5565
- Cut down on duplicated CI runs by @jonchurch in #5564
- Add a Threat Model by @UlisesGascon in #5526
- Assign captain of encodeurl by @blakeembrey in #5579
- Nominate jonchurch as repo captain for
http-errors,expressjs.com,morgan,cors,body-parserby @jonchurch in #5587 - docs: update Security.md by @inigomarquinez in #5590
- docs: update triage nomination policy by @UlisesGascon in #5600
- Add CodeQL (SAST) by @UlisesGascon in #5433
- docs: add UlisesGascon as triage initiative captain by @UlisesGascon in #5605
- Use object with null prototype for various app properties by @EvanHahn in #4861
- deps: encodeurl@~2.0.0 by @blakeembrey in #5569
- skip QUERY method test by @jonchurch in #5628
- ignore ETAG query test on 21 and 22, reuse skip util by @jonchurch in #5639
- add support Node.js@22 in the CI by @mertcanaltin in #5627
- doc: add table of contents, tc/triager lists to readme by @mertcanaltin in #5619
- List and sort all projects, add captains by @blakeembrey in #5653
- Call callback once on listen error by @wesleytodd in #3216
- docs: add @UlisesGascon as captain for cookie-parser by @UlisesGascon in #5666
- ✨ bring back query tests for node 21 by @ctcpip in #5690
- [v4] Deprecate
res.clearCookieacceptingoptions.maxAgeandoptions.expiresby @jonchurch in #5672 - skip QUERY tests for Node 21 only, still not supported by @jonchurch in #5695
- 📝 update people, add ctcpip to TC by @ctcpip in #5683
- remove minor version pinning from ci by @jonchurch in #5722
- Fix link variable use in attribution section of CODE OF CONDUCT by @IamLizu in #5762
- Replace Appveyor windows testing with GHA by @jonchurch in #5599
- Add OSSF Scorecard badge by @UlisesGascon in #5436
- Throw on invalid status codes by @jonchurch in #4212
- Use Array.flat instead of array-flatten by @almic in #5677
- Adopt Node@18 as the minimum supported version by @UlisesGascon in #5803
- Ignore
expiresandmaxAgeinres.clearCookie()by @jonchurch in #5792 - send@1.0.0 by @wesleytodd in #5786
- chore: upgrade
debugdep from 3.10 to 4.3.6 by @carpasse in #5829 - refactor: replace 'path-is-absolute' dep with node:path isAbsolute method by @carpasse in #5830
- update scorecard link by @bjohansebas in #5814
- Nominate @IamLizu to the triage team by @UlisesGascon in #5836
- deps: path-to-regexp@0.1.8 by @blakeembrey in #5603
- docs: specify new instructions for
questionanddiscussby @IamLizu in #5835 - 5.x: Upgrading
merge-descriptorswith allowing minors by @RobinTail in #5782 - 4.x: Upgrade
merge-descriptorsdependency by @RobinTail in #5781 - WIP: serve-static@2 by @wesleytodd in #5790
- chore: upgrade qs dp from 6.11.0 to 6.13.0 by @carpasse in #5847
- Upgrade cookie signature by @IamLizu in #5833
- accepts@2 by @wesleytodd in #5881
- mime-types@3 by @wesleytodd in #5882
- type-is@^2.0.0 by @wesleytodd in #5883
- content-disposition@^1.0.0 by @wesleytodd in #5884
- fix(deps): finalhandler@^2.0.0 by @wesleytodd in #5899
- path-to-regexp@0.1.10 by @blakeembrey in #5902
- update to
fresh@^2.0.0by @jonchurch in #5916 - router@^2.0.0 by @wesleytodd in #5885
- Adopt Node@18 as the minimum supported version by @UlisesGascon in #5595
- master -> 5.0 by @ctcpip in #5785
- 🔧 update CI, remove unsupported versions, clean up by @ctcpip in #5931
- Delete
backas a magic string by @blakeembrey in #5933 - Release 5.0 by @dougwilson in #2237
New Contributors
- @marco-ippolito made their first contribution in #5565
- @inigomarquinez made their first contribution in #5590
- @mertcanaltin made their first contribution in #5627
- @ctcpip made their first contribution in #5690
- @IamLizu made their first contribution in #5762
- @almic made their first contribution in #5677
- @carpasse made their first contribution in #5829
- @bjohansebas made their first contribution in #5814
- @RobinTail made their first contribution in #5782
Full Changelog: v5.0.0-beta.3...v5.0.0