What's Changed
- Address security vulnerabilities (2026-08-14) by @tzjames in #132
- Allow configuring HTTP/1.1 keepAliveTimeout and headersTimeout by @hernanc in #134
- Set keepAliveTimeout above common load balancer idle timeouts by @tzjames in #135
- Drain before shutdown when
SHUTDOWN_DELAY_MSis set by @Kevin-Chant in #133 - Bump qs override to ^6.16.0 by @tzjames in #136
- Address security vulnerabilities (2026-10-08) by @Kevin-Chant in #137
- Distrust emSign ECC Root CA - G3 by @Kevin-Chant in #139
- Ship Node 22.23.4 in the runtime image until the hardened base updates by @ahdriel in #140
- Release 1.5.0 by @ahdriel in #141
New Contributors
Full Changelog: v1.4.0...v1.5.0