express 5.0.0 on Node.js NPM

What's Changed

4.19.2 Staging by @wesleytodd in #5561
remove duplicate location test for data uri by @wesleytodd in #5562
feat: document beta releases expectations by @marco-ippolito in #5565
Cut down on duplicated CI runs by @jonchurch in #5564
Add a Threat Model by @UlisesGascon in #5526
Assign captain of encodeurl by @blakeembrey in #5579
Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in #5587
docs: update Security.md by @inigomarquinez in #5590
docs: update triage nomination policy by @UlisesGascon in #5600
Add CodeQL (SAST) by @UlisesGascon in #5433
docs: add UlisesGascon as triage initiative captain by @UlisesGascon in #5605
Use object with null prototype for various app properties by @EvanHahn in #4861
deps: encodeurl@~2.0.0 by @blakeembrey in #5569
skip QUERY method test by @jonchurch in #5628
ignore ETAG query test on 21 and 22, reuse skip util by @jonchurch in #5639
add support Node.js@22 in the CI by @mertcanaltin in #5627
doc: add table of contents, tc/triager lists to readme by @mertcanaltin in #5619
List and sort all projects, add captains by @blakeembrey in #5653
Call callback once on listen error by @wesleytodd in #3216
docs: add @UlisesGascon as captain for cookie-parser by @UlisesGascon in #5666
✨ bring back query tests for node 21 by @ctcpip in #5690
[v4] Deprecate res.clearCookie accepting options.maxAge and options.expires by @jonchurch in #5672
skip QUERY tests for Node 21 only, still not supported by @jonchurch in #5695
📝 update people, add ctcpip to TC by @ctcpip in #5683
remove minor version pinning from ci by @jonchurch in #5722
Fix link variable use in attribution section of CODE OF CONDUCT by @IamLizu in #5762
Replace Appveyor windows testing with GHA by @jonchurch in #5599
Add OSSF Scorecard badge by @UlisesGascon in #5436
Throw on invalid status codes by @jonchurch in #4212
Use Array.flat instead of array-flatten by @almic in #5677
Adopt Node@18 as the minimum supported version by @UlisesGascon in #5803
Ignore expires and maxAge in res.clearCookie() by @jonchurch in #5792
send@1.0.0 by @wesleytodd in #5786
chore: upgrade debug dep from 3.10 to 4.3.6 by @carpasse in #5829
refactor: replace 'path-is-absolute' dep with node:path isAbsolute method by @carpasse in #5830
update scorecard link by @bjohansebas in #5814
Nominate @IamLizu to the triage team by @UlisesGascon in #5836
deps: path-to-regexp@0.1.8 by @blakeembrey in #5603
docs: specify new instructions for question and discuss by @IamLizu in #5835
5.x: Upgrading merge-descriptors with allowing minors by @RobinTail in #5782
4.x: Upgrade merge-descriptors dependency by @RobinTail in #5781
WIP: serve-static@2 by @wesleytodd in #5790
chore: upgrade qs dp from 6.11.0 to 6.13.0 by @carpasse in #5847
Upgrade cookie signature by @IamLizu in #5833
accepts@2 by @wesleytodd in #5881
mime-types@3 by @wesleytodd in #5882
type-is@^2.0.0 by @wesleytodd in #5883
content-disposition@^1.0.0 by @wesleytodd in #5884
fix(deps): finalhandler@^2.0.0 by @wesleytodd in #5899
path-to-regexp@0.1.10 by @blakeembrey in #5902
update to fresh@^2.0.0 by @jonchurch in #5916
router@^2.0.0 by @wesleytodd in #5885
Adopt Node@18 as the minimum supported version by @UlisesGascon in #5595
master -> 5.0 by @ctcpip in #5785
🔧 update CI, remove unsupported versions, clean up by @ctcpip in #5931
Delete back as a magic string by @blakeembrey in #5933
Release 5.0 by @dougwilson in #2237

New Contributors

@marco-ippolito made their first contribution in #5565
@inigomarquinez made their first contribution in #5590
@mertcanaltin made their first contribution in #5627
@ctcpip made their first contribution in #5690
@IamLizu made their first contribution in #5762
@almic made their first contribution in #5677
@carpasse made their first contribution in #5829
@bjohansebas made their first contribution in #5814
@RobinTail made their first contribution in #5782

Full Changelog: v5.0.0-beta.3...v5.0.0

What's Changed

4.19.2 Staging by @wesleytodd in #5561
remove duplicate location test for data uri by @wesleytodd in #5562
feat: document beta releases expectations by @marco-ippolito in #5565
Cut down on duplicated CI runs by @jonchurch in #5564
Add a Threat Model by @UlisesGascon in #5526
Assign captain of encodeurl by @blakeembrey in #5579
Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in #5587
docs: update Security.md by @inigomarquinez in #5590
docs: update triage nomination policy by @UlisesGascon in #5600
Add CodeQL (SAST) by @UlisesGascon in #5433
docs: add UlisesGascon as triage initiative captain by @UlisesGascon in #5605
Use object with null prototype for various app properties by @EvanHahn in #4861
deps: encodeurl@~2.0.0 by @blakeembrey in #5569
skip QUERY method test by @jonchurch in #5628
ignore ETAG query test on 21 and 22, reuse skip util by @jonchurch in #5639
add support Node.js@22 in the CI by @mertcanaltin in #5627
doc: add table of contents, tc/triager lists to readme by @mertcanaltin in #5619
List and sort all projects, add captains by @blakeembrey in #5653
Call callback once on listen error by @wesleytodd in #3216
docs: add @UlisesGascon as captain for cookie-parser by @UlisesGascon in #5666
✨ bring back query tests for node 21 by @ctcpip in #5690
[v4] Deprecate res.clearCookie accepting options.maxAge and options.expires by @jonchurch in #5672
skip QUERY tests for Node 21 only, still not supported by @jonchurch in #5695
📝 update people, add ctcpip to TC by @ctcpip in #5683
remove minor version pinning from ci by @jonchurch in #5722
Fix link variable use in attribution section of CODE OF CONDUCT by @IamLizu in #5762
Replace Appveyor windows testing with GHA by @jonchurch in #5599
Add OSSF Scorecard badge by @UlisesGascon in #5436
Throw on invalid status codes by @jonchurch in #4212
Use Array.flat instead of array-flatten by @almic in #5677
Adopt Node@18 as the minimum supported version by @UlisesGascon in #5803
Ignore expires and maxAge in res.clearCookie() by @jonchurch in #5792
send@1.0.0 by @wesleytodd in #5786
chore: upgrade debug dep from 3.10 to 4.3.6 by @carpasse in #5829
refactor: replace 'path-is-absolute' dep with node:path isAbsolute method by @carpasse in #5830
update scorecard link by @bjohansebas in #5814
Nominate @IamLizu to the triage team by @UlisesGascon in #5836
deps: path-to-regexp@0.1.8 by @blakeembrey in #5603
docs: specify new instructions for question and discuss by @IamLizu in #5835
5.x: Upgrading merge-descriptors with allowing minors by @RobinTail in #5782
4.x: Upgrade merge-descriptors dependency by @RobinTail in #5781
WIP: serve-static@2 by @wesleytodd in #5790
chore: upgrade qs dp from 6.11.0 to 6.13.0 by @carpasse in #5847
Upgrade cookie signature by @IamLizu in #5833
accepts@2 by @wesleytodd in #5881
mime-types@3 by @wesleytodd in #5882
type-is@^2.0.0 by @wesleytodd in #5883
content-disposition@^1.0.0 by @wesleytodd in #5884
fix(deps): finalhandler@^2.0.0 by @wesleytodd in #5899
path-to-regexp@0.1.10 by @blakeembrey in #5902
update to fresh@^2.0.0 by @jonchurch in #5916
router@^2.0.0 by @wesleytodd in #5885
Adopt Node@18 as the minimum supported version by @UlisesGascon in #5595
master -> 5.0 by @ctcpip in #5785
🔧 update CI, remove unsupported versions, clean up by @ctcpip in #5931
Delete back as a magic string by @blakeembrey in #5933
Release 5.0 by @dougwilson in #2237

New Contributors

@marco-ippolito made their first contribution in #5565
@inigomarquinez made their first contribution in #5590
@mertcanaltin made their first contribution in #5627
@ctcpip made their first contribution in #5690
@IamLizu made their first contribution in #5762
@almic made their first contribution in #5677
@carpasse made their first contribution in #5829
@bjohansebas made their first contribution in #5814
@RobinTail made their first contribution in #5782

Full Changelog: v5.0.0-beta.3...v5.0.0