source: frontend/node_modules/express/History.md

Last change on this file was 9af201e, checked in by MBK <marija.karapandzova@…>, 11 days ago

Fix frontend appearance

  • Property mode set to 100644
File size: 113.7 KB
Line 
14.22.2 / 2026-05-011
2==========
3
4* fix: restore >20 array parsing for `req.query` repeated keys ([`8d09bfe6`](https://github.com/expressjs/express/commit/8d09bfe6d88983da5c3e12cfdd54782c4dc675db))
5 * This also unifies array-cap behavior across notations. Indexed notation (`a[0]=...`) was historically capped at qs's default `arrayLimit` of 20 even in older qs versions; after this change it also allows up to 1000 items.
6* deps: qs@~6.15.1
7* deps: body-parser@~1.20.5
8
94.22.1 / 2025-12-01
10==========
11
12 * Revert security fix for [CVE-2024-51999](https://www.cve.org/CVERecord?id=CVE-2024-51999) ([GHSA-pj86-cfqh-vqx6](https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6))
13 * The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.
14
154.22.0 / 2025-12-01
16==========
17 * Security fix for [CVE-2024-51999](https://www.cve.org/CVERecord?id=CVE-2024-51999) ([GHSA-pj86-cfqh-vqx6](https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6))
18 * deps: use tilde notation for dependencies
19 * deps: qs@6.14.0
20
214.21.2 / 2024-11-06
22==========
23
24 * deps: path-to-regexp@0.1.12
25 - Fix backtracking protection
26 * deps: path-to-regexp@0.1.11
27 - Throws an error on invalid path values
28
294.21.1 / 2024-10-08
30==========
31
32 * Backported a fix for [CVE-2024-47764](https://nvd.nist.gov/vuln/detail/CVE-2024-47764)
33
34
354.21.0 / 2024-09-11
36==========
37
38 * Deprecate `res.location("back")` and `res.redirect("back")` magic string
39 * deps: serve-static@1.16.2
40 * includes send@0.19.0
41 * deps: finalhandler@1.3.1
42 * deps: qs@6.13.0
43
444.20.0 / 2024-09-10
45==========
46 * deps: serve-static@0.16.0
47 * Remove link renderization in html while redirecting
48 * deps: send@0.19.0
49 * Remove link renderization in html while redirecting
50 * deps: body-parser@0.6.0
51 * add `depth` option to customize the depth level in the parser
52 * IMPORTANT: The default `depth` level for parsing URL-encoded data is now `32` (previously was `Infinity`)
53 * Remove link renderization in html while using `res.redirect`
54 * deps: path-to-regexp@0.1.10
55 - Adds support for named matching groups in the routes using a regex
56 - Adds backtracking protection to parameters without regexes defined
57 * deps: encodeurl@~2.0.0
58 - Removes encoding of `\`, `|`, and `^` to align better with URL spec
59 * Deprecate passing `options.maxAge` and `options.expires` to `res.clearCookie`
60 - Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
61
624.19.2 / 2024-03-25
63==========
64
65 * Improved fix for open redirect allow list bypass
66
674.19.1 / 2024-03-20
68==========
69
70 * Allow passing non-strings to res.location with new encoding handling checks
71
724.19.0 / 2024-03-20
73==========
74
75 * Prevent open redirect allow list bypass due to encodeurl
76 * deps: cookie@0.6.0
77
784.18.3 / 2024-02-29
79==========
80
81 * Fix routing requests without method
82 * deps: body-parser@1.20.2
83 - Fix strict json error message on Node.js 19+
84 - deps: content-type@~1.0.5
85 - deps: raw-body@2.5.2
86 * deps: cookie@0.6.0
87 - Add `partitioned` option
88
894.18.2 / 2022-10-08
90===================
91
92 * Fix regression routing a large stack in a single route
93 * deps: body-parser@1.20.1
94 - deps: qs@6.11.0
95 - perf: remove unnecessary object clone
96 * deps: qs@6.11.0
97
984.18.1 / 2022-04-29
99===================
100
101 * Fix hanging on large stack of sync routes
102
1034.18.0 / 2022-04-25
104===================
105
106 * Add "root" option to `res.download`
107 * Allow `options` without `filename` in `res.download`
108 * Deprecate string and non-integer arguments to `res.status`
109 * Fix behavior of `null`/`undefined` as `maxAge` in `res.cookie`
110 * Fix handling very large stacks of sync middleware
111 * Ignore `Object.prototype` values in settings through `app.set`/`app.get`
112 * Invoke `default` with same arguments as types in `res.format`
113 * Support proper 205 responses using `res.send`
114 * Use `http-errors` for `res.format` error
115 * deps: body-parser@1.20.0
116 - Fix error message for json parse whitespace in `strict`
117 - Fix internal error when inflated body exceeds limit
118 - Prevent loss of async hooks context
119 - Prevent hanging when request already read
120 - deps: depd@2.0.0
121 - deps: http-errors@2.0.0
122 - deps: on-finished@2.4.1
123 - deps: qs@6.10.3
124 - deps: raw-body@2.5.1
125 * deps: cookie@0.5.0
126 - Add `priority` option
127 - Fix `expires` option to reject invalid dates
128 * deps: depd@2.0.0
129 - Replace internal `eval` usage with `Function` constructor
130 - Use instance methods on `process` to check for listeners
131 * deps: finalhandler@1.2.0
132 - Remove set content headers that break response
133 - deps: on-finished@2.4.1
134 - deps: statuses@2.0.1
135 * deps: on-finished@2.4.1
136 - Prevent loss of async hooks context
137 * deps: qs@6.10.3
138 * deps: send@0.18.0
139 - Fix emitted 416 error missing headers property
140 - Limit the headers removed for 304 response
141 - deps: depd@2.0.0
142 - deps: destroy@1.2.0
143 - deps: http-errors@2.0.0
144 - deps: on-finished@2.4.1
145 - deps: statuses@2.0.1
146 * deps: serve-static@1.15.0
147 - deps: send@0.18.0
148 * deps: statuses@2.0.1
149 - Remove code 306
150 - Rename `425 Unordered Collection` to standard `425 Too Early`
151
1524.17.3 / 2022-02-16
153===================
154
155 * deps: accepts@~1.3.8
156 - deps: mime-types@~2.1.34
157 - deps: negotiator@0.6.3
158 * deps: body-parser@1.19.2
159 - deps: bytes@3.1.2
160 - deps: qs@6.9.7
161 - deps: raw-body@2.4.3
162 * deps: cookie@0.4.2
163 * deps: qs@6.9.7
164 * Fix handling of `__proto__` keys
165 * pref: remove unnecessary regexp for trust proxy
166
1674.17.2 / 2021-12-16
168===================
169
170 * Fix handling of `undefined` in `res.jsonp`
171 * Fix handling of `undefined` when `"json escape"` is enabled
172 * Fix incorrect middleware execution with unanchored `RegExp`s
173 * Fix `res.jsonp(obj, status)` deprecation message
174 * Fix typo in `res.is` JSDoc
175 * deps: body-parser@1.19.1
176 - deps: bytes@3.1.1
177 - deps: http-errors@1.8.1
178 - deps: qs@6.9.6
179 - deps: raw-body@2.4.2
180 - deps: safe-buffer@5.2.1
181 - deps: type-is@~1.6.18
182 * deps: content-disposition@0.5.4
183 - deps: safe-buffer@5.2.1
184 * deps: cookie@0.4.1
185 - Fix `maxAge` option to reject invalid values
186 * deps: proxy-addr@~2.0.7
187 - Use `req.socket` over deprecated `req.connection`
188 - deps: forwarded@0.2.0
189 - deps: ipaddr.js@1.9.1
190 * deps: qs@6.9.6
191 * deps: safe-buffer@5.2.1
192 * deps: send@0.17.2
193 - deps: http-errors@1.8.1
194 - deps: ms@2.1.3
195 - pref: ignore empty http tokens
196 * deps: serve-static@1.14.2
197 - deps: send@0.17.2
198 * deps: setprototypeof@1.2.0
199
2004.17.1 / 2019-05-25
201===================
202
203 * Revert "Improve error message for `null`/`undefined` to `res.status`"
204
2054.17.0 / 2019-05-16
206===================
207
208 * Add `express.raw` to parse bodies into `Buffer`
209 * Add `express.text` to parse bodies into string
210 * Improve error message for non-strings to `res.sendFile`
211 * Improve error message for `null`/`undefined` to `res.status`
212 * Support multiple hosts in `X-Forwarded-Host`
213 * deps: accepts@~1.3.7
214 * deps: body-parser@1.19.0
215 - Add encoding MIK
216 - Add petabyte (`pb`) support
217 - Fix parsing array brackets after index
218 - deps: bytes@3.1.0
219 - deps: http-errors@1.7.2
220 - deps: iconv-lite@0.4.24
221 - deps: qs@6.7.0
222 - deps: raw-body@2.4.0
223 - deps: type-is@~1.6.17
224 * deps: content-disposition@0.5.3
225 * deps: cookie@0.4.0
226 - Add `SameSite=None` support
227 * deps: finalhandler@~1.1.2
228 - Set stricter `Content-Security-Policy` header
229 - deps: parseurl@~1.3.3
230 - deps: statuses@~1.5.0
231 * deps: parseurl@~1.3.3
232 * deps: proxy-addr@~2.0.5
233 - deps: ipaddr.js@1.9.0
234 * deps: qs@6.7.0
235 - Fix parsing array brackets after index
236 * deps: range-parser@~1.2.1
237 * deps: send@0.17.1
238 - Set stricter CSP header in redirect & error responses
239 - deps: http-errors@~1.7.2
240 - deps: mime@1.6.0
241 - deps: ms@2.1.1
242 - deps: range-parser@~1.2.1
243 - deps: statuses@~1.5.0
244 - perf: remove redundant `path.normalize` call
245 * deps: serve-static@1.14.1
246 - Set stricter CSP header in redirect response
247 - deps: parseurl@~1.3.3
248 - deps: send@0.17.1
249 * deps: setprototypeof@1.1.1
250 * deps: statuses@~1.5.0
251 - Add `103 Early Hints`
252 * deps: type-is@~1.6.18
253 - deps: mime-types@~2.1.24
254 - perf: prevent internal `throw` on invalid type
255
2564.16.4 / 2018-10-10
257===================
258
259 * Fix issue where `"Request aborted"` may be logged in `res.sendfile`
260 * Fix JSDoc for `Router` constructor
261 * deps: body-parser@1.18.3
262 - Fix deprecation warnings on Node.js 10+
263 - Fix stack trace for strict json parse error
264 - deps: depd@~1.1.2
265 - deps: http-errors@~1.6.3
266 - deps: iconv-lite@0.4.23
267 - deps: qs@6.5.2
268 - deps: raw-body@2.3.3
269 - deps: type-is@~1.6.16
270 * deps: proxy-addr@~2.0.4
271 - deps: ipaddr.js@1.8.0
272 * deps: qs@6.5.2
273 * deps: safe-buffer@5.1.2
274
2754.16.3 / 2018-03-12
276===================
277
278 * deps: accepts@~1.3.5
279 - deps: mime-types@~2.1.18
280 * deps: depd@~1.1.2
281 - perf: remove argument reassignment
282 * deps: encodeurl@~1.0.2
283 - Fix encoding `%` as last character
284 * deps: finalhandler@1.1.1
285 - Fix 404 output for bad / missing pathnames
286 - deps: encodeurl@~1.0.2
287 - deps: statuses@~1.4.0
288 * deps: proxy-addr@~2.0.3
289 - deps: ipaddr.js@1.6.0
290 * deps: send@0.16.2
291 - Fix incorrect end tag in default error & redirects
292 - deps: depd@~1.1.2
293 - deps: encodeurl@~1.0.2
294 - deps: statuses@~1.4.0
295 * deps: serve-static@1.13.2
296 - Fix incorrect end tag in redirects
297 - deps: encodeurl@~1.0.2
298 - deps: send@0.16.2
299 * deps: statuses@~1.4.0
300 * deps: type-is@~1.6.16
301 - deps: mime-types@~2.1.18
302
3034.16.2 / 2017-10-09
304===================
305
306 * Fix `TypeError` in `res.send` when given `Buffer` and `ETag` header set
307 * perf: skip parsing of entire `X-Forwarded-Proto` header
308
3094.16.1 / 2017-09-29
310===================
311
312 * deps: send@0.16.1
313 * deps: serve-static@1.13.1
314 - Fix regression when `root` is incorrectly set to a file
315 - deps: send@0.16.1
316
3174.16.0 / 2017-09-28
318===================
319
320 * Add `"json escape"` setting for `res.json` and `res.jsonp`
321 * Add `express.json` and `express.urlencoded` to parse bodies
322 * Add `options` argument to `res.download`
323 * Improve error message when autoloading invalid view engine
324 * Improve error messages when non-function provided as middleware
325 * Skip `Buffer` encoding when not generating ETag for small response
326 * Use `safe-buffer` for improved Buffer API
327 * deps: accepts@~1.3.4
328 - deps: mime-types@~2.1.16
329 * deps: content-type@~1.0.4
330 - perf: remove argument reassignment
331 - perf: skip parameter parsing when no parameters
332 * deps: etag@~1.8.1
333 - perf: replace regular expression with substring
334 * deps: finalhandler@1.1.0
335 - Use `res.headersSent` when available
336 * deps: parseurl@~1.3.2
337 - perf: reduce overhead for full URLs
338 - perf: unroll the "fast-path" `RegExp`
339 * deps: proxy-addr@~2.0.2
340 - Fix trimming leading / trailing OWS in `X-Forwarded-For`
341 - deps: forwarded@~0.1.2
342 - deps: ipaddr.js@1.5.2
343 - perf: reduce overhead when no `X-Forwarded-For` header
344 * deps: qs@6.5.1
345 - Fix parsing & compacting very deep objects
346 * deps: send@0.16.0
347 - Add 70 new types for file extensions
348 - Add `immutable` option
349 - Fix missing `</html>` in default error & redirects
350 - Set charset as "UTF-8" for .js and .json
351 - Use instance methods on steam to check for listeners
352 - deps: mime@1.4.1
353 - perf: improve path validation speed
354 * deps: serve-static@1.13.0
355 - Add 70 new types for file extensions
356 - Add `immutable` option
357 - Set charset as "UTF-8" for .js and .json
358 - deps: send@0.16.0
359 * deps: setprototypeof@1.1.0
360 * deps: utils-merge@1.0.1
361 * deps: vary@~1.1.2
362 - perf: improve header token parsing speed
363 * perf: re-use options object when generating ETags
364 * perf: remove dead `.charset` set in `res.jsonp`
365
3664.15.5 / 2017-09-24
367===================
368
369 * deps: debug@2.6.9
370 * deps: finalhandler@~1.0.6
371 - deps: debug@2.6.9
372 - deps: parseurl@~1.3.2
373 * deps: fresh@0.5.2
374 - Fix handling of modified headers with invalid dates
375 - perf: improve ETag match loop
376 - perf: improve `If-None-Match` token parsing
377 * deps: send@0.15.6
378 - Fix handling of modified headers with invalid dates
379 - deps: debug@2.6.9
380 - deps: etag@~1.8.1
381 - deps: fresh@0.5.2
382 - perf: improve `If-Match` token parsing
383 * deps: serve-static@1.12.6
384 - deps: parseurl@~1.3.2
385 - deps: send@0.15.6
386 - perf: improve slash collapsing
387
3884.15.4 / 2017-08-06
389===================
390
391 * deps: debug@2.6.8
392 * deps: depd@~1.1.1
393 - Remove unnecessary `Buffer` loading
394 * deps: finalhandler@~1.0.4
395 - deps: debug@2.6.8
396 * deps: proxy-addr@~1.1.5
397 - Fix array argument being altered
398 - deps: ipaddr.js@1.4.0
399 * deps: qs@6.5.0
400 * deps: send@0.15.4
401 - deps: debug@2.6.8
402 - deps: depd@~1.1.1
403 - deps: http-errors@~1.6.2
404 * deps: serve-static@1.12.4
405 - deps: send@0.15.4
406
4074.15.3 / 2017-05-16
408===================
409
410 * Fix error when `res.set` cannot add charset to `Content-Type`
411 * deps: debug@2.6.7
412 - Fix `DEBUG_MAX_ARRAY_LENGTH`
413 - deps: ms@2.0.0
414 * deps: finalhandler@~1.0.3
415 - Fix missing `</html>` in HTML document
416 - deps: debug@2.6.7
417 * deps: proxy-addr@~1.1.4
418 - deps: ipaddr.js@1.3.0
419 * deps: send@0.15.3
420 - deps: debug@2.6.7
421 - deps: ms@2.0.0
422 * deps: serve-static@1.12.3
423 - deps: send@0.15.3
424 * deps: type-is@~1.6.15
425 - deps: mime-types@~2.1.15
426 * deps: vary@~1.1.1
427 - perf: hoist regular expression
428
4294.15.2 / 2017-03-06
430===================
431
432 * deps: qs@6.4.0
433 - Fix regression parsing keys starting with `[`
434
4354.15.1 / 2017-03-05
436===================
437
438 * deps: send@0.15.1
439 - Fix issue when `Date.parse` does not return `NaN` on invalid date
440 - Fix strict violation in broken environments
441 * deps: serve-static@1.12.1
442 - Fix issue when `Date.parse` does not return `NaN` on invalid date
443 - deps: send@0.15.1
444
4454.15.0 / 2017-03-01
446===================
447
448 * Add debug message when loading view engine
449 * Add `next("router")` to exit from router
450 * Fix case where `router.use` skipped requests routes did not
451 * Remove usage of `res._headers` private field
452 - Improves compatibility with Node.js 8 nightly
453 * Skip routing when `req.url` is not set
454 * Use `%o` in path debug to tell types apart
455 * Use `Object.create` to setup request & response prototypes
456 * Use `setprototypeof` module to replace `__proto__` setting
457 * Use `statuses` instead of `http` module for status messages
458 * deps: debug@2.6.1
459 - Allow colors in workers
460 - Deprecated `DEBUG_FD` environment variable set to `3` or higher
461 - Fix error when running under React Native
462 - Use same color for same namespace
463 - deps: ms@0.7.2
464 * deps: etag@~1.8.0
465 - Use SHA1 instead of MD5 for ETag hashing
466 - Works with FIPS 140-2 OpenSSL configuration
467 * deps: finalhandler@~1.0.0
468 - Fix exception when `err` cannot be converted to a string
469 - Fully URL-encode the pathname in the 404
470 - Only include the pathname in the 404 message
471 - Send complete HTML document
472 - Set `Content-Security-Policy: default-src 'self'` header
473 - deps: debug@2.6.1
474 * deps: fresh@0.5.0
475 - Fix false detection of `no-cache` request directive
476 - Fix incorrect result when `If-None-Match` has both `*` and ETags
477 - Fix weak `ETag` matching to match spec
478 - perf: delay reading header values until needed
479 - perf: enable strict mode
480 - perf: hoist regular expressions
481 - perf: remove duplicate conditional
482 - perf: remove unnecessary boolean coercions
483 - perf: skip checking modified time if ETag check failed
484 - perf: skip parsing `If-None-Match` when no `ETag` header
485 - perf: use `Date.parse` instead of `new Date`
486 * deps: qs@6.3.1
487 - Fix array parsing from skipping empty values
488 - Fix compacting nested arrays
489 * deps: send@0.15.0
490 - Fix false detection of `no-cache` request directive
491 - Fix incorrect result when `If-None-Match` has both `*` and ETags
492 - Fix weak `ETag` matching to match spec
493 - Remove usage of `res._headers` private field
494 - Support `If-Match` and `If-Unmodified-Since` headers
495 - Use `res.getHeaderNames()` when available
496 - Use `res.headersSent` when available
497 - deps: debug@2.6.1
498 - deps: etag@~1.8.0
499 - deps: fresh@0.5.0
500 - deps: http-errors@~1.6.1
501 * deps: serve-static@1.12.0
502 - Fix false detection of `no-cache` request directive
503 - Fix incorrect result when `If-None-Match` has both `*` and ETags
504 - Fix weak `ETag` matching to match spec
505 - Remove usage of `res._headers` private field
506 - Send complete HTML document in redirect response
507 - Set default CSP header in redirect response
508 - Support `If-Match` and `If-Unmodified-Since` headers
509 - Use `res.getHeaderNames()` when available
510 - Use `res.headersSent` when available
511 - deps: send@0.15.0
512 * perf: add fast match path for `*` route
513 * perf: improve `req.ips` performance
514
5154.14.1 / 2017-01-28
516===================
517
518 * deps: content-disposition@0.5.2
519 * deps: finalhandler@0.5.1
520 - Fix exception when `err.headers` is not an object
521 - deps: statuses@~1.3.1
522 - perf: hoist regular expressions
523 - perf: remove duplicate validation path
524 * deps: proxy-addr@~1.1.3
525 - deps: ipaddr.js@1.2.0
526 * deps: send@0.14.2
527 - deps: http-errors@~1.5.1
528 - deps: ms@0.7.2
529 - deps: statuses@~1.3.1
530 * deps: serve-static@~1.11.2
531 - deps: send@0.14.2
532 * deps: type-is@~1.6.14
533 - deps: mime-types@~2.1.13
534
5354.14.0 / 2016-06-16
536===================
537
538 * Add `acceptRanges` option to `res.sendFile`/`res.sendfile`
539 * Add `cacheControl` option to `res.sendFile`/`res.sendfile`
540 * Add `options` argument to `req.range`
541 - Includes the `combine` option
542 * Encode URL in `res.location`/`res.redirect` if not already encoded
543 * Fix some redirect handling in `res.sendFile`/`res.sendfile`
544 * Fix Windows absolute path check using forward slashes
545 * Improve error with invalid arguments to `req.get()`
546 * Improve performance for `res.json`/`res.jsonp` in most cases
547 * Improve `Range` header handling in `res.sendFile`/`res.sendfile`
548 * deps: accepts@~1.3.3
549 - Fix including type extensions in parameters in `Accept` parsing
550 - Fix parsing `Accept` parameters with quoted equals
551 - Fix parsing `Accept` parameters with quoted semicolons
552 - Many performance improvements
553 - deps: mime-types@~2.1.11
554 - deps: negotiator@0.6.1
555 * deps: content-type@~1.0.2
556 - perf: enable strict mode
557 * deps: cookie@0.3.1
558 - Add `sameSite` option
559 - Fix cookie `Max-Age` to never be a floating point number
560 - Improve error message when `encode` is not a function
561 - Improve error message when `expires` is not a `Date`
562 - Throw better error for invalid argument to parse
563 - Throw on invalid values provided to `serialize`
564 - perf: enable strict mode
565 - perf: hoist regular expression
566 - perf: use for loop in parse
567 - perf: use string concatenation for serialization
568 * deps: finalhandler@0.5.0
569 - Change invalid or non-numeric status code to 500
570 - Overwrite status message to match set status code
571 - Prefer `err.statusCode` if `err.status` is invalid
572 - Set response headers from `err.headers` object
573 - Use `statuses` instead of `http` module for status messages
574 * deps: proxy-addr@~1.1.2
575 - Fix accepting various invalid netmasks
576 - Fix IPv6-mapped IPv4 validation edge cases
577 - IPv4 netmasks must be contiguous
578 - IPv6 addresses cannot be used as a netmask
579 - deps: ipaddr.js@1.1.1
580 * deps: qs@6.2.0
581 - Add `decoder` option in `parse` function
582 * deps: range-parser@~1.2.0
583 - Add `combine` option to combine overlapping ranges
584 - Fix incorrectly returning -1 when there is at least one valid range
585 - perf: remove internal function
586 * deps: send@0.14.1
587 - Add `acceptRanges` option
588 - Add `cacheControl` option
589 - Attempt to combine multiple ranges into single range
590 - Correctly inherit from `Stream` class
591 - Fix `Content-Range` header in 416 responses when using `start`/`end` options
592 - Fix `Content-Range` header missing from default 416 responses
593 - Fix redirect error when `path` contains raw non-URL characters
594 - Fix redirect when `path` starts with multiple forward slashes
595 - Ignore non-byte `Range` headers
596 - deps: http-errors@~1.5.0
597 - deps: range-parser@~1.2.0
598 - deps: statuses@~1.3.0
599 - perf: remove argument reassignment
600 * deps: serve-static@~1.11.1
601 - Add `acceptRanges` option
602 - Add `cacheControl` option
603 - Attempt to combine multiple ranges into single range
604 - Fix redirect error when `req.url` contains raw non-URL characters
605 - Ignore non-byte `Range` headers
606 - Use status code 301 for redirects
607 - deps: send@0.14.1
608 * deps: type-is@~1.6.13
609 - Fix type error when given invalid type to match against
610 - deps: mime-types@~2.1.11
611 * deps: vary@~1.1.0
612 - Only accept valid field names in the `field` argument
613 * perf: use strict equality when possible
614
6154.13.4 / 2016-01-21
616===================
617
618 * deps: content-disposition@0.5.1
619 - perf: enable strict mode
620 * deps: cookie@0.1.5
621 - Throw on invalid values provided to `serialize`
622 * deps: depd@~1.1.0
623 - Support web browser loading
624 - perf: enable strict mode
625 * deps: escape-html@~1.0.3
626 - perf: enable strict mode
627 - perf: optimize string replacement
628 - perf: use faster string coercion
629 * deps: finalhandler@0.4.1
630 - deps: escape-html@~1.0.3
631 * deps: merge-descriptors@1.0.1
632 - perf: enable strict mode
633 * deps: methods@~1.1.2
634 - perf: enable strict mode
635 * deps: parseurl@~1.3.1
636 - perf: enable strict mode
637 * deps: proxy-addr@~1.0.10
638 - deps: ipaddr.js@1.0.5
639 - perf: enable strict mode
640 * deps: range-parser@~1.0.3
641 - perf: enable strict mode
642 * deps: send@0.13.1
643 - deps: depd@~1.1.0
644 - deps: destroy@~1.0.4
645 - deps: escape-html@~1.0.3
646 - deps: range-parser@~1.0.3
647 * deps: serve-static@~1.10.2
648 - deps: escape-html@~1.0.3
649 - deps: parseurl@~1.3.0
650 - deps: send@0.13.1
651
6524.13.3 / 2015-08-02
653===================
654
655 * Fix infinite loop condition using `mergeParams: true`
656 * Fix inner numeric indices incorrectly altering parent `req.params`
657
6584.13.2 / 2015-07-31
659===================
660
661 * deps: accepts@~1.2.12
662 - deps: mime-types@~2.1.4
663 * deps: array-flatten@1.1.1
664 - perf: enable strict mode
665 * deps: path-to-regexp@0.1.7
666 - Fix regression with escaped round brackets and matching groups
667 * deps: type-is@~1.6.6
668 - deps: mime-types@~2.1.4
669
6704.13.1 / 2015-07-05
671===================
672
673 * deps: accepts@~1.2.10
674 - deps: mime-types@~2.1.2
675 * deps: qs@4.0.0
676 - Fix dropping parameters like `hasOwnProperty`
677 - Fix various parsing edge cases
678 * deps: type-is@~1.6.4
679 - deps: mime-types@~2.1.2
680 - perf: enable strict mode
681 - perf: remove argument reassignment
682
6834.13.0 / 2015-06-20
684===================
685
686 * Add settings to debug output
687 * Fix `res.format` error when only `default` provided
688 * Fix issue where `next('route')` in `app.param` would incorrectly skip values
689 * Fix hiding platform issues with `decodeURIComponent`
690 - Only `URIError`s are a 400
691 * Fix using `*` before params in routes
692 * Fix using capture groups before params in routes
693 * Simplify `res.cookie` to call `res.append`
694 * Use `array-flatten` module for flattening arrays
695 * deps: accepts@~1.2.9
696 - deps: mime-types@~2.1.1
697 - perf: avoid argument reassignment & argument slice
698 - perf: avoid negotiator recursive construction
699 - perf: enable strict mode
700 - perf: remove unnecessary bitwise operator
701 * deps: cookie@0.1.3
702 - perf: deduce the scope of try-catch deopt
703 - perf: remove argument reassignments
704 * deps: escape-html@1.0.2
705 * deps: etag@~1.7.0
706 - Always include entity length in ETags for hash length extensions
707 - Generate non-Stats ETags using MD5 only (no longer CRC32)
708 - Improve stat performance by removing hashing
709 - Improve support for JXcore
710 - Remove base64 padding in ETags to shorten
711 - Support "fake" stats objects in environments without fs
712 - Use MD5 instead of MD4 in weak ETags over 1KB
713 * deps: finalhandler@0.4.0
714 - Fix a false-positive when unpiping in Node.js 0.8
715 - Support `statusCode` property on `Error` objects
716 - Use `unpipe` module for unpiping requests
717 - deps: escape-html@1.0.2
718 - deps: on-finished@~2.3.0
719 - perf: enable strict mode
720 - perf: remove argument reassignment
721 * deps: fresh@0.3.0
722 - Add weak `ETag` matching support
723 * deps: on-finished@~2.3.0
724 - Add defined behavior for HTTP `CONNECT` requests
725 - Add defined behavior for HTTP `Upgrade` requests
726 - deps: ee-first@1.1.1
727 * deps: path-to-regexp@0.1.6
728 * deps: send@0.13.0
729 - Allow Node.js HTTP server to set `Date` response header
730 - Fix incorrectly removing `Content-Location` on 304 response
731 - Improve the default redirect response headers
732 - Send appropriate headers on default error response
733 - Use `http-errors` for standard emitted errors
734 - Use `statuses` instead of `http` module for status messages
735 - deps: escape-html@1.0.2
736 - deps: etag@~1.7.0
737 - deps: fresh@0.3.0
738 - deps: on-finished@~2.3.0
739 - perf: enable strict mode
740 - perf: remove unnecessary array allocations
741 * deps: serve-static@~1.10.0
742 - Add `fallthrough` option
743 - Fix reading options from options prototype
744 - Improve the default redirect response headers
745 - Malformed URLs now `next()` instead of 400
746 - deps: escape-html@1.0.2
747 - deps: send@0.13.0
748 - perf: enable strict mode
749 - perf: remove argument reassignment
750 * deps: type-is@~1.6.3
751 - deps: mime-types@~2.1.1
752 - perf: reduce try block size
753 - perf: remove bitwise operations
754 * perf: enable strict mode
755 * perf: isolate `app.render` try block
756 * perf: remove argument reassignments in application
757 * perf: remove argument reassignments in request prototype
758 * perf: remove argument reassignments in response prototype
759 * perf: remove argument reassignments in routing
760 * perf: remove argument reassignments in `View`
761 * perf: skip attempting to decode zero length string
762 * perf: use saved reference to `http.STATUS_CODES`
763
7644.12.4 / 2015-05-17
765===================
766
767 * deps: accepts@~1.2.7
768 - deps: mime-types@~2.0.11
769 - deps: negotiator@0.5.3
770 * deps: debug@~2.2.0
771 - deps: ms@0.7.1
772 * deps: depd@~1.0.1
773 * deps: etag@~1.6.0
774 - Improve support for JXcore
775 - Support "fake" stats objects in environments without `fs`
776 * deps: finalhandler@0.3.6
777 - deps: debug@~2.2.0
778 - deps: on-finished@~2.2.1
779 * deps: on-finished@~2.2.1
780 - Fix `isFinished(req)` when data buffered
781 * deps: proxy-addr@~1.0.8
782 - deps: ipaddr.js@1.0.1
783 * deps: qs@2.4.2
784 - Fix allowing parameters like `constructor`
785 * deps: send@0.12.3
786 - deps: debug@~2.2.0
787 - deps: depd@~1.0.1
788 - deps: etag@~1.6.0
789 - deps: ms@0.7.1
790 - deps: on-finished@~2.2.1
791 * deps: serve-static@~1.9.3
792 - deps: send@0.12.3
793 * deps: type-is@~1.6.2
794 - deps: mime-types@~2.0.11
795
7964.12.3 / 2015-03-17
797===================
798
799 * deps: accepts@~1.2.5
800 - deps: mime-types@~2.0.10
801 * deps: debug@~2.1.3
802 - Fix high intensity foreground color for bold
803 - deps: ms@0.7.0
804 * deps: finalhandler@0.3.4
805 - deps: debug@~2.1.3
806 * deps: proxy-addr@~1.0.7
807 - deps: ipaddr.js@0.1.9
808 * deps: qs@2.4.1
809 - Fix error when parameter `hasOwnProperty` is present
810 * deps: send@0.12.2
811 - Throw errors early for invalid `extensions` or `index` options
812 - deps: debug@~2.1.3
813 * deps: serve-static@~1.9.2
814 - deps: send@0.12.2
815 * deps: type-is@~1.6.1
816 - deps: mime-types@~2.0.10
817
8184.12.2 / 2015-03-02
819===================
820
821 * Fix regression where `"Request aborted"` is logged using `res.sendFile`
822
8234.12.1 / 2015-03-01
824===================
825
826 * Fix constructing application with non-configurable prototype properties
827 * Fix `ECONNRESET` errors from `res.sendFile` usage
828 * Fix `req.host` when using "trust proxy" hops count
829 * Fix `req.protocol`/`req.secure` when using "trust proxy" hops count
830 * Fix wrong `code` on aborted connections from `res.sendFile`
831 * deps: merge-descriptors@1.0.0
832
8334.12.0 / 2015-02-23
834===================
835
836 * Fix `"trust proxy"` setting to inherit when app is mounted
837 * Generate `ETag`s for all request responses
838 - No longer restricted to only responses for `GET` and `HEAD` requests
839 * Use `content-type` to parse `Content-Type` headers
840 * deps: accepts@~1.2.4
841 - Fix preference sorting to be stable for long acceptable lists
842 - deps: mime-types@~2.0.9
843 - deps: negotiator@0.5.1
844 * deps: cookie-signature@1.0.6
845 * deps: send@0.12.1
846 - Always read the stat size from the file
847 - Fix mutating passed-in `options`
848 - deps: mime@1.3.4
849 * deps: serve-static@~1.9.1
850 - deps: send@0.12.1
851 * deps: type-is@~1.6.0
852 - fix argument reassignment
853 - fix false-positives in `hasBody` `Transfer-Encoding` check
854 - support wildcard for both type and subtype (`*/*`)
855 - deps: mime-types@~2.0.9
856
8574.11.2 / 2015-02-01
858===================
859
860 * Fix `res.redirect` double-calling `res.end` for `HEAD` requests
861 * deps: accepts@~1.2.3
862 - deps: mime-types@~2.0.8
863 * deps: proxy-addr@~1.0.6
864 - deps: ipaddr.js@0.1.8
865 * deps: type-is@~1.5.6
866 - deps: mime-types@~2.0.8
867
8684.11.1 / 2015-01-20
869===================
870
871 * deps: send@0.11.1
872 - Fix root path disclosure
873 * deps: serve-static@~1.8.1
874 - Fix redirect loop in Node.js 0.11.14
875 - Fix root path disclosure
876 - deps: send@0.11.1
877
8784.11.0 / 2015-01-13
879===================
880
881 * Add `res.append(field, val)` to append headers
882 * Deprecate leading `:` in `name` for `app.param(name, fn)`
883 * Deprecate `req.param()` -- use `req.params`, `req.body`, or `req.query` instead
884 * Deprecate `app.param(fn)`
885 * Fix `OPTIONS` responses to include the `HEAD` method properly
886 * Fix `res.sendFile` not always detecting aborted connection
887 * Match routes iteratively to prevent stack overflows
888 * deps: accepts@~1.2.2
889 - deps: mime-types@~2.0.7
890 - deps: negotiator@0.5.0
891 * deps: send@0.11.0
892 - deps: debug@~2.1.1
893 - deps: etag@~1.5.1
894 - deps: ms@0.7.0
895 - deps: on-finished@~2.2.0
896 * deps: serve-static@~1.8.0
897 - deps: send@0.11.0
898
8994.10.8 / 2015-01-13
900===================
901
902 * Fix crash from error within `OPTIONS` response handler
903 * deps: proxy-addr@~1.0.5
904 - deps: ipaddr.js@0.1.6
905
9064.10.7 / 2015-01-04
907===================
908
909 * Fix `Allow` header for `OPTIONS` to not contain duplicate methods
910 * Fix incorrect "Request aborted" for `res.sendFile` when `HEAD` or 304
911 * deps: debug@~2.1.1
912 * deps: finalhandler@0.3.3
913 - deps: debug@~2.1.1
914 - deps: on-finished@~2.2.0
915 * deps: methods@~1.1.1
916 * deps: on-finished@~2.2.0
917 * deps: serve-static@~1.7.2
918 - Fix potential open redirect when mounted at root
919 * deps: type-is@~1.5.5
920 - deps: mime-types@~2.0.7
921
9224.10.6 / 2014-12-12
923===================
924
925 * Fix exception in `req.fresh`/`req.stale` without response headers
926
9274.10.5 / 2014-12-10
928===================
929
930 * Fix `res.send` double-calling `res.end` for `HEAD` requests
931 * deps: accepts@~1.1.4
932 - deps: mime-types@~2.0.4
933 * deps: type-is@~1.5.4
934 - deps: mime-types@~2.0.4
935
9364.10.4 / 2014-11-24
937===================
938
939 * Fix `res.sendfile` logging standard write errors
940
9414.10.3 / 2014-11-23
942===================
943
944 * Fix `res.sendFile` logging standard write errors
945 * deps: etag@~1.5.1
946 * deps: proxy-addr@~1.0.4
947 - deps: ipaddr.js@0.1.5
948 * deps: qs@2.3.3
949 - Fix `arrayLimit` behavior
950
9514.10.2 / 2014-11-09
952===================
953
954 * Correctly invoke async router callback asynchronously
955 * deps: accepts@~1.1.3
956 - deps: mime-types@~2.0.3
957 * deps: type-is@~1.5.3
958 - deps: mime-types@~2.0.3
959
9604.10.1 / 2014-10-28
961===================
962
963 * Fix handling of URLs containing `://` in the path
964 * deps: qs@2.3.2
965 - Fix parsing of mixed objects and values
966
9674.10.0 / 2014-10-23
968===================
969
970 * Add support for `app.set('views', array)`
971 - Views are looked up in sequence in array of directories
972 * Fix `res.send(status)` to mention `res.sendStatus(status)`
973 * Fix handling of invalid empty URLs
974 * Use `content-disposition` module for `res.attachment`/`res.download`
975 - Sends standards-compliant `Content-Disposition` header
976 - Full Unicode support
977 * Use `path.resolve` in view lookup
978 * deps: debug@~2.1.0
979 - Implement `DEBUG_FD` env variable support
980 * deps: depd@~1.0.0
981 * deps: etag@~1.5.0
982 - Improve string performance
983 - Slightly improve speed for weak ETags over 1KB
984 * deps: finalhandler@0.3.2
985 - Terminate in progress response only on error
986 - Use `on-finished` to determine request status
987 - deps: debug@~2.1.0
988 - deps: on-finished@~2.1.1
989 * deps: on-finished@~2.1.1
990 - Fix handling of pipelined requests
991 * deps: qs@2.3.0
992 - Fix parsing of mixed implicit and explicit arrays
993 * deps: send@0.10.1
994 - deps: debug@~2.1.0
995 - deps: depd@~1.0.0
996 - deps: etag@~1.5.0
997 - deps: on-finished@~2.1.1
998 * deps: serve-static@~1.7.1
999 - deps: send@0.10.1
1000
10014.9.8 / 2014-10-17
1002==================
1003
1004 * Fix `res.redirect` body when redirect status specified
1005 * deps: accepts@~1.1.2
1006 - Fix error when media type has invalid parameter
1007 - deps: negotiator@0.4.9
1008
10094.9.7 / 2014-10-10
1010==================
1011
1012 * Fix using same param name in array of paths
1013
10144.9.6 / 2014-10-08
1015==================
1016
1017 * deps: accepts@~1.1.1
1018 - deps: mime-types@~2.0.2
1019 - deps: negotiator@0.4.8
1020 * deps: serve-static@~1.6.4
1021 - Fix redirect loop when index file serving disabled
1022 * deps: type-is@~1.5.2
1023 - deps: mime-types@~2.0.2
1024
10254.9.5 / 2014-09-24
1026==================
1027
1028 * deps: etag@~1.4.0
1029 * deps: proxy-addr@~1.0.3
1030 - Use `forwarded` npm module
1031 * deps: send@0.9.3
1032 - deps: etag@~1.4.0
1033 * deps: serve-static@~1.6.3
1034 - deps: send@0.9.3
1035
10364.9.4 / 2014-09-19
1037==================
1038
1039 * deps: qs@2.2.4
1040 - Fix issue with object keys starting with numbers truncated
1041
10424.9.3 / 2014-09-18
1043==================
1044
1045 * deps: proxy-addr@~1.0.2
1046 - Fix a global leak when multiple subnets are trusted
1047 - deps: ipaddr.js@0.1.3
1048
10494.9.2 / 2014-09-17
1050==================
1051
1052 * Fix regression for empty string `path` in `app.use`
1053 * Fix `router.use` to accept array of middleware without path
1054 * Improve error message for bad `app.use` arguments
1055
10564.9.1 / 2014-09-16
1057==================
1058
1059 * Fix `app.use` to accept array of middleware without path
1060 * deps: depd@0.4.5
1061 * deps: etag@~1.3.1
1062 * deps: send@0.9.2
1063 - deps: depd@0.4.5
1064 - deps: etag@~1.3.1
1065 - deps: range-parser@~1.0.2
1066 * deps: serve-static@~1.6.2
1067 - deps: send@0.9.2
1068
10694.9.0 / 2014-09-08
1070==================
1071
1072 * Add `res.sendStatus`
1073 * Invoke callback for sendfile when client aborts
1074 - Applies to `res.sendFile`, `res.sendfile`, and `res.download`
1075 - `err` will be populated with request aborted error
1076 * Support IP address host in `req.subdomains`
1077 * Use `etag` to generate `ETag` headers
1078 * deps: accepts@~1.1.0
1079 - update `mime-types`
1080 * deps: cookie-signature@1.0.5
1081 * deps: debug@~2.0.0
1082 * deps: finalhandler@0.2.0
1083 - Set `X-Content-Type-Options: nosniff` header
1084 - deps: debug@~2.0.0
1085 * deps: fresh@0.2.4
1086 * deps: media-typer@0.3.0
1087 - Throw error when parameter format invalid on parse
1088 * deps: qs@2.2.3
1089 - Fix issue where first empty value in array is discarded
1090 * deps: range-parser@~1.0.2
1091 * deps: send@0.9.1
1092 - Add `lastModified` option
1093 - Use `etag` to generate `ETag` header
1094 - deps: debug@~2.0.0
1095 - deps: fresh@0.2.4
1096 * deps: serve-static@~1.6.1
1097 - Add `lastModified` option
1098 - deps: send@0.9.1
1099 * deps: type-is@~1.5.1
1100 - fix `hasbody` to be true for `content-length: 0`
1101 - deps: media-typer@0.3.0
1102 - deps: mime-types@~2.0.1
1103 * deps: vary@~1.0.0
1104 - Accept valid `Vary` header string as `field`
1105
11064.8.8 / 2014-09-04
1107==================
1108
1109 * deps: send@0.8.5
1110 - Fix a path traversal issue when using `root`
1111 - Fix malicious path detection for empty string path
1112 * deps: serve-static@~1.5.4
1113 - deps: send@0.8.5
1114
11154.8.7 / 2014-08-29
1116==================
1117
1118 * deps: qs@2.2.2
1119 - Remove unnecessary cloning
1120
11214.8.6 / 2014-08-27
1122==================
1123
1124 * deps: qs@2.2.0
1125 - Array parsing fix
1126 - Performance improvements
1127
11284.8.5 / 2014-08-18
1129==================
1130
1131 * deps: send@0.8.3
1132 - deps: destroy@1.0.3
1133 - deps: on-finished@2.1.0
1134 * deps: serve-static@~1.5.3
1135 - deps: send@0.8.3
1136
11374.8.4 / 2014-08-14
1138==================
1139
1140 * deps: qs@1.2.2
1141 * deps: send@0.8.2
1142 - Work around `fd` leak in Node.js 0.10 for `fs.ReadStream`
1143 * deps: serve-static@~1.5.2
1144 - deps: send@0.8.2
1145
11464.8.3 / 2014-08-10
1147==================
1148
1149 * deps: parseurl@~1.3.0
1150 * deps: qs@1.2.1
1151 * deps: serve-static@~1.5.1
1152 - Fix parsing of weird `req.originalUrl` values
1153 - deps: parseurl@~1.3.0
1154 - deps: utils-merge@1.0.0
1155
11564.8.2 / 2014-08-07
1157==================
1158
1159 * deps: qs@1.2.0
1160 - Fix parsing array of objects
1161
11624.8.1 / 2014-08-06
1163==================
1164
1165 * fix incorrect deprecation warnings on `res.download`
1166 * deps: qs@1.1.0
1167 - Accept urlencoded square brackets
1168 - Accept empty values in implicit array notation
1169
11704.8.0 / 2014-08-05
1171==================
1172
1173 * add `res.sendFile`
1174 - accepts a file system path instead of a URL
1175 - requires an absolute path or `root` option specified
1176 * deprecate `res.sendfile` -- use `res.sendFile` instead
1177 * support mounted app as any argument to `app.use()`
1178 * deps: qs@1.0.2
1179 - Complete rewrite
1180 - Limits array length to 20
1181 - Limits object depth to 5
1182 - Limits parameters to 1,000
1183 * deps: send@0.8.1
1184 - Add `extensions` option
1185 * deps: serve-static@~1.5.0
1186 - Add `extensions` option
1187 - deps: send@0.8.1
1188
11894.7.4 / 2014-08-04
1190==================
1191
1192 * fix `res.sendfile` regression for serving directory index files
1193 * deps: send@0.7.4
1194 - Fix incorrect 403 on Windows and Node.js 0.11
1195 - Fix serving index files without root dir
1196 * deps: serve-static@~1.4.4
1197 - deps: send@0.7.4
1198
11994.7.3 / 2014-08-04
1200==================
1201
1202 * deps: send@0.7.3
1203 - Fix incorrect 403 on Windows and Node.js 0.11
1204 * deps: serve-static@~1.4.3
1205 - Fix incorrect 403 on Windows and Node.js 0.11
1206 - deps: send@0.7.3
1207
12084.7.2 / 2014-07-27
1209==================
1210
1211 * deps: depd@0.4.4
1212 - Work-around v8 generating empty stack traces
1213 * deps: send@0.7.2
1214 - deps: depd@0.4.4
1215 * deps: serve-static@~1.4.2
1216
12174.7.1 / 2014-07-26
1218==================
1219
1220 * deps: depd@0.4.3
1221 - Fix exception when global `Error.stackTraceLimit` is too low
1222 * deps: send@0.7.1
1223 - deps: depd@0.4.3
1224 * deps: serve-static@~1.4.1
1225
12264.7.0 / 2014-07-25
1227==================
1228
1229 * fix `req.protocol` for proxy-direct connections
1230 * configurable query parser with `app.set('query parser', parser)`
1231 - `app.set('query parser', 'extended')` parse with "qs" module
1232 - `app.set('query parser', 'simple')` parse with "querystring" core module
1233 - `app.set('query parser', false)` disable query string parsing
1234 - `app.set('query parser', true)` enable simple parsing
1235 * deprecate `res.json(status, obj)` -- use `res.status(status).json(obj)` instead
1236 * deprecate `res.jsonp(status, obj)` -- use `res.status(status).jsonp(obj)` instead
1237 * deprecate `res.send(status, body)` -- use `res.status(status).send(body)` instead
1238 * deps: debug@1.0.4
1239 * deps: depd@0.4.2
1240 - Add `TRACE_DEPRECATION` environment variable
1241 - Remove non-standard grey color from color output
1242 - Support `--no-deprecation` argument
1243 - Support `--trace-deprecation` argument
1244 * deps: finalhandler@0.1.0
1245 - Respond after request fully read
1246 - deps: debug@1.0.4
1247 * deps: parseurl@~1.2.0
1248 - Cache URLs based on original value
1249 - Remove no-longer-needed URL mis-parse work-around
1250 - Simplify the "fast-path" `RegExp`
1251 * deps: send@0.7.0
1252 - Add `dotfiles` option
1253 - Cap `maxAge` value to 1 year
1254 - deps: debug@1.0.4
1255 - deps: depd@0.4.2
1256 * deps: serve-static@~1.4.0
1257 - deps: parseurl@~1.2.0
1258 - deps: send@0.7.0
1259 * perf: prevent multiple `Buffer` creation in `res.send`
1260
12614.6.1 / 2014-07-12
1262==================
1263
1264 * fix `subapp.mountpath` regression for `app.use(subapp)`
1265
12664.6.0 / 2014-07-11
1267==================
1268
1269 * accept multiple callbacks to `app.use()`
1270 * add explicit "Rosetta Flash JSONP abuse" protection
1271 - previous versions are not vulnerable; this is just explicit protection
1272 * catch errors in multiple `req.param(name, fn)` handlers
1273 * deprecate `res.redirect(url, status)` -- use `res.redirect(status, url)` instead
1274 * fix `res.send(status, num)` to send `num` as json (not error)
1275 * remove unnecessary escaping when `res.jsonp` returns JSON response
1276 * support non-string `path` in `app.use(path, fn)`
1277 - supports array of paths
1278 - supports `RegExp`
1279 * router: fix optimization on router exit
1280 * router: refactor location of `try` blocks
1281 * router: speed up standard `app.use(fn)`
1282 * deps: debug@1.0.3
1283 - Add support for multiple wildcards in namespaces
1284 * deps: finalhandler@0.0.3
1285 - deps: debug@1.0.3
1286 * deps: methods@1.1.0
1287 - add `CONNECT`
1288 * deps: parseurl@~1.1.3
1289 - faster parsing of href-only URLs
1290 * deps: path-to-regexp@0.1.3
1291 * deps: send@0.6.0
1292 - deps: debug@1.0.3
1293 * deps: serve-static@~1.3.2
1294 - deps: parseurl@~1.1.3
1295 - deps: send@0.6.0
1296 * perf: fix arguments reassign deopt in some `res` methods
1297
12984.5.1 / 2014-07-06
1299==================
1300
1301 * fix routing regression when altering `req.method`
1302
13034.5.0 / 2014-07-04
1304==================
1305
1306 * add deprecation message to non-plural `req.accepts*`
1307 * add deprecation message to `res.send(body, status)`
1308 * add deprecation message to `res.vary()`
1309 * add `headers` option to `res.sendfile`
1310 - use to set headers on successful file transfer
1311 * add `mergeParams` option to `Router`
1312 - merges `req.params` from parent routes
1313 * add `req.hostname` -- correct name for what `req.host` returns
1314 * deprecate things with `depd` module
1315 * deprecate `req.host` -- use `req.hostname` instead
1316 * fix behavior when handling request without routes
1317 * fix handling when `route.all` is only route
1318 * invoke `router.param()` only when route matches
1319 * restore `req.params` after invoking router
1320 * use `finalhandler` for final response handling
1321 * use `media-typer` to alter content-type charset
1322 * deps: accepts@~1.0.7
1323 * deps: send@0.5.0
1324 - Accept string for `maxage` (converted by `ms`)
1325 - Include link in default redirect response
1326 * deps: serve-static@~1.3.0
1327 - Accept string for `maxAge` (converted by `ms`)
1328 - Add `setHeaders` option
1329 - Include HTML link in redirect response
1330 - deps: send@0.5.0
1331 * deps: type-is@~1.3.2
1332
13334.4.5 / 2014-06-26
1334==================
1335
1336 * deps: cookie-signature@1.0.4
1337 - fix for timing attacks
1338
13394.4.4 / 2014-06-20
1340==================
1341
1342 * fix `res.attachment` Unicode filenames in Safari
1343 * fix "trim prefix" debug message in `express:router`
1344 * deps: accepts@~1.0.5
1345 * deps: buffer-crc32@0.2.3
1346
13474.4.3 / 2014-06-11
1348==================
1349
1350 * fix persistence of modified `req.params[name]` from `app.param()`
1351 * deps: accepts@1.0.3
1352 - deps: negotiator@0.4.6
1353 * deps: debug@1.0.2
1354 * deps: send@0.4.3
1355 - Do not throw uncatchable error on file open race condition
1356 - Use `escape-html` for HTML escaping
1357 - deps: debug@1.0.2
1358 - deps: finished@1.2.2
1359 - deps: fresh@0.2.2
1360 * deps: serve-static@1.2.3
1361 - Do not throw uncatchable error on file open race condition
1362 - deps: send@0.4.3
1363
13644.4.2 / 2014-06-09
1365==================
1366
1367 * fix catching errors from top-level handlers
1368 * use `vary` module for `res.vary`
1369 * deps: debug@1.0.1
1370 * deps: proxy-addr@1.0.1
1371 * deps: send@0.4.2
1372 - fix "event emitter leak" warnings
1373 - deps: debug@1.0.1
1374 - deps: finished@1.2.1
1375 * deps: serve-static@1.2.2
1376 - fix "event emitter leak" warnings
1377 - deps: send@0.4.2
1378 * deps: type-is@1.2.1
1379
13804.4.1 / 2014-06-02
1381==================
1382
1383 * deps: methods@1.0.1
1384 * deps: send@0.4.1
1385 - Send `max-age` in `Cache-Control` in correct format
1386 * deps: serve-static@1.2.1
1387 - use `escape-html` for escaping
1388 - deps: send@0.4.1
1389
13904.4.0 / 2014-05-30
1391==================
1392
1393 * custom etag control with `app.set('etag', val)`
1394 - `app.set('etag', function(body, encoding){ return '"etag"' })` custom etag generation
1395 - `app.set('etag', 'weak')` weak tag
1396 - `app.set('etag', 'strong')` strong etag
1397 - `app.set('etag', false)` turn off
1398 - `app.set('etag', true)` standard etag
1399 * mark `res.send` ETag as weak and reduce collisions
1400 * update accepts to 1.0.2
1401 - Fix interpretation when header not in request
1402 * update send to 0.4.0
1403 - Calculate ETag with md5 for reduced collisions
1404 - Ignore stream errors after request ends
1405 - deps: debug@0.8.1
1406 * update serve-static to 1.2.0
1407 - Calculate ETag with md5 for reduced collisions
1408 - Ignore stream errors after request ends
1409 - deps: send@0.4.0
1410
14114.3.2 / 2014-05-28
1412==================
1413
1414 * fix handling of errors from `router.param()` callbacks
1415
14164.3.1 / 2014-05-23
1417==================
1418
1419 * revert "fix behavior of multiple `app.VERB` for the same path"
1420 - this caused a regression in the order of route execution
1421
14224.3.0 / 2014-05-21
1423==================
1424
1425 * add `req.baseUrl` to access the path stripped from `req.url` in routes
1426 * fix behavior of multiple `app.VERB` for the same path
1427 * fix issue routing requests among sub routers
1428 * invoke `router.param()` only when necessary instead of every match
1429 * proper proxy trust with `app.set('trust proxy', trust)`
1430 - `app.set('trust proxy', 1)` trust first hop
1431 - `app.set('trust proxy', 'loopback')` trust loopback addresses
1432 - `app.set('trust proxy', '10.0.0.1')` trust single IP
1433 - `app.set('trust proxy', '10.0.0.1/16')` trust subnet
1434 - `app.set('trust proxy', '10.0.0.1, 10.0.0.2')` trust list
1435 - `app.set('trust proxy', false)` turn off
1436 - `app.set('trust proxy', true)` trust everything
1437 * set proper `charset` in `Content-Type` for `res.send`
1438 * update type-is to 1.2.0
1439 - support suffix matching
1440
14414.2.0 / 2014-05-11
1442==================
1443
1444 * deprecate `app.del()` -- use `app.delete()` instead
1445 * deprecate `res.json(obj, status)` -- use `res.json(status, obj)` instead
1446 - the edge-case `res.json(status, num)` requires `res.status(status).json(num)`
1447 * deprecate `res.jsonp(obj, status)` -- use `res.jsonp(status, obj)` instead
1448 - the edge-case `res.jsonp(status, num)` requires `res.status(status).jsonp(num)`
1449 * fix `req.next` when inside router instance
1450 * include `ETag` header in `HEAD` requests
1451 * keep previous `Content-Type` for `res.jsonp`
1452 * support PURGE method
1453 - add `app.purge`
1454 - add `router.purge`
1455 - include PURGE in `app.all`
1456 * update debug to 0.8.0
1457 - add `enable()` method
1458 - change from stderr to stdout
1459 * update methods to 1.0.0
1460 - add PURGE
1461
14624.1.2 / 2014-05-08
1463==================
1464
1465 * fix `req.host` for IPv6 literals
1466 * fix `res.jsonp` error if callback param is object
1467
14684.1.1 / 2014-04-27
1469==================
1470
1471 * fix package.json to reflect supported node version
1472
14734.1.0 / 2014-04-24
1474==================
1475
1476 * pass options from `res.sendfile` to `send`
1477 * preserve casing of headers in `res.header` and `res.set`
1478 * support unicode file names in `res.attachment` and `res.download`
1479 * update accepts to 1.0.1
1480 - deps: negotiator@0.4.0
1481 * update cookie to 0.1.2
1482 - Fix for maxAge == 0
1483 - made compat with expires field
1484 * update send to 0.3.0
1485 - Accept API options in options object
1486 - Coerce option types
1487 - Control whether to generate etags
1488 - Default directory access to 403 when index disabled
1489 - Fix sending files with dots without root set
1490 - Include file path in etag
1491 - Make "Can't set headers after they are sent." catchable
1492 - Send full entity-body for multi range requests
1493 - Set etags to "weak"
1494 - Support "If-Range" header
1495 - Support multiple index paths
1496 - deps: mime@1.2.11
1497 * update serve-static to 1.1.0
1498 - Accept options directly to `send` module
1499 - Resolve relative paths at middleware setup
1500 - Use parseurl to parse the URL from request
1501 - deps: send@0.3.0
1502 * update type-is to 1.1.0
1503 - add non-array values support
1504 - add `multipart` as a shorthand
1505
15064.0.0 / 2014-04-09
1507==================
1508
1509 * remove:
1510 - node 0.8 support
1511 - connect and connect's patches except for charset handling
1512 - express(1) - moved to [express-generator](https://github.com/expressjs/generator)
1513 - `express.createServer()` - it has been deprecated for a long time. Use `express()`
1514 - `app.configure` - use logic in your own app code
1515 - `app.router` - is removed
1516 - `req.auth` - use `basic-auth` instead
1517 - `req.accepted*` - use `req.accepts*()` instead
1518 - `res.location` - relative URL resolution is removed
1519 - `res.charset` - include the charset in the content type when using `res.set()`
1520 - all bundled middleware except `static`
1521 * change:
1522 - `app.route` -> `app.mountpath` when mounting an express app in another express app
1523 - `json spaces` no longer enabled by default in development
1524 - `req.accepts*` -> `req.accepts*s` - i.e. `req.acceptsEncoding` -> `req.acceptsEncodings`
1525 - `req.params` is now an object instead of an array
1526 - `res.locals` is no longer a function. It is a plain js object. Treat it as such.
1527 - `res.headerSent` -> `res.headersSent` to match node.js ServerResponse object
1528 * refactor:
1529 - `req.accepts*` with [accepts](https://github.com/expressjs/accepts)
1530 - `req.is` with [type-is](https://github.com/expressjs/type-is)
1531 - [path-to-regexp](https://github.com/component/path-to-regexp)
1532 * add:
1533 - `app.router()` - returns the app Router instance
1534 - `app.route()` - Proxy to the app's `Router#route()` method to create a new route
1535 - Router & Route - public API
1536
15373.21.2 / 2015-07-31
1538===================
1539
1540 * deps: connect@2.30.2
1541 - deps: body-parser@~1.13.3
1542 - deps: compression@~1.5.2
1543 - deps: errorhandler@~1.4.2
1544 - deps: method-override@~2.3.5
1545 - deps: serve-index@~1.7.2
1546 - deps: type-is@~1.6.6
1547 - deps: vhost@~3.0.1
1548 * deps: vary@~1.0.1
1549 - Fix setting empty header from empty `field`
1550 - perf: enable strict mode
1551 - perf: remove argument reassignments
1552
15533.21.1 / 2015-07-05
1554===================
1555
1556 * deps: basic-auth@~1.0.3
1557 * deps: connect@2.30.1
1558 - deps: body-parser@~1.13.2
1559 - deps: compression@~1.5.1
1560 - deps: errorhandler@~1.4.1
1561 - deps: morgan@~1.6.1
1562 - deps: pause@0.1.0
1563 - deps: qs@4.0.0
1564 - deps: serve-index@~1.7.1
1565 - deps: type-is@~1.6.4
1566
15673.21.0 / 2015-06-18
1568===================
1569
1570 * deps: basic-auth@1.0.2
1571 - perf: enable strict mode
1572 - perf: hoist regular expression
1573 - perf: parse with regular expressions
1574 - perf: remove argument reassignment
1575 * deps: connect@2.30.0
1576 - deps: body-parser@~1.13.1
1577 - deps: bytes@2.1.0
1578 - deps: compression@~1.5.0
1579 - deps: cookie@0.1.3
1580 - deps: cookie-parser@~1.3.5
1581 - deps: csurf@~1.8.3
1582 - deps: errorhandler@~1.4.0
1583 - deps: express-session@~1.11.3
1584 - deps: finalhandler@0.4.0
1585 - deps: fresh@0.3.0
1586 - deps: morgan@~1.6.0
1587 - deps: serve-favicon@~2.3.0
1588 - deps: serve-index@~1.7.0
1589 - deps: serve-static@~1.10.0
1590 - deps: type-is@~1.6.3
1591 * deps: cookie@0.1.3
1592 - perf: deduce the scope of try-catch deopt
1593 - perf: remove argument reassignments
1594 * deps: escape-html@1.0.2
1595 * deps: etag@~1.7.0
1596 - Always include entity length in ETags for hash length extensions
1597 - Generate non-Stats ETags using MD5 only (no longer CRC32)
1598 - Improve stat performance by removing hashing
1599 - Improve support for JXcore
1600 - Remove base64 padding in ETags to shorten
1601 - Support "fake" stats objects in environments without fs
1602 - Use MD5 instead of MD4 in weak ETags over 1KB
1603 * deps: fresh@0.3.0
1604 - Add weak `ETag` matching support
1605 * deps: mkdirp@0.5.1
1606 - Work in global strict mode
1607 * deps: send@0.13.0
1608 - Allow Node.js HTTP server to set `Date` response header
1609 - Fix incorrectly removing `Content-Location` on 304 response
1610 - Improve the default redirect response headers
1611 - Send appropriate headers on default error response
1612 - Use `http-errors` for standard emitted errors
1613 - Use `statuses` instead of `http` module for status messages
1614 - deps: escape-html@1.0.2
1615 - deps: etag@~1.7.0
1616 - deps: fresh@0.3.0
1617 - deps: on-finished@~2.3.0
1618 - perf: enable strict mode
1619 - perf: remove unnecessary array allocations
1620
16213.20.3 / 2015-05-17
1622===================
1623
1624 * deps: connect@2.29.2
1625 - deps: body-parser@~1.12.4
1626 - deps: compression@~1.4.4
1627 - deps: connect-timeout@~1.6.2
1628 - deps: debug@~2.2.0
1629 - deps: depd@~1.0.1
1630 - deps: errorhandler@~1.3.6
1631 - deps: finalhandler@0.3.6
1632 - deps: method-override@~2.3.3
1633 - deps: morgan@~1.5.3
1634 - deps: qs@2.4.2
1635 - deps: response-time@~2.3.1
1636 - deps: serve-favicon@~2.2.1
1637 - deps: serve-index@~1.6.4
1638 - deps: serve-static@~1.9.3
1639 - deps: type-is@~1.6.2
1640 * deps: debug@~2.2.0
1641 - deps: ms@0.7.1
1642 * deps: depd@~1.0.1
1643 * deps: proxy-addr@~1.0.8
1644 - deps: ipaddr.js@1.0.1
1645 * deps: send@0.12.3
1646 - deps: debug@~2.2.0
1647 - deps: depd@~1.0.1
1648 - deps: etag@~1.6.0
1649 - deps: ms@0.7.1
1650 - deps: on-finished@~2.2.1
1651
16523.20.2 / 2015-03-16
1653===================
1654
1655 * deps: connect@2.29.1
1656 - deps: body-parser@~1.12.2
1657 - deps: compression@~1.4.3
1658 - deps: connect-timeout@~1.6.1
1659 - deps: debug@~2.1.3
1660 - deps: errorhandler@~1.3.5
1661 - deps: express-session@~1.10.4
1662 - deps: finalhandler@0.3.4
1663 - deps: method-override@~2.3.2
1664 - deps: morgan@~1.5.2
1665 - deps: qs@2.4.1
1666 - deps: serve-index@~1.6.3
1667 - deps: serve-static@~1.9.2
1668 - deps: type-is@~1.6.1
1669 * deps: debug@~2.1.3
1670 - Fix high intensity foreground color for bold
1671 - deps: ms@0.7.0
1672 * deps: merge-descriptors@1.0.0
1673 * deps: proxy-addr@~1.0.7
1674 - deps: ipaddr.js@0.1.9
1675 * deps: send@0.12.2
1676 - Throw errors early for invalid `extensions` or `index` options
1677 - deps: debug@~2.1.3
1678
16793.20.1 / 2015-02-28
1680===================
1681
1682 * Fix `req.host` when using "trust proxy" hops count
1683 * Fix `req.protocol`/`req.secure` when using "trust proxy" hops count
1684
16853.20.0 / 2015-02-18
1686===================
1687
1688 * Fix `"trust proxy"` setting to inherit when app is mounted
1689 * Generate `ETag`s for all request responses
1690 - No longer restricted to only responses for `GET` and `HEAD` requests
1691 * Use `content-type` to parse `Content-Type` headers
1692 * deps: connect@2.29.0
1693 - Use `content-type` to parse `Content-Type` headers
1694 - deps: body-parser@~1.12.0
1695 - deps: compression@~1.4.1
1696 - deps: connect-timeout@~1.6.0
1697 - deps: cookie-parser@~1.3.4
1698 - deps: cookie-signature@1.0.6
1699 - deps: csurf@~1.7.0
1700 - deps: errorhandler@~1.3.4
1701 - deps: express-session@~1.10.3
1702 - deps: http-errors@~1.3.1
1703 - deps: response-time@~2.3.0
1704 - deps: serve-index@~1.6.2
1705 - deps: serve-static@~1.9.1
1706 - deps: type-is@~1.6.0
1707 * deps: cookie-signature@1.0.6
1708 * deps: send@0.12.1
1709 - Always read the stat size from the file
1710 - Fix mutating passed-in `options`
1711 - deps: mime@1.3.4
1712
17133.19.2 / 2015-02-01
1714===================
1715
1716 * deps: connect@2.28.3
1717 - deps: compression@~1.3.1
1718 - deps: csurf@~1.6.6
1719 - deps: errorhandler@~1.3.3
1720 - deps: express-session@~1.10.2
1721 - deps: serve-index@~1.6.1
1722 - deps: type-is@~1.5.6
1723 * deps: proxy-addr@~1.0.6
1724 - deps: ipaddr.js@0.1.8
1725
17263.19.1 / 2015-01-20
1727===================
1728
1729 * deps: connect@2.28.2
1730 - deps: body-parser@~1.10.2
1731 - deps: serve-static@~1.8.1
1732 * deps: send@0.11.1
1733 - Fix root path disclosure
1734
17353.19.0 / 2015-01-09
1736===================
1737
1738 * Fix `OPTIONS` responses to include the `HEAD` method property
1739 * Use `readline` for prompt in `express(1)`
1740 * deps: commander@2.6.0
1741 * deps: connect@2.28.1
1742 - deps: body-parser@~1.10.1
1743 - deps: compression@~1.3.0
1744 - deps: connect-timeout@~1.5.0
1745 - deps: csurf@~1.6.4
1746 - deps: debug@~2.1.1
1747 - deps: errorhandler@~1.3.2
1748 - deps: express-session@~1.10.1
1749 - deps: finalhandler@0.3.3
1750 - deps: method-override@~2.3.1
1751 - deps: morgan@~1.5.1
1752 - deps: serve-favicon@~2.2.0
1753 - deps: serve-index@~1.6.0
1754 - deps: serve-static@~1.8.0
1755 - deps: type-is@~1.5.5
1756 * deps: debug@~2.1.1
1757 * deps: methods@~1.1.1
1758 * deps: proxy-addr@~1.0.5
1759 - deps: ipaddr.js@0.1.6
1760 * deps: send@0.11.0
1761 - deps: debug@~2.1.1
1762 - deps: etag@~1.5.1
1763 - deps: ms@0.7.0
1764 - deps: on-finished@~2.2.0
1765
17663.18.6 / 2014-12-12
1767===================
1768
1769 * Fix exception in `req.fresh`/`req.stale` without response headers
1770
17713.18.5 / 2014-12-11
1772===================
1773
1774 * deps: connect@2.27.6
1775 - deps: compression@~1.2.2
1776 - deps: express-session@~1.9.3
1777 - deps: http-errors@~1.2.8
1778 - deps: serve-index@~1.5.3
1779 - deps: type-is@~1.5.4
1780
17813.18.4 / 2014-11-23
1782===================
1783
1784 * deps: connect@2.27.4
1785 - deps: body-parser@~1.9.3
1786 - deps: compression@~1.2.1
1787 - deps: errorhandler@~1.2.3
1788 - deps: express-session@~1.9.2
1789 - deps: qs@2.3.3
1790 - deps: serve-favicon@~2.1.7
1791 - deps: serve-static@~1.5.1
1792 - deps: type-is@~1.5.3
1793 * deps: etag@~1.5.1
1794 * deps: proxy-addr@~1.0.4
1795 - deps: ipaddr.js@0.1.5
1796
17973.18.3 / 2014-11-09
1798===================
1799
1800 * deps: connect@2.27.3
1801 - Correctly invoke async callback asynchronously
1802 - deps: csurf@~1.6.3
1803
18043.18.2 / 2014-10-28
1805===================
1806
1807 * deps: connect@2.27.2
1808 - Fix handling of URLs containing `://` in the path
1809 - deps: body-parser@~1.9.2
1810 - deps: qs@2.3.2
1811
18123.18.1 / 2014-10-22
1813===================
1814
1815 * Fix internal `utils.merge` deprecation warnings
1816 * deps: connect@2.27.1
1817 - deps: body-parser@~1.9.1
1818 - deps: express-session@~1.9.1
1819 - deps: finalhandler@0.3.2
1820 - deps: morgan@~1.4.1
1821 - deps: qs@2.3.0
1822 - deps: serve-static@~1.7.1
1823 * deps: send@0.10.1
1824 - deps: on-finished@~2.1.1
1825
18263.18.0 / 2014-10-17
1827===================
1828
1829 * Use `content-disposition` module for `res.attachment`/`res.download`
1830 - Sends standards-compliant `Content-Disposition` header
1831 - Full Unicode support
1832 * Use `etag` module to generate `ETag` headers
1833 * deps: connect@2.27.0
1834 - Use `http-errors` module for creating errors
1835 - Use `utils-merge` module for merging objects
1836 - deps: body-parser@~1.9.0
1837 - deps: compression@~1.2.0
1838 - deps: connect-timeout@~1.4.0
1839 - deps: debug@~2.1.0
1840 - deps: depd@~1.0.0
1841 - deps: express-session@~1.9.0
1842 - deps: finalhandler@0.3.1
1843 - deps: method-override@~2.3.0
1844 - deps: morgan@~1.4.0
1845 - deps: response-time@~2.2.0
1846 - deps: serve-favicon@~2.1.6
1847 - deps: serve-index@~1.5.0
1848 - deps: serve-static@~1.7.0
1849 * deps: debug@~2.1.0
1850 - Implement `DEBUG_FD` env variable support
1851 * deps: depd@~1.0.0
1852 * deps: send@0.10.0
1853 - deps: debug@~2.1.0
1854 - deps: depd@~1.0.0
1855 - deps: etag@~1.5.0
1856
18573.17.8 / 2014-10-15
1858===================
1859
1860 * deps: connect@2.26.6
1861 - deps: compression@~1.1.2
1862 - deps: csurf@~1.6.2
1863 - deps: errorhandler@~1.2.2
1864
18653.17.7 / 2014-10-08
1866===================
1867
1868 * deps: connect@2.26.5
1869 - Fix accepting non-object arguments to `logger`
1870 - deps: serve-static@~1.6.4
1871
18723.17.6 / 2014-10-02
1873===================
1874
1875 * deps: connect@2.26.4
1876 - deps: morgan@~1.3.2
1877 - deps: type-is@~1.5.2
1878
18793.17.5 / 2014-09-24
1880===================
1881
1882 * deps: connect@2.26.3
1883 - deps: body-parser@~1.8.4
1884 - deps: serve-favicon@~2.1.5
1885 - deps: serve-static@~1.6.3
1886 * deps: proxy-addr@~1.0.3
1887 - Use `forwarded` npm module
1888 * deps: send@0.9.3
1889 - deps: etag@~1.4.0
1890
18913.17.4 / 2014-09-19
1892===================
1893
1894 * deps: connect@2.26.2
1895 - deps: body-parser@~1.8.3
1896 - deps: qs@2.2.4
1897
18983.17.3 / 2014-09-18
1899===================
1900
1901 * deps: proxy-addr@~1.0.2
1902 - Fix a global leak when multiple subnets are trusted
1903 - deps: ipaddr.js@0.1.3
1904
19053.17.2 / 2014-09-15
1906===================
1907
1908 * Use `crc` instead of `buffer-crc32` for speed
1909 * deps: connect@2.26.1
1910 - deps: body-parser@~1.8.2
1911 - deps: depd@0.4.5
1912 - deps: express-session@~1.8.2
1913 - deps: morgan@~1.3.1
1914 - deps: serve-favicon@~2.1.3
1915 - deps: serve-static@~1.6.2
1916 * deps: depd@0.4.5
1917 * deps: send@0.9.2
1918 - deps: depd@0.4.5
1919 - deps: etag@~1.3.1
1920 - deps: range-parser@~1.0.2
1921
19223.17.1 / 2014-09-08
1923===================
1924
1925 * Fix error in `req.subdomains` on empty host
1926
19273.17.0 / 2014-09-08
1928===================
1929
1930 * Support `X-Forwarded-Host` in `req.subdomains`
1931 * Support IP address host in `req.subdomains`
1932 * deps: connect@2.26.0
1933 - deps: body-parser@~1.8.1
1934 - deps: compression@~1.1.0
1935 - deps: connect-timeout@~1.3.0
1936 - deps: cookie-parser@~1.3.3
1937 - deps: cookie-signature@1.0.5
1938 - deps: csurf@~1.6.1
1939 - deps: debug@~2.0.0
1940 - deps: errorhandler@~1.2.0
1941 - deps: express-session@~1.8.1
1942 - deps: finalhandler@0.2.0
1943 - deps: fresh@0.2.4
1944 - deps: media-typer@0.3.0
1945 - deps: method-override@~2.2.0
1946 - deps: morgan@~1.3.0
1947 - deps: qs@2.2.3
1948 - deps: serve-favicon@~2.1.3
1949 - deps: serve-index@~1.2.1
1950 - deps: serve-static@~1.6.1
1951 - deps: type-is@~1.5.1
1952 - deps: vhost@~3.0.0
1953 * deps: cookie-signature@1.0.5
1954 * deps: debug@~2.0.0
1955 * deps: fresh@0.2.4
1956 * deps: media-typer@0.3.0
1957 - Throw error when parameter format invalid on parse
1958 * deps: range-parser@~1.0.2
1959 * deps: send@0.9.1
1960 - Add `lastModified` option
1961 - Use `etag` to generate `ETag` header
1962 - deps: debug@~2.0.0
1963 - deps: fresh@0.2.4
1964 * deps: vary@~1.0.0
1965 - Accept valid `Vary` header string as `field`
1966
19673.16.10 / 2014-09-04
1968====================
1969
1970 * deps: connect@2.25.10
1971 - deps: serve-static@~1.5.4
1972 * deps: send@0.8.5
1973 - Fix a path traversal issue when using `root`
1974 - Fix malicious path detection for empty string path
1975
19763.16.9 / 2014-08-29
1977===================
1978
1979 * deps: connect@2.25.9
1980 - deps: body-parser@~1.6.7
1981 - deps: qs@2.2.2
1982
19833.16.8 / 2014-08-27
1984===================
1985
1986 * deps: connect@2.25.8
1987 - deps: body-parser@~1.6.6
1988 - deps: csurf@~1.4.1
1989 - deps: qs@2.2.0
1990
19913.16.7 / 2014-08-18
1992===================
1993
1994 * deps: connect@2.25.7
1995 - deps: body-parser@~1.6.5
1996 - deps: express-session@~1.7.6
1997 - deps: morgan@~1.2.3
1998 - deps: serve-static@~1.5.3
1999 * deps: send@0.8.3
2000 - deps: destroy@1.0.3
2001 - deps: on-finished@2.1.0
2002
20033.16.6 / 2014-08-14
2004===================
2005
2006 * deps: connect@2.25.6
2007 - deps: body-parser@~1.6.4
2008 - deps: qs@1.2.2
2009 - deps: serve-static@~1.5.2
2010 * deps: send@0.8.2
2011 - Work around `fd` leak in Node.js 0.10 for `fs.ReadStream`
2012
20133.16.5 / 2014-08-11
2014===================
2015
2016 * deps: connect@2.25.5
2017 - Fix backwards compatibility in `logger`
2018
20193.16.4 / 2014-08-10
2020===================
2021
2022 * Fix original URL parsing in `res.location`
2023 * deps: connect@2.25.4
2024 - Fix `query` middleware breaking with argument
2025 - deps: body-parser@~1.6.3
2026 - deps: compression@~1.0.11
2027 - deps: connect-timeout@~1.2.2
2028 - deps: express-session@~1.7.5
2029 - deps: method-override@~2.1.3
2030 - deps: on-headers@~1.0.0
2031 - deps: parseurl@~1.3.0
2032 - deps: qs@1.2.1
2033 - deps: response-time@~2.0.1
2034 - deps: serve-index@~1.1.6
2035 - deps: serve-static@~1.5.1
2036 * deps: parseurl@~1.3.0
2037
20383.16.3 / 2014-08-07
2039===================
2040
2041 * deps: connect@2.25.3
2042 - deps: multiparty@3.3.2
2043
20443.16.2 / 2014-08-07
2045===================
2046
2047 * deps: connect@2.25.2
2048 - deps: body-parser@~1.6.2
2049 - deps: qs@1.2.0
2050
20513.16.1 / 2014-08-06
2052===================
2053
2054 * deps: connect@2.25.1
2055 - deps: body-parser@~1.6.1
2056 - deps: qs@1.1.0
2057
20583.16.0 / 2014-08-05
2059===================
2060
2061 * deps: connect@2.25.0
2062 - deps: body-parser@~1.6.0
2063 - deps: compression@~1.0.10
2064 - deps: csurf@~1.4.0
2065 - deps: express-session@~1.7.4
2066 - deps: qs@1.0.2
2067 - deps: serve-static@~1.5.0
2068 * deps: send@0.8.1
2069 - Add `extensions` option
2070
20713.15.3 / 2014-08-04
2072===================
2073
2074 * fix `res.sendfile` regression for serving directory index files
2075 * deps: connect@2.24.3
2076 - deps: serve-index@~1.1.5
2077 - deps: serve-static@~1.4.4
2078 * deps: send@0.7.4
2079 - Fix incorrect 403 on Windows and Node.js 0.11
2080 - Fix serving index files without root dir
2081
20823.15.2 / 2014-07-27
2083===================
2084
2085 * deps: connect@2.24.2
2086 - deps: body-parser@~1.5.2
2087 - deps: depd@0.4.4
2088 - deps: express-session@~1.7.2
2089 - deps: morgan@~1.2.2
2090 - deps: serve-static@~1.4.2
2091 * deps: depd@0.4.4
2092 - Work-around v8 generating empty stack traces
2093 * deps: send@0.7.2
2094 - deps: depd@0.4.4
2095
20963.15.1 / 2014-07-26
2097===================
2098
2099 * deps: connect@2.24.1
2100 - deps: body-parser@~1.5.1
2101 - deps: depd@0.4.3
2102 - deps: express-session@~1.7.1
2103 - deps: morgan@~1.2.1
2104 - deps: serve-index@~1.1.4
2105 - deps: serve-static@~1.4.1
2106 * deps: depd@0.4.3
2107 - Fix exception when global `Error.stackTraceLimit` is too low
2108 * deps: send@0.7.1
2109 - deps: depd@0.4.3
2110
21113.15.0 / 2014-07-22
2112===================
2113
2114 * Fix `req.protocol` for proxy-direct connections
2115 * Pass options from `res.sendfile` to `send`
2116 * deps: connect@2.24.0
2117 - deps: body-parser@~1.5.0
2118 - deps: compression@~1.0.9
2119 - deps: connect-timeout@~1.2.1
2120 - deps: debug@1.0.4
2121 - deps: depd@0.4.2
2122 - deps: express-session@~1.7.0
2123 - deps: finalhandler@0.1.0
2124 - deps: method-override@~2.1.2
2125 - deps: morgan@~1.2.0
2126 - deps: multiparty@3.3.1
2127 - deps: parseurl@~1.2.0
2128 - deps: serve-static@~1.4.0
2129 * deps: debug@1.0.4
2130 * deps: depd@0.4.2
2131 - Add `TRACE_DEPRECATION` environment variable
2132 - Remove non-standard grey color from color output
2133 - Support `--no-deprecation` argument
2134 - Support `--trace-deprecation` argument
2135 * deps: parseurl@~1.2.0
2136 - Cache URLs based on original value
2137 - Remove no-longer-needed URL mis-parse work-around
2138 - Simplify the "fast-path" `RegExp`
2139 * deps: send@0.7.0
2140 - Add `dotfiles` option
2141 - Cap `maxAge` value to 1 year
2142 - deps: debug@1.0.4
2143 - deps: depd@0.4.2
2144
21453.14.0 / 2014-07-11
2146===================
2147
2148 * add explicit "Rosetta Flash JSONP abuse" protection
2149 - previous versions are not vulnerable; this is just explicit protection
2150 * deprecate `res.redirect(url, status)` -- use `res.redirect(status, url)` instead
2151 * fix `res.send(status, num)` to send `num` as json (not error)
2152 * remove unnecessary escaping when `res.jsonp` returns JSON response
2153 * deps: basic-auth@1.0.0
2154 - support empty password
2155 - support empty username
2156 * deps: connect@2.23.0
2157 - deps: debug@1.0.3
2158 - deps: express-session@~1.6.4
2159 - deps: method-override@~2.1.0
2160 - deps: parseurl@~1.1.3
2161 - deps: serve-static@~1.3.1
2162 * deps: debug@1.0.3
2163 - Add support for multiple wildcards in namespaces
2164 * deps: methods@1.1.0
2165 - add `CONNECT`
2166 * deps: parseurl@~1.1.3
2167 - faster parsing of href-only URLs
2168
21693.13.0 / 2014-07-03
2170===================
2171
2172 * add deprecation message to `app.configure`
2173 * add deprecation message to `req.auth`
2174 * use `basic-auth` to parse `Authorization` header
2175 * deps: connect@2.22.0
2176 - deps: csurf@~1.3.0
2177 - deps: express-session@~1.6.1
2178 - deps: multiparty@3.3.0
2179 - deps: serve-static@~1.3.0
2180 * deps: send@0.5.0
2181 - Accept string for `maxage` (converted by `ms`)
2182 - Include link in default redirect response
2183
21843.12.1 / 2014-06-26
2185===================
2186
2187 * deps: connect@2.21.1
2188 - deps: cookie-parser@1.3.2
2189 - deps: cookie-signature@1.0.4
2190 - deps: express-session@~1.5.2
2191 - deps: type-is@~1.3.2
2192 * deps: cookie-signature@1.0.4
2193 - fix for timing attacks
2194
21953.12.0 / 2014-06-21
2196===================
2197
2198 * use `media-typer` to alter content-type charset
2199 * deps: connect@2.21.0
2200 - deprecate `connect(middleware)` -- use `app.use(middleware)` instead
2201 - deprecate `connect.createServer()` -- use `connect()` instead
2202 - fix `res.setHeader()` patch to work with get -> append -> set pattern
2203 - deps: compression@~1.0.8
2204 - deps: errorhandler@~1.1.1
2205 - deps: express-session@~1.5.0
2206 - deps: serve-index@~1.1.3
2207
22083.11.0 / 2014-06-19
2209===================
2210
2211 * deprecate things with `depd` module
2212 * deps: buffer-crc32@0.2.3
2213 * deps: connect@2.20.2
2214 - deprecate `verify` option to `json` -- use `body-parser` npm module instead
2215 - deprecate `verify` option to `urlencoded` -- use `body-parser` npm module instead
2216 - deprecate things with `depd` module
2217 - use `finalhandler` for final response handling
2218 - use `media-typer` to parse `content-type` for charset
2219 - deps: body-parser@1.4.3
2220 - deps: connect-timeout@1.1.1
2221 - deps: cookie-parser@1.3.1
2222 - deps: csurf@1.2.2
2223 - deps: errorhandler@1.1.0
2224 - deps: express-session@1.4.0
2225 - deps: multiparty@3.2.9
2226 - deps: serve-index@1.1.2
2227 - deps: type-is@1.3.1
2228 - deps: vhost@2.0.0
2229
22303.10.5 / 2014-06-11
2231===================
2232
2233 * deps: connect@2.19.6
2234 - deps: body-parser@1.3.1
2235 - deps: compression@1.0.7
2236 - deps: debug@1.0.2
2237 - deps: serve-index@1.1.1
2238 - deps: serve-static@1.2.3
2239 * deps: debug@1.0.2
2240 * deps: send@0.4.3
2241 - Do not throw uncatchable error on file open race condition
2242 - Use `escape-html` for HTML escaping
2243 - deps: debug@1.0.2
2244 - deps: finished@1.2.2
2245 - deps: fresh@0.2.2
2246
22473.10.4 / 2014-06-09
2248===================
2249
2250 * deps: connect@2.19.5
2251 - fix "event emitter leak" warnings
2252 - deps: csurf@1.2.1
2253 - deps: debug@1.0.1
2254 - deps: serve-static@1.2.2
2255 - deps: type-is@1.2.1
2256 * deps: debug@1.0.1
2257 * deps: send@0.4.2
2258 - fix "event emitter leak" warnings
2259 - deps: finished@1.2.1
2260 - deps: debug@1.0.1
2261
22623.10.3 / 2014-06-05
2263===================
2264
2265 * use `vary` module for `res.vary`
2266 * deps: connect@2.19.4
2267 - deps: errorhandler@1.0.2
2268 - deps: method-override@2.0.2
2269 - deps: serve-favicon@2.0.1
2270 * deps: debug@1.0.0
2271
22723.10.2 / 2014-06-03
2273===================
2274
2275 * deps: connect@2.19.3
2276 - deps: compression@1.0.6
2277
22783.10.1 / 2014-06-03
2279===================
2280
2281 * deps: connect@2.19.2
2282 - deps: compression@1.0.4
2283 * deps: proxy-addr@1.0.1
2284
22853.10.0 / 2014-06-02
2286===================
2287
2288 * deps: connect@2.19.1
2289 - deprecate `methodOverride()` -- use `method-override` npm module instead
2290 - deps: body-parser@1.3.0
2291 - deps: method-override@2.0.1
2292 - deps: multiparty@3.2.8
2293 - deps: response-time@2.0.0
2294 - deps: serve-static@1.2.1
2295 * deps: methods@1.0.1
2296 * deps: send@0.4.1
2297 - Send `max-age` in `Cache-Control` in correct format
2298
22993.9.0 / 2014-05-30
2300==================
2301
2302 * custom etag control with `app.set('etag', val)`
2303 - `app.set('etag', function(body, encoding){ return '"etag"' })` custom etag generation
2304 - `app.set('etag', 'weak')` weak tag
2305 - `app.set('etag', 'strong')` strong etag
2306 - `app.set('etag', false)` turn off
2307 - `app.set('etag', true)` standard etag
2308 * Include ETag in HEAD requests
2309 * mark `res.send` ETag as weak and reduce collisions
2310 * update connect to 2.18.0
2311 - deps: compression@1.0.3
2312 - deps: serve-index@1.1.0
2313 - deps: serve-static@1.2.0
2314 * update send to 0.4.0
2315 - Calculate ETag with md5 for reduced collisions
2316 - Ignore stream errors after request ends
2317 - deps: debug@0.8.1
2318
23193.8.1 / 2014-05-27
2320==================
2321
2322 * update connect to 2.17.3
2323 - deps: body-parser@1.2.2
2324 - deps: express-session@1.2.1
2325 - deps: method-override@1.0.2
2326
23273.8.0 / 2014-05-21
2328==================
2329
2330 * keep previous `Content-Type` for `res.jsonp`
2331 * set proper `charset` in `Content-Type` for `res.send`
2332 * update connect to 2.17.1
2333 - fix `res.charset` appending charset when `content-type` has one
2334 - deps: express-session@1.2.0
2335 - deps: morgan@1.1.1
2336 - deps: serve-index@1.0.3
2337
23383.7.0 / 2014-05-18
2339==================
2340
2341 * proper proxy trust with `app.set('trust proxy', trust)`
2342 - `app.set('trust proxy', 1)` trust first hop
2343 - `app.set('trust proxy', 'loopback')` trust loopback addresses
2344 - `app.set('trust proxy', '10.0.0.1')` trust single IP
2345 - `app.set('trust proxy', '10.0.0.1/16')` trust subnet
2346 - `app.set('trust proxy', '10.0.0.1, 10.0.0.2')` trust list
2347 - `app.set('trust proxy', false)` turn off
2348 - `app.set('trust proxy', true)` trust everything
2349 * update connect to 2.16.2
2350 - deprecate `res.headerSent` -- use `res.headersSent`
2351 - deprecate `res.on("header")` -- use on-headers module instead
2352 - fix edge-case in `res.appendHeader` that would append in wrong order
2353 - json: use body-parser
2354 - urlencoded: use body-parser
2355 - dep: bytes@1.0.0
2356 - dep: cookie-parser@1.1.0
2357 - dep: csurf@1.2.0
2358 - dep: express-session@1.1.0
2359 - dep: method-override@1.0.1
2360
23613.6.0 / 2014-05-09
2362==================
2363
2364 * deprecate `app.del()` -- use `app.delete()` instead
2365 * deprecate `res.json(obj, status)` -- use `res.json(status, obj)` instead
2366 - the edge-case `res.json(status, num)` requires `res.status(status).json(num)`
2367 * deprecate `res.jsonp(obj, status)` -- use `res.jsonp(status, obj)` instead
2368 - the edge-case `res.jsonp(status, num)` requires `res.status(status).jsonp(num)`
2369 * support PURGE method
2370 - add `app.purge`
2371 - add `router.purge`
2372 - include PURGE in `app.all`
2373 * update connect to 2.15.0
2374 * Add `res.appendHeader`
2375 * Call error stack even when response has been sent
2376 * Patch `res.headerSent` to return Boolean
2377 * Patch `res.headersSent` for node.js 0.8
2378 * Prevent default 404 handler after response sent
2379 * dep: compression@1.0.2
2380 * dep: connect-timeout@1.1.0
2381 * dep: debug@^0.8.0
2382 * dep: errorhandler@1.0.1
2383 * dep: express-session@1.0.4
2384 * dep: morgan@1.0.1
2385 * dep: serve-favicon@2.0.0
2386 * dep: serve-index@1.0.2
2387 * update debug to 0.8.0
2388 * add `enable()` method
2389 * change from stderr to stdout
2390 * update methods to 1.0.0
2391 - add PURGE
2392 * update mkdirp to 0.5.0
2393
23943.5.3 / 2014-05-08
2395==================
2396
2397 * fix `req.host` for IPv6 literals
2398 * fix `res.jsonp` error if callback param is object
2399
24003.5.2 / 2014-04-24
2401==================
2402
2403 * update connect to 2.14.5
2404 * update cookie to 0.1.2
2405 * update mkdirp to 0.4.0
2406 * update send to 0.3.0
2407
24083.5.1 / 2014-03-25
2409==================
2410
2411 * pin less-middleware in generated app
2412
24133.5.0 / 2014-03-06
2414==================
2415
2416 * bump deps
2417
24183.4.8 / 2014-01-13
2419==================
2420
2421 * prevent incorrect automatic OPTIONS responses #1868 @dpatti
2422 * update binary and examples for jade 1.0 #1876 @yossi, #1877 @reqshark, #1892 @matheusazzi
2423 * throw 400 in case of malformed paths @rlidwka
2424
24253.4.7 / 2013-12-10
2426==================
2427
2428 * update connect
2429
24303.4.6 / 2013-12-01
2431==================
2432
2433 * update connect (raw-body)
2434
24353.4.5 / 2013-11-27
2436==================
2437
2438 * update connect
2439 * res.location: remove leading ./ #1802 @kapouer
2440 * res.redirect: fix `res.redirect('toString') #1829 @michaelficarra
2441 * res.send: always send ETag when content-length > 0
2442 * router: add Router.all() method
2443
24443.4.4 / 2013-10-29
2445==================
2446
2447 * update connect
2448 * update supertest
2449 * update methods
2450 * express(1): replace bodyParser() with urlencoded() and json() #1795 @chirag04
2451
24523.4.3 / 2013-10-23
2453==================
2454
2455 * update connect
2456
24573.4.2 / 2013-10-18
2458==================
2459
2460 * update connect
2461 * downgrade commander
2462
24633.4.1 / 2013-10-15
2464==================
2465
2466 * update connect
2467 * update commander
2468 * jsonp: check if callback is a function
2469 * router: wrap encodeURIComponent in a try/catch #1735 (@lxe)
2470 * res.format: now includes charset @1747 (@sorribas)
2471 * res.links: allow multiple calls @1746 (@sorribas)
2472
24733.4.0 / 2013-09-07
2474==================
2475
2476 * add res.vary(). Closes #1682
2477 * update connect
2478
24793.3.8 / 2013-09-02
2480==================
2481
2482 * update connect
2483
24843.3.7 / 2013-08-28
2485==================
2486
2487 * update connect
2488
24893.3.6 / 2013-08-27
2490==================
2491
2492 * Revert "remove charset from json responses. Closes #1631" (causes issues in some clients)
2493 * add: req.accepts take an argument list
2494
24953.3.4 / 2013-07-08
2496==================
2497
2498 * update send and connect
2499
25003.3.3 / 2013-07-04
2501==================
2502
2503 * update connect
2504
25053.3.2 / 2013-07-03
2506==================
2507
2508 * update connect
2509 * update send
2510 * remove .version export
2511
25123.3.1 / 2013-06-27
2513==================
2514
2515 * update connect
2516
25173.3.0 / 2013-06-26
2518==================
2519
2520 * update connect
2521 * add support for multiple X-Forwarded-Proto values. Closes #1646
2522 * change: remove charset from json responses. Closes #1631
2523 * change: return actual booleans from req.accept* functions
2524 * fix jsonp callback array throw
2525
25263.2.6 / 2013-06-02
2527==================
2528
2529 * update connect
2530
25313.2.5 / 2013-05-21
2532==================
2533
2534 * update connect
2535 * update node-cookie
2536 * add: throw a meaningful error when there is no default engine
2537 * change generation of ETags with res.send() to GET requests only. Closes #1619
2538
25393.2.4 / 2013-05-09
2540==================
2541
2542 * fix `req.subdomains` when no Host is present
2543 * fix `req.host` when no Host is present, return undefined
2544
25453.2.3 / 2013-05-07
2546==================
2547
2548 * update connect / qs
2549
25503.2.2 / 2013-05-03
2551==================
2552
2553 * update qs
2554
25553.2.1 / 2013-04-29
2556==================
2557
2558 * add app.VERB() paths array deprecation warning
2559 * update connect
2560 * update qs and remove all ~ semver crap
2561 * fix: accept number as value of Signed Cookie
2562
25633.2.0 / 2013-04-15
2564==================
2565
2566 * add "view" constructor setting to override view behaviour
2567 * add req.acceptsEncoding(name)
2568 * add req.acceptedEncodings
2569 * revert cookie signature change causing session race conditions
2570 * fix sorting of Accept values of the same quality
2571
25723.1.2 / 2013-04-12
2573==================
2574
2575 * add support for custom Accept parameters
2576 * update cookie-signature
2577
25783.1.1 / 2013-04-01
2579==================
2580
2581 * add X-Forwarded-Host support to `req.host`
2582 * fix relative redirects
2583 * update mkdirp
2584 * update buffer-crc32
2585 * remove legacy app.configure() method from app template.
2586
25873.1.0 / 2013-01-25
2588==================
2589
2590 * add support for leading "." in "view engine" setting
2591 * add array support to `res.set()`
2592 * add node 0.8.x to travis.yml
2593 * add "subdomain offset" setting for tweaking `req.subdomains`
2594 * add `res.location(url)` implementing `res.redirect()`-like setting of Location
2595 * use app.get() for x-powered-by setting for inheritance
2596 * fix colons in passwords for `req.auth`
2597
25983.0.6 / 2013-01-04
2599==================
2600
2601 * add http verb methods to Router
2602 * update connect
2603 * fix mangling of the `res.cookie()` options object
2604 * fix jsonp whitespace escape. Closes #1132
2605
26063.0.5 / 2012-12-19
2607==================
2608
2609 * add throwing when a non-function is passed to a route
2610 * fix: explicitly remove Transfer-Encoding header from 204 and 304 responses
2611 * revert "add 'etag' option"
2612
26133.0.4 / 2012-12-05
2614==================
2615
2616 * add 'etag' option to disable `res.send()` Etags
2617 * add escaping of urls in text/plain in `res.redirect()`
2618 for old browsers interpreting as html
2619 * change crc32 module for a more liberal license
2620 * update connect
2621
26223.0.3 / 2012-11-13
2623==================
2624
2625 * update connect
2626 * update cookie module
2627 * fix cookie max-age
2628
26293.0.2 / 2012-11-08
2630==================
2631
2632 * add OPTIONS to cors example. Closes #1398
2633 * fix route chaining regression. Closes #1397
2634
26353.0.1 / 2012-11-01
2636==================
2637
2638 * update connect
2639
26403.0.0 / 2012-10-23
2641==================
2642
2643 * add `make clean`
2644 * add "Basic" check to req.auth
2645 * add `req.auth` test coverage
2646 * add cb && cb(payload) to `res.jsonp()`. Closes #1374
2647 * add backwards compat for `res.redirect()` status. Closes #1336
2648 * add support for `res.json()` to retain previously defined Content-Types. Closes #1349
2649 * update connect
2650 * change `res.redirect()` to utilize a pathname-relative Location again. Closes #1382
2651 * remove non-primitive string support for `res.send()`
2652 * fix view-locals example. Closes #1370
2653 * fix route-separation example
2654
26553.0.0rc5 / 2012-09-18
2656==================
2657
2658 * update connect
2659 * add redis search example
2660 * add static-files example
2661 * add "x-powered-by" setting (`app.disable('x-powered-by')`)
2662 * add "application/octet-stream" redirect Accept test case. Closes #1317
2663
26643.0.0rc4 / 2012-08-30
2665==================
2666
2667 * add `res.jsonp()`. Closes #1307
2668 * add "verbose errors" option to error-pages example
2669 * add another route example to express(1) so people are not so confused
2670 * add redis online user activity tracking example
2671 * update connect dep
2672 * fix etag quoting. Closes #1310
2673 * fix error-pages 404 status
2674 * fix jsonp callback char restrictions
2675 * remove old OPTIONS default response
2676
26773.0.0rc3 / 2012-08-13
2678==================
2679
2680 * update connect dep
2681 * fix signed cookies to work with `connect.cookieParser()` ("s:" prefix was missing) [tnydwrds]
2682 * fix `res.render()` clobbering of "locals"
2683
26843.0.0rc2 / 2012-08-03
2685==================
2686
2687 * add CORS example
2688 * update connect dep
2689 * deprecate `.createServer()` & remove old stale examples
2690 * fix: escape `res.redirect()` link
2691 * fix vhost example
2692
26933.0.0rc1 / 2012-07-24
2694==================
2695
2696 * add more examples to view-locals
2697 * add scheme-relative redirects (`res.redirect("//foo.com")`) support
2698 * update cookie dep
2699 * update connect dep
2700 * update send dep
2701 * fix `express(1)` -h flag, use -H for hogan. Closes #1245
2702 * fix `res.sendfile()` socket error handling regression
2703
27043.0.0beta7 / 2012-07-16
2705==================
2706
2707 * update connect dep for `send()` root normalization regression
2708
27093.0.0beta6 / 2012-07-13
2710==================
2711
2712 * add `err.view` property for view errors. Closes #1226
2713 * add "jsonp callback name" setting
2714 * add support for "/foo/:bar*" non-greedy matches
2715 * change `res.sendfile()` to use `send()` module
2716 * change `res.send` to use "response-send" module
2717 * remove `app.locals.use` and `res.locals.use`, use regular middleware
2718
27193.0.0beta5 / 2012-07-03
2720==================
2721
2722 * add "make check" support
2723 * add route-map example
2724 * add `res.json(obj, status)` support back for BC
2725 * add "methods" dep, remove internal methods module
2726 * update connect dep
2727 * update auth example to utilize cores pbkdf2
2728 * updated tests to use "supertest"
2729
27303.0.0beta4 / 2012-06-25
2731==================
2732
2733 * Added `req.auth`
2734 * Added `req.range(size)`
2735 * Added `res.links(obj)`
2736 * Added `res.send(body, status)` support back for backwards compat
2737 * Added `.default()` support to `res.format()`
2738 * Added 2xx / 304 check to `req.fresh`
2739 * Revert "Added + support to the router"
2740 * Fixed `res.send()` freshness check, respect res.statusCode
2741
27423.0.0beta3 / 2012-06-15
2743==================
2744
2745 * Added hogan `--hjs` to express(1) [nullfirm]
2746 * Added another example to content-negotiation
2747 * Added `fresh` dep
2748 * Changed: `res.send()` always checks freshness
2749 * Fixed: expose connects mime module. Closes #1165
2750
27513.0.0beta2 / 2012-06-06
2752==================
2753
2754 * Added `+` support to the router
2755 * Added `req.host`
2756 * Changed `req.param()` to check route first
2757 * Update connect dep
2758
27593.0.0beta1 / 2012-06-01
2760==================
2761
2762 * Added `res.format()` callback to override default 406 behaviour
2763 * Fixed `res.redirect()` 406. Closes #1154
2764
27653.0.0alpha5 / 2012-05-30
2766==================
2767
2768 * Added `req.ip`
2769 * Added `{ signed: true }` option to `res.cookie()`
2770 * Removed `res.signedCookie()`
2771 * Changed: dont reverse `req.ips`
2772 * Fixed "trust proxy" setting check for `req.ips`
2773
27743.0.0alpha4 / 2012-05-09
2775==================
2776
2777 * Added: allow `[]` in jsonp callback. Closes #1128
2778 * Added `PORT` env var support in generated template. Closes #1118 [benatkin]
2779 * Updated: connect 2.2.2
2780
27813.0.0alpha3 / 2012-05-04
2782==================
2783
2784 * Added public `app.routes`. Closes #887
2785 * Added _view-locals_ example
2786 * Added _mvc_ example
2787 * Added `res.locals.use()`. Closes #1120
2788 * Added conditional-GET support to `res.send()`
2789 * Added: coerce `res.set()` values to strings
2790 * Changed: moved `static()` in generated apps below router
2791 * Changed: `res.send()` only set ETag when not previously set
2792 * Changed connect 2.2.1 dep
2793 * Changed: `make test` now runs unit / acceptance tests
2794 * Fixed req/res proto inheritance
2795
27963.0.0alpha2 / 2012-04-26
2797==================
2798
2799 * Added `make benchmark` back
2800 * Added `res.send()` support for `String` objects
2801 * Added client-side data exposing example
2802 * Added `res.header()` and `req.header()` aliases for BC
2803 * Added `express.createServer()` for BC
2804 * Perf: memoize parsed urls
2805 * Perf: connect 2.2.0 dep
2806 * Changed: make `expressInit()` middleware self-aware
2807 * Fixed: use app.get() for all core settings
2808 * Fixed redis session example
2809 * Fixed session example. Closes #1105
2810 * Fixed generated express dep. Closes #1078
2811
28123.0.0alpha1 / 2012-04-15
2813==================
2814
2815 * Added `app.locals.use(callback)`
2816 * Added `app.locals` object
2817 * Added `app.locals(obj)`
2818 * Added `res.locals` object
2819 * Added `res.locals(obj)`
2820 * Added `res.format()` for content-negotiation
2821 * Added `app.engine()`
2822 * Added `res.cookie()` JSON cookie support
2823 * Added "trust proxy" setting
2824 * Added `req.subdomains`
2825 * Added `req.protocol`
2826 * Added `req.secure`
2827 * Added `req.path`
2828 * Added `req.ips`
2829 * Added `req.fresh`
2830 * Added `req.stale`
2831 * Added comma-delimited / array support for `req.accepts()`
2832 * Added debug instrumentation
2833 * Added `res.set(obj)`
2834 * Added `res.set(field, value)`
2835 * Added `res.get(field)`
2836 * Added `app.get(setting)`. Closes #842
2837 * Added `req.acceptsLanguage()`
2838 * Added `req.acceptsCharset()`
2839 * Added `req.accepted`
2840 * Added `req.acceptedLanguages`
2841 * Added `req.acceptedCharsets`
2842 * Added "json replacer" setting
2843 * Added "json spaces" setting
2844 * Added X-Forwarded-Proto support to `res.redirect()`. Closes #92
2845 * Added `--less` support to express(1)
2846 * Added `express.response` prototype
2847 * Added `express.request` prototype
2848 * Added `express.application` prototype
2849 * Added `app.path()`
2850 * Added `app.render()`
2851 * Added `res.type()` to replace `res.contentType()`
2852 * Changed: `res.redirect()` to add relative support
2853 * Changed: enable "jsonp callback" by default
2854 * Changed: renamed "case sensitive routes" to "case sensitive routing"
2855 * Rewrite of all tests with mocha
2856 * Removed "root" setting
2857 * Removed `res.redirect('home')` support
2858 * Removed `req.notify()`
2859 * Removed `app.register()`
2860 * Removed `app.redirect()`
2861 * Removed `app.is()`
2862 * Removed `app.helpers()`
2863 * Removed `app.dynamicHelpers()`
2864 * Fixed `res.sendfile()` with non-GET. Closes #723
2865 * Fixed express(1) public dir for windows. Closes #866
2866
28672.5.9/ 2012-04-02
2868==================
2869
2870 * Added support for PURGE request method [pbuyle]
2871 * Fixed `express(1)` generated app `app.address()` before `listening` [mmalecki]
2872
28732.5.8 / 2012-02-08
2874==================
2875
2876 * Update mkdirp dep. Closes #991
2877
28782.5.7 / 2012-02-06
2879==================
2880
2881 * Fixed `app.all` duplicate DELETE requests [mscdex]
2882
28832.5.6 / 2012-01-13
2884==================
2885
2886 * Updated hamljs dev dep. Closes #953
2887
28882.5.5 / 2012-01-08
2889==================
2890
2891 * Fixed: set `filename` on cached templates [matthewleon]
2892
28932.5.4 / 2012-01-02
2894==================
2895
2896 * Fixed `express(1)` eol on 0.4.x. Closes #947
2897
28982.5.3 / 2011-12-30
2899==================
2900
2901 * Fixed `req.is()` when a charset is present
2902
29032.5.2 / 2011-12-10
2904==================
2905
2906 * Fixed: express(1) LF -> CRLF for windows
2907
29082.5.1 / 2011-11-17
2909==================
2910
2911 * Changed: updated connect to 1.8.x
2912 * Removed sass.js support from express(1)
2913
29142.5.0 / 2011-10-24
2915==================
2916
2917 * Added ./routes dir for generated app by default
2918 * Added npm install reminder to express(1) app gen
2919 * Added 0.5.x support
2920 * Removed `make test-cov` since it wont work with node 0.5.x
2921 * Fixed express(1) public dir for windows. Closes #866
2922
29232.4.7 / 2011-10-05
2924==================
2925
2926 * Added mkdirp to express(1). Closes #795
2927 * Added simple _json-config_ example
2928 * Added shorthand for the parsed request's pathname via `req.path`
2929 * Changed connect dep to 1.7.x to fix npm issue...
2930 * Fixed `res.redirect()` __HEAD__ support. [reported by xerox]
2931 * Fixed `req.flash()`, only escape args
2932 * Fixed absolute path checking on windows. Closes #829 [reported by andrewpmckenzie]
2933
29342.4.6 / 2011-08-22
2935==================
2936
2937 * Fixed multiple param callback regression. Closes #824 [reported by TroyGoode]
2938
29392.4.5 / 2011-08-19
2940==================
2941
2942 * Added support for routes to handle errors. Closes #809
2943 * Added `app.routes.all()`. Closes #803
2944 * Added "basepath" setting to work in conjunction with reverse proxies etc.
2945 * Refactored `Route` to use a single array of callbacks
2946 * Added support for multiple callbacks for `app.param()`. Closes #801
2947Closes #805
2948 * Changed: removed .call(self) for route callbacks
2949 * Dependency: `qs >= 0.3.1`
2950 * Fixed `res.redirect()` on windows due to `join()` usage. Closes #808
2951
29522.4.4 / 2011-08-05
2953==================
2954
2955 * Fixed `res.header()` intention of a set, even when `undefined`
2956 * Fixed `*`, value no longer required
2957 * Fixed `res.send(204)` support. Closes #771
2958
29592.4.3 / 2011-07-14
2960==================
2961
2962 * Added docs for `status` option special-case. Closes #739
2963 * Fixed `options.filename`, exposing the view path to template engines
2964
29652.4.2. / 2011-07-06
2966==================
2967
2968 * Revert "removed jsonp stripping" for XSS
2969
29702.4.1 / 2011-07-06
2971==================
2972
2973 * Added `res.json()` JSONP support. Closes #737
2974 * Added _extending-templates_ example. Closes #730
2975 * Added "strict routing" setting for trailing slashes
2976 * Added support for multiple envs in `app.configure()` calls. Closes #735
2977 * Changed: `res.send()` using `res.json()`
2978 * Changed: when cookie `path === null` don't default it
2979 * Changed; default cookie path to "home" setting. Closes #731
2980 * Removed _pids/logs_ creation from express(1)
2981
29822.4.0 / 2011-06-28
2983==================
2984
2985 * Added chainable `res.status(code)`
2986 * Added `res.json()`, an explicit version of `res.send(obj)`
2987 * Added simple web-service example
2988
29892.3.12 / 2011-06-22
2990==================
2991
2992 * \#express is now on freenode! come join!
2993 * Added `req.get(field, param)`
2994 * Added links to Japanese documentation, thanks @hideyukisaito!
2995 * Added; the `express(1)` generated app outputs the env
2996 * Added `content-negotiation` example
2997 * Dependency: connect >= 1.5.1 < 2.0.0
2998 * Fixed view layout bug. Closes #720
2999 * Fixed; ignore body on 304. Closes #701
3000
30012.3.11 / 2011-06-04
3002==================
3003
3004 * Added `npm test`
3005 * Removed generation of dummy test file from `express(1)`
3006 * Fixed; `express(1)` adds express as a dep
3007 * Fixed; prune on `prepublish`
3008
30092.3.10 / 2011-05-27
3010==================
3011
3012 * Added `req.route`, exposing the current route
3013 * Added _package.json_ generation support to `express(1)`
3014 * Fixed call to `app.param()` function for optional params. Closes #682
3015
30162.3.9 / 2011-05-25
3017==================
3018
3019 * Fixed bug-ish with `../' in `res.partial()` calls
3020
30212.3.8 / 2011-05-24
3022==================
3023
3024 * Fixed `app.options()`
3025
30262.3.7 / 2011-05-23
3027==================
3028
3029 * Added route `Collection`, ex: `app.get('/user/:id').remove();`
3030 * Added support for `app.param(fn)` to define param logic
3031 * Removed `app.param()` support for callback with return value
3032 * Removed module.parent check from express(1) generated app. Closes #670
3033 * Refactored router. Closes #639
3034
30352.3.6 / 2011-05-20
3036==================
3037
3038 * Changed; using devDependencies instead of git submodules
3039 * Fixed redis session example
3040 * Fixed markdown example
3041 * Fixed view caching, should not be enabled in development
3042
30432.3.5 / 2011-05-20
3044==================
3045
3046 * Added export `.view` as alias for `.View`
3047
30482.3.4 / 2011-05-08
3049==================
3050
3051 * Added `./examples/say`
3052 * Fixed `res.sendfile()` bug preventing the transfer of files with spaces
3053
30542.3.3 / 2011-05-03
3055==================
3056
3057 * Added "case sensitive routes" option.
3058 * Changed; split methods supported per rfc [slaskis]
3059 * Fixed route-specific middleware when using the same callback function several times
3060
30612.3.2 / 2011-04-27
3062==================
3063
3064 * Fixed view hints
3065
30662.3.1 / 2011-04-26
3067==================
3068
3069 * Added `app.match()` as `app.match.all()`
3070 * Added `app.lookup()` as `app.lookup.all()`
3071 * Added `app.remove()` for `app.remove.all()`
3072 * Added `app.remove.VERB()`
3073 * Fixed template caching collision issue. Closes #644
3074 * Moved router over from connect and started refactor
3075
30762.3.0 / 2011-04-25
3077==================
3078
3079 * Added options support to `res.clearCookie()`
3080 * Added `res.helpers()` as alias of `res.locals()`
3081 * Added; json defaults to UTF-8 with `res.send()`. Closes #632. [Daniel * Dependency `connect >= 1.4.0`
3082 * Changed; auto set Content-Type in res.attachement [Aaron Heckmann]
3083 * Renamed "cache views" to "view cache". Closes #628
3084 * Fixed caching of views when using several apps. Closes #637
3085 * Fixed gotcha invoking `app.param()` callbacks once per route middleware.
3086Closes #638
3087 * Fixed partial lookup precedence. Closes #631
3088Shaw]
3089
30902.2.2 / 2011-04-12
3091==================
3092
3093 * Added second callback support for `res.download()` connection errors
3094 * Fixed `filename` option passing to template engine
3095
30962.2.1 / 2011-04-04
3097==================
3098
3099 * Added `layout(path)` helper to change the layout within a view. Closes #610
3100 * Fixed `partial()` collection object support.
3101 Previously only anything with `.length` would work.
3102 When `.length` is present one must still be aware of holes,
3103 however now `{ collection: {foo: 'bar'}}` is valid, exposes
3104 `keyInCollection` and `keysInCollection`.
3105
3106 * Performance improved with better view caching
3107 * Removed `request` and `response` locals
3108 * Changed; errorHandler page title is now `Express` instead of `Connect`
3109
31102.2.0 / 2011-03-30
3111==================
3112
3113 * Added `app.lookup.VERB()`, ex `app.lookup.put('/user/:id')`. Closes #606
3114 * Added `app.match.VERB()`, ex `app.match.put('/user/12')`. Closes #606
3115 * Added `app.VERB(path)` as alias of `app.lookup.VERB()`.
3116 * Dependency `connect >= 1.2.0`
3117
31182.1.1 / 2011-03-29
3119==================
3120
3121 * Added; expose `err.view` object when failing to locate a view
3122 * Fixed `res.partial()` call `next(err)` when no callback is given [reported by aheckmann]
3123 * Fixed; `res.send(undefined)` responds with 204 [aheckmann]
3124
31252.1.0 / 2011-03-24
3126==================
3127
3128 * Added `<root>/_?<name>` partial lookup support. Closes #447
3129 * Added `request`, `response`, and `app` local variables
3130 * Added `settings` local variable, containing the app's settings
3131 * Added `req.flash()` exception if `req.session` is not available
3132 * Added `res.send(bool)` support (json response)
3133 * Fixed stylus example for latest version
3134 * Fixed; wrap try/catch around `res.render()`
3135
31362.0.0 / 2011-03-17
3137==================
3138
3139 * Fixed up index view path alternative.
3140 * Changed; `res.locals()` without object returns the locals
3141
31422.0.0rc3 / 2011-03-17
3143==================
3144
3145 * Added `res.locals(obj)` to compliment `res.local(key, val)`
3146 * Added `res.partial()` callback support
3147 * Fixed recursive error reporting issue in `res.render()`
3148
31492.0.0rc2 / 2011-03-17
3150==================
3151
3152 * Changed; `partial()` "locals" are now optional
3153 * Fixed `SlowBuffer` support. Closes #584 [reported by tyrda01]
3154 * Fixed .filename view engine option [reported by drudge]
3155 * Fixed blog example
3156 * Fixed `{req,res}.app` reference when mounting [Ben Weaver]
3157
31582.0.0rc / 2011-03-14
3159==================
3160
3161 * Fixed; expose `HTTPSServer` constructor
3162 * Fixed express(1) default test charset. Closes #579 [reported by secoif]
3163 * Fixed; default charset to utf-8 instead of utf8 for lame IE [reported by NickP]
3164
31652.0.0beta3 / 2011-03-09
3166==================
3167
3168 * Added support for `res.contentType()` literal
3169 The original `res.contentType('.json')`,
3170 `res.contentType('application/json')`, and `res.contentType('json')`
3171 will work now.
3172 * Added `res.render()` status option support back
3173 * Added charset option for `res.render()`
3174 * Added `.charset` support (via connect 1.0.4)
3175 * Added view resolution hints when in development and a lookup fails
3176 * Added layout lookup support relative to the page view.
3177 For example while rendering `./views/user/index.jade` if you create
3178 `./views/user/layout.jade` it will be used in favour of the root layout.
3179 * Fixed `res.redirect()`. RFC states absolute url [reported by unlink]
3180 * Fixed; default `res.send()` string charset to utf8
3181 * Removed `Partial` constructor (not currently used)
3182
31832.0.0beta2 / 2011-03-07
3184==================
3185
3186 * Added res.render() `.locals` support back to aid in migration process
3187 * Fixed flash example
3188
31892.0.0beta / 2011-03-03
3190==================
3191
3192 * Added HTTPS support
3193 * Added `res.cookie()` maxAge support
3194 * Added `req.header()` _Referrer_ / _Referer_ special-case, either works
3195 * Added mount support for `res.redirect()`, now respects the mount-point
3196 * Added `union()` util, taking place of `merge(clone())` combo
3197 * Added stylus support to express(1) generated app
3198 * Added secret to session middleware used in examples and generated app
3199 * Added `res.local(name, val)` for progressive view locals
3200 * Added default param support to `req.param(name, default)`
3201 * Added `app.disabled()` and `app.enabled()`
3202 * Added `app.register()` support for omitting leading ".", either works
3203 * Added `res.partial()`, using the same interface as `partial()` within a view. Closes #539
3204 * Added `app.param()` to map route params to async/sync logic
3205 * Added; aliased `app.helpers()` as `app.locals()`. Closes #481
3206 * Added extname with no leading "." support to `res.contentType()`
3207 * Added `cache views` setting, defaulting to enabled in "production" env
3208 * Added index file partial resolution, eg: partial('user') may try _views/user/index.jade_.
3209 * Added `req.accepts()` support for extensions
3210 * Changed; `res.download()` and `res.sendfile()` now utilize Connect's
3211 static file server `connect.static.send()`.
3212 * Changed; replaced `connect.utils.mime()` with npm _mime_ module
3213 * Changed; allow `req.query` to be pre-defined (via middleware or other parent
3214 * Changed view partial resolution, now relative to parent view
3215 * Changed view engine signature. no longer `engine.render(str, options, callback)`, now `engine.compile(str, options) -> Function`, the returned function accepts `fn(locals)`.
3216 * Fixed `req.param()` bug returning Array.prototype methods. Closes #552
3217 * Fixed; using `Stream#pipe()` instead of `sys.pump()` in `res.sendfile()`
3218 * Fixed; using _qs_ module instead of _querystring_
3219 * Fixed; strip unsafe chars from jsonp callbacks
3220 * Removed "stream threshold" setting
3221
32221.0.8 / 2011-03-01
3223==================
3224
3225 * Allow `req.query` to be pre-defined (via middleware or other parent app)
3226 * "connect": ">= 0.5.0 < 1.0.0". Closes #547
3227 * Removed the long deprecated __EXPRESS_ENV__ support
3228
32291.0.7 / 2011-02-07
3230==================
3231
3232 * Fixed `render()` setting inheritance.
3233 Mounted apps would not inherit "view engine"
3234
32351.0.6 / 2011-02-07
3236==================
3237
3238 * Fixed `view engine` setting bug when period is in dirname
3239
32401.0.5 / 2011-02-05
3241==================
3242
3243 * Added secret to generated app `session()` call
3244
32451.0.4 / 2011-02-05
3246==================
3247
3248 * Added `qs` dependency to _package.json_
3249 * Fixed namespaced `require()`s for latest connect support
3250
32511.0.3 / 2011-01-13
3252==================
3253
3254 * Remove unsafe characters from JSONP callback names [Ryan Grove]
3255
32561.0.2 / 2011-01-10
3257==================
3258
3259 * Removed nested require, using `connect.router`
3260
32611.0.1 / 2010-12-29
3262==================
3263
3264 * Fixed for middleware stacked via `createServer()`
3265 previously the `foo` middleware passed to `createServer(foo)`
3266 would not have access to Express methods such as `res.send()`
3267 or props like `req.query` etc.
3268
32691.0.0 / 2010-11-16
3270==================
3271
3272 * Added; deduce partial object names from the last segment.
3273 For example by default `partial('forum/post', postObject)` will
3274 give you the _post_ object, providing a meaningful default.
3275 * Added http status code string representation to `res.redirect()` body
3276 * Added; `res.redirect()` supporting _text/plain_ and _text/html_ via __Accept__.
3277 * Added `req.is()` to aid in content negotiation
3278 * Added partial local inheritance [suggested by masylum]. Closes #102
3279 providing access to parent template locals.
3280 * Added _-s, --session[s]_ flag to express(1) to add session related middleware
3281 * Added _--template_ flag to express(1) to specify the
3282 template engine to use.
3283 * Added _--css_ flag to express(1) to specify the
3284 stylesheet engine to use (or just plain css by default).
3285 * Added `app.all()` support [thanks aheckmann]
3286 * Added partial direct object support.
3287 You may now `partial('user', user)` providing the "user" local,
3288 vs previously `partial('user', { object: user })`.
3289 * Added _route-separation_ example since many people question ways
3290 to do this with CommonJS modules. Also view the _blog_ example for
3291 an alternative.
3292 * Performance; caching view path derived partial object names
3293 * Fixed partial local inheritance precedence. [reported by Nick Poulden] Closes #454
3294 * Fixed jsonp support; _text/javascript_ as per mailinglist discussion
3295
32961.0.0rc4 / 2010-10-14
3297==================
3298
3299 * Added _NODE_ENV_ support, _EXPRESS_ENV_ is deprecated and will be removed in 1.0.0
3300 * Added route-middleware support (very helpful, see the [docs](http://expressjs.com/guide.html#Route-Middleware))
3301 * Added _jsonp callback_ setting to enable/disable jsonp autowrapping [Dav Glass]
3302 * Added callback query check on response.send to autowrap JSON objects for simple webservice implementations [Dav Glass]
3303 * Added `partial()` support for array-like collections. Closes #434
3304 * Added support for swappable querystring parsers
3305 * Added session usage docs. Closes #443
3306 * Added dynamic helper caching. Closes #439 [suggested by maritz]
3307 * Added authentication example
3308 * Added basic Range support to `res.sendfile()` (and `res.download()` etc)
3309 * Changed; `express(1)` generated app using 2 spaces instead of 4
3310 * Default env to "development" again [aheckmann]
3311 * Removed _context_ option is no more, use "scope"
3312 * Fixed; exposing _./support_ libs to examples so they can run without installs
3313 * Fixed mvc example
3314
33151.0.0rc3 / 2010-09-20
3316==================
3317
3318 * Added confirmation for `express(1)` app generation. Closes #391
3319 * Added extending of flash formatters via `app.flashFormatters`
3320 * Added flash formatter support. Closes #411
3321 * Added streaming support to `res.sendfile()` using `sys.pump()` when >= "stream threshold"
3322 * Added _stream threshold_ setting for `res.sendfile()`
3323 * Added `res.send()` __HEAD__ support
3324 * Added `res.clearCookie()`
3325 * Added `res.cookie()`
3326 * Added `res.render()` headers option
3327 * Added `res.redirect()` response bodies
3328 * Added `res.render()` status option support. Closes #425 [thanks aheckmann]
3329 * Fixed `res.sendfile()` responding with 403 on malicious path
3330 * Fixed `res.download()` bug; when an error occurs remove _Content-Disposition_
3331 * Fixed; mounted apps settings now inherit from parent app [aheckmann]
3332 * Fixed; stripping Content-Length / Content-Type when 204
3333 * Fixed `res.send()` 204. Closes #419
3334 * Fixed multiple _Set-Cookie_ headers via `res.header()`. Closes #402
3335 * Fixed bug messing with error handlers when `listenFD()` is called instead of `listen()`. [thanks guillermo]
3336
3337
33381.0.0rc2 / 2010-08-17
3339==================
3340
3341 * Added `app.register()` for template engine mapping. Closes #390
3342 * Added `res.render()` callback support as second argument (no options)
3343 * Added callback support to `res.download()`
3344 * Added callback support for `res.sendfile()`
3345 * Added support for middleware access via `express.middlewareName()` vs `connect.middlewareName()`
3346 * Added "partials" setting to docs
3347 * Added default expresso tests to `express(1)` generated app. Closes #384
3348 * Fixed `res.sendfile()` error handling, defer via `next()`
3349 * Fixed `res.render()` callback when a layout is used [thanks guillermo]
3350 * Fixed; `make install` creating ~/.node_libraries when not present
3351 * Fixed issue preventing error handlers from being defined anywhere. Closes #387
3352
33531.0.0rc / 2010-07-28
3354==================
3355
3356 * Added mounted hook. Closes #369
3357 * Added connect dependency to _package.json_
3358
3359 * Removed "reload views" setting and support code
3360 development env never caches, production always caches.
3361
3362 * Removed _param_ in route callbacks, signature is now
3363 simply (req, res, next), previously (req, res, params, next).
3364 Use _req.params_ for path captures, _req.query_ for GET params.
3365
3366 * Fixed "home" setting
3367 * Fixed middleware/router precedence issue. Closes #366
3368 * Fixed; _configure()_ callbacks called immediately. Closes #368
3369
33701.0.0beta2 / 2010-07-23
3371==================
3372
3373 * Added more examples
3374 * Added; exporting `Server` constructor
3375 * Added `Server#helpers()` for view locals
3376 * Added `Server#dynamicHelpers()` for dynamic view locals. Closes #349
3377 * Added support for absolute view paths
3378 * Added; _home_ setting defaults to `Server#route` for mounted apps. Closes #363
3379 * Added Guillermo Rauch to the contributor list
3380 * Added support for "as" for non-collection partials. Closes #341
3381 * Fixed _install.sh_, ensuring _~/.node_libraries_ exists. Closes #362 [thanks jf]
3382 * Fixed `res.render()` exceptions, now passed to `next()` when no callback is given [thanks guillermo]
3383 * Fixed instanceof `Array` checks, now `Array.isArray()`
3384 * Fixed express(1) expansion of public dirs. Closes #348
3385 * Fixed middleware precedence. Closes #345
3386 * Fixed view watcher, now async [thanks aheckmann]
3387
33881.0.0beta / 2010-07-15
3389==================
3390
3391 * Re-write
3392 - much faster
3393 - much lighter
3394 - Check [ExpressJS.com](http://expressjs.com) for migration guide and updated docs
3395
33960.14.0 / 2010-06-15
3397==================
3398
3399 * Utilize relative requires
3400 * Added Static bufferSize option [aheckmann]
3401 * Fixed caching of view and partial subdirectories [aheckmann]
3402 * Fixed mime.type() comments now that ".ext" is not supported
3403 * Updated haml submodule
3404 * Updated class submodule
3405 * Removed bin/express
3406
34070.13.0 / 2010-06-01
3408==================
3409
3410 * Added node v0.1.97 compatibility
3411 * Added support for deleting cookies via Request#cookie('key', null)
3412 * Updated haml submodule
3413 * Fixed not-found page, now using charset utf-8
3414 * Fixed show-exceptions page, now using charset utf-8
3415 * Fixed view support due to fs.readFile Buffers
3416 * Changed; mime.type() no longer accepts ".type" due to node extname() changes
3417
34180.12.0 / 2010-05-22
3419==================
3420
3421 * Added node v0.1.96 compatibility
3422 * Added view `helpers` export which act as additional local variables
3423 * Updated haml submodule
3424 * Changed ETag; removed inode, modified time only
3425 * Fixed LF to CRLF for setting multiple cookies
3426 * Fixed cookie compilation; values are now urlencoded
3427 * Fixed cookies parsing; accepts quoted values and url escaped cookies
3428
34290.11.0 / 2010-05-06
3430==================
3431
3432 * Added support for layouts using different engines
3433 - this.render('page.html.haml', { layout: 'super-cool-layout.html.ejs' })
3434 - this.render('page.html.haml', { layout: 'foo' }) // assumes 'foo.html.haml'
3435 - this.render('page.html.haml', { layout: false }) // no layout
3436 * Updated ext submodule
3437 * Updated haml submodule
3438 * Fixed EJS partial support by passing along the context. Issue #307
3439
34400.10.1 / 2010-05-03
3441==================
3442
3443 * Fixed binary uploads.
3444
34450.10.0 / 2010-04-30
3446==================
3447
3448 * Added charset support via Request#charset (automatically assigned to 'UTF-8' when respond()'s
3449 encoding is set to 'utf8' or 'utf-8').
3450 * Added "encoding" option to Request#render(). Closes #299
3451 * Added "dump exceptions" setting, which is enabled by default.
3452 * Added simple ejs template engine support
3453 * Added error response support for text/plain, application/json. Closes #297
3454 * Added callback function param to Request#error()
3455 * Added Request#sendHead()
3456 * Added Request#stream()
3457 * Added support for Request#respond(304, null) for empty response bodies
3458 * Added ETag support to Request#sendfile()
3459 * Added options to Request#sendfile(), passed to fs.createReadStream()
3460 * Added filename arg to Request#download()
3461 * Performance enhanced due to pre-reversing plugins so that plugins.reverse() is not called on each request
3462 * Performance enhanced by preventing several calls to toLowerCase() in Router#match()
3463 * Changed; Request#sendfile() now streams
3464 * Changed; Renamed Request#halt() to Request#respond(). Closes #289
3465 * Changed; Using sys.inspect() instead of JSON.encode() for error output
3466 * Changed; run() returns the http.Server instance. Closes #298
3467 * Changed; Defaulting Server#host to null (INADDR_ANY)
3468 * Changed; Logger "common" format scale of 0.4f
3469 * Removed Logger "request" format
3470 * Fixed; Catching ENOENT in view caching, preventing error when "views/partials" is not found
3471 * Fixed several issues with http client
3472 * Fixed Logger Content-Length output
3473 * Fixed bug preventing Opera from retaining the generated session id. Closes #292
3474
34750.9.0 / 2010-04-14
3476==================
3477
3478 * Added DSL level error() route support
3479 * Added DSL level notFound() route support
3480 * Added Request#error()
3481 * Added Request#notFound()
3482 * Added Request#render() callback function. Closes #258
3483 * Added "max upload size" setting
3484 * Added "magic" variables to collection partials (\_\_index\_\_, \_\_length\_\_, \_\_isFirst\_\_, \_\_isLast\_\_). Closes #254
3485 * Added [haml.js](http://github.com/visionmedia/haml.js) submodule; removed haml-js
3486 * Added callback function support to Request#halt() as 3rd/4th arg
3487 * Added preprocessing of route param wildcards using param(). Closes #251
3488 * Added view partial support (with collections etc.)
3489 * Fixed bug preventing falsey params (such as ?page=0). Closes #286
3490 * Fixed setting of multiple cookies. Closes #199
3491 * Changed; view naming convention is now NAME.TYPE.ENGINE (for example page.html.haml)
3492 * Changed; session cookie is now httpOnly
3493 * Changed; Request is no longer global
3494 * Changed; Event is no longer global
3495 * Changed; "sys" module is no longer global
3496 * Changed; moved Request#download to Static plugin where it belongs
3497 * Changed; Request instance created before body parsing. Closes #262
3498 * Changed; Pre-caching views in memory when "cache view contents" is enabled. Closes #253
3499 * Changed; Pre-caching view partials in memory when "cache view partials" is enabled
3500 * Updated support to node --version 0.1.90
3501 * Updated dependencies
3502 * Removed set("session cookie") in favour of use(Session, { cookie: { ... }})
3503 * Removed utils.mixin(); use Object#mergeDeep()
3504
35050.8.0 / 2010-03-19
3506==================
3507
3508 * Added coffeescript example app. Closes #242
3509 * Changed; cache api now async friendly. Closes #240
3510 * Removed deprecated 'express/static' support. Use 'express/plugins/static'
3511
35120.7.6 / 2010-03-19
3513==================
3514
3515 * Added Request#isXHR. Closes #229
3516 * Added `make install` (for the executable)
3517 * Added `express` executable for setting up simple app templates
3518 * Added "GET /public/*" to Static plugin, defaulting to <root>/public
3519 * Added Static plugin
3520 * Fixed; Request#render() only calls cache.get() once
3521 * Fixed; Namespacing View caches with "view:"
3522 * Fixed; Namespacing Static caches with "static:"
3523 * Fixed; Both example apps now use the Static plugin
3524 * Fixed set("views"). Closes #239
3525 * Fixed missing space for combined log format
3526 * Deprecated Request#sendfile() and 'express/static'
3527 * Removed Server#running
3528
35290.7.5 / 2010-03-16
3530==================
3531
3532 * Added Request#flash() support without args, now returns all flashes
3533 * Updated ext submodule
3534
35350.7.4 / 2010-03-16
3536==================
3537
3538 * Fixed session reaper
3539 * Changed; class.js replacing js-oo Class implementation (quite a bit faster, no browser cruft)
3540
35410.7.3 / 2010-03-16
3542==================
3543
3544 * Added package.json
3545 * Fixed requiring of haml / sass due to kiwi removal
3546
35470.7.2 / 2010-03-16
3548==================
3549
3550 * Fixed GIT submodules (HAH!)
3551
35520.7.1 / 2010-03-16
3553==================
3554
3555 * Changed; Express now using submodules again until a PM is adopted
3556 * Changed; chat example using millisecond conversions from ext
3557
35580.7.0 / 2010-03-15
3559==================
3560
3561 * Added Request#pass() support (finds the next matching route, or the given path)
3562 * Added Logger plugin (default "common" format replaces CommonLogger)
3563 * Removed Profiler plugin
3564 * Removed CommonLogger plugin
3565
35660.6.0 / 2010-03-11
3567==================
3568
3569 * Added seed.yml for kiwi package management support
3570 * Added HTTP client query string support when method is GET. Closes #205
3571
3572 * Added support for arbitrary view engines.
3573 For example "foo.engine.html" will now require('engine'),
3574 the exports from this module are cached after the first require().
3575
3576 * Added async plugin support
3577
3578 * Removed usage of RESTful route funcs as http client
3579 get() etc, use http.get() and friends
3580
3581 * Removed custom exceptions
3582
35830.5.0 / 2010-03-10
3584==================
3585
3586 * Added ext dependency (library of js extensions)
3587 * Removed extname() / basename() utils. Use path module
3588 * Removed toArray() util. Use arguments.values
3589 * Removed escapeRegexp() util. Use RegExp.escape()
3590 * Removed process.mixin() dependency. Use utils.mixin()
3591 * Removed Collection
3592 * Removed ElementCollection
3593 * Shameless self promotion of ebook "Advanced JavaScript" (http://dev-mag.com) ;)
3594
35950.4.0 / 2010-02-11
3596==================
3597
3598 * Added flash() example to sample upload app
3599 * Added high level restful http client module (express/http)
3600 * Changed; RESTful route functions double as HTTP clients. Closes #69
3601 * Changed; throwing error when routes are added at runtime
3602 * Changed; defaulting render() context to the current Request. Closes #197
3603 * Updated haml submodule
3604
36050.3.0 / 2010-02-11
3606==================
3607
3608 * Updated haml / sass submodules. Closes #200
3609 * Added flash message support. Closes #64
3610 * Added accepts() now allows multiple args. fixes #117
3611 * Added support for plugins to halt. Closes #189
3612 * Added alternate layout support. Closes #119
3613 * Removed Route#run(). Closes #188
3614 * Fixed broken specs due to use(Cookie) missing
3615
36160.2.1 / 2010-02-05
3617==================
3618
3619 * Added "plot" format option for Profiler (for gnuplot processing)
3620 * Added request number to Profiler plugin
3621 * Fixed binary encoding for multipart file uploads, was previously defaulting to UTF8
3622 * Fixed issue with routes not firing when not files are present. Closes #184
3623 * Fixed process.Promise -> events.Promise
3624
36250.2.0 / 2010-02-03
3626==================
3627
3628 * Added parseParam() support for name[] etc. (allows for file inputs with "multiple" attr) Closes #180
3629 * Added Both Cache and Session option "reapInterval" may be "reapEvery". Closes #174
3630 * Added expiration support to cache api with reaper. Closes #133
3631 * Added cache Store.Memory#reap()
3632 * Added Cache; cache api now uses first class Cache instances
3633 * Added abstract session Store. Closes #172
3634 * Changed; cache Memory.Store#get() utilizing Collection
3635 * Renamed MemoryStore -> Store.Memory
3636 * Fixed use() of the same plugin several time will always use latest options. Closes #176
3637
36380.1.0 / 2010-02-03
3639==================
3640
3641 * Changed; Hooks (before / after) pass request as arg as well as evaluated in their context
3642 * Updated node support to 0.1.27 Closes #169
3643 * Updated dirname(__filename) -> __dirname
3644 * Updated libxmljs support to v0.2.0
3645 * Added session support with memory store / reaping
3646 * Added quick uid() helper
3647 * Added multi-part upload support
3648 * Added Sass.js support / submodule
3649 * Added production env caching view contents and static files
3650 * Added static file caching. Closes #136
3651 * Added cache plugin with memory stores
3652 * Added support to StaticFile so that it works with non-textual files.
3653 * Removed dirname() helper
3654 * Removed several globals (now their modules must be required)
3655
36560.0.2 / 2010-01-10
3657==================
3658
3659 * Added view benchmarks; currently haml vs ejs
3660 * Added Request#attachment() specs. Closes #116
3661 * Added use of node's parseQuery() util. Closes #123
3662 * Added `make init` for submodules
3663 * Updated Haml
3664 * Updated sample chat app to show messages on load
3665 * Updated libxmljs parseString -> parseHtmlString
3666 * Fixed `make init` to work with older versions of git
3667 * Fixed specs can now run independent specs for those who can't build deps. Closes #127
3668 * Fixed issues introduced by the node url module changes. Closes 126.
3669 * Fixed two assertions failing due to Collection#keys() returning strings
3670 * Fixed faulty Collection#toArray() spec due to keys() returning strings
3671 * Fixed `make test` now builds libxmljs.node before testing
3672
36730.0.1 / 2010-01-03
3674==================
3675
3676 * Initial release
Note: See TracBrowser for help on using the repository browser.