Sourced from express's releases.
4.20.0
What's Changed
Important
- IMPORTANT: The default
depth
level for parsing URL-encoded data is now32
(previously wasInfinity
)- Remove link renderization in html while using
res.redirect
Other Changes
- 4.19.2 Staging by
@wesleytodd
in expressjs/express#5561- remove duplicate location test for data uri by
@wesleytodd
in expressjs/express#5562- feat: document beta releases expectations by
@marco-ippolito
in expressjs/express#5565- Cut down on duplicated CI runs by
@jonchurch
in expressjs/express#5564- Add a Threat Model by
@UlisesGascon
in expressjs/express#5526- Assign captain of encodeurl by
@blakeembrey
in expressjs/express#5579- Nominate jonchurch as repo captain for
http-errors
,expressjs.com
,morgan
,cors
,body-parser
by@jonchurch
in expressjs/express#5587- docs: update Security.md by
@inigomarquinez
in expressjs/express#5590- docs: update triage nomination policy by
@UlisesGascon
in expressjs/express#5600- Add CodeQL (SAST) by
@UlisesGascon
in expressjs/express#5433- docs: add UlisesGascon as triage initiative captain by
@UlisesGascon
in expressjs/express#5605- deps: encodeurl@~2.0.0 by
@blakeembrey
in expressjs/express#5569- skip QUERY method test by
@jonchurch
in expressjs/express#5628- ignore ETAG query test on 21 and 22, reuse skip util by
@jonchurch
in expressjs/express#5639- add support Node.js@22 in the CI by
@mertcanaltin
in expressjs/express#5627- doc: add table of contents, tc/triager lists to readme by
@mertcanaltin
in expressjs/express#5619- List and sort all projects, add captains by
@blakeembrey
in expressjs/express#5653- docs: add
@UlisesGascon
as captain for cookie-parser by@UlisesGascon
in expressjs/express#5666- ✨ bring back query tests for node 21 by
@ctcpip
in expressjs/express#5690- [v4] Deprecate
res.clearCookie
acceptingoptions.maxAge
andoptions.expires
by@jonchurch
in expressjs/express#5672- skip QUERY tests for Node 21 only, still not supported by
@jonchurch
in expressjs/express#5695- 📝 update people, add ctcpip to TC by
@ctcpip
in expressjs/express#5683- remove minor version pinning from ci by
@jonchurch
in expressjs/express#5722- Fix link variable use in attribution section of CODE OF CONDUCT by
@IamLizu
in expressjs/express#5762- Replace Appveyor windows testing with GHA by
@jonchurch
in expressjs/express#5599- Add OSSF Scorecard badge by
@UlisesGascon
in expressjs/express#5436- update scorecard link by
@bjohansebas
in expressjs/express#5814- Nominate
@IamLizu
to the triage team by@UlisesGascon
in expressjs/express#5836- deps: path-to-regexp@0.1.8 by
@blakeembrey
in expressjs/express#5603- docs: specify new instructions for
question
anddiscuss
by@IamLizu
in expressjs/express#5835- 4.x: Upgrade
merge-descriptors
dependency by@RobinTail
in expressjs/express#5781- path-to-regexp@0.1.10 by
@blakeembrey
in expressjs/express#5902New Contributors
@marco-ippolito
made their first contribution in expressjs/express#5565@inigomarquinez
made their first contribution in expressjs/express#5590@mertcanaltin
made their first contribution in expressjs/express#5627@ctcpip
made their first contribution in expressjs/express#5690@bjohansebas
made their first contribution in expressjs/express#5814Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.20.0
Sourced from express's changelog.
4.20.0 / 2024-09-10
- deps: serve-static@0.16.0
- Remove link renderization in html while redirecting
- deps: send@0.19.0
- Remove link renderization in html while redirecting
- deps: body-parser@0.6.0
- add
depth
option to customize the depth level in the parser- IMPORTANT: The default
depth
level for parsing URL-encoded data is now32
(previously wasInfinity
)- Remove link renderization in html while using
res.redirect
- deps: path-to-regexp@0.1.10
- Adds support for named matching groups in the routes using a regex
- Adds backtracking protection to parameters without regexes defined
- deps: encodeurl@~2.0.0
- Removes encoding of
\
,|
, and^
to align better with URL spec- Deprecate passing
options.maxAge
andoptions.expires
tores.clearCookie
- Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
21df421
4.20.04c9ddc1
feat: upgrade to serve-static@0.16.09ebe5d5
feat: upgrade to send@0.19.0 (#5928)ec4a01b
feat: upgrade to body-parser@1.20.3 (#5926)54271f6
fix: don't render redirect values in anchor href125bb74
path-to-regexp@0.1.10 (#5902)2a980ad
merge-descriptors@1.0.3 (#5781)a3e7e05
docs: specify new instructions for question
and
discuss
c5addb9
deps: path-to-regexp@0.1.8 (#5603)e35380a
docs: add @IamLizu
to the
triage team (#5836)Sourced from rimraf's changelog.
6.0
- Drop support for nodes before v20
- Add
--version
to CLI5.0
- No default export, only named exports
4.4
- Provide Dirent or Stats object as second argument to filter
4.3
- Return boolean indicating whether the path was fully removed
- Add filter option
- bin: add --verbose, -v to print files as they are deleted
- bin: add --no-verbose, -V to not print files as they are deleted
- bin: add -i --interactive to be prompted on each deletion
- bin: add -I --no-interactive to not be prompted on each deletion
- 4.3.1 Fixed inappropriately following symbolic links to directories
v4.2
- Brought back
glob
support, using the new and improved glob v9v4.1
- Improved hybrid module with no need to look at the
.default
dangly bit..default
preserved as a reference torimraf
for compatibility with anyone who came to rely on it in v4.0.- Accept and ignore
-rf
and-fr
arguments to the bin.v4.0
- Remove
glob
dependency entirely. This library now only accepts actual file and folder names to delete.- Accept array of paths or single path.
- Windows performance and reliability improved.
- All strategies separated into explicitly exported methods.
- Drop support for Node.js below version 14
- rewrite in TypeScript
- ship CJS/ESM hybrid module
- Error on unknown arguments to the bin. (Previously they were silently ignored.)
v3.0
... (truncated)
21560c7
6.0.1d3881ad
load version with package-json-from-dist6de86bf
feat: add --version flag for CLI49e1923
chore: add /.tap
to .gitignore90d1feb
6.0.09b2a2b1
drop dead node versions546c9ec
5.0.9043338a
restore support for dead node versions0d83c12
5.0.888e632b
drop eol node 142c3b5ee
Bump version to 127.0.21295bb0
Bump version to 127.0.113b710d
Bump version to 127.0.0cb30986
Bump version to 126.0.5412be57
fix: added image to interactive
fixture (#31)4b29ca2
feat: added new html fixtures to watcher
to use them in e2e
tests (#30)Sourced from glob's changelog.
changeglob
11.0
- Drop support for node before v20
10.4
- Add
includeChildMatches: false
option- Export the
Ignore
class10.3
- Add
--default -p
flag to provide a default pattern- exclude symbolic links to directories when
follow
andnodir
are both set10.2
- Add glob cli
10.1
- Return
'.'
instead of the empty string''
when the current working directory is returned as a match.- Add
posix: true
option to return/
delimited paths, even on Windows.10.0.0
- No default exports, only named exports
9.3.3
- Upgraded minimatch to v8, adding support for any degree of nested extglob patterns.
9.3
- Add aliases for methods.
glob.sync
,glob.stream
,glob.stream.sync
, etc.9.2
- Support using a custom fs object, which is passed to PathScurry
- add maxDepth option
- add stat option
- add custom Ignore support
9.1
... (truncated)
Sourced from nyc's releases.
nyc: v17.1.0
17.1.0 (2024-09-19)
Features
Bug Fixes
nyc: v17.0.0
17.0.0 (2024-04-19)
⚠ BREAKING CHANGES
- minimum Node version now 18
Bug Fixes
Build System
- minimum Node version now 18 (9ef340e)
Sourced from nyc's changelog.
17.1.0 (2024-09-19)
Features
Bug Fixes
17.0.0 (2024-04-19)
⚠ BREAKING CHANGES
- minimum Node version now 18
Bug Fixes
Build System
- minimum Node version now 18 (9ef340e)
16.0.0 (2024-04-10)
⚠ BREAKING CHANGES
- minimum Node version now 18
Bug Fixes
Build System
- minimum Node version now 18 (9ef340e)
41f4476
chore(main): release nyc 17.1.0 (#1572)d338985
chore(deps-dev): bump requirejs from 2.3.6 to 2.3.7 (#1582)af74d1e
feat(deps): bump foreground-child from ^2.0.0 to ^3.0.0 (#1546)ae657b6
fix: reduce size of serialized JSON output (#1570)b6a9484
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#1571)b86edbc
chore(deps-dev): bump ws from 8.16.0 to 8.17.1 (#1568)fee2821
chore(main): release nyc 17.0.0 (#1558)10daacc
build: explicitly point to config files8120112
test: remove dependency on "true" which is not on all windows
sytemsf6e5aba
chore(main): release 16.0.0 (#1554)