Ohm-Management - Projektarbeit B-ME
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

History.md 105KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767276827692770277127722773277427752776277727782779278027812782278327842785278627872788278927902791279227932794279527962797279827992800280128022803280428052806280728082809281028112812281328142815281628172818281928202821282228232824282528262827282828292830283128322833283428352836283728382839284028412842284328442845284628472848284928502851285228532854285528562857285828592860286128622863286428652866286728682869287028712872287328742875287628772878287928802881288228832884288528862887288828892890289128922893289428952896289728982899290029012902290329042905290629072908290929102911291229132914291529162917291829192920292129222923292429252926292729282929293029312932293329342935293629372938293929402941294229432944294529462947294829492950295129522953295429552956295729582959296029612962296329642965296629672968296929702971297229732974297529762977297829792980298129822983298429852986298729882989299029912992299329942995299629972998299930003001300230033004300530063007300830093010301130123013301430153016301730183019302030213022302330243025302630273028302930303031303230333034303530363037303830393040304130423043304430453046304730483049305030513052305330543055305630573058305930603061306230633064306530663067306830693070307130723073307430753076307730783079308030813082308330843085308630873088308930903091309230933094309530963097309830993100310131023103310431053106310731083109311031113112311331143115311631173118311931203121312231233124312531263127312831293130313131323133313431353136313731383139314031413142314331443145314631473148314931503151315231533154315531563157315831593160316131623163316431653166316731683169317031713172317331743175317631773178317931803181318231833184318531863187318831893190319131923193319431953196319731983199320032013202320332043205320632073208320932103211321232133214321532163217321832193220322132223223322432253226322732283229323032313232323332343235323632373238323932403241324232433244324532463247324832493250325132523253325432553256325732583259326032613262326332643265326632673268326932703271327232733274327532763277327832793280328132823283328432853286328732883289329032913292329332943295329632973298329933003301330233033304330533063307330833093310331133123313331433153316331733183319332033213322332333243325332633273328332933303331333233333334333533363337333833393340334133423343334433453346334733483349335033513352335333543355335633573358335933603361336233633364336533663367336833693370337133723373337433753376337733783379338033813382338333843385338633873388338933903391339233933394339533963397339833993400340134023403340434053406340734083409341034113412341334143415341634173418341934203421
  1. 4.16.4 / 2018-10-10
  2. ===================
  3. * Fix issue where `"Request aborted"` may be logged in `res.sendfile`
  4. * Fix JSDoc for `Router` constructor
  5. * deps: body-parser@1.18.3
  6. - Fix deprecation warnings on Node.js 10+
  7. - Fix stack trace for strict json parse error
  8. - deps: depd@~1.1.2
  9. - deps: http-errors@~1.6.3
  10. - deps: iconv-lite@0.4.23
  11. - deps: qs@6.5.2
  12. - deps: raw-body@2.3.3
  13. - deps: type-is@~1.6.16
  14. * deps: proxy-addr@~2.0.4
  15. - deps: ipaddr.js@1.8.0
  16. * deps: qs@6.5.2
  17. * deps: safe-buffer@5.1.2
  18. 4.16.3 / 2018-03-12
  19. ===================
  20. * deps: accepts@~1.3.5
  21. - deps: mime-types@~2.1.18
  22. * deps: depd@~1.1.2
  23. - perf: remove argument reassignment
  24. * deps: encodeurl@~1.0.2
  25. - Fix encoding `%` as last character
  26. * deps: finalhandler@1.1.1
  27. - Fix 404 output for bad / missing pathnames
  28. - deps: encodeurl@~1.0.2
  29. - deps: statuses@~1.4.0
  30. * deps: proxy-addr@~2.0.3
  31. - deps: ipaddr.js@1.6.0
  32. * deps: send@0.16.2
  33. - Fix incorrect end tag in default error & redirects
  34. - deps: depd@~1.1.2
  35. - deps: encodeurl@~1.0.2
  36. - deps: statuses@~1.4.0
  37. * deps: serve-static@1.13.2
  38. - Fix incorrect end tag in redirects
  39. - deps: encodeurl@~1.0.2
  40. - deps: send@0.16.2
  41. * deps: statuses@~1.4.0
  42. * deps: type-is@~1.6.16
  43. - deps: mime-types@~2.1.18
  44. 4.16.2 / 2017-10-09
  45. ===================
  46. * Fix `TypeError` in `res.send` when given `Buffer` and `ETag` header set
  47. * perf: skip parsing of entire `X-Forwarded-Proto` header
  48. 4.16.1 / 2017-09-29
  49. ===================
  50. * deps: send@0.16.1
  51. * deps: serve-static@1.13.1
  52. - Fix regression when `root` is incorrectly set to a file
  53. - deps: send@0.16.1
  54. 4.16.0 / 2017-09-28
  55. ===================
  56. * Add `"json escape"` setting for `res.json` and `res.jsonp`
  57. * Add `express.json` and `express.urlencoded` to parse bodies
  58. * Add `options` argument to `res.download`
  59. * Improve error message when autoloading invalid view engine
  60. * Improve error messages when non-function provided as middleware
  61. * Skip `Buffer` encoding when not generating ETag for small response
  62. * Use `safe-buffer` for improved Buffer API
  63. * deps: accepts@~1.3.4
  64. - deps: mime-types@~2.1.16
  65. * deps: content-type@~1.0.4
  66. - perf: remove argument reassignment
  67. - perf: skip parameter parsing when no parameters
  68. * deps: etag@~1.8.1
  69. - perf: replace regular expression with substring
  70. * deps: finalhandler@1.1.0
  71. - Use `res.headersSent` when available
  72. * deps: parseurl@~1.3.2
  73. - perf: reduce overhead for full URLs
  74. - perf: unroll the "fast-path" `RegExp`
  75. * deps: proxy-addr@~2.0.2
  76. - Fix trimming leading / trailing OWS in `X-Forwarded-For`
  77. - deps: forwarded@~0.1.2
  78. - deps: ipaddr.js@1.5.2
  79. - perf: reduce overhead when no `X-Forwarded-For` header
  80. * deps: qs@6.5.1
  81. - Fix parsing & compacting very deep objects
  82. * deps: send@0.16.0
  83. - Add 70 new types for file extensions
  84. - Add `immutable` option
  85. - Fix missing `</html>` in default error & redirects
  86. - Set charset as "UTF-8" for .js and .json
  87. - Use instance methods on steam to check for listeners
  88. - deps: mime@1.4.1
  89. - perf: improve path validation speed
  90. * deps: serve-static@1.13.0
  91. - Add 70 new types for file extensions
  92. - Add `immutable` option
  93. - Set charset as "UTF-8" for .js and .json
  94. - deps: send@0.16.0
  95. * deps: setprototypeof@1.1.0
  96. * deps: utils-merge@1.0.1
  97. * deps: vary@~1.1.2
  98. - perf: improve header token parsing speed
  99. * perf: re-use options object when generating ETags
  100. * perf: remove dead `.charset` set in `res.jsonp`
  101. 4.15.5 / 2017-09-24
  102. ===================
  103. * deps: debug@2.6.9
  104. * deps: finalhandler@~1.0.6
  105. - deps: debug@2.6.9
  106. - deps: parseurl@~1.3.2
  107. * deps: fresh@0.5.2
  108. - Fix handling of modified headers with invalid dates
  109. - perf: improve ETag match loop
  110. - perf: improve `If-None-Match` token parsing
  111. * deps: send@0.15.6
  112. - Fix handling of modified headers with invalid dates
  113. - deps: debug@2.6.9
  114. - deps: etag@~1.8.1
  115. - deps: fresh@0.5.2
  116. - perf: improve `If-Match` token parsing
  117. * deps: serve-static@1.12.6
  118. - deps: parseurl@~1.3.2
  119. - deps: send@0.15.6
  120. - perf: improve slash collapsing
  121. 4.15.4 / 2017-08-06
  122. ===================
  123. * deps: debug@2.6.8
  124. * deps: depd@~1.1.1
  125. - Remove unnecessary `Buffer` loading
  126. * deps: finalhandler@~1.0.4
  127. - deps: debug@2.6.8
  128. * deps: proxy-addr@~1.1.5
  129. - Fix array argument being altered
  130. - deps: ipaddr.js@1.4.0
  131. * deps: qs@6.5.0
  132. * deps: send@0.15.4
  133. - deps: debug@2.6.8
  134. - deps: depd@~1.1.1
  135. - deps: http-errors@~1.6.2
  136. * deps: serve-static@1.12.4
  137. - deps: send@0.15.4
  138. 4.15.3 / 2017-05-16
  139. ===================
  140. * Fix error when `res.set` cannot add charset to `Content-Type`
  141. * deps: debug@2.6.7
  142. - Fix `DEBUG_MAX_ARRAY_LENGTH`
  143. - deps: ms@2.0.0
  144. * deps: finalhandler@~1.0.3
  145. - Fix missing `</html>` in HTML document
  146. - deps: debug@2.6.7
  147. * deps: proxy-addr@~1.1.4
  148. - deps: ipaddr.js@1.3.0
  149. * deps: send@0.15.3
  150. - deps: debug@2.6.7
  151. - deps: ms@2.0.0
  152. * deps: serve-static@1.12.3
  153. - deps: send@0.15.3
  154. * deps: type-is@~1.6.15
  155. - deps: mime-types@~2.1.15
  156. * deps: vary@~1.1.1
  157. - perf: hoist regular expression
  158. 4.15.2 / 2017-03-06
  159. ===================
  160. * deps: qs@6.4.0
  161. - Fix regression parsing keys starting with `[`
  162. 4.15.1 / 2017-03-05
  163. ===================
  164. * deps: send@0.15.1
  165. - Fix issue when `Date.parse` does not return `NaN` on invalid date
  166. - Fix strict violation in broken environments
  167. * deps: serve-static@1.12.1
  168. - Fix issue when `Date.parse` does not return `NaN` on invalid date
  169. - deps: send@0.15.1
  170. 4.15.0 / 2017-03-01
  171. ===================
  172. * Add debug message when loading view engine
  173. * Add `next("router")` to exit from router
  174. * Fix case where `router.use` skipped requests routes did not
  175. * Remove usage of `res._headers` private field
  176. - Improves compatibility with Node.js 8 nightly
  177. * Skip routing when `req.url` is not set
  178. * Use `%o` in path debug to tell types apart
  179. * Use `Object.create` to setup request & response prototypes
  180. * Use `setprototypeof` module to replace `__proto__` setting
  181. * Use `statuses` instead of `http` module for status messages
  182. * deps: debug@2.6.1
  183. - Allow colors in workers
  184. - Deprecated `DEBUG_FD` environment variable set to `3` or higher
  185. - Fix error when running under React Native
  186. - Use same color for same namespace
  187. - deps: ms@0.7.2
  188. * deps: etag@~1.8.0
  189. - Use SHA1 instead of MD5 for ETag hashing
  190. - Works with FIPS 140-2 OpenSSL configuration
  191. * deps: finalhandler@~1.0.0
  192. - Fix exception when `err` cannot be converted to a string
  193. - Fully URL-encode the pathname in the 404
  194. - Only include the pathname in the 404 message
  195. - Send complete HTML document
  196. - Set `Content-Security-Policy: default-src 'self'` header
  197. - deps: debug@2.6.1
  198. * deps: fresh@0.5.0
  199. - Fix false detection of `no-cache` request directive
  200. - Fix incorrect result when `If-None-Match` has both `*` and ETags
  201. - Fix weak `ETag` matching to match spec
  202. - perf: delay reading header values until needed
  203. - perf: enable strict mode
  204. - perf: hoist regular expressions
  205. - perf: remove duplicate conditional
  206. - perf: remove unnecessary boolean coercions
  207. - perf: skip checking modified time if ETag check failed
  208. - perf: skip parsing `If-None-Match` when no `ETag` header
  209. - perf: use `Date.parse` instead of `new Date`
  210. * deps: qs@6.3.1
  211. - Fix array parsing from skipping empty values
  212. - Fix compacting nested arrays
  213. * deps: send@0.15.0
  214. - Fix false detection of `no-cache` request directive
  215. - Fix incorrect result when `If-None-Match` has both `*` and ETags
  216. - Fix weak `ETag` matching to match spec
  217. - Remove usage of `res._headers` private field
  218. - Support `If-Match` and `If-Unmodified-Since` headers
  219. - Use `res.getHeaderNames()` when available
  220. - Use `res.headersSent` when available
  221. - deps: debug@2.6.1
  222. - deps: etag@~1.8.0
  223. - deps: fresh@0.5.0
  224. - deps: http-errors@~1.6.1
  225. * deps: serve-static@1.12.0
  226. - Fix false detection of `no-cache` request directive
  227. - Fix incorrect result when `If-None-Match` has both `*` and ETags
  228. - Fix weak `ETag` matching to match spec
  229. - Remove usage of `res._headers` private field
  230. - Send complete HTML document in redirect response
  231. - Set default CSP header in redirect response
  232. - Support `If-Match` and `If-Unmodified-Since` headers
  233. - Use `res.getHeaderNames()` when available
  234. - Use `res.headersSent` when available
  235. - deps: send@0.15.0
  236. * perf: add fast match path for `*` route
  237. * perf: improve `req.ips` performance
  238. 4.14.1 / 2017-01-28
  239. ===================
  240. * deps: content-disposition@0.5.2
  241. * deps: finalhandler@0.5.1
  242. - Fix exception when `err.headers` is not an object
  243. - deps: statuses@~1.3.1
  244. - perf: hoist regular expressions
  245. - perf: remove duplicate validation path
  246. * deps: proxy-addr@~1.1.3
  247. - deps: ipaddr.js@1.2.0
  248. * deps: send@0.14.2
  249. - deps: http-errors@~1.5.1
  250. - deps: ms@0.7.2
  251. - deps: statuses@~1.3.1
  252. * deps: serve-static@~1.11.2
  253. - deps: send@0.14.2
  254. * deps: type-is@~1.6.14
  255. - deps: mime-types@~2.1.13
  256. 4.14.0 / 2016-06-16
  257. ===================
  258. * Add `acceptRanges` option to `res.sendFile`/`res.sendfile`
  259. * Add `cacheControl` option to `res.sendFile`/`res.sendfile`
  260. * Add `options` argument to `req.range`
  261. - Includes the `combine` option
  262. * Encode URL in `res.location`/`res.redirect` if not already encoded
  263. * Fix some redirect handling in `res.sendFile`/`res.sendfile`
  264. * Fix Windows absolute path check using forward slashes
  265. * Improve error with invalid arguments to `req.get()`
  266. * Improve performance for `res.json`/`res.jsonp` in most cases
  267. * Improve `Range` header handling in `res.sendFile`/`res.sendfile`
  268. * deps: accepts@~1.3.3
  269. - Fix including type extensions in parameters in `Accept` parsing
  270. - Fix parsing `Accept` parameters with quoted equals
  271. - Fix parsing `Accept` parameters with quoted semicolons
  272. - Many performance improvments
  273. - deps: mime-types@~2.1.11
  274. - deps: negotiator@0.6.1
  275. * deps: content-type@~1.0.2
  276. - perf: enable strict mode
  277. * deps: cookie@0.3.1
  278. - Add `sameSite` option
  279. - Fix cookie `Max-Age` to never be a floating point number
  280. - Improve error message when `encode` is not a function
  281. - Improve error message when `expires` is not a `Date`
  282. - Throw better error for invalid argument to parse
  283. - Throw on invalid values provided to `serialize`
  284. - perf: enable strict mode
  285. - perf: hoist regular expression
  286. - perf: use for loop in parse
  287. - perf: use string concatination for serialization
  288. * deps: finalhandler@0.5.0
  289. - Change invalid or non-numeric status code to 500
  290. - Overwrite status message to match set status code
  291. - Prefer `err.statusCode` if `err.status` is invalid
  292. - Set response headers from `err.headers` object
  293. - Use `statuses` instead of `http` module for status messages
  294. * deps: proxy-addr@~1.1.2
  295. - Fix accepting various invalid netmasks
  296. - Fix IPv6-mapped IPv4 validation edge cases
  297. - IPv4 netmasks must be contingous
  298. - IPv6 addresses cannot be used as a netmask
  299. - deps: ipaddr.js@1.1.1
  300. * deps: qs@6.2.0
  301. - Add `decoder` option in `parse` function
  302. * deps: range-parser@~1.2.0
  303. - Add `combine` option to combine overlapping ranges
  304. - Fix incorrectly returning -1 when there is at least one valid range
  305. - perf: remove internal function
  306. * deps: send@0.14.1
  307. - Add `acceptRanges` option
  308. - Add `cacheControl` option
  309. - Attempt to combine multiple ranges into single range
  310. - Correctly inherit from `Stream` class
  311. - Fix `Content-Range` header in 416 responses when using `start`/`end` options
  312. - Fix `Content-Range` header missing from default 416 responses
  313. - Fix redirect error when `path` contains raw non-URL characters
  314. - Fix redirect when `path` starts with multiple forward slashes
  315. - Ignore non-byte `Range` headers
  316. - deps: http-errors@~1.5.0
  317. - deps: range-parser@~1.2.0
  318. - deps: statuses@~1.3.0
  319. - perf: remove argument reassignment
  320. * deps: serve-static@~1.11.1
  321. - Add `acceptRanges` option
  322. - Add `cacheControl` option
  323. - Attempt to combine multiple ranges into single range
  324. - Fix redirect error when `req.url` contains raw non-URL characters
  325. - Ignore non-byte `Range` headers
  326. - Use status code 301 for redirects
  327. - deps: send@0.14.1
  328. * deps: type-is@~1.6.13
  329. - Fix type error when given invalid type to match against
  330. - deps: mime-types@~2.1.11
  331. * deps: vary@~1.1.0
  332. - Only accept valid field names in the `field` argument
  333. * perf: use strict equality when possible
  334. 4.13.4 / 2016-01-21
  335. ===================
  336. * deps: content-disposition@0.5.1
  337. - perf: enable strict mode
  338. * deps: cookie@0.1.5
  339. - Throw on invalid values provided to `serialize`
  340. * deps: depd@~1.1.0
  341. - Support web browser loading
  342. - perf: enable strict mode
  343. * deps: escape-html@~1.0.3
  344. - perf: enable strict mode
  345. - perf: optimize string replacement
  346. - perf: use faster string coercion
  347. * deps: finalhandler@0.4.1
  348. - deps: escape-html@~1.0.3
  349. * deps: merge-descriptors@1.0.1
  350. - perf: enable strict mode
  351. * deps: methods@~1.1.2
  352. - perf: enable strict mode
  353. * deps: parseurl@~1.3.1
  354. - perf: enable strict mode
  355. * deps: proxy-addr@~1.0.10
  356. - deps: ipaddr.js@1.0.5
  357. - perf: enable strict mode
  358. * deps: range-parser@~1.0.3
  359. - perf: enable strict mode
  360. * deps: send@0.13.1
  361. - deps: depd@~1.1.0
  362. - deps: destroy@~1.0.4
  363. - deps: escape-html@~1.0.3
  364. - deps: range-parser@~1.0.3
  365. * deps: serve-static@~1.10.2
  366. - deps: escape-html@~1.0.3
  367. - deps: parseurl@~1.3.0
  368. - deps: send@0.13.1
  369. 4.13.3 / 2015-08-02
  370. ===================
  371. * Fix infinite loop condition using `mergeParams: true`
  372. * Fix inner numeric indices incorrectly altering parent `req.params`
  373. 4.13.2 / 2015-07-31
  374. ===================
  375. * deps: accepts@~1.2.12
  376. - deps: mime-types@~2.1.4
  377. * deps: array-flatten@1.1.1
  378. - perf: enable strict mode
  379. * deps: path-to-regexp@0.1.7
  380. - Fix regression with escaped round brackets and matching groups
  381. * deps: type-is@~1.6.6
  382. - deps: mime-types@~2.1.4
  383. 4.13.1 / 2015-07-05
  384. ===================
  385. * deps: accepts@~1.2.10
  386. - deps: mime-types@~2.1.2
  387. * deps: qs@4.0.0
  388. - Fix dropping parameters like `hasOwnProperty`
  389. - Fix various parsing edge cases
  390. * deps: type-is@~1.6.4
  391. - deps: mime-types@~2.1.2
  392. - perf: enable strict mode
  393. - perf: remove argument reassignment
  394. 4.13.0 / 2015-06-20
  395. ===================
  396. * Add settings to debug output
  397. * Fix `res.format` error when only `default` provided
  398. * Fix issue where `next('route')` in `app.param` would incorrectly skip values
  399. * Fix hiding platform issues with `decodeURIComponent`
  400. - Only `URIError`s are a 400
  401. * Fix using `*` before params in routes
  402. * Fix using capture groups before params in routes
  403. * Simplify `res.cookie` to call `res.append`
  404. * Use `array-flatten` module for flattening arrays
  405. * deps: accepts@~1.2.9
  406. - deps: mime-types@~2.1.1
  407. - perf: avoid argument reassignment & argument slice
  408. - perf: avoid negotiator recursive construction
  409. - perf: enable strict mode
  410. - perf: remove unnecessary bitwise operator
  411. * deps: cookie@0.1.3
  412. - perf: deduce the scope of try-catch deopt
  413. - perf: remove argument reassignments
  414. * deps: escape-html@1.0.2
  415. * deps: etag@~1.7.0
  416. - Always include entity length in ETags for hash length extensions
  417. - Generate non-Stats ETags using MD5 only (no longer CRC32)
  418. - Improve stat performance by removing hashing
  419. - Improve support for JXcore
  420. - Remove base64 padding in ETags to shorten
  421. - Support "fake" stats objects in environments without fs
  422. - Use MD5 instead of MD4 in weak ETags over 1KB
  423. * deps: finalhandler@0.4.0
  424. - Fix a false-positive when unpiping in Node.js 0.8
  425. - Support `statusCode` property on `Error` objects
  426. - Use `unpipe` module for unpiping requests
  427. - deps: escape-html@1.0.2
  428. - deps: on-finished@~2.3.0
  429. - perf: enable strict mode
  430. - perf: remove argument reassignment
  431. * deps: fresh@0.3.0
  432. - Add weak `ETag` matching support
  433. * deps: on-finished@~2.3.0
  434. - Add defined behavior for HTTP `CONNECT` requests
  435. - Add defined behavior for HTTP `Upgrade` requests
  436. - deps: ee-first@1.1.1
  437. * deps: path-to-regexp@0.1.6
  438. * deps: send@0.13.0
  439. - Allow Node.js HTTP server to set `Date` response header
  440. - Fix incorrectly removing `Content-Location` on 304 response
  441. - Improve the default redirect response headers
  442. - Send appropriate headers on default error response
  443. - Use `http-errors` for standard emitted errors
  444. - Use `statuses` instead of `http` module for status messages
  445. - deps: escape-html@1.0.2
  446. - deps: etag@~1.7.0
  447. - deps: fresh@0.3.0
  448. - deps: on-finished@~2.3.0
  449. - perf: enable strict mode
  450. - perf: remove unnecessary array allocations
  451. * deps: serve-static@~1.10.0
  452. - Add `fallthrough` option
  453. - Fix reading options from options prototype
  454. - Improve the default redirect response headers
  455. - Malformed URLs now `next()` instead of 400
  456. - deps: escape-html@1.0.2
  457. - deps: send@0.13.0
  458. - perf: enable strict mode
  459. - perf: remove argument reassignment
  460. * deps: type-is@~1.6.3
  461. - deps: mime-types@~2.1.1
  462. - perf: reduce try block size
  463. - perf: remove bitwise operations
  464. * perf: enable strict mode
  465. * perf: isolate `app.render` try block
  466. * perf: remove argument reassignments in application
  467. * perf: remove argument reassignments in request prototype
  468. * perf: remove argument reassignments in response prototype
  469. * perf: remove argument reassignments in routing
  470. * perf: remove argument reassignments in `View`
  471. * perf: skip attempting to decode zero length string
  472. * perf: use saved reference to `http.STATUS_CODES`
  473. 4.12.4 / 2015-05-17
  474. ===================
  475. * deps: accepts@~1.2.7
  476. - deps: mime-types@~2.0.11
  477. - deps: negotiator@0.5.3
  478. * deps: debug@~2.2.0
  479. - deps: ms@0.7.1
  480. * deps: depd@~1.0.1
  481. * deps: etag@~1.6.0
  482. - Improve support for JXcore
  483. - Support "fake" stats objects in environments without `fs`
  484. * deps: finalhandler@0.3.6
  485. - deps: debug@~2.2.0
  486. - deps: on-finished@~2.2.1
  487. * deps: on-finished@~2.2.1
  488. - Fix `isFinished(req)` when data buffered
  489. * deps: proxy-addr@~1.0.8
  490. - deps: ipaddr.js@1.0.1
  491. * deps: qs@2.4.2
  492. - Fix allowing parameters like `constructor`
  493. * deps: send@0.12.3
  494. - deps: debug@~2.2.0
  495. - deps: depd@~1.0.1
  496. - deps: etag@~1.6.0
  497. - deps: ms@0.7.1
  498. - deps: on-finished@~2.2.1
  499. * deps: serve-static@~1.9.3
  500. - deps: send@0.12.3
  501. * deps: type-is@~1.6.2
  502. - deps: mime-types@~2.0.11
  503. 4.12.3 / 2015-03-17
  504. ===================
  505. * deps: accepts@~1.2.5
  506. - deps: mime-types@~2.0.10
  507. * deps: debug@~2.1.3
  508. - Fix high intensity foreground color for bold
  509. - deps: ms@0.7.0
  510. * deps: finalhandler@0.3.4
  511. - deps: debug@~2.1.3
  512. * deps: proxy-addr@~1.0.7
  513. - deps: ipaddr.js@0.1.9
  514. * deps: qs@2.4.1
  515. - Fix error when parameter `hasOwnProperty` is present
  516. * deps: send@0.12.2
  517. - Throw errors early for invalid `extensions` or `index` options
  518. - deps: debug@~2.1.3
  519. * deps: serve-static@~1.9.2
  520. - deps: send@0.12.2
  521. * deps: type-is@~1.6.1
  522. - deps: mime-types@~2.0.10
  523. 4.12.2 / 2015-03-02
  524. ===================
  525. * Fix regression where `"Request aborted"` is logged using `res.sendFile`
  526. 4.12.1 / 2015-03-01
  527. ===================
  528. * Fix constructing application with non-configurable prototype properties
  529. * Fix `ECONNRESET` errors from `res.sendFile` usage
  530. * Fix `req.host` when using "trust proxy" hops count
  531. * Fix `req.protocol`/`req.secure` when using "trust proxy" hops count
  532. * Fix wrong `code` on aborted connections from `res.sendFile`
  533. * deps: merge-descriptors@1.0.0
  534. 4.12.0 / 2015-02-23
  535. ===================
  536. * Fix `"trust proxy"` setting to inherit when app is mounted
  537. * Generate `ETag`s for all request responses
  538. - No longer restricted to only responses for `GET` and `HEAD` requests
  539. * Use `content-type` to parse `Content-Type` headers
  540. * deps: accepts@~1.2.4
  541. - Fix preference sorting to be stable for long acceptable lists
  542. - deps: mime-types@~2.0.9
  543. - deps: negotiator@0.5.1
  544. * deps: cookie-signature@1.0.6
  545. * deps: send@0.12.1
  546. - Always read the stat size from the file
  547. - Fix mutating passed-in `options`
  548. - deps: mime@1.3.4
  549. * deps: serve-static@~1.9.1
  550. - deps: send@0.12.1
  551. * deps: type-is@~1.6.0
  552. - fix argument reassignment
  553. - fix false-positives in `hasBody` `Transfer-Encoding` check
  554. - support wildcard for both type and subtype (`*/*`)
  555. - deps: mime-types@~2.0.9
  556. 4.11.2 / 2015-02-01
  557. ===================
  558. * Fix `res.redirect` double-calling `res.end` for `HEAD` requests
  559. * deps: accepts@~1.2.3
  560. - deps: mime-types@~2.0.8
  561. * deps: proxy-addr@~1.0.6
  562. - deps: ipaddr.js@0.1.8
  563. * deps: type-is@~1.5.6
  564. - deps: mime-types@~2.0.8
  565. 4.11.1 / 2015-01-20
  566. ===================
  567. * deps: send@0.11.1
  568. - Fix root path disclosure
  569. * deps: serve-static@~1.8.1
  570. - Fix redirect loop in Node.js 0.11.14
  571. - Fix root path disclosure
  572. - deps: send@0.11.1
  573. 4.11.0 / 2015-01-13
  574. ===================
  575. * Add `res.append(field, val)` to append headers
  576. * Deprecate leading `:` in `name` for `app.param(name, fn)`
  577. * Deprecate `req.param()` -- use `req.params`, `req.body`, or `req.query` instead
  578. * Deprecate `app.param(fn)`
  579. * Fix `OPTIONS` responses to include the `HEAD` method properly
  580. * Fix `res.sendFile` not always detecting aborted connection
  581. * Match routes iteratively to prevent stack overflows
  582. * deps: accepts@~1.2.2
  583. - deps: mime-types@~2.0.7
  584. - deps: negotiator@0.5.0
  585. * deps: send@0.11.0
  586. - deps: debug@~2.1.1
  587. - deps: etag@~1.5.1
  588. - deps: ms@0.7.0
  589. - deps: on-finished@~2.2.0
  590. * deps: serve-static@~1.8.0
  591. - deps: send@0.11.0
  592. 4.10.8 / 2015-01-13
  593. ===================
  594. * Fix crash from error within `OPTIONS` response handler
  595. * deps: proxy-addr@~1.0.5
  596. - deps: ipaddr.js@0.1.6
  597. 4.10.7 / 2015-01-04
  598. ===================
  599. * Fix `Allow` header for `OPTIONS` to not contain duplicate methods
  600. * Fix incorrect "Request aborted" for `res.sendFile` when `HEAD` or 304
  601. * deps: debug@~2.1.1
  602. * deps: finalhandler@0.3.3
  603. - deps: debug@~2.1.1
  604. - deps: on-finished@~2.2.0
  605. * deps: methods@~1.1.1
  606. * deps: on-finished@~2.2.0
  607. * deps: serve-static@~1.7.2
  608. - Fix potential open redirect when mounted at root
  609. * deps: type-is@~1.5.5
  610. - deps: mime-types@~2.0.7
  611. 4.10.6 / 2014-12-12
  612. ===================
  613. * Fix exception in `req.fresh`/`req.stale` without response headers
  614. 4.10.5 / 2014-12-10
  615. ===================
  616. * Fix `res.send` double-calling `res.end` for `HEAD` requests
  617. * deps: accepts@~1.1.4
  618. - deps: mime-types@~2.0.4
  619. * deps: type-is@~1.5.4
  620. - deps: mime-types@~2.0.4
  621. 4.10.4 / 2014-11-24
  622. ===================
  623. * Fix `res.sendfile` logging standard write errors
  624. 4.10.3 / 2014-11-23
  625. ===================
  626. * Fix `res.sendFile` logging standard write errors
  627. * deps: etag@~1.5.1
  628. * deps: proxy-addr@~1.0.4
  629. - deps: ipaddr.js@0.1.5
  630. * deps: qs@2.3.3
  631. - Fix `arrayLimit` behavior
  632. 4.10.2 / 2014-11-09
  633. ===================
  634. * Correctly invoke async router callback asynchronously
  635. * deps: accepts@~1.1.3
  636. - deps: mime-types@~2.0.3
  637. * deps: type-is@~1.5.3
  638. - deps: mime-types@~2.0.3
  639. 4.10.1 / 2014-10-28
  640. ===================
  641. * Fix handling of URLs containing `://` in the path
  642. * deps: qs@2.3.2
  643. - Fix parsing of mixed objects and values
  644. 4.10.0 / 2014-10-23
  645. ===================
  646. * Add support for `app.set('views', array)`
  647. - Views are looked up in sequence in array of directories
  648. * Fix `res.send(status)` to mention `res.sendStatus(status)`
  649. * Fix handling of invalid empty URLs
  650. * Use `content-disposition` module for `res.attachment`/`res.download`
  651. - Sends standards-compliant `Content-Disposition` header
  652. - Full Unicode support
  653. * Use `path.resolve` in view lookup
  654. * deps: debug@~2.1.0
  655. - Implement `DEBUG_FD` env variable support
  656. * deps: depd@~1.0.0
  657. * deps: etag@~1.5.0
  658. - Improve string performance
  659. - Slightly improve speed for weak ETags over 1KB
  660. * deps: finalhandler@0.3.2
  661. - Terminate in progress response only on error
  662. - Use `on-finished` to determine request status
  663. - deps: debug@~2.1.0
  664. - deps: on-finished@~2.1.1
  665. * deps: on-finished@~2.1.1
  666. - Fix handling of pipelined requests
  667. * deps: qs@2.3.0
  668. - Fix parsing of mixed implicit and explicit arrays
  669. * deps: send@0.10.1
  670. - deps: debug@~2.1.0
  671. - deps: depd@~1.0.0
  672. - deps: etag@~1.5.0
  673. - deps: on-finished@~2.1.1
  674. * deps: serve-static@~1.7.1
  675. - deps: send@0.10.1
  676. 4.9.8 / 2014-10-17
  677. ==================
  678. * Fix `res.redirect` body when redirect status specified
  679. * deps: accepts@~1.1.2
  680. - Fix error when media type has invalid parameter
  681. - deps: negotiator@0.4.9
  682. 4.9.7 / 2014-10-10
  683. ==================
  684. * Fix using same param name in array of paths
  685. 4.9.6 / 2014-10-08
  686. ==================
  687. * deps: accepts@~1.1.1
  688. - deps: mime-types@~2.0.2
  689. - deps: negotiator@0.4.8
  690. * deps: serve-static@~1.6.4
  691. - Fix redirect loop when index file serving disabled
  692. * deps: type-is@~1.5.2
  693. - deps: mime-types@~2.0.2
  694. 4.9.5 / 2014-09-24
  695. ==================
  696. * deps: etag@~1.4.0
  697. * deps: proxy-addr@~1.0.3
  698. - Use `forwarded` npm module
  699. * deps: send@0.9.3
  700. - deps: etag@~1.4.0
  701. * deps: serve-static@~1.6.3
  702. - deps: send@0.9.3
  703. 4.9.4 / 2014-09-19
  704. ==================
  705. * deps: qs@2.2.4
  706. - Fix issue with object keys starting with numbers truncated
  707. 4.9.3 / 2014-09-18
  708. ==================
  709. * deps: proxy-addr@~1.0.2
  710. - Fix a global leak when multiple subnets are trusted
  711. - deps: ipaddr.js@0.1.3
  712. 4.9.2 / 2014-09-17
  713. ==================
  714. * Fix regression for empty string `path` in `app.use`
  715. * Fix `router.use` to accept array of middleware without path
  716. * Improve error message for bad `app.use` arguments
  717. 4.9.1 / 2014-09-16
  718. ==================
  719. * Fix `app.use` to accept array of middleware without path
  720. * deps: depd@0.4.5
  721. * deps: etag@~1.3.1
  722. * deps: send@0.9.2
  723. - deps: depd@0.4.5
  724. - deps: etag@~1.3.1
  725. - deps: range-parser@~1.0.2
  726. * deps: serve-static@~1.6.2
  727. - deps: send@0.9.2
  728. 4.9.0 / 2014-09-08
  729. ==================
  730. * Add `res.sendStatus`
  731. * Invoke callback for sendfile when client aborts
  732. - Applies to `res.sendFile`, `res.sendfile`, and `res.download`
  733. - `err` will be populated with request aborted error
  734. * Support IP address host in `req.subdomains`
  735. * Use `etag` to generate `ETag` headers
  736. * deps: accepts@~1.1.0
  737. - update `mime-types`
  738. * deps: cookie-signature@1.0.5
  739. * deps: debug@~2.0.0
  740. * deps: finalhandler@0.2.0
  741. - Set `X-Content-Type-Options: nosniff` header
  742. - deps: debug@~2.0.0
  743. * deps: fresh@0.2.4
  744. * deps: media-typer@0.3.0
  745. - Throw error when parameter format invalid on parse
  746. * deps: qs@2.2.3
  747. - Fix issue where first empty value in array is discarded
  748. * deps: range-parser@~1.0.2
  749. * deps: send@0.9.1
  750. - Add `lastModified` option
  751. - Use `etag` to generate `ETag` header
  752. - deps: debug@~2.0.0
  753. - deps: fresh@0.2.4
  754. * deps: serve-static@~1.6.1
  755. - Add `lastModified` option
  756. - deps: send@0.9.1
  757. * deps: type-is@~1.5.1
  758. - fix `hasbody` to be true for `content-length: 0`
  759. - deps: media-typer@0.3.0
  760. - deps: mime-types@~2.0.1
  761. * deps: vary@~1.0.0
  762. - Accept valid `Vary` header string as `field`
  763. 4.8.8 / 2014-09-04
  764. ==================
  765. * deps: send@0.8.5
  766. - Fix a path traversal issue when using `root`
  767. - Fix malicious path detection for empty string path
  768. * deps: serve-static@~1.5.4
  769. - deps: send@0.8.5
  770. 4.8.7 / 2014-08-29
  771. ==================
  772. * deps: qs@2.2.2
  773. - Remove unnecessary cloning
  774. 4.8.6 / 2014-08-27
  775. ==================
  776. * deps: qs@2.2.0
  777. - Array parsing fix
  778. - Performance improvements
  779. 4.8.5 / 2014-08-18
  780. ==================
  781. * deps: send@0.8.3
  782. - deps: destroy@1.0.3
  783. - deps: on-finished@2.1.0
  784. * deps: serve-static@~1.5.3
  785. - deps: send@0.8.3
  786. 4.8.4 / 2014-08-14
  787. ==================
  788. * deps: qs@1.2.2
  789. * deps: send@0.8.2
  790. - Work around `fd` leak in Node.js 0.10 for `fs.ReadStream`
  791. * deps: serve-static@~1.5.2
  792. - deps: send@0.8.2
  793. 4.8.3 / 2014-08-10
  794. ==================
  795. * deps: parseurl@~1.3.0
  796. * deps: qs@1.2.1
  797. * deps: serve-static@~1.5.1
  798. - Fix parsing of weird `req.originalUrl` values
  799. - deps: parseurl@~1.3.0
  800. - deps: utils-merge@1.0.0
  801. 4.8.2 / 2014-08-07
  802. ==================
  803. * deps: qs@1.2.0
  804. - Fix parsing array of objects
  805. 4.8.1 / 2014-08-06
  806. ==================
  807. * fix incorrect deprecation warnings on `res.download`
  808. * deps: qs@1.1.0
  809. - Accept urlencoded square brackets
  810. - Accept empty values in implicit array notation
  811. 4.8.0 / 2014-08-05
  812. ==================
  813. * add `res.sendFile`
  814. - accepts a file system path instead of a URL
  815. - requires an absolute path or `root` option specified
  816. * deprecate `res.sendfile` -- use `res.sendFile` instead
  817. * support mounted app as any argument to `app.use()`
  818. * deps: qs@1.0.2
  819. - Complete rewrite
  820. - Limits array length to 20
  821. - Limits object depth to 5
  822. - Limits parameters to 1,000
  823. * deps: send@0.8.1
  824. - Add `extensions` option
  825. * deps: serve-static@~1.5.0
  826. - Add `extensions` option
  827. - deps: send@0.8.1
  828. 4.7.4 / 2014-08-04
  829. ==================
  830. * fix `res.sendfile` regression for serving directory index files
  831. * deps: send@0.7.4
  832. - Fix incorrect 403 on Windows and Node.js 0.11
  833. - Fix serving index files without root dir
  834. * deps: serve-static@~1.4.4
  835. - deps: send@0.7.4
  836. 4.7.3 / 2014-08-04
  837. ==================
  838. * deps: send@0.7.3
  839. - Fix incorrect 403 on Windows and Node.js 0.11
  840. * deps: serve-static@~1.4.3
  841. - Fix incorrect 403 on Windows and Node.js 0.11
  842. - deps: send@0.7.3
  843. 4.7.2 / 2014-07-27
  844. ==================
  845. * deps: depd@0.4.4
  846. - Work-around v8 generating empty stack traces
  847. * deps: send@0.7.2
  848. - deps: depd@0.4.4
  849. * deps: serve-static@~1.4.2
  850. 4.7.1 / 2014-07-26
  851. ==================
  852. * deps: depd@0.4.3
  853. - Fix exception when global `Error.stackTraceLimit` is too low
  854. * deps: send@0.7.1
  855. - deps: depd@0.4.3
  856. * deps: serve-static@~1.4.1
  857. 4.7.0 / 2014-07-25
  858. ==================
  859. * fix `req.protocol` for proxy-direct connections
  860. * configurable query parser with `app.set('query parser', parser)`
  861. - `app.set('query parser', 'extended')` parse with "qs" module
  862. - `app.set('query parser', 'simple')` parse with "querystring" core module
  863. - `app.set('query parser', false)` disable query string parsing
  864. - `app.set('query parser', true)` enable simple parsing
  865. * deprecate `res.json(status, obj)` -- use `res.status(status).json(obj)` instead
  866. * deprecate `res.jsonp(status, obj)` -- use `res.status(status).jsonp(obj)` instead
  867. * deprecate `res.send(status, body)` -- use `res.status(status).send(body)` instead
  868. * deps: debug@1.0.4
  869. * deps: depd@0.4.2
  870. - Add `TRACE_DEPRECATION` environment variable
  871. - Remove non-standard grey color from color output
  872. - Support `--no-deprecation` argument
  873. - Support `--trace-deprecation` argument
  874. * deps: finalhandler@0.1.0
  875. - Respond after request fully read
  876. - deps: debug@1.0.4
  877. * deps: parseurl@~1.2.0
  878. - Cache URLs based on original value
  879. - Remove no-longer-needed URL mis-parse work-around
  880. - Simplify the "fast-path" `RegExp`
  881. * deps: send@0.7.0
  882. - Add `dotfiles` option
  883. - Cap `maxAge` value to 1 year
  884. - deps: debug@1.0.4
  885. - deps: depd@0.4.2
  886. * deps: serve-static@~1.4.0
  887. - deps: parseurl@~1.2.0
  888. - deps: send@0.7.0
  889. * perf: prevent multiple `Buffer` creation in `res.send`
  890. 4.6.1 / 2014-07-12
  891. ==================
  892. * fix `subapp.mountpath` regression for `app.use(subapp)`
  893. 4.6.0 / 2014-07-11
  894. ==================
  895. * accept multiple callbacks to `app.use()`
  896. * add explicit "Rosetta Flash JSONP abuse" protection
  897. - previous versions are not vulnerable; this is just explicit protection
  898. * catch errors in multiple `req.param(name, fn)` handlers
  899. * deprecate `res.redirect(url, status)` -- use `res.redirect(status, url)` instead
  900. * fix `res.send(status, num)` to send `num` as json (not error)
  901. * remove unnecessary escaping when `res.jsonp` returns JSON response
  902. * support non-string `path` in `app.use(path, fn)`
  903. - supports array of paths
  904. - supports `RegExp`
  905. * router: fix optimization on router exit
  906. * router: refactor location of `try` blocks
  907. * router: speed up standard `app.use(fn)`
  908. * deps: debug@1.0.3
  909. - Add support for multiple wildcards in namespaces
  910. * deps: finalhandler@0.0.3
  911. - deps: debug@1.0.3
  912. * deps: methods@1.1.0
  913. - add `CONNECT`
  914. * deps: parseurl@~1.1.3
  915. - faster parsing of href-only URLs
  916. * deps: path-to-regexp@0.1.3
  917. * deps: send@0.6.0
  918. - deps: debug@1.0.3
  919. * deps: serve-static@~1.3.2
  920. - deps: parseurl@~1.1.3
  921. - deps: send@0.6.0
  922. * perf: fix arguments reassign deopt in some `res` methods
  923. 4.5.1 / 2014-07-06
  924. ==================
  925. * fix routing regression when altering `req.method`
  926. 4.5.0 / 2014-07-04
  927. ==================
  928. * add deprecation message to non-plural `req.accepts*`
  929. * add deprecation message to `res.send(body, status)`
  930. * add deprecation message to `res.vary()`
  931. * add `headers` option to `res.sendfile`
  932. - use to set headers on successful file transfer
  933. * add `mergeParams` option to `Router`
  934. - merges `req.params` from parent routes
  935. * add `req.hostname` -- correct name for what `req.host` returns
  936. * deprecate things with `depd` module
  937. * deprecate `req.host` -- use `req.hostname` instead
  938. * fix behavior when handling request without routes
  939. * fix handling when `route.all` is only route
  940. * invoke `router.param()` only when route matches
  941. * restore `req.params` after invoking router
  942. * use `finalhandler` for final response handling
  943. * use `media-typer` to alter content-type charset
  944. * deps: accepts@~1.0.7
  945. * deps: send@0.5.0
  946. - Accept string for `maxage` (converted by `ms`)
  947. - Include link in default redirect response
  948. * deps: serve-static@~1.3.0
  949. - Accept string for `maxAge` (converted by `ms`)
  950. - Add `setHeaders` option
  951. - Include HTML link in redirect response
  952. - deps: send@0.5.0
  953. * deps: type-is@~1.3.2
  954. 4.4.5 / 2014-06-26
  955. ==================
  956. * deps: cookie-signature@1.0.4
  957. - fix for timing attacks
  958. 4.4.4 / 2014-06-20
  959. ==================
  960. * fix `res.attachment` Unicode filenames in Safari
  961. * fix "trim prefix" debug message in `express:router`
  962. * deps: accepts@~1.0.5
  963. * deps: buffer-crc32@0.2.3
  964. 4.4.3 / 2014-06-11
  965. ==================
  966. * fix persistence of modified `req.params[name]` from `app.param()`
  967. * deps: accepts@1.0.3
  968. - deps: negotiator@0.4.6
  969. * deps: debug@1.0.2
  970. * deps: send@0.4.3
  971. - Do not throw un-catchable error on file open race condition
  972. - Use `escape-html` for HTML escaping
  973. - deps: debug@1.0.2
  974. - deps: finished@1.2.2
  975. - deps: fresh@0.2.2
  976. * deps: serve-static@1.2.3
  977. - Do not throw un-catchable error on file open race condition
  978. - deps: send@0.4.3
  979. 4.4.2 / 2014-06-09
  980. ==================
  981. * fix catching errors from top-level handlers
  982. * use `vary` module for `res.vary`
  983. * deps: debug@1.0.1
  984. * deps: proxy-addr@1.0.1
  985. * deps: send@0.4.2
  986. - fix "event emitter leak" warnings
  987. - deps: debug@1.0.1
  988. - deps: finished@1.2.1
  989. * deps: serve-static@1.2.2
  990. - fix "event emitter leak" warnings
  991. - deps: send@0.4.2
  992. * deps: type-is@1.2.1
  993. 4.4.1 / 2014-06-02
  994. ==================
  995. * deps: methods@1.0.1
  996. * deps: send@0.4.1
  997. - Send `max-age` in `Cache-Control` in correct format
  998. * deps: serve-static@1.2.1
  999. - use `escape-html` for escaping
  1000. - deps: send@0.4.1
  1001. 4.4.0 / 2014-05-30
  1002. ==================
  1003. * custom etag control with `app.set('etag', val)`
  1004. - `app.set('etag', function(body, encoding){ return '"etag"' })` custom etag generation
  1005. - `app.set('etag', 'weak')` weak tag
  1006. - `app.set('etag', 'strong')` strong etag
  1007. - `app.set('etag', false)` turn off
  1008. - `app.set('etag', true)` standard etag
  1009. * mark `res.send` ETag as weak and reduce collisions
  1010. * update accepts to 1.0.2
  1011. - Fix interpretation when header not in request
  1012. * update send to 0.4.0
  1013. - Calculate ETag with md5 for reduced collisions
  1014. - Ignore stream errors after request ends
  1015. - deps: debug@0.8.1
  1016. * update serve-static to 1.2.0
  1017. - Calculate ETag with md5 for reduced collisions
  1018. - Ignore stream errors after request ends
  1019. - deps: send@0.4.0
  1020. 4.3.2 / 2014-05-28
  1021. ==================
  1022. * fix handling of errors from `router.param()` callbacks
  1023. 4.3.1 / 2014-05-23
  1024. ==================
  1025. * revert "fix behavior of multiple `app.VERB` for the same path"
  1026. - this caused a regression in the order of route execution
  1027. 4.3.0 / 2014-05-21
  1028. ==================
  1029. * add `req.baseUrl` to access the path stripped from `req.url` in routes
  1030. * fix behavior of multiple `app.VERB` for the same path
  1031. * fix issue routing requests among sub routers
  1032. * invoke `router.param()` only when necessary instead of every match
  1033. * proper proxy trust with `app.set('trust proxy', trust)`
  1034. - `app.set('trust proxy', 1)` trust first hop
  1035. - `app.set('trust proxy', 'loopback')` trust loopback addresses
  1036. - `app.set('trust proxy', '10.0.0.1')` trust single IP
  1037. - `app.set('trust proxy', '10.0.0.1/16')` trust subnet
  1038. - `app.set('trust proxy', '10.0.0.1, 10.0.0.2')` trust list
  1039. - `app.set('trust proxy', false)` turn off
  1040. - `app.set('trust proxy', true)` trust everything
  1041. * set proper `charset` in `Content-Type` for `res.send`
  1042. * update type-is to 1.2.0
  1043. - support suffix matching
  1044. 4.2.0 / 2014-05-11
  1045. ==================
  1046. * deprecate `app.del()` -- use `app.delete()` instead
  1047. * deprecate `res.json(obj, status)` -- use `res.json(status, obj)` instead
  1048. - the edge-case `res.json(status, num)` requires `res.status(status).json(num)`
  1049. * deprecate `res.jsonp(obj, status)` -- use `res.jsonp(status, obj)` instead
  1050. - the edge-case `res.jsonp(status, num)` requires `res.status(status).jsonp(num)`
  1051. * fix `req.next` when inside router instance
  1052. * include `ETag` header in `HEAD` requests
  1053. * keep previous `Content-Type` for `res.jsonp`
  1054. * support PURGE method
  1055. - add `app.purge`
  1056. - add `router.purge`
  1057. - include PURGE in `app.all`
  1058. * update debug to 0.8.0
  1059. - add `enable()` method
  1060. - change from stderr to stdout
  1061. * update methods to 1.0.0
  1062. - add PURGE
  1063. 4.1.2 / 2014-05-08
  1064. ==================
  1065. * fix `req.host` for IPv6 literals
  1066. * fix `res.jsonp` error if callback param is object
  1067. 4.1.1 / 2014-04-27
  1068. ==================
  1069. * fix package.json to reflect supported node version
  1070. 4.1.0 / 2014-04-24
  1071. ==================
  1072. * pass options from `res.sendfile` to `send`
  1073. * preserve casing of headers in `res.header` and `res.set`
  1074. * support unicode file names in `res.attachment` and `res.download`
  1075. * update accepts to 1.0.1
  1076. - deps: negotiator@0.4.0
  1077. * update cookie to 0.1.2
  1078. - Fix for maxAge == 0
  1079. - made compat with expires field
  1080. * update send to 0.3.0
  1081. - Accept API options in options object
  1082. - Coerce option types
  1083. - Control whether to generate etags
  1084. - Default directory access to 403 when index disabled
  1085. - Fix sending files with dots without root set
  1086. - Include file path in etag
  1087. - Make "Can't set headers after they are sent." catchable
  1088. - Send full entity-body for multi range requests
  1089. - Set etags to "weak"
  1090. - Support "If-Range" header
  1091. - Support multiple index paths
  1092. - deps: mime@1.2.11
  1093. * update serve-static to 1.1.0
  1094. - Accept options directly to `send` module
  1095. - Resolve relative paths at middleware setup
  1096. - Use parseurl to parse the URL from request
  1097. - deps: send@0.3.0
  1098. * update type-is to 1.1.0
  1099. - add non-array values support
  1100. - add `multipart` as a shorthand
  1101. 4.0.0 / 2014-04-09
  1102. ==================
  1103. * remove:
  1104. - node 0.8 support
  1105. - connect and connect's patches except for charset handling
  1106. - express(1) - moved to [express-generator](https://github.com/expressjs/generator)
  1107. - `express.createServer()` - it has been deprecated for a long time. Use `express()`
  1108. - `app.configure` - use logic in your own app code
  1109. - `app.router` - is removed
  1110. - `req.auth` - use `basic-auth` instead
  1111. - `req.accepted*` - use `req.accepts*()` instead
  1112. - `res.location` - relative URL resolution is removed
  1113. - `res.charset` - include the charset in the content type when using `res.set()`
  1114. - all bundled middleware except `static`
  1115. * change:
  1116. - `app.route` -> `app.mountpath` when mounting an express app in another express app
  1117. - `json spaces` no longer enabled by default in development
  1118. - `req.accepts*` -> `req.accepts*s` - i.e. `req.acceptsEncoding` -> `req.acceptsEncodings`
  1119. - `req.params` is now an object instead of an array
  1120. - `res.locals` is no longer a function. It is a plain js object. Treat it as such.
  1121. - `res.headerSent` -> `res.headersSent` to match node.js ServerResponse object
  1122. * refactor:
  1123. - `req.accepts*` with [accepts](https://github.com/expressjs/accepts)
  1124. - `req.is` with [type-is](https://github.com/expressjs/type-is)
  1125. - [path-to-regexp](https://github.com/component/path-to-regexp)
  1126. * add:
  1127. - `app.router()` - returns the app Router instance
  1128. - `app.route()` - Proxy to the app's `Router#route()` method to create a new route
  1129. - Router & Route - public API
  1130. 3.21.2 / 2015-07-31
  1131. ===================
  1132. * deps: connect@2.30.2
  1133. - deps: body-parser@~1.13.3
  1134. - deps: compression@~1.5.2
  1135. - deps: errorhandler@~1.4.2
  1136. - deps: method-override@~2.3.5
  1137. - deps: serve-index@~1.7.2
  1138. - deps: type-is@~1.6.6
  1139. - deps: vhost@~3.0.1
  1140. * deps: vary@~1.0.1
  1141. - Fix setting empty header from empty `field`
  1142. - perf: enable strict mode
  1143. - perf: remove argument reassignments
  1144. 3.21.1 / 2015-07-05
  1145. ===================
  1146. * deps: basic-auth@~1.0.3
  1147. * deps: connect@2.30.1
  1148. - deps: body-parser@~1.13.2
  1149. - deps: compression@~1.5.1
  1150. - deps: errorhandler@~1.4.1
  1151. - deps: morgan@~1.6.1
  1152. - deps: pause@0.1.0
  1153. - deps: qs@4.0.0
  1154. - deps: serve-index@~1.7.1
  1155. - deps: type-is@~1.6.4
  1156. 3.21.0 / 2015-06-18
  1157. ===================
  1158. * deps: basic-auth@1.0.2
  1159. - perf: enable strict mode
  1160. - perf: hoist regular expression
  1161. - perf: parse with regular expressions
  1162. - perf: remove argument reassignment
  1163. * deps: connect@2.30.0
  1164. - deps: body-parser@~1.13.1
  1165. - deps: bytes@2.1.0
  1166. - deps: compression@~1.5.0
  1167. - deps: cookie@0.1.3
  1168. - deps: cookie-parser@~1.3.5
  1169. - deps: csurf@~1.8.3
  1170. - deps: errorhandler@~1.4.0
  1171. - deps: express-session@~1.11.3
  1172. - deps: finalhandler@0.4.0
  1173. - deps: fresh@0.3.0
  1174. - deps: morgan@~1.6.0
  1175. - deps: serve-favicon@~2.3.0
  1176. - deps: serve-index@~1.7.0
  1177. - deps: serve-static@~1.10.0
  1178. - deps: type-is@~1.6.3
  1179. * deps: cookie@0.1.3
  1180. - perf: deduce the scope of try-catch deopt
  1181. - perf: remove argument reassignments
  1182. * deps: escape-html@1.0.2
  1183. * deps: etag@~1.7.0
  1184. - Always include entity length in ETags for hash length extensions
  1185. - Generate non-Stats ETags using MD5 only (no longer CRC32)
  1186. - Improve stat performance by removing hashing
  1187. - Improve support for JXcore
  1188. - Remove base64 padding in ETags to shorten
  1189. - Support "fake" stats objects in environments without fs
  1190. - Use MD5 instead of MD4 in weak ETags over 1KB
  1191. * deps: fresh@0.3.0
  1192. - Add weak `ETag` matching support
  1193. * deps: mkdirp@0.5.1
  1194. - Work in global strict mode
  1195. * deps: send@0.13.0
  1196. - Allow Node.js HTTP server to set `Date` response header
  1197. - Fix incorrectly removing `Content-Location` on 304 response
  1198. - Improve the default redirect response headers
  1199. - Send appropriate headers on default error response
  1200. - Use `http-errors` for standard emitted errors
  1201. - Use `statuses` instead of `http` module for status messages
  1202. - deps: escape-html@1.0.2
  1203. - deps: etag@~1.7.0
  1204. - deps: fresh@0.3.0
  1205. - deps: on-finished@~2.3.0
  1206. - perf: enable strict mode
  1207. - perf: remove unnecessary array allocations
  1208. 3.20.3 / 2015-05-17
  1209. ===================
  1210. * deps: connect@2.29.2
  1211. - deps: body-parser@~1.12.4
  1212. - deps: compression@~1.4.4
  1213. - deps: connect-timeout@~1.6.2
  1214. - deps: debug@~2.2.0
  1215. - deps: depd@~1.0.1
  1216. - deps: errorhandler@~1.3.6
  1217. - deps: finalhandler@0.3.6
  1218. - deps: method-override@~2.3.3
  1219. - deps: morgan@~1.5.3
  1220. - deps: qs@2.4.2
  1221. - deps: response-time@~2.3.1
  1222. - deps: serve-favicon@~2.2.1
  1223. - deps: serve-index@~1.6.4
  1224. - deps: serve-static@~1.9.3
  1225. - deps: type-is@~1.6.2
  1226. * deps: debug@~2.2.0
  1227. - deps: ms@0.7.1
  1228. * deps: depd@~1.0.1
  1229. * deps: proxy-addr@~1.0.8
  1230. - deps: ipaddr.js@1.0.1
  1231. * deps: send@0.12.3
  1232. - deps: debug@~2.2.0
  1233. - deps: depd@~1.0.1
  1234. - deps: etag@~1.6.0
  1235. - deps: ms@0.7.1
  1236. - deps: on-finished@~2.2.1
  1237. 3.20.2 / 2015-03-16
  1238. ===================
  1239. * deps: connect@2.29.1
  1240. - deps: body-parser@~1.12.2
  1241. - deps: compression@~1.4.3
  1242. - deps: connect-timeout@~1.6.1
  1243. - deps: debug@~2.1.3
  1244. - deps: errorhandler@~1.3.5
  1245. - deps: express-session@~1.10.4
  1246. - deps: finalhandler@0.3.4
  1247. - deps: method-override@~2.3.2
  1248. - deps: morgan@~1.5.2
  1249. - deps: qs@2.4.1
  1250. - deps: serve-index@~1.6.3
  1251. - deps: serve-static@~1.9.2
  1252. - deps: type-is@~1.6.1
  1253. * deps: debug@~2.1.3
  1254. - Fix high intensity foreground color for bold
  1255. - deps: ms@0.7.0
  1256. * deps: merge-descriptors@1.0.0
  1257. * deps: proxy-addr@~1.0.7
  1258. - deps: ipaddr.js@0.1.9
  1259. * deps: send@0.12.2
  1260. - Throw errors early for invalid `extensions` or `index` options
  1261. - deps: debug@~2.1.3
  1262. 3.20.1 / 2015-02-28
  1263. ===================
  1264. * Fix `req.host` when using "trust proxy" hops count
  1265. * Fix `req.protocol`/`req.secure` when using "trust proxy" hops count
  1266. 3.20.0 / 2015-02-18
  1267. ===================
  1268. * Fix `"trust proxy"` setting to inherit when app is mounted
  1269. * Generate `ETag`s for all request responses
  1270. - No longer restricted to only responses for `GET` and `HEAD` requests
  1271. * Use `content-type` to parse `Content-Type` headers
  1272. * deps: connect@2.29.0
  1273. - Use `content-type` to parse `Content-Type` headers
  1274. - deps: body-parser@~1.12.0
  1275. - deps: compression@~1.4.1
  1276. - deps: connect-timeout@~1.6.0
  1277. - deps: cookie-parser@~1.3.4
  1278. - deps: cookie-signature@1.0.6
  1279. - deps: csurf@~1.7.0
  1280. - deps: errorhandler@~1.3.4
  1281. - deps: express-session@~1.10.3
  1282. - deps: http-errors@~1.3.1
  1283. - deps: response-time@~2.3.0
  1284. - deps: serve-index@~1.6.2
  1285. - deps: serve-static@~1.9.1
  1286. - deps: type-is@~1.6.0
  1287. * deps: cookie-signature@1.0.6
  1288. * deps: send@0.12.1
  1289. - Always read the stat size from the file
  1290. - Fix mutating passed-in `options`
  1291. - deps: mime@1.3.4
  1292. 3.19.2 / 2015-02-01
  1293. ===================
  1294. * deps: connect@2.28.3
  1295. - deps: compression@~1.3.1
  1296. - deps: csurf@~1.6.6
  1297. - deps: errorhandler@~1.3.3
  1298. - deps: express-session@~1.10.2
  1299. - deps: serve-index@~1.6.1
  1300. - deps: type-is@~1.5.6
  1301. * deps: proxy-addr@~1.0.6
  1302. - deps: ipaddr.js@0.1.8
  1303. 3.19.1 / 2015-01-20
  1304. ===================
  1305. * deps: connect@2.28.2
  1306. - deps: body-parser@~1.10.2
  1307. - deps: serve-static@~1.8.1
  1308. * deps: send@0.11.1
  1309. - Fix root path disclosure
  1310. 3.19.0 / 2015-01-09
  1311. ===================
  1312. * Fix `OPTIONS` responses to include the `HEAD` method property
  1313. * Use `readline` for prompt in `express(1)`
  1314. * deps: commander@2.6.0
  1315. * deps: connect@2.28.1
  1316. - deps: body-parser@~1.10.1
  1317. - deps: compression@~1.3.0
  1318. - deps: connect-timeout@~1.5.0
  1319. - deps: csurf@~1.6.4
  1320. - deps: debug@~2.1.1
  1321. - deps: errorhandler@~1.3.2
  1322. - deps: express-session@~1.10.1
  1323. - deps: finalhandler@0.3.3
  1324. - deps: method-override@~2.3.1
  1325. - deps: morgan@~1.5.1
  1326. - deps: serve-favicon@~2.2.0
  1327. - deps: serve-index@~1.6.0
  1328. - deps: serve-static@~1.8.0
  1329. - deps: type-is@~1.5.5
  1330. * deps: debug@~2.1.1
  1331. * deps: methods@~1.1.1
  1332. * deps: proxy-addr@~1.0.5
  1333. - deps: ipaddr.js@0.1.6
  1334. * deps: send@0.11.0
  1335. - deps: debug@~2.1.1
  1336. - deps: etag@~1.5.1
  1337. - deps: ms@0.7.0
  1338. - deps: on-finished@~2.2.0
  1339. 3.18.6 / 2014-12-12
  1340. ===================
  1341. * Fix exception in `req.fresh`/`req.stale` without response headers
  1342. 3.18.5 / 2014-12-11
  1343. ===================
  1344. * deps: connect@2.27.6
  1345. - deps: compression@~1.2.2
  1346. - deps: express-session@~1.9.3
  1347. - deps: http-errors@~1.2.8
  1348. - deps: serve-index@~1.5.3
  1349. - deps: type-is@~1.5.4
  1350. 3.18.4 / 2014-11-23
  1351. ===================
  1352. * deps: connect@2.27.4
  1353. - deps: body-parser@~1.9.3
  1354. - deps: compression@~1.2.1
  1355. - deps: errorhandler@~1.2.3
  1356. - deps: express-session@~1.9.2
  1357. - deps: qs@2.3.3
  1358. - deps: serve-favicon@~2.1.7
  1359. - deps: serve-static@~1.5.1
  1360. - deps: type-is@~1.5.3
  1361. * deps: etag@~1.5.1
  1362. * deps: proxy-addr@~1.0.4
  1363. - deps: ipaddr.js@0.1.5
  1364. 3.18.3 / 2014-11-09
  1365. ===================
  1366. * deps: connect@2.27.3
  1367. - Correctly invoke async callback asynchronously
  1368. - deps: csurf@~1.6.3
  1369. 3.18.2 / 2014-10-28
  1370. ===================
  1371. * deps: connect@2.27.2
  1372. - Fix handling of URLs containing `://` in the path
  1373. - deps: body-parser@~1.9.2
  1374. - deps: qs@2.3.2
  1375. 3.18.1 / 2014-10-22
  1376. ===================
  1377. * Fix internal `utils.merge` deprecation warnings
  1378. * deps: connect@2.27.1
  1379. - deps: body-parser@~1.9.1
  1380. - deps: express-session@~1.9.1
  1381. - deps: finalhandler@0.3.2
  1382. - deps: morgan@~1.4.1
  1383. - deps: qs@2.3.0
  1384. - deps: serve-static@~1.7.1
  1385. * deps: send@0.10.1
  1386. - deps: on-finished@~2.1.1
  1387. 3.18.0 / 2014-10-17
  1388. ===================
  1389. * Use `content-disposition` module for `res.attachment`/`res.download`
  1390. - Sends standards-compliant `Content-Disposition` header
  1391. - Full Unicode support
  1392. * Use `etag` module to generate `ETag` headers
  1393. * deps: connect@2.27.0
  1394. - Use `http-errors` module for creating errors
  1395. - Use `utils-merge` module for merging objects
  1396. - deps: body-parser@~1.9.0
  1397. - deps: compression@~1.2.0
  1398. - deps: connect-timeout@~1.4.0
  1399. - deps: debug@~2.1.0
  1400. - deps: depd@~1.0.0
  1401. - deps: express-session@~1.9.0
  1402. - deps: finalhandler@0.3.1
  1403. - deps: method-override@~2.3.0
  1404. - deps: morgan@~1.4.0
  1405. - deps: response-time@~2.2.0
  1406. - deps: serve-favicon@~2.1.6
  1407. - deps: serve-index@~1.5.0
  1408. - deps: serve-static@~1.7.0
  1409. * deps: debug@~2.1.0
  1410. - Implement `DEBUG_FD` env variable support
  1411. * deps: depd@~1.0.0
  1412. * deps: send@0.10.0
  1413. - deps: debug@~2.1.0
  1414. - deps: depd@~1.0.0
  1415. - deps: etag@~1.5.0
  1416. 3.17.8 / 2014-10-15
  1417. ===================
  1418. * deps: connect@2.26.6
  1419. - deps: compression@~1.1.2
  1420. - deps: csurf@~1.6.2
  1421. - deps: errorhandler@~1.2.2
  1422. 3.17.7 / 2014-10-08
  1423. ===================
  1424. * deps: connect@2.26.5
  1425. - Fix accepting non-object arguments to `logger`
  1426. - deps: serve-static@~1.6.4
  1427. 3.17.6 / 2014-10-02
  1428. ===================
  1429. * deps: connect@2.26.4
  1430. - deps: morgan@~1.3.2
  1431. - deps: type-is@~1.5.2
  1432. 3.17.5 / 2014-09-24
  1433. ===================
  1434. * deps: connect@2.26.3
  1435. - deps: body-parser@~1.8.4
  1436. - deps: serve-favicon@~2.1.5
  1437. - deps: serve-static@~1.6.3
  1438. * deps: proxy-addr@~1.0.3
  1439. - Use `forwarded` npm module
  1440. * deps: send@0.9.3
  1441. - deps: etag@~1.4.0
  1442. 3.17.4 / 2014-09-19
  1443. ===================
  1444. * deps: connect@2.26.2
  1445. - deps: body-parser@~1.8.3
  1446. - deps: qs@2.2.4
  1447. 3.17.3 / 2014-09-18
  1448. ===================
  1449. * deps: proxy-addr@~1.0.2
  1450. - Fix a global leak when multiple subnets are trusted
  1451. - deps: ipaddr.js@0.1.3
  1452. 3.17.2 / 2014-09-15
  1453. ===================
  1454. * Use `crc` instead of `buffer-crc32` for speed
  1455. * deps: connect@2.26.1
  1456. - deps: body-parser@~1.8.2
  1457. - deps: depd@0.4.5
  1458. - deps: express-session@~1.8.2
  1459. - deps: morgan@~1.3.1
  1460. - deps: serve-favicon@~2.1.3
  1461. - deps: serve-static@~1.6.2
  1462. * deps: depd@0.4.5
  1463. * deps: send@0.9.2
  1464. - deps: depd@0.4.5
  1465. - deps: etag@~1.3.1
  1466. - deps: range-parser@~1.0.2
  1467. 3.17.1 / 2014-09-08
  1468. ===================
  1469. * Fix error in `req.subdomains` on empty host
  1470. 3.17.0 / 2014-09-08
  1471. ===================
  1472. * Support `X-Forwarded-Host` in `req.subdomains`
  1473. * Support IP address host in `req.subdomains`
  1474. * deps: connect@2.26.0
  1475. - deps: body-parser@~1.8.1
  1476. - deps: compression@~1.1.0
  1477. - deps: connect-timeout@~1.3.0
  1478. - deps: cookie-parser@~1.3.3
  1479. - deps: cookie-signature@1.0.5
  1480. - deps: csurf@~1.6.1
  1481. - deps: debug@~2.0.0
  1482. - deps: errorhandler@~1.2.0
  1483. - deps: express-session@~1.8.1
  1484. - deps: finalhandler@0.2.0
  1485. - deps: fresh@0.2.4
  1486. - deps: media-typer@0.3.0
  1487. - deps: method-override@~2.2.0
  1488. - deps: morgan@~1.3.0
  1489. - deps: qs@2.2.3
  1490. - deps: serve-favicon@~2.1.3
  1491. - deps: serve-index@~1.2.1
  1492. - deps: serve-static@~1.6.1
  1493. - deps: type-is@~1.5.1
  1494. - deps: vhost@~3.0.0
  1495. * deps: cookie-signature@1.0.5
  1496. * deps: debug@~2.0.0
  1497. * deps: fresh@0.2.4
  1498. * deps: media-typer@0.3.0
  1499. - Throw error when parameter format invalid on parse
  1500. * deps: range-parser@~1.0.2
  1501. * deps: send@0.9.1
  1502. - Add `lastModified` option
  1503. - Use `etag` to generate `ETag` header
  1504. - deps: debug@~2.0.0
  1505. - deps: fresh@0.2.4
  1506. * deps: vary@~1.0.0
  1507. - Accept valid `Vary` header string as `field`
  1508. 3.16.10 / 2014-09-04
  1509. ====================
  1510. * deps: connect@2.25.10
  1511. - deps: serve-static@~1.5.4
  1512. * deps: send@0.8.5
  1513. - Fix a path traversal issue when using `root`
  1514. - Fix malicious path detection for empty string path
  1515. 3.16.9 / 2014-08-29
  1516. ===================
  1517. * deps: connect@2.25.9
  1518. - deps: body-parser@~1.6.7
  1519. - deps: qs@2.2.2
  1520. 3.16.8 / 2014-08-27
  1521. ===================
  1522. * deps: connect@2.25.8
  1523. - deps: body-parser@~1.6.6
  1524. - deps: csurf@~1.4.1
  1525. - deps: qs@2.2.0
  1526. 3.16.7 / 2014-08-18
  1527. ===================
  1528. * deps: connect@2.25.7
  1529. - deps: body-parser@~1.6.5
  1530. - deps: express-session@~1.7.6
  1531. - deps: morgan@~1.2.3
  1532. - deps: serve-static@~1.5.3
  1533. * deps: send@0.8.3
  1534. - deps: destroy@1.0.3
  1535. - deps: on-finished@2.1.0
  1536. 3.16.6 / 2014-08-14
  1537. ===================
  1538. * deps: connect@2.25.6
  1539. - deps: body-parser@~1.6.4
  1540. - deps: qs@1.2.2
  1541. - deps: serve-static@~1.5.2
  1542. * deps: send@0.8.2
  1543. - Work around `fd` leak in Node.js 0.10 for `fs.ReadStream`
  1544. 3.16.5 / 2014-08-11
  1545. ===================
  1546. * deps: connect@2.25.5
  1547. - Fix backwards compatibility in `logger`
  1548. 3.16.4 / 2014-08-10
  1549. ===================
  1550. * Fix original URL parsing in `res.location`
  1551. * deps: connect@2.25.4
  1552. - Fix `query` middleware breaking with argument
  1553. - deps: body-parser@~1.6.3
  1554. - deps: compression@~1.0.11
  1555. - deps: connect-timeout@~1.2.2
  1556. - deps: express-session@~1.7.5
  1557. - deps: method-override@~2.1.3
  1558. - deps: on-headers@~1.0.0
  1559. - deps: parseurl@~1.3.0
  1560. - deps: qs@1.2.1
  1561. - deps: response-time@~2.0.1
  1562. - deps: serve-index@~1.1.6
  1563. - deps: serve-static@~1.5.1
  1564. * deps: parseurl@~1.3.0
  1565. 3.16.3 / 2014-08-07
  1566. ===================
  1567. * deps: connect@2.25.3
  1568. - deps: multiparty@3.3.2
  1569. 3.16.2 / 2014-08-07
  1570. ===================
  1571. * deps: connect@2.25.2
  1572. - deps: body-parser@~1.6.2
  1573. - deps: qs@1.2.0
  1574. 3.16.1 / 2014-08-06
  1575. ===================
  1576. * deps: connect@2.25.1
  1577. - deps: body-parser@~1.6.1
  1578. - deps: qs@1.1.0
  1579. 3.16.0 / 2014-08-05
  1580. ===================
  1581. * deps: connect@2.25.0
  1582. - deps: body-parser@~1.6.0
  1583. - deps: compression@~1.0.10
  1584. - deps: csurf@~1.4.0
  1585. - deps: express-session@~1.7.4
  1586. - deps: qs@1.0.2
  1587. - deps: serve-static@~1.5.0
  1588. * deps: send@0.8.1
  1589. - Add `extensions` option
  1590. 3.15.3 / 2014-08-04
  1591. ===================
  1592. * fix `res.sendfile` regression for serving directory index files
  1593. * deps: connect@2.24.3
  1594. - deps: serve-index@~1.1.5
  1595. - deps: serve-static@~1.4.4
  1596. * deps: send@0.7.4
  1597. - Fix incorrect 403 on Windows and Node.js 0.11
  1598. - Fix serving index files without root dir
  1599. 3.15.2 / 2014-07-27
  1600. ===================
  1601. * deps: connect@2.24.2
  1602. - deps: body-parser@~1.5.2
  1603. - deps: depd@0.4.4
  1604. - deps: express-session@~1.7.2
  1605. - deps: morgan@~1.2.2
  1606. - deps: serve-static@~1.4.2
  1607. * deps: depd@0.4.4
  1608. - Work-around v8 generating empty stack traces
  1609. * deps: send@0.7.2
  1610. - deps: depd@0.4.4
  1611. 3.15.1 / 2014-07-26
  1612. ===================
  1613. * deps: connect@2.24.1
  1614. - deps: body-parser@~1.5.1
  1615. - deps: depd@0.4.3
  1616. - deps: express-session@~1.7.1
  1617. - deps: morgan@~1.2.1
  1618. - deps: serve-index@~1.1.4
  1619. - deps: serve-static@~1.4.1
  1620. * deps: depd@0.4.3
  1621. - Fix exception when global `Error.stackTraceLimit` is too low
  1622. * deps: send@0.7.1
  1623. - deps: depd@0.4.3
  1624. 3.15.0 / 2014-07-22
  1625. ===================
  1626. * Fix `req.protocol` for proxy-direct connections
  1627. * Pass options from `res.sendfile` to `send`
  1628. * deps: connect@2.24.0
  1629. - deps: body-parser@~1.5.0
  1630. - deps: compression@~1.0.9
  1631. - deps: connect-timeout@~1.2.1
  1632. - deps: debug@1.0.4
  1633. - deps: depd@0.4.2
  1634. - deps: express-session@~1.7.0
  1635. - deps: finalhandler@0.1.0
  1636. - deps: method-override@~2.1.2
  1637. - deps: morgan@~1.2.0
  1638. - deps: multiparty@3.3.1
  1639. - deps: parseurl@~1.2.0
  1640. - deps: serve-static@~1.4.0
  1641. * deps: debug@1.0.4
  1642. * deps: depd@0.4.2
  1643. - Add `TRACE_DEPRECATION` environment variable
  1644. - Remove non-standard grey color from color output
  1645. - Support `--no-deprecation` argument
  1646. - Support `--trace-deprecation` argument
  1647. * deps: parseurl@~1.2.0
  1648. - Cache URLs based on original value
  1649. - Remove no-longer-needed URL mis-parse work-around
  1650. - Simplify the "fast-path" `RegExp`
  1651. * deps: send@0.7.0
  1652. - Add `dotfiles` option
  1653. - Cap `maxAge` value to 1 year
  1654. - deps: debug@1.0.4
  1655. - deps: depd@0.4.2
  1656. 3.14.0 / 2014-07-11
  1657. ===================
  1658. * add explicit "Rosetta Flash JSONP abuse" protection
  1659. - previous versions are not vulnerable; this is just explicit protection
  1660. * deprecate `res.redirect(url, status)` -- use `res.redirect(status, url)` instead
  1661. * fix `res.send(status, num)` to send `num` as json (not error)
  1662. * remove unnecessary escaping when `res.jsonp` returns JSON response
  1663. * deps: basic-auth@1.0.0
  1664. - support empty password
  1665. - support empty username
  1666. * deps: connect@2.23.0
  1667. - deps: debug@1.0.3
  1668. - deps: express-session@~1.6.4
  1669. - deps: method-override@~2.1.0
  1670. - deps: parseurl@~1.1.3
  1671. - deps: serve-static@~1.3.1
  1672. * deps: debug@1.0.3
  1673. - Add support for multiple wildcards in namespaces
  1674. * deps: methods@1.1.0
  1675. - add `CONNECT`
  1676. * deps: parseurl@~1.1.3
  1677. - faster parsing of href-only URLs
  1678. 3.13.0 / 2014-07-03
  1679. ===================
  1680. * add deprecation message to `app.configure`
  1681. * add deprecation message to `req.auth`
  1682. * use `basic-auth` to parse `Authorization` header
  1683. * deps: connect@2.22.0
  1684. - deps: csurf@~1.3.0
  1685. - deps: express-session@~1.6.1
  1686. - deps: multiparty@3.3.0
  1687. - deps: serve-static@~1.3.0
  1688. * deps: send@0.5.0
  1689. - Accept string for `maxage` (converted by `ms`)
  1690. - Include link in default redirect response
  1691. 3.12.1 / 2014-06-26
  1692. ===================
  1693. * deps: connect@2.21.1
  1694. - deps: cookie-parser@1.3.2
  1695. - deps: cookie-signature@1.0.4
  1696. - deps: express-session@~1.5.2
  1697. - deps: type-is@~1.3.2
  1698. * deps: cookie-signature@1.0.4
  1699. - fix for timing attacks
  1700. 3.12.0 / 2014-06-21
  1701. ===================
  1702. * use `media-typer` to alter content-type charset
  1703. * deps: connect@2.21.0
  1704. - deprecate `connect(middleware)` -- use `app.use(middleware)` instead
  1705. - deprecate `connect.createServer()` -- use `connect()` instead
  1706. - fix `res.setHeader()` patch to work with with get -> append -> set pattern
  1707. - deps: compression@~1.0.8
  1708. - deps: errorhandler@~1.1.1
  1709. - deps: express-session@~1.5.0
  1710. - deps: serve-index@~1.1.3
  1711. 3.11.0 / 2014-06-19
  1712. ===================
  1713. * deprecate things with `depd` module
  1714. * deps: buffer-crc32@0.2.3
  1715. * deps: connect@2.20.2
  1716. - deprecate `verify` option to `json` -- use `body-parser` npm module instead
  1717. - deprecate `verify` option to `urlencoded` -- use `body-parser` npm module instead
  1718. - deprecate things with `depd` module
  1719. - use `finalhandler` for final response handling
  1720. - use `media-typer` to parse `content-type` for charset
  1721. - deps: body-parser@1.4.3
  1722. - deps: connect-timeout@1.1.1
  1723. - deps: cookie-parser@1.3.1
  1724. - deps: csurf@1.2.2
  1725. - deps: errorhandler@1.1.0
  1726. - deps: express-session@1.4.0
  1727. - deps: multiparty@3.2.9
  1728. - deps: serve-index@1.1.2
  1729. - deps: type-is@1.3.1
  1730. - deps: vhost@2.0.0
  1731. 3.10.5 / 2014-06-11
  1732. ===================
  1733. * deps: connect@2.19.6
  1734. - deps: body-parser@1.3.1
  1735. - deps: compression@1.0.7
  1736. - deps: debug@1.0.2
  1737. - deps: serve-index@1.1.1
  1738. - deps: serve-static@1.2.3
  1739. * deps: debug@1.0.2
  1740. * deps: send@0.4.3
  1741. - Do not throw un-catchable error on file open race condition
  1742. - Use `escape-html` for HTML escaping
  1743. - deps: debug@1.0.2
  1744. - deps: finished@1.2.2
  1745. - deps: fresh@0.2.2
  1746. 3.10.4 / 2014-06-09
  1747. ===================
  1748. * deps: connect@2.19.5
  1749. - fix "event emitter leak" warnings
  1750. - deps: csurf@1.2.1
  1751. - deps: debug@1.0.1
  1752. - deps: serve-static@1.2.2
  1753. - deps: type-is@1.2.1
  1754. * deps: debug@1.0.1
  1755. * deps: send@0.4.2
  1756. - fix "event emitter leak" warnings
  1757. - deps: finished@1.2.1
  1758. - deps: debug@1.0.1
  1759. 3.10.3 / 2014-06-05
  1760. ===================
  1761. * use `vary` module for `res.vary`
  1762. * deps: connect@2.19.4
  1763. - deps: errorhandler@1.0.2
  1764. - deps: method-override@2.0.2
  1765. - deps: serve-favicon@2.0.1
  1766. * deps: debug@1.0.0
  1767. 3.10.2 / 2014-06-03
  1768. ===================
  1769. * deps: connect@2.19.3
  1770. - deps: compression@1.0.6
  1771. 3.10.1 / 2014-06-03
  1772. ===================
  1773. * deps: connect@2.19.2
  1774. - deps: compression@1.0.4
  1775. * deps: proxy-addr@1.0.1
  1776. 3.10.0 / 2014-06-02
  1777. ===================
  1778. * deps: connect@2.19.1
  1779. - deprecate `methodOverride()` -- use `method-override` npm module instead
  1780. - deps: body-parser@1.3.0
  1781. - deps: method-override@2.0.1
  1782. - deps: multiparty@3.2.8
  1783. - deps: response-time@2.0.0
  1784. - deps: serve-static@1.2.1
  1785. * deps: methods@1.0.1
  1786. * deps: send@0.4.1
  1787. - Send `max-age` in `Cache-Control` in correct format
  1788. 3.9.0 / 2014-05-30
  1789. ==================
  1790. * custom etag control with `app.set('etag', val)`
  1791. - `app.set('etag', function(body, encoding){ return '"etag"' })` custom etag generation
  1792. - `app.set('etag', 'weak')` weak tag
  1793. - `app.set('etag', 'strong')` strong etag
  1794. - `app.set('etag', false)` turn off
  1795. - `app.set('etag', true)` standard etag
  1796. * Include ETag in HEAD requests
  1797. * mark `res.send` ETag as weak and reduce collisions
  1798. * update connect to 2.18.0
  1799. - deps: compression@1.0.3
  1800. - deps: serve-index@1.1.0
  1801. - deps: serve-static@1.2.0
  1802. * update send to 0.4.0
  1803. - Calculate ETag with md5 for reduced collisions
  1804. - Ignore stream errors after request ends
  1805. - deps: debug@0.8.1
  1806. 3.8.1 / 2014-05-27
  1807. ==================
  1808. * update connect to 2.17.3
  1809. - deps: body-parser@1.2.2
  1810. - deps: express-session@1.2.1
  1811. - deps: method-override@1.0.2
  1812. 3.8.0 / 2014-05-21
  1813. ==================
  1814. * keep previous `Content-Type` for `res.jsonp`
  1815. * set proper `charset` in `Content-Type` for `res.send`
  1816. * update connect to 2.17.1
  1817. - fix `res.charset` appending charset when `content-type` has one
  1818. - deps: express-session@1.2.0
  1819. - deps: morgan@1.1.1
  1820. - deps: serve-index@1.0.3
  1821. 3.7.0 / 2014-05-18
  1822. ==================
  1823. * proper proxy trust with `app.set('trust proxy', trust)`
  1824. - `app.set('trust proxy', 1)` trust first hop
  1825. - `app.set('trust proxy', 'loopback')` trust loopback addresses
  1826. - `app.set('trust proxy', '10.0.0.1')` trust single IP
  1827. - `app.set('trust proxy', '10.0.0.1/16')` trust subnet
  1828. - `app.set('trust proxy', '10.0.0.1, 10.0.0.2')` trust list
  1829. - `app.set('trust proxy', false)` turn off
  1830. - `app.set('trust proxy', true)` trust everything
  1831. * update connect to 2.16.2
  1832. - deprecate `res.headerSent` -- use `res.headersSent`
  1833. - deprecate `res.on("header")` -- use on-headers module instead
  1834. - fix edge-case in `res.appendHeader` that would append in wrong order
  1835. - json: use body-parser
  1836. - urlencoded: use body-parser
  1837. - dep: bytes@1.0.0
  1838. - dep: cookie-parser@1.1.0
  1839. - dep: csurf@1.2.0
  1840. - dep: express-session@1.1.0
  1841. - dep: method-override@1.0.1
  1842. 3.6.0 / 2014-05-09
  1843. ==================
  1844. * deprecate `app.del()` -- use `app.delete()` instead
  1845. * deprecate `res.json(obj, status)` -- use `res.json(status, obj)` instead
  1846. - the edge-case `res.json(status, num)` requires `res.status(status).json(num)`
  1847. * deprecate `res.jsonp(obj, status)` -- use `res.jsonp(status, obj)` instead
  1848. - the edge-case `res.jsonp(status, num)` requires `res.status(status).jsonp(num)`
  1849. * support PURGE method
  1850. - add `app.purge`
  1851. - add `router.purge`
  1852. - include PURGE in `app.all`
  1853. * update connect to 2.15.0
  1854. * Add `res.appendHeader`
  1855. * Call error stack even when response has been sent
  1856. * Patch `res.headerSent` to return Boolean
  1857. * Patch `res.headersSent` for node.js 0.8
  1858. * Prevent default 404 handler after response sent
  1859. * dep: compression@1.0.2
  1860. * dep: connect-timeout@1.1.0
  1861. * dep: debug@^0.8.0
  1862. * dep: errorhandler@1.0.1
  1863. * dep: express-session@1.0.4
  1864. * dep: morgan@1.0.1
  1865. * dep: serve-favicon@2.0.0
  1866. * dep: serve-index@1.0.2
  1867. * update debug to 0.8.0
  1868. * add `enable()` method
  1869. * change from stderr to stdout
  1870. * update methods to 1.0.0
  1871. - add PURGE
  1872. * update mkdirp to 0.5.0
  1873. 3.5.3 / 2014-05-08
  1874. ==================
  1875. * fix `req.host` for IPv6 literals
  1876. * fix `res.jsonp` error if callback param is object
  1877. 3.5.2 / 2014-04-24
  1878. ==================
  1879. * update connect to 2.14.5
  1880. * update cookie to 0.1.2
  1881. * update mkdirp to 0.4.0
  1882. * update send to 0.3.0
  1883. 3.5.1 / 2014-03-25
  1884. ==================
  1885. * pin less-middleware in generated app
  1886. 3.5.0 / 2014-03-06
  1887. ==================
  1888. * bump deps
  1889. 3.4.8 / 2014-01-13
  1890. ==================
  1891. * prevent incorrect automatic OPTIONS responses #1868 @dpatti
  1892. * update binary and examples for jade 1.0 #1876 @yossi, #1877 @reqshark, #1892 @matheusazzi
  1893. * throw 400 in case of malformed paths @rlidwka
  1894. 3.4.7 / 2013-12-10
  1895. ==================
  1896. * update connect
  1897. 3.4.6 / 2013-12-01
  1898. ==================
  1899. * update connect (raw-body)
  1900. 3.4.5 / 2013-11-27
  1901. ==================
  1902. * update connect
  1903. * res.location: remove leading ./ #1802 @kapouer
  1904. * res.redirect: fix `res.redirect('toString') #1829 @michaelficarra
  1905. * res.send: always send ETag when content-length > 0
  1906. * router: add Router.all() method
  1907. 3.4.4 / 2013-10-29
  1908. ==================
  1909. * update connect
  1910. * update supertest
  1911. * update methods
  1912. * express(1): replace bodyParser() with urlencoded() and json() #1795 @chirag04
  1913. 3.4.3 / 2013-10-23
  1914. ==================
  1915. * update connect
  1916. 3.4.2 / 2013-10-18
  1917. ==================
  1918. * update connect
  1919. * downgrade commander
  1920. 3.4.1 / 2013-10-15
  1921. ==================
  1922. * update connect
  1923. * update commander
  1924. * jsonp: check if callback is a function
  1925. * router: wrap encodeURIComponent in a try/catch #1735 (@lxe)
  1926. * res.format: now includes charset @1747 (@sorribas)
  1927. * res.links: allow multiple calls @1746 (@sorribas)
  1928. 3.4.0 / 2013-09-07
  1929. ==================
  1930. * add res.vary(). Closes #1682
  1931. * update connect
  1932. 3.3.8 / 2013-09-02
  1933. ==================
  1934. * update connect
  1935. 3.3.7 / 2013-08-28
  1936. ==================
  1937. * update connect
  1938. 3.3.6 / 2013-08-27
  1939. ==================
  1940. * Revert "remove charset from json responses. Closes #1631" (causes issues in some clients)
  1941. * add: req.accepts take an argument list
  1942. 3.3.4 / 2013-07-08
  1943. ==================
  1944. * update send and connect
  1945. 3.3.3 / 2013-07-04
  1946. ==================
  1947. * update connect
  1948. 3.3.2 / 2013-07-03
  1949. ==================
  1950. * update connect
  1951. * update send
  1952. * remove .version export
  1953. 3.3.1 / 2013-06-27
  1954. ==================
  1955. * update connect
  1956. 3.3.0 / 2013-06-26
  1957. ==================
  1958. * update connect
  1959. * add support for multiple X-Forwarded-Proto values. Closes #1646
  1960. * change: remove charset from json responses. Closes #1631
  1961. * change: return actual booleans from req.accept* functions
  1962. * fix jsonp callback array throw
  1963. 3.2.6 / 2013-06-02
  1964. ==================
  1965. * update connect
  1966. 3.2.5 / 2013-05-21
  1967. ==================
  1968. * update connect
  1969. * update node-cookie
  1970. * add: throw a meaningful error when there is no default engine
  1971. * change generation of ETags with res.send() to GET requests only. Closes #1619
  1972. 3.2.4 / 2013-05-09
  1973. ==================
  1974. * fix `req.subdomains` when no Host is present
  1975. * fix `req.host` when no Host is present, return undefined
  1976. 3.2.3 / 2013-05-07
  1977. ==================
  1978. * update connect / qs
  1979. 3.2.2 / 2013-05-03
  1980. ==================
  1981. * update qs
  1982. 3.2.1 / 2013-04-29
  1983. ==================
  1984. * add app.VERB() paths array deprecation warning
  1985. * update connect
  1986. * update qs and remove all ~ semver crap
  1987. * fix: accept number as value of Signed Cookie
  1988. 3.2.0 / 2013-04-15
  1989. ==================
  1990. * add "view" constructor setting to override view behaviour
  1991. * add req.acceptsEncoding(name)
  1992. * add req.acceptedEncodings
  1993. * revert cookie signature change causing session race conditions
  1994. * fix sorting of Accept values of the same quality
  1995. 3.1.2 / 2013-04-12
  1996. ==================
  1997. * add support for custom Accept parameters
  1998. * update cookie-signature
  1999. 3.1.1 / 2013-04-01
  2000. ==================
  2001. * add X-Forwarded-Host support to `req.host`
  2002. * fix relative redirects
  2003. * update mkdirp
  2004. * update buffer-crc32
  2005. * remove legacy app.configure() method from app template.
  2006. 3.1.0 / 2013-01-25
  2007. ==================
  2008. * add support for leading "." in "view engine" setting
  2009. * add array support to `res.set()`
  2010. * add node 0.8.x to travis.yml
  2011. * add "subdomain offset" setting for tweaking `req.subdomains`
  2012. * add `res.location(url)` implementing `res.redirect()`-like setting of Location
  2013. * use app.get() for x-powered-by setting for inheritance
  2014. * fix colons in passwords for `req.auth`
  2015. 3.0.6 / 2013-01-04
  2016. ==================
  2017. * add http verb methods to Router
  2018. * update connect
  2019. * fix mangling of the `res.cookie()` options object
  2020. * fix jsonp whitespace escape. Closes #1132
  2021. 3.0.5 / 2012-12-19
  2022. ==================
  2023. * add throwing when a non-function is passed to a route
  2024. * fix: explicitly remove Transfer-Encoding header from 204 and 304 responses
  2025. * revert "add 'etag' option"
  2026. 3.0.4 / 2012-12-05
  2027. ==================
  2028. * add 'etag' option to disable `res.send()` Etags
  2029. * add escaping of urls in text/plain in `res.redirect()`
  2030. for old browsers interpreting as html
  2031. * change crc32 module for a more liberal license
  2032. * update connect
  2033. 3.0.3 / 2012-11-13
  2034. ==================
  2035. * update connect
  2036. * update cookie module
  2037. * fix cookie max-age
  2038. 3.0.2 / 2012-11-08
  2039. ==================
  2040. * add OPTIONS to cors example. Closes #1398
  2041. * fix route chaining regression. Closes #1397
  2042. 3.0.1 / 2012-11-01
  2043. ==================
  2044. * update connect
  2045. 3.0.0 / 2012-10-23
  2046. ==================
  2047. * add `make clean`
  2048. * add "Basic" check to req.auth
  2049. * add `req.auth` test coverage
  2050. * add cb && cb(payload) to `res.jsonp()`. Closes #1374
  2051. * add backwards compat for `res.redirect()` status. Closes #1336
  2052. * add support for `res.json()` to retain previously defined Content-Types. Closes #1349
  2053. * update connect
  2054. * change `res.redirect()` to utilize a pathname-relative Location again. Closes #1382
  2055. * remove non-primitive string support for `res.send()`
  2056. * fix view-locals example. Closes #1370
  2057. * fix route-separation example
  2058. 3.0.0rc5 / 2012-09-18
  2059. ==================
  2060. * update connect
  2061. * add redis search example
  2062. * add static-files example
  2063. * add "x-powered-by" setting (`app.disable('x-powered-by')`)
  2064. * add "application/octet-stream" redirect Accept test case. Closes #1317
  2065. 3.0.0rc4 / 2012-08-30
  2066. ==================
  2067. * add `res.jsonp()`. Closes #1307
  2068. * add "verbose errors" option to error-pages example
  2069. * add another route example to express(1) so people are not so confused
  2070. * add redis online user activity tracking example
  2071. * update connect dep
  2072. * fix etag quoting. Closes #1310
  2073. * fix error-pages 404 status
  2074. * fix jsonp callback char restrictions
  2075. * remove old OPTIONS default response
  2076. 3.0.0rc3 / 2012-08-13
  2077. ==================
  2078. * update connect dep
  2079. * fix signed cookies to work with `connect.cookieParser()` ("s:" prefix was missing) [tnydwrds]
  2080. * fix `res.render()` clobbering of "locals"
  2081. 3.0.0rc2 / 2012-08-03
  2082. ==================
  2083. * add CORS example
  2084. * update connect dep
  2085. * deprecate `.createServer()` & remove old stale examples
  2086. * fix: escape `res.redirect()` link
  2087. * fix vhost example
  2088. 3.0.0rc1 / 2012-07-24
  2089. ==================
  2090. * add more examples to view-locals
  2091. * add scheme-relative redirects (`res.redirect("//foo.com")`) support
  2092. * update cookie dep
  2093. * update connect dep
  2094. * update send dep
  2095. * fix `express(1)` -h flag, use -H for hogan. Closes #1245
  2096. * fix `res.sendfile()` socket error handling regression
  2097. 3.0.0beta7 / 2012-07-16
  2098. ==================
  2099. * update connect dep for `send()` root normalization regression
  2100. 3.0.0beta6 / 2012-07-13
  2101. ==================
  2102. * add `err.view` property for view errors. Closes #1226
  2103. * add "jsonp callback name" setting
  2104. * add support for "/foo/:bar*" non-greedy matches
  2105. * change `res.sendfile()` to use `send()` module
  2106. * change `res.send` to use "response-send" module
  2107. * remove `app.locals.use` and `res.locals.use`, use regular middleware
  2108. 3.0.0beta5 / 2012-07-03
  2109. ==================
  2110. * add "make check" support
  2111. * add route-map example
  2112. * add `res.json(obj, status)` support back for BC
  2113. * add "methods" dep, remove internal methods module
  2114. * update connect dep
  2115. * update auth example to utilize cores pbkdf2
  2116. * updated tests to use "supertest"
  2117. 3.0.0beta4 / 2012-06-25
  2118. ==================
  2119. * Added `req.auth`
  2120. * Added `req.range(size)`
  2121. * Added `res.links(obj)`
  2122. * Added `res.send(body, status)` support back for backwards compat
  2123. * Added `.default()` support to `res.format()`
  2124. * Added 2xx / 304 check to `req.fresh`
  2125. * Revert "Added + support to the router"
  2126. * Fixed `res.send()` freshness check, respect res.statusCode
  2127. 3.0.0beta3 / 2012-06-15
  2128. ==================
  2129. * Added hogan `--hjs` to express(1) [nullfirm]
  2130. * Added another example to content-negotiation
  2131. * Added `fresh` dep
  2132. * Changed: `res.send()` always checks freshness
  2133. * Fixed: expose connects mime module. Closes #1165
  2134. 3.0.0beta2 / 2012-06-06
  2135. ==================
  2136. * Added `+` support to the router
  2137. * Added `req.host`
  2138. * Changed `req.param()` to check route first
  2139. * Update connect dep
  2140. 3.0.0beta1 / 2012-06-01
  2141. ==================
  2142. * Added `res.format()` callback to override default 406 behaviour
  2143. * Fixed `res.redirect()` 406. Closes #1154
  2144. 3.0.0alpha5 / 2012-05-30
  2145. ==================
  2146. * Added `req.ip`
  2147. * Added `{ signed: true }` option to `res.cookie()`
  2148. * Removed `res.signedCookie()`
  2149. * Changed: dont reverse `req.ips`
  2150. * Fixed "trust proxy" setting check for `req.ips`
  2151. 3.0.0alpha4 / 2012-05-09
  2152. ==================
  2153. * Added: allow `[]` in jsonp callback. Closes #1128
  2154. * Added `PORT` env var support in generated template. Closes #1118 [benatkin]
  2155. * Updated: connect 2.2.2
  2156. 3.0.0alpha3 / 2012-05-04
  2157. ==================
  2158. * Added public `app.routes`. Closes #887
  2159. * Added _view-locals_ example
  2160. * Added _mvc_ example
  2161. * Added `res.locals.use()`. Closes #1120
  2162. * Added conditional-GET support to `res.send()`
  2163. * Added: coerce `res.set()` values to strings
  2164. * Changed: moved `static()` in generated apps below router
  2165. * Changed: `res.send()` only set ETag when not previously set
  2166. * Changed connect 2.2.1 dep
  2167. * Changed: `make test` now runs unit / acceptance tests
  2168. * Fixed req/res proto inheritance
  2169. 3.0.0alpha2 / 2012-04-26
  2170. ==================
  2171. * Added `make benchmark` back
  2172. * Added `res.send()` support for `String` objects
  2173. * Added client-side data exposing example
  2174. * Added `res.header()` and `req.header()` aliases for BC
  2175. * Added `express.createServer()` for BC
  2176. * Perf: memoize parsed urls
  2177. * Perf: connect 2.2.0 dep
  2178. * Changed: make `expressInit()` middleware self-aware
  2179. * Fixed: use app.get() for all core settings
  2180. * Fixed redis session example
  2181. * Fixed session example. Closes #1105
  2182. * Fixed generated express dep. Closes #1078
  2183. 3.0.0alpha1 / 2012-04-15
  2184. ==================
  2185. * Added `app.locals.use(callback)`
  2186. * Added `app.locals` object
  2187. * Added `app.locals(obj)`
  2188. * Added `res.locals` object
  2189. * Added `res.locals(obj)`
  2190. * Added `res.format()` for content-negotiation
  2191. * Added `app.engine()`
  2192. * Added `res.cookie()` JSON cookie support
  2193. * Added "trust proxy" setting
  2194. * Added `req.subdomains`
  2195. * Added `req.protocol`
  2196. * Added `req.secure`
  2197. * Added `req.path`
  2198. * Added `req.ips`
  2199. * Added `req.fresh`
  2200. * Added `req.stale`
  2201. * Added comma-delimited / array support for `req.accepts()`
  2202. * Added debug instrumentation
  2203. * Added `res.set(obj)`
  2204. * Added `res.set(field, value)`
  2205. * Added `res.get(field)`
  2206. * Added `app.get(setting)`. Closes #842
  2207. * Added `req.acceptsLanguage()`
  2208. * Added `req.acceptsCharset()`
  2209. * Added `req.accepted`
  2210. * Added `req.acceptedLanguages`
  2211. * Added `req.acceptedCharsets`
  2212. * Added "json replacer" setting
  2213. * Added "json spaces" setting
  2214. * Added X-Forwarded-Proto support to `res.redirect()`. Closes #92
  2215. * Added `--less` support to express(1)
  2216. * Added `express.response` prototype
  2217. * Added `express.request` prototype
  2218. * Added `express.application` prototype
  2219. * Added `app.path()`
  2220. * Added `app.render()`
  2221. * Added `res.type()` to replace `res.contentType()`
  2222. * Changed: `res.redirect()` to add relative support
  2223. * Changed: enable "jsonp callback" by default
  2224. * Changed: renamed "case sensitive routes" to "case sensitive routing"
  2225. * Rewrite of all tests with mocha
  2226. * Removed "root" setting
  2227. * Removed `res.redirect('home')` support
  2228. * Removed `req.notify()`
  2229. * Removed `app.register()`
  2230. * Removed `app.redirect()`
  2231. * Removed `app.is()`
  2232. * Removed `app.helpers()`
  2233. * Removed `app.dynamicHelpers()`
  2234. * Fixed `res.sendfile()` with non-GET. Closes #723
  2235. * Fixed express(1) public dir for windows. Closes #866
  2236. 2.5.9/ 2012-04-02
  2237. ==================
  2238. * Added support for PURGE request method [pbuyle]
  2239. * Fixed `express(1)` generated app `app.address()` before `listening` [mmalecki]
  2240. 2.5.8 / 2012-02-08
  2241. ==================
  2242. * Update mkdirp dep. Closes #991
  2243. 2.5.7 / 2012-02-06
  2244. ==================
  2245. * Fixed `app.all` duplicate DELETE requests [mscdex]
  2246. 2.5.6 / 2012-01-13
  2247. ==================
  2248. * Updated hamljs dev dep. Closes #953
  2249. 2.5.5 / 2012-01-08
  2250. ==================
  2251. * Fixed: set `filename` on cached templates [matthewleon]
  2252. 2.5.4 / 2012-01-02
  2253. ==================
  2254. * Fixed `express(1)` eol on 0.4.x. Closes #947
  2255. 2.5.3 / 2011-12-30
  2256. ==================
  2257. * Fixed `req.is()` when a charset is present
  2258. 2.5.2 / 2011-12-10
  2259. ==================
  2260. * Fixed: express(1) LF -> CRLF for windows
  2261. 2.5.1 / 2011-11-17
  2262. ==================
  2263. * Changed: updated connect to 1.8.x
  2264. * Removed sass.js support from express(1)
  2265. 2.5.0 / 2011-10-24
  2266. ==================
  2267. * Added ./routes dir for generated app by default
  2268. * Added npm install reminder to express(1) app gen
  2269. * Added 0.5.x support
  2270. * Removed `make test-cov` since it wont work with node 0.5.x
  2271. * Fixed express(1) public dir for windows. Closes #866
  2272. 2.4.7 / 2011-10-05
  2273. ==================
  2274. * Added mkdirp to express(1). Closes #795
  2275. * Added simple _json-config_ example
  2276. * Added shorthand for the parsed request's pathname via `req.path`
  2277. * Changed connect dep to 1.7.x to fix npm issue...
  2278. * Fixed `res.redirect()` __HEAD__ support. [reported by xerox]
  2279. * Fixed `req.flash()`, only escape args
  2280. * Fixed absolute path checking on windows. Closes #829 [reported by andrewpmckenzie]
  2281. 2.4.6 / 2011-08-22
  2282. ==================
  2283. * Fixed multiple param callback regression. Closes #824 [reported by TroyGoode]
  2284. 2.4.5 / 2011-08-19
  2285. ==================
  2286. * Added support for routes to handle errors. Closes #809
  2287. * Added `app.routes.all()`. Closes #803
  2288. * Added "basepath" setting to work in conjunction with reverse proxies etc.
  2289. * Refactored `Route` to use a single array of callbacks
  2290. * Added support for multiple callbacks for `app.param()`. Closes #801
  2291. Closes #805
  2292. * Changed: removed .call(self) for route callbacks
  2293. * Dependency: `qs >= 0.3.1`
  2294. * Fixed `res.redirect()` on windows due to `join()` usage. Closes #808
  2295. 2.4.4 / 2011-08-05
  2296. ==================
  2297. * Fixed `res.header()` intention of a set, even when `undefined`
  2298. * Fixed `*`, value no longer required
  2299. * Fixed `res.send(204)` support. Closes #771
  2300. 2.4.3 / 2011-07-14
  2301. ==================
  2302. * Added docs for `status` option special-case. Closes #739
  2303. * Fixed `options.filename`, exposing the view path to template engines
  2304. 2.4.2. / 2011-07-06
  2305. ==================
  2306. * Revert "removed jsonp stripping" for XSS
  2307. 2.4.1 / 2011-07-06
  2308. ==================
  2309. * Added `res.json()` JSONP support. Closes #737
  2310. * Added _extending-templates_ example. Closes #730
  2311. * Added "strict routing" setting for trailing slashes
  2312. * Added support for multiple envs in `app.configure()` calls. Closes #735
  2313. * Changed: `res.send()` using `res.json()`
  2314. * Changed: when cookie `path === null` don't default it
  2315. * Changed; default cookie path to "home" setting. Closes #731
  2316. * Removed _pids/logs_ creation from express(1)
  2317. 2.4.0 / 2011-06-28
  2318. ==================
  2319. * Added chainable `res.status(code)`
  2320. * Added `res.json()`, an explicit version of `res.send(obj)`
  2321. * Added simple web-service example
  2322. 2.3.12 / 2011-06-22
  2323. ==================
  2324. * \#express is now on freenode! come join!
  2325. * Added `req.get(field, param)`
  2326. * Added links to Japanese documentation, thanks @hideyukisaito!
  2327. * Added; the `express(1)` generated app outputs the env
  2328. * Added `content-negotiation` example
  2329. * Dependency: connect >= 1.5.1 < 2.0.0
  2330. * Fixed view layout bug. Closes #720
  2331. * Fixed; ignore body on 304. Closes #701
  2332. 2.3.11 / 2011-06-04
  2333. ==================
  2334. * Added `npm test`
  2335. * Removed generation of dummy test file from `express(1)`
  2336. * Fixed; `express(1)` adds express as a dep
  2337. * Fixed; prune on `prepublish`
  2338. 2.3.10 / 2011-05-27
  2339. ==================
  2340. * Added `req.route`, exposing the current route
  2341. * Added _package.json_ generation support to `express(1)`
  2342. * Fixed call to `app.param()` function for optional params. Closes #682
  2343. 2.3.9 / 2011-05-25
  2344. ==================
  2345. * Fixed bug-ish with `../' in `res.partial()` calls
  2346. 2.3.8 / 2011-05-24
  2347. ==================
  2348. * Fixed `app.options()`
  2349. 2.3.7 / 2011-05-23
  2350. ==================
  2351. * Added route `Collection`, ex: `app.get('/user/:id').remove();`
  2352. * Added support for `app.param(fn)` to define param logic
  2353. * Removed `app.param()` support for callback with return value
  2354. * Removed module.parent check from express(1) generated app. Closes #670
  2355. * Refactored router. Closes #639
  2356. 2.3.6 / 2011-05-20
  2357. ==================
  2358. * Changed; using devDependencies instead of git submodules
  2359. * Fixed redis session example
  2360. * Fixed markdown example
  2361. * Fixed view caching, should not be enabled in development
  2362. 2.3.5 / 2011-05-20
  2363. ==================
  2364. * Added export `.view` as alias for `.View`
  2365. 2.3.4 / 2011-05-08
  2366. ==================
  2367. * Added `./examples/say`
  2368. * Fixed `res.sendfile()` bug preventing the transfer of files with spaces
  2369. 2.3.3 / 2011-05-03
  2370. ==================
  2371. * Added "case sensitive routes" option.
  2372. * Changed; split methods supported per rfc [slaskis]
  2373. * Fixed route-specific middleware when using the same callback function several times
  2374. 2.3.2 / 2011-04-27
  2375. ==================
  2376. * Fixed view hints
  2377. 2.3.1 / 2011-04-26
  2378. ==================
  2379. * Added `app.match()` as `app.match.all()`
  2380. * Added `app.lookup()` as `app.lookup.all()`
  2381. * Added `app.remove()` for `app.remove.all()`
  2382. * Added `app.remove.VERB()`
  2383. * Fixed template caching collision issue. Closes #644
  2384. * Moved router over from connect and started refactor
  2385. 2.3.0 / 2011-04-25
  2386. ==================
  2387. * Added options support to `res.clearCookie()`
  2388. * Added `res.helpers()` as alias of `res.locals()`
  2389. * Added; json defaults to UTF-8 with `res.send()`. Closes #632. [Daniel * Dependency `connect >= 1.4.0`
  2390. * Changed; auto set Content-Type in res.attachement [Aaron Heckmann]
  2391. * Renamed "cache views" to "view cache". Closes #628
  2392. * Fixed caching of views when using several apps. Closes #637
  2393. * Fixed gotcha invoking `app.param()` callbacks once per route middleware.
  2394. Closes #638
  2395. * Fixed partial lookup precedence. Closes #631
  2396. Shaw]
  2397. 2.2.2 / 2011-04-12
  2398. ==================
  2399. * Added second callback support for `res.download()` connection errors
  2400. * Fixed `filename` option passing to template engine
  2401. 2.2.1 / 2011-04-04
  2402. ==================
  2403. * Added `layout(path)` helper to change the layout within a view. Closes #610
  2404. * Fixed `partial()` collection object support.
  2405. Previously only anything with `.length` would work.
  2406. When `.length` is present one must still be aware of holes,
  2407. however now `{ collection: {foo: 'bar'}}` is valid, exposes
  2408. `keyInCollection` and `keysInCollection`.
  2409. * Performance improved with better view caching
  2410. * Removed `request` and `response` locals
  2411. * Changed; errorHandler page title is now `Express` instead of `Connect`
  2412. 2.2.0 / 2011-03-30
  2413. ==================
  2414. * Added `app.lookup.VERB()`, ex `app.lookup.put('/user/:id')`. Closes #606
  2415. * Added `app.match.VERB()`, ex `app.match.put('/user/12')`. Closes #606
  2416. * Added `app.VERB(path)` as alias of `app.lookup.VERB()`.
  2417. * Dependency `connect >= 1.2.0`
  2418. 2.1.1 / 2011-03-29
  2419. ==================
  2420. * Added; expose `err.view` object when failing to locate a view
  2421. * Fixed `res.partial()` call `next(err)` when no callback is given [reported by aheckmann]
  2422. * Fixed; `res.send(undefined)` responds with 204 [aheckmann]
  2423. 2.1.0 / 2011-03-24
  2424. ==================
  2425. * Added `<root>/_?<name>` partial lookup support. Closes #447
  2426. * Added `request`, `response`, and `app` local variables
  2427. * Added `settings` local variable, containing the app's settings
  2428. * Added `req.flash()` exception if `req.session` is not available
  2429. * Added `res.send(bool)` support (json response)
  2430. * Fixed stylus example for latest version
  2431. * Fixed; wrap try/catch around `res.render()`
  2432. 2.0.0 / 2011-03-17
  2433. ==================
  2434. * Fixed up index view path alternative.
  2435. * Changed; `res.locals()` without object returns the locals
  2436. 2.0.0rc3 / 2011-03-17
  2437. ==================
  2438. * Added `res.locals(obj)` to compliment `res.local(key, val)`
  2439. * Added `res.partial()` callback support
  2440. * Fixed recursive error reporting issue in `res.render()`
  2441. 2.0.0rc2 / 2011-03-17
  2442. ==================
  2443. * Changed; `partial()` "locals" are now optional
  2444. * Fixed `SlowBuffer` support. Closes #584 [reported by tyrda01]
  2445. * Fixed .filename view engine option [reported by drudge]
  2446. * Fixed blog example
  2447. * Fixed `{req,res}.app` reference when mounting [Ben Weaver]
  2448. 2.0.0rc / 2011-03-14
  2449. ==================
  2450. * Fixed; expose `HTTPSServer` constructor
  2451. * Fixed express(1) default test charset. Closes #579 [reported by secoif]
  2452. * Fixed; default charset to utf-8 instead of utf8 for lame IE [reported by NickP]
  2453. 2.0.0beta3 / 2011-03-09
  2454. ==================
  2455. * Added support for `res.contentType()` literal
  2456. The original `res.contentType('.json')`,
  2457. `res.contentType('application/json')`, and `res.contentType('json')`
  2458. will work now.
  2459. * Added `res.render()` status option support back
  2460. * Added charset option for `res.render()`
  2461. * Added `.charset` support (via connect 1.0.4)
  2462. * Added view resolution hints when in development and a lookup fails
  2463. * Added layout lookup support relative to the page view.
  2464. For example while rendering `./views/user/index.jade` if you create
  2465. `./views/user/layout.jade` it will be used in favour of the root layout.
  2466. * Fixed `res.redirect()`. RFC states absolute url [reported by unlink]
  2467. * Fixed; default `res.send()` string charset to utf8
  2468. * Removed `Partial` constructor (not currently used)
  2469. 2.0.0beta2 / 2011-03-07
  2470. ==================
  2471. * Added res.render() `.locals` support back to aid in migration process
  2472. * Fixed flash example
  2473. 2.0.0beta / 2011-03-03
  2474. ==================
  2475. * Added HTTPS support
  2476. * Added `res.cookie()` maxAge support
  2477. * Added `req.header()` _Referrer_ / _Referer_ special-case, either works
  2478. * Added mount support for `res.redirect()`, now respects the mount-point
  2479. * Added `union()` util, taking place of `merge(clone())` combo
  2480. * Added stylus support to express(1) generated app
  2481. * Added secret to session middleware used in examples and generated app
  2482. * Added `res.local(name, val)` for progressive view locals
  2483. * Added default param support to `req.param(name, default)`
  2484. * Added `app.disabled()` and `app.enabled()`
  2485. * Added `app.register()` support for omitting leading ".", either works
  2486. * Added `res.partial()`, using the same interface as `partial()` within a view. Closes #539
  2487. * Added `app.param()` to map route params to async/sync logic
  2488. * Added; aliased `app.helpers()` as `app.locals()`. Closes #481
  2489. * Added extname with no leading "." support to `res.contentType()`
  2490. * Added `cache views` setting, defaulting to enabled in "production" env
  2491. * Added index file partial resolution, eg: partial('user') may try _views/user/index.jade_.
  2492. * Added `req.accepts()` support for extensions
  2493. * Changed; `res.download()` and `res.sendfile()` now utilize Connect's
  2494. static file server `connect.static.send()`.
  2495. * Changed; replaced `connect.utils.mime()` with npm _mime_ module
  2496. * Changed; allow `req.query` to be pre-defined (via middleware or other parent
  2497. * Changed view partial resolution, now relative to parent view
  2498. * Changed view engine signature. no longer `engine.render(str, options, callback)`, now `engine.compile(str, options) -> Function`, the returned function accepts `fn(locals)`.
  2499. * Fixed `req.param()` bug returning Array.prototype methods. Closes #552
  2500. * Fixed; using `Stream#pipe()` instead of `sys.pump()` in `res.sendfile()`
  2501. * Fixed; using _qs_ module instead of _querystring_
  2502. * Fixed; strip unsafe chars from jsonp callbacks
  2503. * Removed "stream threshold" setting
  2504. 1.0.8 / 2011-03-01
  2505. ==================
  2506. * Allow `req.query` to be pre-defined (via middleware or other parent app)
  2507. * "connect": ">= 0.5.0 < 1.0.0". Closes #547
  2508. * Removed the long deprecated __EXPRESS_ENV__ support
  2509. 1.0.7 / 2011-02-07
  2510. ==================
  2511. * Fixed `render()` setting inheritance.
  2512. Mounted apps would not inherit "view engine"
  2513. 1.0.6 / 2011-02-07
  2514. ==================
  2515. * Fixed `view engine` setting bug when period is in dirname
  2516. 1.0.5 / 2011-02-05
  2517. ==================
  2518. * Added secret to generated app `session()` call
  2519. 1.0.4 / 2011-02-05
  2520. ==================
  2521. * Added `qs` dependency to _package.json_
  2522. * Fixed namespaced `require()`s for latest connect support
  2523. 1.0.3 / 2011-01-13
  2524. ==================
  2525. * Remove unsafe characters from JSONP callback names [Ryan Grove]
  2526. 1.0.2 / 2011-01-10
  2527. ==================
  2528. * Removed nested require, using `connect.router`
  2529. 1.0.1 / 2010-12-29
  2530. ==================
  2531. * Fixed for middleware stacked via `createServer()`
  2532. previously the `foo` middleware passed to `createServer(foo)`
  2533. would not have access to Express methods such as `res.send()`
  2534. or props like `req.query` etc.
  2535. 1.0.0 / 2010-11-16
  2536. ==================
  2537. * Added; deduce partial object names from the last segment.
  2538. For example by default `partial('forum/post', postObject)` will
  2539. give you the _post_ object, providing a meaningful default.
  2540. * Added http status code string representation to `res.redirect()` body
  2541. * Added; `res.redirect()` supporting _text/plain_ and _text/html_ via __Accept__.
  2542. * Added `req.is()` to aid in content negotiation
  2543. * Added partial local inheritance [suggested by masylum]. Closes #102
  2544. providing access to parent template locals.
  2545. * Added _-s, --session[s]_ flag to express(1) to add session related middleware
  2546. * Added _--template_ flag to express(1) to specify the
  2547. template engine to use.
  2548. * Added _--css_ flag to express(1) to specify the
  2549. stylesheet engine to use (or just plain css by default).
  2550. * Added `app.all()` support [thanks aheckmann]
  2551. * Added partial direct object support.
  2552. You may now `partial('user', user)` providing the "user" local,
  2553. vs previously `partial('user', { object: user })`.
  2554. * Added _route-separation_ example since many people question ways
  2555. to do this with CommonJS modules. Also view the _blog_ example for
  2556. an alternative.
  2557. * Performance; caching view path derived partial object names
  2558. * Fixed partial local inheritance precedence. [reported by Nick Poulden] Closes #454
  2559. * Fixed jsonp support; _text/javascript_ as per mailinglist discussion
  2560. 1.0.0rc4 / 2010-10-14
  2561. ==================
  2562. * Added _NODE_ENV_ support, _EXPRESS_ENV_ is deprecated and will be removed in 1.0.0
  2563. * Added route-middleware support (very helpful, see the [docs](http://expressjs.com/guide.html#Route-Middleware))
  2564. * Added _jsonp callback_ setting to enable/disable jsonp autowrapping [Dav Glass]
  2565. * Added callback query check on response.send to autowrap JSON objects for simple webservice implementations [Dav Glass]
  2566. * Added `partial()` support for array-like collections. Closes #434
  2567. * Added support for swappable querystring parsers
  2568. * Added session usage docs. Closes #443
  2569. * Added dynamic helper caching. Closes #439 [suggested by maritz]
  2570. * Added authentication example
  2571. * Added basic Range support to `res.sendfile()` (and `res.download()` etc)
  2572. * Changed; `express(1)` generated app using 2 spaces instead of 4
  2573. * Default env to "development" again [aheckmann]
  2574. * Removed _context_ option is no more, use "scope"
  2575. * Fixed; exposing _./support_ libs to examples so they can run without installs
  2576. * Fixed mvc example
  2577. 1.0.0rc3 / 2010-09-20
  2578. ==================
  2579. * Added confirmation for `express(1)` app generation. Closes #391
  2580. * Added extending of flash formatters via `app.flashFormatters`
  2581. * Added flash formatter support. Closes #411
  2582. * Added streaming support to `res.sendfile()` using `sys.pump()` when >= "stream threshold"
  2583. * Added _stream threshold_ setting for `res.sendfile()`
  2584. * Added `res.send()` __HEAD__ support
  2585. * Added `res.clearCookie()`
  2586. * Added `res.cookie()`
  2587. * Added `res.render()` headers option
  2588. * Added `res.redirect()` response bodies
  2589. * Added `res.render()` status option support. Closes #425 [thanks aheckmann]
  2590. * Fixed `res.sendfile()` responding with 403 on malicious path
  2591. * Fixed `res.download()` bug; when an error occurs remove _Content-Disposition_
  2592. * Fixed; mounted apps settings now inherit from parent app [aheckmann]
  2593. * Fixed; stripping Content-Length / Content-Type when 204
  2594. * Fixed `res.send()` 204. Closes #419
  2595. * Fixed multiple _Set-Cookie_ headers via `res.header()`. Closes #402
  2596. * Fixed bug messing with error handlers when `listenFD()` is called instead of `listen()`. [thanks guillermo]
  2597. 1.0.0rc2 / 2010-08-17
  2598. ==================
  2599. * Added `app.register()` for template engine mapping. Closes #390
  2600. * Added `res.render()` callback support as second argument (no options)
  2601. * Added callback support to `res.download()`
  2602. * Added callback support for `res.sendfile()`
  2603. * Added support for middleware access via `express.middlewareName()` vs `connect.middlewareName()`
  2604. * Added "partials" setting to docs
  2605. * Added default expresso tests to `express(1)` generated app. Closes #384
  2606. * Fixed `res.sendfile()` error handling, defer via `next()`
  2607. * Fixed `res.render()` callback when a layout is used [thanks guillermo]
  2608. * Fixed; `make install` creating ~/.node_libraries when not present
  2609. * Fixed issue preventing error handlers from being defined anywhere. Closes #387
  2610. 1.0.0rc / 2010-07-28
  2611. ==================
  2612. * Added mounted hook. Closes #369
  2613. * Added connect dependency to _package.json_
  2614. * Removed "reload views" setting and support code
  2615. development env never caches, production always caches.
  2616. * Removed _param_ in route callbacks, signature is now
  2617. simply (req, res, next), previously (req, res, params, next).
  2618. Use _req.params_ for path captures, _req.query_ for GET params.
  2619. * Fixed "home" setting
  2620. * Fixed middleware/router precedence issue. Closes #366
  2621. * Fixed; _configure()_ callbacks called immediately. Closes #368
  2622. 1.0.0beta2 / 2010-07-23
  2623. ==================
  2624. * Added more examples
  2625. * Added; exporting `Server` constructor
  2626. * Added `Server#helpers()` for view locals
  2627. * Added `Server#dynamicHelpers()` for dynamic view locals. Closes #349
  2628. * Added support for absolute view paths
  2629. * Added; _home_ setting defaults to `Server#route` for mounted apps. Closes #363
  2630. * Added Guillermo Rauch to the contributor list
  2631. * Added support for "as" for non-collection partials. Closes #341
  2632. * Fixed _install.sh_, ensuring _~/.node_libraries_ exists. Closes #362 [thanks jf]
  2633. * Fixed `res.render()` exceptions, now passed to `next()` when no callback is given [thanks guillermo]
  2634. * Fixed instanceof `Array` checks, now `Array.isArray()`
  2635. * Fixed express(1) expansion of public dirs. Closes #348
  2636. * Fixed middleware precedence. Closes #345
  2637. * Fixed view watcher, now async [thanks aheckmann]
  2638. 1.0.0beta / 2010-07-15
  2639. ==================
  2640. * Re-write
  2641. - much faster
  2642. - much lighter
  2643. - Check [ExpressJS.com](http://expressjs.com) for migration guide and updated docs
  2644. 0.14.0 / 2010-06-15
  2645. ==================
  2646. * Utilize relative requires
  2647. * Added Static bufferSize option [aheckmann]
  2648. * Fixed caching of view and partial subdirectories [aheckmann]
  2649. * Fixed mime.type() comments now that ".ext" is not supported
  2650. * Updated haml submodule
  2651. * Updated class submodule
  2652. * Removed bin/express
  2653. 0.13.0 / 2010-06-01
  2654. ==================
  2655. * Added node v0.1.97 compatibility
  2656. * Added support for deleting cookies via Request#cookie('key', null)
  2657. * Updated haml submodule
  2658. * Fixed not-found page, now using using charset utf-8
  2659. * Fixed show-exceptions page, now using using charset utf-8
  2660. * Fixed view support due to fs.readFile Buffers
  2661. * Changed; mime.type() no longer accepts ".type" due to node extname() changes
  2662. 0.12.0 / 2010-05-22
  2663. ==================
  2664. * Added node v0.1.96 compatibility
  2665. * Added view `helpers` export which act as additional local variables
  2666. * Updated haml submodule
  2667. * Changed ETag; removed inode, modified time only
  2668. * Fixed LF to CRLF for setting multiple cookies
  2669. * Fixed cookie complation; values are now urlencoded
  2670. * Fixed cookies parsing; accepts quoted values and url escaped cookies
  2671. 0.11.0 / 2010-05-06
  2672. ==================
  2673. * Added support for layouts using different engines
  2674. - this.render('page.html.haml', { layout: 'super-cool-layout.html.ejs' })
  2675. - this.render('page.html.haml', { layout: 'foo' }) // assumes 'foo.html.haml'
  2676. - this.render('page.html.haml', { layout: false }) // no layout
  2677. * Updated ext submodule
  2678. * Updated haml submodule
  2679. * Fixed EJS partial support by passing along the context. Issue #307
  2680. 0.10.1 / 2010-05-03
  2681. ==================
  2682. * Fixed binary uploads.
  2683. 0.10.0 / 2010-04-30
  2684. ==================
  2685. * Added charset support via Request#charset (automatically assigned to 'UTF-8' when respond()'s
  2686. encoding is set to 'utf8' or 'utf-8'.
  2687. * Added "encoding" option to Request#render(). Closes #299
  2688. * Added "dump exceptions" setting, which is enabled by default.
  2689. * Added simple ejs template engine support
  2690. * Added error response support for text/plain, application/json. Closes #297
  2691. * Added callback function param to Request#error()
  2692. * Added Request#sendHead()
  2693. * Added Request#stream()
  2694. * Added support for Request#respond(304, null) for empty response bodies
  2695. * Added ETag support to Request#sendfile()
  2696. * Added options to Request#sendfile(), passed to fs.createReadStream()
  2697. * Added filename arg to Request#download()
  2698. * Performance enhanced due to pre-reversing plugins so that plugins.reverse() is not called on each request
  2699. * Performance enhanced by preventing several calls to toLowerCase() in Router#match()
  2700. * Changed; Request#sendfile() now streams
  2701. * Changed; Renamed Request#halt() to Request#respond(). Closes #289
  2702. * Changed; Using sys.inspect() instead of JSON.encode() for error output
  2703. * Changed; run() returns the http.Server instance. Closes #298
  2704. * Changed; Defaulting Server#host to null (INADDR_ANY)
  2705. * Changed; Logger "common" format scale of 0.4f
  2706. * Removed Logger "request" format
  2707. * Fixed; Catching ENOENT in view caching, preventing error when "views/partials" is not found
  2708. * Fixed several issues with http client
  2709. * Fixed Logger Content-Length output
  2710. * Fixed bug preventing Opera from retaining the generated session id. Closes #292
  2711. 0.9.0 / 2010-04-14
  2712. ==================
  2713. * Added DSL level error() route support
  2714. * Added DSL level notFound() route support
  2715. * Added Request#error()
  2716. * Added Request#notFound()
  2717. * Added Request#render() callback function. Closes #258
  2718. * Added "max upload size" setting
  2719. * Added "magic" variables to collection partials (\_\_index\_\_, \_\_length\_\_, \_\_isFirst\_\_, \_\_isLast\_\_). Closes #254
  2720. * Added [haml.js](http://github.com/visionmedia/haml.js) submodule; removed haml-js
  2721. * Added callback function support to Request#halt() as 3rd/4th arg
  2722. * Added preprocessing of route param wildcards using param(). Closes #251
  2723. * Added view partial support (with collections etc)
  2724. * Fixed bug preventing falsey params (such as ?page=0). Closes #286
  2725. * Fixed setting of multiple cookies. Closes #199
  2726. * Changed; view naming convention is now NAME.TYPE.ENGINE (for example page.html.haml)
  2727. * Changed; session cookie is now httpOnly
  2728. * Changed; Request is no longer global
  2729. * Changed; Event is no longer global
  2730. * Changed; "sys" module is no longer global
  2731. * Changed; moved Request#download to Static plugin where it belongs
  2732. * Changed; Request instance created before body parsing. Closes #262
  2733. * Changed; Pre-caching views in memory when "cache view contents" is enabled. Closes #253
  2734. * Changed; Pre-caching view partials in memory when "cache view partials" is enabled
  2735. * Updated support to node --version 0.1.90
  2736. * Updated dependencies
  2737. * Removed set("session cookie") in favour of use(Session, { cookie: { ... }})
  2738. * Removed utils.mixin(); use Object#mergeDeep()
  2739. 0.8.0 / 2010-03-19
  2740. ==================
  2741. * Added coffeescript example app. Closes #242
  2742. * Changed; cache api now async friendly. Closes #240
  2743. * Removed deprecated 'express/static' support. Use 'express/plugins/static'
  2744. 0.7.6 / 2010-03-19
  2745. ==================
  2746. * Added Request#isXHR. Closes #229
  2747. * Added `make install` (for the executable)
  2748. * Added `express` executable for setting up simple app templates
  2749. * Added "GET /public/*" to Static plugin, defaulting to <root>/public
  2750. * Added Static plugin
  2751. * Fixed; Request#render() only calls cache.get() once
  2752. * Fixed; Namespacing View caches with "view:"
  2753. * Fixed; Namespacing Static caches with "static:"
  2754. * Fixed; Both example apps now use the Static plugin
  2755. * Fixed set("views"). Closes #239
  2756. * Fixed missing space for combined log format
  2757. * Deprecated Request#sendfile() and 'express/static'
  2758. * Removed Server#running
  2759. 0.7.5 / 2010-03-16
  2760. ==================
  2761. * Added Request#flash() support without args, now returns all flashes
  2762. * Updated ext submodule
  2763. 0.7.4 / 2010-03-16
  2764. ==================
  2765. * Fixed session reaper
  2766. * Changed; class.js replacing js-oo Class implementation (quite a bit faster, no browser cruft)
  2767. 0.7.3 / 2010-03-16
  2768. ==================
  2769. * Added package.json
  2770. * Fixed requiring of haml / sass due to kiwi removal
  2771. 0.7.2 / 2010-03-16
  2772. ==================
  2773. * Fixed GIT submodules (HAH!)
  2774. 0.7.1 / 2010-03-16
  2775. ==================
  2776. * Changed; Express now using submodules again until a PM is adopted
  2777. * Changed; chat example using millisecond conversions from ext
  2778. 0.7.0 / 2010-03-15
  2779. ==================
  2780. * Added Request#pass() support (finds the next matching route, or the given path)
  2781. * Added Logger plugin (default "common" format replaces CommonLogger)
  2782. * Removed Profiler plugin
  2783. * Removed CommonLogger plugin
  2784. 0.6.0 / 2010-03-11
  2785. ==================
  2786. * Added seed.yml for kiwi package management support
  2787. * Added HTTP client query string support when method is GET. Closes #205
  2788. * Added support for arbitrary view engines.
  2789. For example "foo.engine.html" will now require('engine'),
  2790. the exports from this module are cached after the first require().
  2791. * Added async plugin support
  2792. * Removed usage of RESTful route funcs as http client
  2793. get() etc, use http.get() and friends
  2794. * Removed custom exceptions
  2795. 0.5.0 / 2010-03-10
  2796. ==================
  2797. * Added ext dependency (library of js extensions)
  2798. * Removed extname() / basename() utils. Use path module
  2799. * Removed toArray() util. Use arguments.values
  2800. * Removed escapeRegexp() util. Use RegExp.escape()
  2801. * Removed process.mixin() dependency. Use utils.mixin()
  2802. * Removed Collection
  2803. * Removed ElementCollection
  2804. * Shameless self promotion of ebook "Advanced JavaScript" (http://dev-mag.com) ;)
  2805. 0.4.0 / 2010-02-11
  2806. ==================
  2807. * Added flash() example to sample upload app
  2808. * Added high level restful http client module (express/http)
  2809. * Changed; RESTful route functions double as HTTP clients. Closes #69
  2810. * Changed; throwing error when routes are added at runtime
  2811. * Changed; defaulting render() context to the current Request. Closes #197
  2812. * Updated haml submodule
  2813. 0.3.0 / 2010-02-11
  2814. ==================
  2815. * Updated haml / sass submodules. Closes #200
  2816. * Added flash message support. Closes #64
  2817. * Added accepts() now allows multiple args. fixes #117
  2818. * Added support for plugins to halt. Closes #189
  2819. * Added alternate layout support. Closes #119
  2820. * Removed Route#run(). Closes #188
  2821. * Fixed broken specs due to use(Cookie) missing
  2822. 0.2.1 / 2010-02-05
  2823. ==================
  2824. * Added "plot" format option for Profiler (for gnuplot processing)
  2825. * Added request number to Profiler plugin
  2826. * Fixed binary encoding for multi-part file uploads, was previously defaulting to UTF8
  2827. * Fixed issue with routes not firing when not files are present. Closes #184
  2828. * Fixed process.Promise -> events.Promise
  2829. 0.2.0 / 2010-02-03
  2830. ==================
  2831. * Added parseParam() support for name[] etc. (allows for file inputs with "multiple" attr) Closes #180
  2832. * Added Both Cache and Session option "reapInterval" may be "reapEvery". Closes #174
  2833. * Added expiration support to cache api with reaper. Closes #133
  2834. * Added cache Store.Memory#reap()
  2835. * Added Cache; cache api now uses first class Cache instances
  2836. * Added abstract session Store. Closes #172
  2837. * Changed; cache Memory.Store#get() utilizing Collection
  2838. * Renamed MemoryStore -> Store.Memory
  2839. * Fixed use() of the same plugin several time will always use latest options. Closes #176
  2840. 0.1.0 / 2010-02-03
  2841. ==================
  2842. * Changed; Hooks (before / after) pass request as arg as well as evaluated in their context
  2843. * Updated node support to 0.1.27 Closes #169
  2844. * Updated dirname(__filename) -> __dirname
  2845. * Updated libxmljs support to v0.2.0
  2846. * Added session support with memory store / reaping
  2847. * Added quick uid() helper
  2848. * Added multi-part upload support
  2849. * Added Sass.js support / submodule
  2850. * Added production env caching view contents and static files
  2851. * Added static file caching. Closes #136
  2852. * Added cache plugin with memory stores
  2853. * Added support to StaticFile so that it works with non-textual files.
  2854. * Removed dirname() helper
  2855. * Removed several globals (now their modules must be required)
  2856. 0.0.2 / 2010-01-10
  2857. ==================
  2858. * Added view benchmarks; currently haml vs ejs
  2859. * Added Request#attachment() specs. Closes #116
  2860. * Added use of node's parseQuery() util. Closes #123
  2861. * Added `make init` for submodules
  2862. * Updated Haml
  2863. * Updated sample chat app to show messages on load
  2864. * Updated libxmljs parseString -> parseHtmlString
  2865. * Fixed `make init` to work with older versions of git
  2866. * Fixed specs can now run independent specs for those who cant build deps. Closes #127
  2867. * Fixed issues introduced by the node url module changes. Closes 126.
  2868. * Fixed two assertions failing due to Collection#keys() returning strings
  2869. * Fixed faulty Collection#toArray() spec due to keys() returning strings
  2870. * Fixed `make test` now builds libxmljs.node before testing
  2871. 0.0.1 / 2010-01-03
  2872. ==================
  2873. * Initial release