4.13.0

• Add settings to debug output
• Fix res.format error when only default provided
• Fix issue where next('route') in app.param would incorrectly skip values
• Fix hiding platform issues with decodeURIComponent
  • Only URIErrors are a 400
• Fix using * before params in routes
• Fix using capture groups before params in routes
• Simplify res.cookie to call res.append
• Use array-flatten module for flattening arrays
• deps: accepts@~1.2.9
  • deps: mime-types@~2.1.1
  • perf: avoid argument reassignment & argument slice
  • perf: avoid negotiator recursive construction
  • perf: enable strict mode
  • perf: remove unnecessary bitwise operator
• deps: cookie@0.1.3
  • perf: deduce the scope of try-catch deopt
  • perf: remove argument reassignments
• deps: escape-html@1.0.2
• deps: etag@~1.7.0
  • Always include entity length in ETags for hash length extensions
  • Generate non-Stats ETags using MD5 only (no longer CRC32)
  • Improve stat performance by removing hashing
  • Improve support for JXcore
  • Remove base64 padding in ETags to shorten
  • Support "fake" stats objects in environments without fs
  • Use MD5 instead of MD4 in weak ETags over 1KB
• deps: finalhandler@0.4.0
  • Fix a false-positive when unpiping in Node.js 0.8
  • Support statusCode property on Error objects
  • Use unpipe module for unpiping requests
  • deps: escape-html@1.0.2
  • deps: on-finished@~2.3.0
  • perf: enable strict mode
  • perf: remove argument reassignment
• deps: fresh@0.3.0
  • Add weak ETag matching support
• deps: on-finished@~2.3.0
  • Add defined behavior for HTTP CONNECT requests
  • Add defined behavior for HTTP Upgrade requests
  • deps: ee-first@1.1.1
• deps: path-to-regexp@0.1.6
• deps: send@0.13.0
  • Allow Node.js HTTP server to set Date response header
  • Fix incorrectly removing Content-Location on 304 response
  • Improve the default redirect response headers
  • Send appropriate headers on default error response
  • Use http-errors for standard emitted errors
  • Use statuses instead of http module for status messages
  • deps: escape-html@1.0.2
  • deps: etag@~1.7.0
  • deps: fresh@0.3.0
  • deps: on-finished@~2.3.0
  • perf: enable strict mode
  • perf: remove unnecessary array allocations
• deps: serve-static@~1.10.0
  • Add fallthrough option
  • Fix reading options from options prototype
  • Improve the default redirect response headers
  • Malformed URLs now next() instead of 400
  • deps: escape-html@1.0.2
  • deps: send@0.13.0
  • perf: enable strict mode
  • perf: remove argument reassignment
• deps: type-is@~1.6.3
  • deps: mime-types@~2.1.1
  • perf: reduce try block size
  • perf: remove bitwise operations
• perf: enable strict mode
• perf: isolate app.render try block
• perf: remove argument reassignments in application
• perf: remove argument reassignments in request prototype
• perf: remove argument reassignments in response prototype
• perf: remove argument reassignments in routing
• perf: remove argument reassignments in View
• perf: skip attempting to decode zero length string
• perf: use saved reference to http.STATUS_CODES

3.21.0

• deps: basic-auth@1.0.2
  • perf: enable strict mode
  • perf: hoist regular expression
  • perf: parse with regular expressions
  • perf: remove argument reassignment
• deps: connect@2.30.0
  • deps: body-parser@~1.13.1
  • deps: bytes@2.1.0
  • deps: compression@~1.5.0
  • deps: cookie@0.1.3
  • deps: cookie-parser@~1.3.5
  • deps: csurf@~1.8.3
  • deps: errorhandler@~1.4.0
  • deps: express-session@~1.11.3
  • deps: finalhandler@0.4.0
  • deps: fresh@0.3.0
  • deps: morgan@~1.6.0
  • deps: serve-favicon@~2.3.0
  • deps: serve-index@~1.7.0
  • deps: serve-static@~1.10.0
  • deps: type-is@~1.6.3
• deps: cookie@0.1.3
  • perf: deduce the scope of try-catch deopt
  • perf: remove argument reassignments
• deps: escape-html@1.0.2
• deps: etag@~1.7.0
  • Always include entity length in ETags for hash length extensions
  • Generate non-Stats ETags using MD5 only (no longer CRC32)
  • Improve stat performance by removing hashing
  • Improve support for JXcore
  • Remove base64 padding in ETags to shorten
  • Support "fake" stats objects in environments without fs
  • Use MD5 instead of MD4 in weak ETags over 1KB
• deps: fresh@0.3.0
  • Add weak ETag matching support
• deps: mkdirp@0.5.1
  • Work in global strict mode
• deps: send@0.13.0
  • Allow Node.js HTTP server to set Date response header
  • Fix incorrectly removing Content-Location on 304 response
  • Improve the default redirect response headers
  • Send appropriate headers on default error response
  • Use http-errors for standard emitted errors
  • Use statuses instead of http module for status messages
  • deps: escape-html@1.0.2
  • deps: etag@~1.7.0
  • deps: fresh@0.3.0
  • deps: on-finished@~2.3.0
  • perf: enable strict mode
  • perf: remove unnecessary array allocations

4.12.4

• deps: accepts@~1.2.7
  • deps: mime-types@~2.0.11
  • deps: negotiator@0.5.3
• deps: debug@~2.2.0
  • deps: ms@0.7.1
• deps: depd@~1.0.1
• deps: etag@~1.6.0
  • Improve support for JXcore
  • Support "fake" stats objects in environments without fs
• deps: finalhandler@0.3.6
  • deps: debug@~2.2.0
  • deps: on-finished@~2.2.1
• deps: on-finished@~2.2.1
  • Fix isFinished(req) when data buffered
• deps: proxy-addr@~1.0.8
  • deps: ipaddr.js@1.0.1
• deps: qs@2.4.2
  • Fix allowing parameters like constructor
• deps: send@0.12.3
  • deps: debug@~2.2.0
  • deps: depd@~1.0.1
  • deps: etag@~1.6.0
  • deps: ms@0.7.1
  • deps: on-finished@~2.2.1
• deps: serve-static@~1.9.3
  • deps: send@0.12.3
• deps: type-is@~1.6.2
  • deps: mime-types@~2.0.11

3.20.3

• deps: connect@2.29.2
  • deps: body-parser@~1.12.4
  • deps: compression@~1.4.4
  • deps: connect-timeout@~1.6.2
  • deps: debug@~2.2.0
  • deps: depd@~1.0.1
  • deps: errorhandler@~1.3.6
  • deps: finalhandler@0.3.6
  • deps: method-override@~2.3.3
  • deps: morgan@~1.5.3
  • deps: qs@2.4.2
  • deps: response-time@~2.3.1
  • deps: serve-favicon@~2.2.1
  • deps: serve-index@~1.6.4
  • deps: serve-static@~1.9.3
  • deps: type-is@~1.6.2
• deps: debug@~2.2.0
  • deps: ms@0.7.1
• deps: depd@~1.0.1
• deps: proxy-addr@~1.0.8
  • deps: ipaddr.js@1.0.1
• deps: send@0.12.3
  • deps: debug@~2.2.0
  • deps: depd@~1.0.1
  • deps: etag@~1.6.0
  • deps: ms@0.7.1
  • deps: on-finished@~2.2.1

4.12.3

• deps: accepts@~1.2.5
  • deps: mime-types@~2.0.10
• deps: debug@~2.1.3
  • Fix high intensity foreground color for bold
  • deps: ms@0.7.0
• deps: finalhandler@0.3.4
  • deps: debug@~2.1.3
• deps: proxy-addr@~1.0.7
  • deps: ipaddr.js@0.1.9
• deps: qs@2.4.1
  • Fix error when parameter hasOwnProperty is present
• deps: send@0.12.2
  • Throw errors early for invalid extensions or index options
  • deps: debug@~2.1.3
• deps: serve-static@~1.9.2
  • deps: send@0.12.2
• deps: type-is@~1.6.1
  • deps: mime-types@~2.0.10

3.20.2

• deps: connect@2.29.1
  • deps: body-parser@~1.12.2
  • deps: compression@~1.4.3
  • deps: connect-timeout@~1.6.1
  • deps: debug@~2.1.3
  • deps: errorhandler@~1.3.5
  • deps: express-session@~1.10.4
  • deps: finalhandler@0.3.4
  • deps: method-override@~2.3.2
  • deps: morgan@~1.5.2
  • deps: qs@2.4.1
  • deps: serve-index@~1.6.3
  • deps: serve-static@~1.9.2
  • deps: type-is@~1.6.1
• deps: debug@~2.1.3
  • Fix high intensity foreground color for bold
  • deps: ms@0.7.0
• deps: merge-descriptors@1.0.0
• deps: proxy-addr@~1.0.7
  • deps: ipaddr.js@0.1.9
• deps: send@0.12.2
  • Throw errors early for invalid extensions or index options
  • deps: debug@~2.1.3

4.12.2

• Fix regression where "Request aborted" is logged using res.sendFile

4.12.1

• Fix constructing application with non-configurable prototype properties
• Fix ECONNRESET errors from res.sendFile usage
• Fix req.host when using "trust proxy" hops count
• Fix req.protocol/req.secure when using "trust proxy" hops count
• Fix wrong code on aborted connections from res.sendFile
• deps: merge-descriptors@1.0.0

3.20.1

• Fix req.host when using "trust proxy" hops count
• Fix req.protocol/req.secure when using "trust proxy" hops count

4.12.0

• Fix "trust proxy" setting to inherit when app is mounted
• Generate ETags for all request responses
  • No longer restricted to only responses for GET and HEAD requests
• Use content-type to parse Content-Type headers
• deps: accepts@~1.2.4
  • Fix preference sorting to be stable for long acceptable lists
  • deps: mime-types@~2.0.9
  • deps: negotiator@0.5.1
• deps: cookie-signature@1.0.6
• deps: send@0.12.1
  • Always read the stat size from the file
  • Fix mutating passed-in options
  • deps: mime@1.3.4
• deps: serve-static@~1.9.1
  • deps: send@0.12.1
• deps: type-is@~1.6.0
  • fix argument reassignment
  • fix false-positives in hasBody Transfer-Encoding check
  • support wildcard for both type and subtype (*/*)
  • deps: mime-types@~2.0.9