3.20.0

• Fix "trust proxy" setting to inherit when app is mounted
• Generate ETags for all request responses
  • No longer restricted to only responses for GET and HEAD requests
• Use content-type to parse Content-Type headers
• deps: connect@2.29.0
  • Use content-type to parse Content-Type headers
  • deps: body-parser@~1.12.0
  • deps: compression@~1.4.1
  • deps: connect-timeout@~1.6.0
  • deps: cookie-parser@~1.3.4
  • deps: cookie-signature@1.0.6
  • deps: csurf@~1.7.0
  • deps: errorhandler@~1.3.4
  • deps: express-session@~1.10.3
  • deps: http-errors@~1.3.1
  • deps: response-time@~2.3.0
  • deps: serve-index@~1.6.2
  • deps: serve-static@~1.9.1
  • deps: type-is@~1.6.0
• deps: cookie-signature@1.0.6
• deps: send@0.12.1
  • Always read the stat size from the file
  • Fix mutating passed-in options
  • deps: mime@1.3.4

4.11.2

• Fix res.redirect double-calling res.end for HEAD requests
• deps: accepts@~1.2.3
  • deps: mime-types@~2.0.8
• deps: proxy-addr@~1.0.6
  • deps: ipaddr.js@0.1.8
• deps: type-is@~1.5.6
  • deps: mime-types@~2.0.8

3.19.2

• deps: connect@2.28.3
  • deps: compression@~1.3.1
  • deps: csurf@~1.6.6
  • deps: errorhandler@~1.3.3
  • deps: express-session@~1.10.2
  • deps: serve-index@~1.6.1
  • deps: type-is@~1.5.6
• deps: proxy-addr@~1.0.6
  • deps: ipaddr.js@0.1.8

4.11.1

• deps: send@0.11.1
  • Fix root path disclosure
• deps: serve-static@~1.8.1
  • Fix redirect loop in Node.js 0.11.14
  • Fix root path disclosure
  • deps: send@0.11.1

3.19.1

• deps: connect@2.28.2
  • deps: body-parser@~1.10.2
  • deps: serve-static@~1.8.1
• deps: send@0.11.1
  • Fix root path disclosure

4.11.0

• Add res.append(field, val) to append headers
• Deprecate leading : in name for app.param(name, fn)
• Deprecate req.param() -- use req.params, req.body, or req.query instead
• Deprecate app.param(fn)
• Fix OPTIONS responses to include the HEAD method properly
• Fix res.sendFile not always detecting aborted connection
• Match routes iteratively to prevent stack overflows
• deps: accepts@~1.2.2
  • deps: mime-types@~2.0.7
  • deps: negotiator@0.5.0
• deps: send@0.11.0
  • deps: debug@~2.1.1
  • deps: etag@~1.5.1
  • deps: ms@0.7.0
  • deps: on-finished@~2.2.0
• deps: serve-static@~1.8.0
  • deps: send@0.11.0

4.10.8

• Fix crash from error within OPTIONS response handler
• deps: proxy-addr@~1.0.5
  • deps: ipaddr.js@0.1.6

3.19.0

• Fix OPTIONS responses to include the HEAD method property
• Use readline for prompt in express(1)
• deps: commander@2.6.0
• deps: connect@2.28.1
  • deps: body-parser@~1.10.1
  • deps: compression@~1.3.0
  • deps: connect-timeout@~1.5.0
  • deps: csurf@~1.6.4
  • deps: debug@~2.1.1
  • deps: errorhandler@~1.3.2
  • deps: express-session@~1.10.1
  • deps: finalhandler@0.3.3
  • deps: method-override@~2.3.1
  • deps: morgan@~1.5.1
  • deps: serve-favicon@~2.2.0
  • deps: serve-index@~1.6.0
  • deps: serve-static@~1.8.0
  • deps: type-is@~1.5.5
• deps: debug@~2.1.1
• deps: methods@~1.1.1
• deps: proxy-addr@~1.0.5
  • deps: ipaddr.js@0.1.6
• deps: send@0.11.0
  • deps: debug@~2.1.1
  • deps: etag@~1.5.1
  • deps: ms@0.7.0
  • deps: on-finished@~2.2.0

4.10.7

• Fix Allow header for OPTIONS to not contain duplicate methods
• Fix incorrect "Request aborted" for res.sendFile when HEAD or 304
• deps: debug@~2.1.1
• deps: finalhandler@0.3.3
  • deps: debug@~2.1.1
  • deps: on-finished@~2.2.0
• deps: methods@~1.1.1
• deps: on-finished@~2.2.0
• deps: serve-static@~1.7.2
  • Fix potential open redirect when mounted at root
• deps: type-is@~1.5.5
  • deps: mime-types@~2.0.7

4.10.6

• Fix exception in req.fresh/req.stale without response headers