- Breaking: increase TypeScript strictness around arguments. Only affects TypeScript users. See helmetjs/helmet#369
- Dropped support for the
ALLOW-FROM
action. Read more here. - Dropped support for old Node versions. Node 10+ is now required
- Added TypeScript type definitions. See #1 and helmetjs/helmet#188
- Created a changelog
- Updated some package metadata
- Update some documentation
- Excluded some files from npm package
Changes in versions 3.0.0 and below can be found in Helmet's changelog.