Sourced from express's\r\nreleases.
\r\n\r\n\r\n4.19.2
\r\nWhat's Changed
\r\n\r\nFull Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2
\r\n4.19.1
\r\nWhat's Changed
\r\n\r\n
\r\n- Fix ci after location patch by
\r\n@wesleytodd
in expressjs/express#5552- fixed un-edited version in history.md for 4.19.0 by
\r\n@wesleytodd
in expressjs/express#5556Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1
\r\n4.19.0
\r\nWhat's Changed
\r\n\r\n
\r\n- fix typo in release date by
\r\n@UlisesGascon
\r\nin expressjs/express#5527- docs: nominating
\r\n@wesleytodd
to be\r\nproject captian by@wesleytodd
in expressjs/express#5511- docs: loosen TC activity rules by
\r\n@wesleytodd
in expressjs/express#5510- Add note on how to update docs for new release by
\r\n@crandmck
in expressjs/express#5541- Prevent\r\nopen redirect allow list bypass due to encodeurl
\r\n- Release 4.19.0 by
\r\n@wesleytodd
in expressjs/express#5551New Contributors
\r\n\r\n
\r\n- \r\n
@crandmck
\r\nmade their first contribution in expressjs/express#5541Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0
\r\n4.18.3
\r\nMain Changes
\r\n\r\n
\r\n- Fix routing requests without method
\r\n- deps: body-parser@1.20.2\r\n
\r\n\r\n
\r\n- Fix strict json error message on Node.js 19+
\r\n- deps: content-type@~1.0.5
\r\n- deps: raw-body@2.5.2
\r\nOther Changes
\r\n\r\n
\r\n\r\n- Use https: protocol instead of deprecated git: protocol by
\r\n@vcsjones
in expressjs/express#5032- build: Node.js@16.18 and Node.js@18.12 by
\r\n@abenhamdine
in\r\nexpressjs/express#5034- ci: update actions/checkout to v3 by
\r\n@armujahid
in expressjs/express#5027- test: remove unused function arguments in params by
\r\n@raksbisht
in expressjs/express#5124- Remove unused originalIndex from acceptParams by
\r\n@raksbisht
in expressjs/express#5119- Fixed typos by
\r\n@raksbisht
in expressjs/express#5117- examples: remove unused params by
\r\n@raksbisht
in expressjs/express#5113- fix: parameter str is not described in JSDoc by
\r\n@raksbisht
in expressjs/express#5130- fix: typos in History.md by
\r\n@raksbisht
in expressjs/express#5131- build : add Node.js@19.7 by
\r\n@abenhamdine
in\r\nexpressjs/express#5028- test: remove unused function arguments in params by
\r\n@raksbisht
in expressjs/express#5137
... (truncated)
\r\nSourced from express's\r\nchangelog.
\r\n\r\n\r\n4.19.2 / 2024-03-25
\r\n\r\n
\r\n- Improved fix for open redirect allow list bypass
\r\n4.19.1 / 2024-03-20
\r\n\r\n
\r\n- Allow passing non-strings to res.location with new encoding handling\r\nchecks
\r\n4.19.0 / 2024-03-20
\r\n\r\n
\r\n- Prevent open redirect allow list bypass due to encodeurl
\r\n- deps: cookie@0.6.0
\r\n4.18.3 / 2024-02-29
\r\n\r\n
\r\n- Fix routing requests without method
\r\n- deps: body-parser@1.20.2\r\n
\r\n\r\n
\r\n- Fix strict json error message on Node.js 19+
\r\n- deps: content-type@~1.0.5
\r\n- deps: raw-body@2.5.2
\r\n- deps: cookie@0.6.0\r\n
\r\n\r\n
\r\n- Add
\r\npartitioned
option
04bc627
\r\n4.19.2da4d763
\r\nImproved fix for open redirect allow list bypass4f0f6cc
\r\n4.19.1a003cfa
\r\nAllow passing non-strings to res.location with new encoding handling\r\nchecks f...a1fa90f
\r\nfixed un-edited version in history.md for 4.19.011f2b1d
\r\nbuild: fix build due to inconsistent supertest behavior in older\r\nversions084e365
\r\n4.19.00867302
\r\nPrevent open redirect allow list bypass due to encodeurl567c9c6
\r\nAdd note on how to update docs for new release (#5541)69a4cf2
\r\ndeps: cookie@0.6.0This version was pushed to npm by wesleytodd, a new releaser\r\nfor express since your current version.
\r\nSourced from webpack-dev-middleware's\r\nreleases.
\r\n\r\n\r\nv5.3.4
\r\n5.3.4\r\n(2024-03-20)
\r\nBug Fixes
\r\n\r\n
Sourced from webpack-dev-middleware's\r\nchangelog.
\r\n\r\n\r\n5.3.4\r\n(2024-03-20)
\r\nBug Fixes
\r\n\r\n
86071ea
\r\nchore(release): 5.3.4189c4ac
\r\nfix(security): do not allow to read files above (#1779)35a517c
\r\nRelease version 1.15.6 of the npm package.c4f847f
\r\nDrop Proxy-Authorization across hosts.8526b4a
\r\nUse GitHub for disclosure.b1677ce
\r\nRelease version 1.15.5 of the npm package.d8914f7
\r\nPreserve fragment in responseUrl.6585820
\r\nRelease version 1.15.4 of the npm package.7a6567e
\r\nDisallow bracketed hostnames.05629af
\r\nPrefer native URL instead of deprecated url.parse.1cba8e8
\r\nPrefer native URL instead of legacy url.resolve.72bc2a4
\r\nSimplify _processResponse error handling.