3.20.0

expressjs/express3.20.0Feb 19, 2015by dougwilson

AI Summary

Express 3.20.0 includes bug fixes for trust proxy inheritance when mounting apps, expands ETag generation to all request methods (not just GET and HEAD), and updates multiple dependencies including connect@2.29.0 and send@0.12.1.

Key Highlights

  • Fixed trust proxy setting to properly inherit when app is mounted
  • ETag generation now applies to all request responses (previously only GET and HEAD)
  • Updated connect dependency to version 2.29.0
  • Updated send dependency to 0.12.1 with improved file stat handling
  • Content-Type header parsing now uses the content-type library

Breaking Changes

  • ETags are now generated for all request responses, not just GET and HEAD requests. This could affect applications relying on the previous behavior where ETags were only generated for GET and HEAD requests.

New Features

  • ETag generation for all HTTP methods (GET, HEAD, POST, PUT, DELETE, etc.)
  • Inherited trust proxy settings when mounting Express apps
  • Improved Content-Type header parsing using the content-type library

Full Release Notes

- Fix `"trust proxy"` setting to inherit when app is mounted
- Generate `ETag`s for all request responses
  - No longer restricted to only responses for `GET` and `HEAD` requests
- Use `content-type` to parse `Content-Type` headers
- deps: connect@2.29.0
  - Use `content-type` to parse `Content-Type` headers
  - deps: body-parser@~1.12.0
  - deps: compression@~1.4.1
  - deps: connect-timeout@~1.6.0
  - deps: cookie-parser@~1.3.4
  - deps: cookie-signature@1.0.6
  - deps: csurf@~1.7.0
  - deps: errorhandler@~1.3.4
  - deps: express-session@~1.10.3
  - deps: http-errors@~1.3.1
  - deps: response-time@~2.3.0
  - deps: serve-index@~1.6.2
  - deps: serve-static@~1.9.1
  - deps: type-is@~1.6.0
- deps: cookie-signature@1.0.6
- deps: send@0.12.1
  - Always read the stat size from the file
  - Fix mutating passed-in `options`
  - deps: mime@1.3.4