v5.0.1
expressjs/expressv5.0.1Oct 8, 2024by UlisesGascon
AI Summary
This patch release for Express 5.x addresses CVE-2024-47764 by updating the cookie semver lock, along with some team and process improvements. The release includes nominations to the triage team and documentation updates.
Key Highlights
- Updated cookie semver lock to address CVE-2024-47764
- Nominated @bjohansebas to triage team
- Removed --bail flag from test script
- Updated captains and team links
New Features
- Security fix for CVE-2024-47764 via cookie dependency update
Full Release Notes
## What's Changed * remove --bail from test script by @jonchurch in https://github.com/expressjs/express/pull/5962 * Nominate @bjohansebas to the triage team by @UlisesGascon in https://github.com/expressjs/express/pull/6009 * Link and update captains by @blakeembrey in https://github.com/expressjs/express/pull/6013 * Update `cookie` semver lock to address CVE-2024-47764 by @joshbuker in https://github.com/expressjs/express/pull/6017 * Release: 5.0.1 by @UlisesGascon in https://github.com/expressjs/express/pull/6032 **Full Changelog**: https://github.com/expressjs/express/compare/v5.0.0...5.0.1