v5.0.1

expressjs/expressv5.0.1Oct 8, 2024by UlisesGascon

AI Summary

This patch release for Express 5.x addresses CVE-2024-47764 by updating the cookie semver lock, along with some team and process improvements. The release includes nominations to the triage team and documentation updates.

Key Highlights

  • Updated cookie semver lock to address CVE-2024-47764
  • Nominated @bjohansebas to triage team
  • Removed --bail flag from test script
  • Updated captains and team links

New Features

  • Security fix for CVE-2024-47764 via cookie dependency update

Full Release Notes

## What's Changed
* remove --bail from test script by @jonchurch in https://github.com/expressjs/express/pull/5962
* Nominate @bjohansebas to the triage team by @UlisesGascon in https://github.com/expressjs/express/pull/6009
* Link and update captains by @blakeembrey in https://github.com/expressjs/express/pull/6013
* Update `cookie` semver lock to address CVE-2024-47764 by @joshbuker in https://github.com/expressjs/express/pull/6017
* Release: 5.0.1 by @UlisesGascon in https://github.com/expressjs/express/pull/6032


**Full Changelog**: https://github.com/expressjs/express/compare/v5.0.0...5.0.1