express Releases

Express 3.21.1 is a dependency update release that updates the core connect dependency to v2.30.1 along with all its sub-dependencies, including body-parser, compression, errorhandler, morgan, pause, qs, serve-index, and type-is.

Jul 6, 2015

Express 4.13.0 is a minor release focused on bug fixes, performance improvements, and dependency updates. Key fixes include resolving issues with res.format errors, next('route') in app.param, and route patterns with wildcards and capture groups. The release also includes a security fix for decodeURIComponent and multiple performance optimizations.

Jun 21, 2015

Express 3.21.0 is primarily a dependency update release, upgrading various middleware packages to their latest versions including connect@2.30.0, etag@~1.7.0, send@0.13.0, and fresh@0.3.0. The release focuses on performance improvements across dependencies and includes some behavioral changes to ETag generation.

Jun 19, 2015

Express 4.12.4 is a patch release focused on updating dependencies to their latest versions, including bug fixes and environment-specific improvements. The release updates 11 dependencies and their sub-dependencies, with notable fixes for etag (JXcore support, fake stats objects), on-finished (isFinished req handling), and qs (constructor parameter handling).

May 18, 2015

Express 3.20.3 is a patch release that updates various dependencies to their latest compatible versions, including connect@2.29.2, debug@2.2.0, send@0.12.3, and other middleware packages.

May 18, 2015

This is a patch release (4.12.3) focused on updating various Express.js dependencies to their latest versions, incorporating several bug fixes from updated dependencies.

Mar 17, 2015

Express 3.20.2 is a dependency maintenance release that updates the connect framework to version 2.29.1 and updates various other dependencies including debug, proxy-addr, and send. The release includes bug fixes for debug's color handling and improved error handling in the send module.

Mar 17, 2015

This is a bug fix release for Express 4.12.2 that addresses a regression where the message 'Request aborted' was being incorrectly logged when using `res.sendFile`. The fix eliminates unwanted logging noise in certain file serving scenarios.

Mar 3, 2015

Express 4.12.1 is a patch release focused on bug fixes, particularly addressing issues with proxy trust settings and sendFile functionality. The release fixes multiple bugs related to connection handling, protocol detection, and error codes, while also updating the merge-descriptors dependency.

Mar 2, 2015

This is a bug fix release for Express 3.x that addresses issues with the 'trust proxy' hops count configuration. It fixes `req.host`, `req.protocol`, and `req.secure` to properly return the correct values when Express is configured to trust proxy headers from upstream load balancers or reverse proxies.

Mar 1, 2015

Express 4.12.0 includes a significant change to generate ETags for all request responses (not just GET and HEAD), fixes the trust proxy setting to properly inherit when apps are mounted, and updates multiple dependencies including accepts, send, serve-static, and type-is.

Feb 23, 2015

Express 3.20.0 includes bug fixes for trust proxy inheritance when mounting apps, expands ETag generation to all request methods (not just GET and HEAD), and updates multiple dependencies including connect@2.29.0 and send@0.12.1.

Feb 19, 2015

Express 4.11.2 is a patch release that fixes a bug where res.redirect was double-calling res.end for HEAD requests, and updates several dependencies including accepts, proxy-addr, and type-is with their respective sub-dependencies.

Feb 1, 2015

This is a patch release focused on updating dependencies to their latest versions for improved stability and compatibility. The release updates connect to version 2.28.3 and proxy-addr to version 1.0.6, which in turn brings updated nested dependencies.

Feb 1, 2015

Express 4.11.1 is a patch release focused on dependency updates that address security vulnerabilities and compatibility issues. The release updates the `send` and `serve-static` dependencies to fix a root path disclosure vulnerability and resolve a redirect loop issue in Node.js 0.11.14.

Jan 21, 2015

Express 3.19.1 is a patch release focused on dependency updates and a security fix. It updates connect, body-parser, serve-static, and send dependencies, with the send update including a fix for a root path disclosure vulnerability.

Jan 21, 2015

Express 4.11.0 introduces the new `res.append()` method for appending headers, adds several deprecations for older APIs (`req.param()`, `app.param()` with leading `:`, and `app.param(fn)`), and includes important bug fixes for OPTIONS responses, route matching to prevent stack overflows, and improved `res.sendFile` connection detection.

Jan 14, 2015

This is a patch release (4.10.8) that fixes a critical crash that could occur when an error was thrown within an OPTIONS response handler. It also updates the proxy-addr dependency to version 1.0.5, which includes an updated ipaddr.js library for improved IP address handling.

Jan 13, 2015

Express 3.19.0 is a minor release focused on bug fixes and dependency updates. The key change fixes OPTIONS responses to properly include the HEAD method property, and the CLI now uses Node's readline module for interactive prompts.

Jan 9, 2015

Express 4.10.7 is a patch release focused on bug fixes and dependency updates. Key fixes include resolving duplicate methods in the `Allow` header for OPTIONS requests and correcting an incorrect 'Request aborted' message for `res.sendFile` with HEAD or 304 responses. The release also addresses a potential open redirect vulnerability in serve-static when mounted at root.

Jan 5, 2015