3.19.1

• deps: connect@2.28.2
  • deps: body-parser@~1.10.2
  • deps: serve-static@~1.8.1
• deps: send@0.11.1
  • Fix root path disclosure

4.11.0

• Add res.append(field, val) to append headers
• Deprecate leading : in name for app.param(name, fn)
• Deprecate req.param() -- use req.params, req.body, or req.query instead
• Deprecate app.param(fn)
• Fix OPTIONS responses to include the HEAD method properly
• Fix res.sendFile not always detecting aborted connection
• Match routes iteratively to prevent stack overflows
• deps: accepts@~1.2.2
  • deps: mime-types@~2.0.7
  • deps: negotiator@0.5.0
• deps: send@0.11.0
  • deps: debug@~2.1.1
  • deps: etag@~1.5.1
  • deps: ms@0.7.0
  • deps: on-finished@~2.2.0
• deps: serve-static@~1.8.0
  • deps: send@0.11.0

4.10.8

• Fix crash from error within OPTIONS response handler
• deps: proxy-addr@~1.0.5
  • deps: ipaddr.js@0.1.6

3.19.0

• Fix OPTIONS responses to include the HEAD method property
• Use readline for prompt in express(1)
• deps: commander@2.6.0
• deps: connect@2.28.1
  • deps: body-parser@~1.10.1
  • deps: compression@~1.3.0
  • deps: connect-timeout@~1.5.0
  • deps: csurf@~1.6.4
  • deps: debug@~2.1.1
  • deps: errorhandler@~1.3.2
  • deps: express-session@~1.10.1
  • deps: finalhandler@0.3.3
  • deps: method-override@~2.3.1
  • deps: morgan@~1.5.1
  • deps: serve-favicon@~2.2.0
  • deps: serve-index@~1.6.0
  • deps: serve-static@~1.8.0
  • deps: type-is@~1.5.5
• deps: debug@~2.1.1
• deps: methods@~1.1.1
• deps: proxy-addr@~1.0.5
  • deps: ipaddr.js@0.1.6
• deps: send@0.11.0
  • deps: debug@~2.1.1
  • deps: etag@~1.5.1
  • deps: ms@0.7.0
  • deps: on-finished@~2.2.0

4.10.7

• Fix Allow header for OPTIONS to not contain duplicate methods
• Fix incorrect "Request aborted" for res.sendFile when HEAD or 304
• deps: debug@~2.1.1
• deps: finalhandler@0.3.3
  • deps: debug@~2.1.1
  • deps: on-finished@~2.2.0
• deps: methods@~1.1.1
• deps: on-finished@~2.2.0
• deps: serve-static@~1.7.2
  • Fix potential open redirect when mounted at root
• deps: type-is@~1.5.5
  • deps: mime-types@~2.0.7

4.10.6

• Fix exception in req.fresh/req.stale without response headers

3.18.6

• Fix exception in req.fresh/req.stale without response headers

3.18.5

• deps: connect@2.27.6
  • deps: compression@~1.2.2
  • deps: express-session@~1.9.3
  • deps: http-errors@~1.2.8
  • deps: serve-index@~1.5.3
  • deps: type-is@~1.5.4

4.10.5

• Fix res.send double-calling res.end for HEAD requests
• deps: accepts@~1.1.4
  • deps: mime-types@~2.0.4
• deps: type-is@~1.5.4
  • deps: mime-types@~2.0.4

4.10.4

• Fix res.sendfile logging standard write errors