You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

526 lines
13 KiB

3 months ago
  1. 0.19.0 / 2024-09-10
  2. ===================
  3. * Remove link renderization in html while redirecting
  4. 0.18.0 / 2022-03-23
  5. ===================
  6. * Fix emitted 416 error missing headers property
  7. * Limit the headers removed for 304 response
  8. * deps: depd@2.0.0
  9. - Replace internal `eval` usage with `Function` constructor
  10. - Use instance methods on `process` to check for listeners
  11. * deps: destroy@1.2.0
  12. * deps: http-errors@2.0.0
  13. - deps: depd@2.0.0
  14. - deps: statuses@2.0.1
  15. * deps: on-finished@2.4.1
  16. * deps: statuses@2.0.1
  17. 0.17.2 / 2021-12-11
  18. ===================
  19. * pref: ignore empty http tokens
  20. * deps: http-errors@1.8.1
  21. - deps: inherits@2.0.4
  22. - deps: toidentifier@1.0.1
  23. - deps: setprototypeof@1.2.0
  24. * deps: ms@2.1.3
  25. 0.17.1 / 2019-05-10
  26. ===================
  27. * Set stricter CSP header in redirect & error responses
  28. * deps: range-parser@~1.2.1
  29. 0.17.0 / 2019-05-03
  30. ===================
  31. * deps: http-errors@~1.7.2
  32. - Set constructor name when possible
  33. - Use `toidentifier` module to make class names
  34. - deps: depd@~1.1.2
  35. - deps: setprototypeof@1.1.1
  36. - deps: statuses@'>= 1.5.0 < 2'
  37. * deps: mime@1.6.0
  38. - Add extensions for JPEG-2000 images
  39. - Add new `font/*` types from IANA
  40. - Add WASM mapping
  41. - Update `.bdoc` to `application/bdoc`
  42. - Update `.bmp` to `image/bmp`
  43. - Update `.m4a` to `audio/mp4`
  44. - Update `.rtf` to `application/rtf`
  45. - Update `.wav` to `audio/wav`
  46. - Update `.xml` to `application/xml`
  47. - Update generic extensions to `application/octet-stream`:
  48. `.deb`, `.dll`, `.dmg`, `.exe`, `.iso`, `.msi`
  49. - Use mime-score module to resolve extension conflicts
  50. * deps: ms@2.1.1
  51. - Add `week`/`w` support
  52. - Fix negative number handling
  53. * deps: statuses@~1.5.0
  54. * perf: remove redundant `path.normalize` call
  55. 0.16.2 / 2018-02-07
  56. ===================
  57. * Fix incorrect end tag in default error & redirects
  58. * deps: depd@~1.1.2
  59. - perf: remove argument reassignment
  60. * deps: encodeurl@~1.0.2
  61. - Fix encoding `%` as last character
  62. * deps: statuses@~1.4.0
  63. 0.16.1 / 2017-09-29
  64. ===================
  65. * Fix regression in edge-case behavior for empty `path`
  66. 0.16.0 / 2017-09-27
  67. ===================
  68. * Add `immutable` option
  69. * Fix missing `</html>` in default error & redirects
  70. * Use instance methods on steam to check for listeners
  71. * deps: mime@1.4.1
  72. - Add 70 new types for file extensions
  73. - Set charset as "UTF-8" for .js and .json
  74. * perf: improve path validation speed
  75. 0.15.6 / 2017-09-22
  76. ===================
  77. * deps: debug@2.6.9
  78. * perf: improve `If-Match` token parsing
  79. 0.15.5 / 2017-09-20
  80. ===================
  81. * deps: etag@~1.8.1
  82. - perf: replace regular expression with substring
  83. * deps: fresh@0.5.2
  84. - Fix handling of modified headers with invalid dates
  85. - perf: improve ETag match loop
  86. - perf: improve `If-None-Match` token parsing
  87. 0.15.4 / 2017-08-05
  88. ===================
  89. * deps: debug@2.6.8
  90. * deps: depd@~1.1.1
  91. - Remove unnecessary `Buffer` loading
  92. * deps: http-errors@~1.6.2
  93. - deps: depd@1.1.1
  94. 0.15.3 / 2017-05-16
  95. ===================
  96. * deps: debug@2.6.7
  97. - deps: ms@2.0.0
  98. * deps: ms@2.0.0
  99. 0.15.2 / 2017-04-26
  100. ===================
  101. * deps: debug@2.6.4
  102. - Fix `DEBUG_MAX_ARRAY_LENGTH`
  103. - deps: ms@0.7.3
  104. * deps: ms@1.0.0
  105. 0.15.1 / 2017-03-04
  106. ===================
  107. * Fix issue when `Date.parse` does not return `NaN` on invalid date
  108. * Fix strict violation in broken environments
  109. 0.15.0 / 2017-02-25
  110. ===================
  111. * Support `If-Match` and `If-Unmodified-Since` headers
  112. * Add `res` and `path` arguments to `directory` event
  113. * Remove usage of `res._headers` private field
  114. - Improves compatibility with Node.js 8 nightly
  115. * Send complete HTML document in redirect & error responses
  116. * Set default CSP header in redirect & error responses
  117. * Use `res.getHeaderNames()` when available
  118. * Use `res.headersSent` when available
  119. * deps: debug@2.6.1
  120. - Allow colors in workers
  121. - Deprecated `DEBUG_FD` environment variable set to `3` or higher
  122. - Fix error when running under React Native
  123. - Use same color for same namespace
  124. - deps: ms@0.7.2
  125. * deps: etag@~1.8.0
  126. * deps: fresh@0.5.0
  127. - Fix false detection of `no-cache` request directive
  128. - Fix incorrect result when `If-None-Match` has both `*` and ETags
  129. - Fix weak `ETag` matching to match spec
  130. - perf: delay reading header values until needed
  131. - perf: enable strict mode
  132. - perf: hoist regular expressions
  133. - perf: remove duplicate conditional
  134. - perf: remove unnecessary boolean coercions
  135. - perf: skip checking modified time if ETag check failed
  136. - perf: skip parsing `If-None-Match` when no `ETag` header
  137. - perf: use `Date.parse` instead of `new Date`
  138. * deps: http-errors@~1.6.1
  139. - Make `message` property enumerable for `HttpError`s
  140. - deps: setprototypeof@1.0.3
  141. 0.14.2 / 2017-01-23
  142. ===================
  143. * deps: http-errors@~1.5.1
  144. - deps: inherits@2.0.3
  145. - deps: setprototypeof@1.0.2
  146. - deps: statuses@'>= 1.3.1 < 2'
  147. * deps: ms@0.7.2
  148. * deps: statuses@~1.3.1
  149. 0.14.1 / 2016-06-09
  150. ===================
  151. * Fix redirect error when `path` contains raw non-URL characters
  152. * Fix redirect when `path` starts with multiple forward slashes
  153. 0.14.0 / 2016-06-06
  154. ===================
  155. * Add `acceptRanges` option
  156. * Add `cacheControl` option
  157. * Attempt to combine multiple ranges into single range
  158. * Correctly inherit from `Stream` class
  159. * Fix `Content-Range` header in 416 responses when using `start`/`end` options
  160. * Fix `Content-Range` header missing from default 416 responses
  161. * Ignore non-byte `Range` headers
  162. * deps: http-errors@~1.5.0
  163. - Add `HttpError` export, for `err instanceof createError.HttpError`
  164. - Support new code `421 Misdirected Request`
  165. - Use `setprototypeof` module to replace `__proto__` setting
  166. - deps: inherits@2.0.1
  167. - deps: statuses@'>= 1.3.0 < 2'
  168. - perf: enable strict mode
  169. * deps: range-parser@~1.2.0
  170. - Fix incorrectly returning -1 when there is at least one valid range
  171. - perf: remove internal function
  172. * deps: statuses@~1.3.0
  173. - Add `421 Misdirected Request`
  174. - perf: enable strict mode
  175. * perf: remove argument reassignment
  176. 0.13.2 / 2016-03-05
  177. ===================
  178. * Fix invalid `Content-Type` header when `send.mime.default_type` unset
  179. 0.13.1 / 2016-01-16
  180. ===================
  181. * deps: depd@~1.1.0
  182. - Support web browser loading
  183. - perf: enable strict mode
  184. * deps: destroy@~1.0.4
  185. - perf: enable strict mode
  186. * deps: escape-html@~1.0.3
  187. - perf: enable strict mode
  188. - perf: optimize string replacement
  189. - perf: use faster string coercion
  190. * deps: range-parser@~1.0.3
  191. - perf: enable strict mode
  192. 0.13.0 / 2015-06-16
  193. ===================
  194. * Allow Node.js HTTP server to set `Date` response header
  195. * Fix incorrectly removing `Content-Location` on 304 response
  196. * Improve the default redirect response headers
  197. * Send appropriate headers on default error response
  198. * Use `http-errors` for standard emitted errors
  199. * Use `statuses` instead of `http` module for status messages
  200. * deps: escape-html@1.0.2
  201. * deps: etag@~1.7.0
  202. - Improve stat performance by removing hashing
  203. * deps: fresh@0.3.0
  204. - Add weak `ETag` matching support
  205. * deps: on-finished@~2.3.0
  206. - Add defined behavior for HTTP `CONNECT` requests
  207. - Add defined behavior for HTTP `Upgrade` requests
  208. - deps: ee-first@1.1.1
  209. * perf: enable strict mode
  210. * perf: remove unnecessary array allocations
  211. 0.12.3 / 2015-05-13
  212. ===================
  213. * deps: debug@~2.2.0
  214. - deps: ms@0.7.1
  215. * deps: depd@~1.0.1
  216. * deps: etag@~1.6.0
  217. - Improve support for JXcore
  218. - Support "fake" stats objects in environments without `fs`
  219. * deps: ms@0.7.1
  220. - Prevent extraordinarily long inputs
  221. * deps: on-finished@~2.2.1
  222. 0.12.2 / 2015-03-13
  223. ===================
  224. * Throw errors early for invalid `extensions` or `index` options
  225. * deps: debug@~2.1.3
  226. - Fix high intensity foreground color for bold
  227. - deps: ms@0.7.0
  228. 0.12.1 / 2015-02-17
  229. ===================
  230. * Fix regression sending zero-length files
  231. 0.12.0 / 2015-02-16
  232. ===================
  233. * Always read the stat size from the file
  234. * Fix mutating passed-in `options`
  235. * deps: mime@1.3.4
  236. 0.11.1 / 2015-01-20
  237. ===================
  238. * Fix `root` path disclosure
  239. 0.11.0 / 2015-01-05
  240. ===================
  241. * deps: debug@~2.1.1
  242. * deps: etag@~1.5.1
  243. - deps: crc@3.2.1
  244. * deps: ms@0.7.0
  245. - Add `milliseconds`
  246. - Add `msecs`
  247. - Add `secs`
  248. - Add `mins`
  249. - Add `hrs`
  250. - Add `yrs`
  251. * deps: on-finished@~2.2.0
  252. 0.10.1 / 2014-10-22
  253. ===================
  254. * deps: on-finished@~2.1.1
  255. - Fix handling of pipelined requests
  256. 0.10.0 / 2014-10-15
  257. ===================
  258. * deps: debug@~2.1.0
  259. - Implement `DEBUG_FD` env variable support
  260. * deps: depd@~1.0.0
  261. * deps: etag@~1.5.0
  262. - Improve string performance
  263. - Slightly improve speed for weak ETags over 1KB
  264. 0.9.3 / 2014-09-24
  265. ==================
  266. * deps: etag@~1.4.0
  267. - Support "fake" stats objects
  268. 0.9.2 / 2014-09-15
  269. ==================
  270. * deps: depd@0.4.5
  271. * deps: etag@~1.3.1
  272. * deps: range-parser@~1.0.2
  273. 0.9.1 / 2014-09-07
  274. ==================
  275. * deps: fresh@0.2.4
  276. 0.9.0 / 2014-09-07
  277. ==================
  278. * Add `lastModified` option
  279. * Use `etag` to generate `ETag` header
  280. * deps: debug@~2.0.0
  281. 0.8.5 / 2014-09-04
  282. ==================
  283. * Fix malicious path detection for empty string path
  284. 0.8.4 / 2014-09-04
  285. ==================
  286. * Fix a path traversal issue when using `root`
  287. 0.8.3 / 2014-08-16
  288. ==================
  289. * deps: destroy@1.0.3
  290. - renamed from dethroy
  291. * deps: on-finished@2.1.0
  292. 0.8.2 / 2014-08-14
  293. ==================
  294. * Work around `fd` leak in Node.js 0.10 for `fs.ReadStream`
  295. * deps: dethroy@1.0.2
  296. 0.8.1 / 2014-08-05
  297. ==================
  298. * Fix `extensions` behavior when file already has extension
  299. 0.8.0 / 2014-08-05
  300. ==================
  301. * Add `extensions` option
  302. 0.7.4 / 2014-08-04
  303. ==================
  304. * Fix serving index files without root dir
  305. 0.7.3 / 2014-07-29
  306. ==================
  307. * Fix incorrect 403 on Windows and Node.js 0.11
  308. 0.7.2 / 2014-07-27
  309. ==================
  310. * deps: depd@0.4.4
  311. - Work-around v8 generating empty stack traces
  312. 0.7.1 / 2014-07-26
  313. ==================
  314. * deps: depd@0.4.3
  315. - Fix exception when global `Error.stackTraceLimit` is too low
  316. 0.7.0 / 2014-07-20
  317. ==================
  318. * Deprecate `hidden` option; use `dotfiles` option
  319. * Add `dotfiles` option
  320. * deps: debug@1.0.4
  321. * deps: depd@0.4.2
  322. - Add `TRACE_DEPRECATION` environment variable
  323. - Remove non-standard grey color from color output
  324. - Support `--no-deprecation` argument
  325. - Support `--trace-deprecation` argument
  326. 0.6.0 / 2014-07-11
  327. ==================
  328. * Deprecate `from` option; use `root` option
  329. * Deprecate `send.etag()` -- use `etag` in `options`
  330. * Deprecate `send.hidden()` -- use `hidden` in `options`
  331. * Deprecate `send.index()` -- use `index` in `options`
  332. * Deprecate `send.maxage()` -- use `maxAge` in `options`
  333. * Deprecate `send.root()` -- use `root` in `options`
  334. * Cap `maxAge` value to 1 year
  335. * deps: debug@1.0.3
  336. - Add support for multiple wildcards in namespaces
  337. 0.5.0 / 2014-06-28
  338. ==================
  339. * Accept string for `maxAge` (converted by `ms`)
  340. * Add `headers` event
  341. * Include link in default redirect response
  342. * Use `EventEmitter.listenerCount` to count listeners
  343. 0.4.3 / 2014-06-11
  344. ==================
  345. * Do not throw un-catchable error on file open race condition
  346. * Use `escape-html` for HTML escaping
  347. * deps: debug@1.0.2
  348. - fix some debugging output colors on node.js 0.8
  349. * deps: finished@1.2.2
  350. * deps: fresh@0.2.2
  351. 0.4.2 / 2014-06-09
  352. ==================
  353. * fix "event emitter leak" warnings
  354. * deps: debug@1.0.1
  355. * deps: finished@1.2.1
  356. 0.4.1 / 2014-06-02
  357. ==================
  358. * Send `max-age` in `Cache-Control` in correct format
  359. 0.4.0 / 2014-05-27
  360. ==================
  361. * Calculate ETag with md5 for reduced collisions
  362. * Fix wrong behavior when index file matches directory
  363. * Ignore stream errors after request ends
  364. - Goodbye `EBADF, read`
  365. * Skip directories in index file search
  366. * deps: debug@0.8.1
  367. 0.3.0 / 2014-04-24
  368. ==================
  369. * Fix sending files with dots without root set
  370. * Coerce option types
  371. * Accept API options in options object
  372. * Set etags to "weak"
  373. * Include file path in etag
  374. * Make "Can't set headers after they are sent." catchable
  375. * Send full entity-body for multi range requests
  376. * Default directory access to 403 when index disabled
  377. * Support multiple index paths
  378. * Support "If-Range" header
  379. * Control whether to generate etags
  380. * deps: mime@1.2.11
  381. 0.2.0 / 2014-01-29
  382. ==================
  383. * update range-parser and fresh
  384. 0.1.4 / 2013-08-11
  385. ==================
  386. * update fresh
  387. 0.1.3 / 2013-07-08
  388. ==================
  389. * Revert "Fix fd leak"
  390. 0.1.2 / 2013-07-03
  391. ==================
  392. * Fix fd leak
  393. 0.1.0 / 2012-08-25
  394. ==================
  395. * add options parameter to send() that is passed to fs.createReadStream() [kanongil]
  396. 0.0.4 / 2012-08-16
  397. ==================
  398. * allow custom "Accept-Ranges" definition
  399. 0.0.3 / 2012-07-16
  400. ==================
  401. * fix normalization of the root directory. Closes #3
  402. 0.0.2 / 2012-07-09
  403. ==================
  404. * add passing of req explicitly for now (YUCK)
  405. 0.0.1 / 2010-01-03
  406. ==================
  407. * Initial release