express 5.1.0

npm / express / 5.1.0 source ↗

What's Changed

• Update captains by @UlisesGascon in https://github.com/expressjs/express/pull/6027
• build: Node.js 23.0 by @bjohansebas in https://github.com/expressjs/express/pull/6075
• Add funding field (v5) by @bjohansebas in https://github.com/expressjs/express/pull/6064
• ✅ add discarded middleware test by @ctcpip in https://github.com/expressjs/express/pull/5819
• update homepage link http to https by @bjohansebas in https://github.com/expressjs/express/pull/5920
• Improve readme by @bjohansebas in https://github.com/expressjs/express/pull/5994
• Add bjohansebas as repo captain for expressjs.com by @crandmck in https://github.com/expressjs/express/pull/6058
• Remove Object.setPrototypeOf polyfill by @Phillip9587 in https://github.com/expressjs/express/pull/6081
• fix(buffer): use node:buffer instead of safe-buffer by @bhavya3024 in https://github.com/expressjs/express/pull/6071
• docs: Add DCO by @UlisesGascon in https://github.com/expressjs/express/pull/6048
• cleanup: remove promise support check from tests by @Phillip9587 in https://github.com/expressjs/express/pull/6148
• Use loop for acceptParams by @blakeembrey in https://github.com/expressjs/express/pull/6066
• Improve documentation step in release process by @bjohansebas in https://github.com/expressjs/express/pull/6150
• cleanup: remove unnecessary require for global Buffer by @Phillip9587 in https://github.com/expressjs/express/pull/6146
• cleanup: remove AsyncLocalStorage check by @Phillip9587 in https://github.com/expressjs/express/pull/6147
• update history.md for acceptParams change by @jonchurch in https://github.com/expressjs/express/pull/6177
• docs: add @rxmarbles to the triage team by @UlisesGascon in https://github.com/expressjs/express/pull/6151
• refactor: improve readability by @sazk07 in https://github.com/expressjs/express/pull/6173
• docs: clarify the security process in the triage role by @bjohansebas in https://github.com/expressjs/express/pull/6217
• chore: replace methods dependency with standard library by @jonkoops in https://github.com/expressjs/express/pull/6196
• Remove utils-merge dependency - use spread syntax instead by @Phillip9587 in https://github.com/expressjs/express/pull/6091
• fix(securite): fix vulnerabilities by @Abdel-Monaam-Aouini in https://github.com/expressjs/express/pull/6211
• refactor: prefix built-in node module imports by @slagiewka in https://github.com/expressjs/express/pull/6236
• fix: remove download size badges by @wesleytodd in https://github.com/expressjs/express/pull/6266
• Remove unused depd dependency by @jonkoops in https://github.com/expressjs/express/pull/6197
• fix: usage of Invalid action input 'persist-credentials' for actions/setup-node@v4 in ci.yml by @hamirmahal in https://github.com/expressjs/express/pull/6256
• Add support for OSSF scorecard reporting by @UlisesGascon in https://github.com/expressjs/express/pull/5431
• docs: add @Phillip9587 to the triage team by @bjohansebas in https://github.com/expressjs/express/pull/6276
• fix: added a missing semicolon in css styles in examples/auth by @pr4j3sh in https://github.com/expressjs/express/pull/6297
• docs: include team email in the security policy by @UlisesGascon in https://github.com/expressjs/express/pull/6278
• refactor: simplify normalizeTypes function by @Ayoub-Mabrouk in https://github.com/expressjs/express/pull/6097
• ci: updated github actions ci workflow by @Phillip9587 in https://github.com/expressjs/express/pull/6314
• ci: fix npm install --include typo by @Phillip9587 in https://github.com/expressjs/express/pull/6324
• ci: updated scorecard actions by @Phillip9587 in https://github.com/expressjs/express/pull/6322
• build(deps): use carat notation for dependency versions by @dpopp07 in https://github.com/expressjs/express/pull/6317
• chore(deps): update debug to ^4.4.0 by @Phillip9587 in https://github.com/expressjs/express/pull/6313
• docs: retroactively note 5.0.0-beta.1 api change in history file by @dpopp07 in https://github.com/expressjs/express/pull/6333
• feat(deps): body-parser@^2.1.0 by @wesleytodd in https://github.com/expressjs/express/pull/6332
• feat(deps): router@^2.1.0 by @wesleytodd in https://github.com/expressjs/express/pull/6331
• Update repo captains by @UlisesGascon in https://github.com/expressjs/express/pull/6234
• deps: upgrade nyc by @agungjati in https://github.com/expressjs/express/pull/6122
• fix (deps): update deps by @wesleytodd in https://github.com/expressjs/express/pull/6337
• response: add support for ETag option in res.sendFile by @juanarbol in https://github.com/expressjs/express/pull/6073
• Update multiple links to use https instead of http by @Phillip9587 in https://github.com/expressjs/express/pull/6338
• Extend res.links() to allow adding multiple links with the same rel #2729 by @andvea in https://github.com/expressjs/express/pull/4885
• docs: update emeritus triagers by @UlisesGascon in https://github.com/expressjs/express/pull/6345
• docs: update guidance for triager nominations by @bjohansebas in https://github.com/expressjs/express/pull/6349
• docs: clarify guidelines for becoming a committer by @bjohansebas in https://github.com/expressjs/express/pull/6364
• Nominate @dpopp07 to the triage team by @UlisesGascon in https://github.com/expressjs/express/pull/6352
• fix(deps): qs@^6.14.0 by @wesleytodd in https://github.com/expressjs/express/pull/6374
• Add dependabot by @UlisesGascon in https://github.com/expressjs/express/pull/5435
• fix dependabot config by @bjohansebas in https://github.com/expressjs/express/pull/6392
• build(deps): bump github/codeql-action from 3.24.7 to 3.28.11 by @dependabot in https://github.com/expressjs/express/pull/6398
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @dependabot in https://github.com/expressjs/express/pull/6397
• feat(deps): finalhandler@2.1.0 by @wesleytodd in https://github.com/expressjs/express/pull/6373
• build(deps-dev): bump cookie-session from 2.0.0 to 2.1.0 by @dependabot in https://github.com/expressjs/express/pull/6399
• deps: body-parser@^2.2.0 by @UlisesGascon in https://github.com/expressjs/express/pull/6419
• deps: type-is@^2.0.1 by @UlisesGascon in https://github.com/expressjs/express/pull/6420
• deps: router@^2.2.0 by @UlisesGascon in https://github.com/expressjs/express/pull/6417
• ci: use full SHAs for github action versions by @Phillip9587 in https://github.com/expressjs/express/pull/6415
• doc: remove @mertcanaltin from Triagers by @mertcanaltin in https://github.com/expressjs/express/pull/6408
• deps: serve-static@^2.2.0 by @UlisesGascon in https://github.com/expressjs/express/pull/6418
• 5.1.0 by @wesleytodd in https://github.com/expressjs/express/pull/6425

New Contributors

• @bhavya3024 made their first contribution in https://github.com/expressjs/express/pull/6071
• @jonkoops made their first contribution in https://github.com/expressjs/express/pull/6196
• @Abdel-Monaam-Aouini made their first contribution in https://github.com/expressjs/express/pull/6211
• @slagiewka made their first contribution in https://github.com/expressjs/express/pull/6236
• @hamirmahal made their first contribution in https://github.com/expressjs/express/pull/6256
• @pr4j3sh made their first contribution in https://github.com/expressjs/express/pull/6297
• @Ayoub-Mabrouk made their first contribution in https://github.com/expressjs/express/pull/6097
• @dpopp07 made their first contribution in https://github.com/expressjs/express/pull/6317
• @agungjati made their first contribution in https://github.com/expressjs/express/pull/6122
• @andvea made their first contribution in https://github.com/expressjs/express/pull/4885
• @dependabot made their first contribution in https://github.com/expressjs/express/pull/6398

Full Changelog: https://github.com/expressjs/express/compare/5.0.1...v5.1.0