ea56b3504b
test: added unit tests for utils.compileETag to cover valid and invalid inputs ( #6534 )
...
* Added unit tests for utils.compileETag to cover valid and invalid inputs
* test: enhance compileETag tests for various input types
---------
Co-authored-by: sucem029 <[email protected] >
Co-authored-by: Sebastian Beltran <[email protected] >
2026-01-16 21:27:22 -05:00
Marcos Molina and GitHub
5bf5075b60
docs: fix JSDoc for req.accepts() return value and parameter format ( #6936 )
...
* fixed request accept jsdoc
* reverted format
* reverted format
* updated jsdoc
* updated the rest of the documentation
2026-01-16 16:19:39 -05:00
b778057568
Polish HTML structure of the response in the res.redirect() function ( #5167 )
...
* structure the DOM body
* structure the DOM body
* test: add html title to redirect test
* fix: update HTML structure for include body and head tags
* docs: improve HTML structure in res.redirect() responses for better browser compatibility
---------
Co-authored-by: Sebastian Beltran <[email protected] >
2026-01-16 10:29:01 -05:00
Sebastian Beltran and GitHub
090a46cad4
docs: add @krzysdz to the triage team ( #6482 )
2026-01-12 10:28:54 +01:00
c557ce29cf
build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 ( #6962 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/2028fbc5c25fe9cf00d9f06a71cc4710d4507903...395ad3262231945c25e8478fd5baf05154b1d79f )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-07 09:48:47 -05:00
87cff27d0e
build(deps): bump actions/checkout from 6.0.0 to 6.0.1 ( #6963 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3...8e8c483db84b4bee98b60c0593521ed34d9990e8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-07 09:47:41 -05:00
Gabriel Alves and GitHub
44dba909b4
deps: qs@^6.14.1
2026-01-07 15:46:37 +01:00
ece0678d29
build(deps): bump github/codeql-action from 4.31.6 to 4.31.9 ( #6964 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.6 to 4.31.9.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/fe4161a26a8629af62121b670040955b330f9af2...5d4e8d1aca955e8d8589aabd499c5cae939e33c7 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-07 09:46:20 -05:00
3306685db3
build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 ( #6965 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/330a01c490aca151604b8cf639adc76d48f6c5d4...b7c566a772e6b6bfb58ed0dc250532a479d7789f )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-07 09:45:47 -05:00
7b6414ef59
fix: enhance req.acceptsCharsets method ( #6088 )
...
* fix: enhance req.acceptsCharsets method
* Update req.acceptsCharsets.js
---------
Co-authored-by: Monaam Aouini <[email protected] >
Co-authored-by: Sebastian Beltran <[email protected] >
2026-01-07 09:41:34 -05:00
00f46ea896
build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 ( #6961 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/018cc2cf5baa6db3ef3c5f8a56943fffe632ef53...37930b1c2abaa49bbe596cd826c3c89aef350131 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-07 09:38:53 -05:00
Jon Church
44f8d2b683
doc: fix security.md link to point to security tab
2026-01-05 17:54:09 -05:00
Ulises Gascon and Jon Church
047672c8f5
docs: use global Security policy
...
We should inherit https://github.com/expressjs/.github/blob/master/SECURITY.md directly.
2026-01-05 17:46:28 -05:00
Rick Markins and GitHub
c349b659d0
docs: add @rxmarbles to triagers ( #6953 )
2025-12-19 10:44:49 +01:00
ctcpip
4d60427c8f
📝 add note to history
2025-12-09 09:32:11 -06:00
Ulises Gascon and Jon Church
e248c02c54
5.2.1
v5.2.1
2025-12-01 15:27:35 -05:00
Ulises Gascon and Jon Church
02ba0dd0fa
Revert "sec: security patch for CVE-2024-51999"
...
This reverts commit 60a19ab26a .
2025-12-01 15:27:35 -05:00
Ulises Gascón and GitHub
7cfca0b4f1
Release: 5.2.0 ( #6920 )
v5.2.0
2025-12-01 17:17:31 +01:00
Chris de Almeida and Ulises Gascon
60a19ab26a
sec: security patch for CVE-2024-51999
2025-12-01 17:15:17 +01:00
3490a09e64
build(deps): bump actions/checkout from 5.0.0 to 6.0.0 ( #6928 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/08c6903cd8c0fde910a37f88322edcfb5dd907a8...1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-01 13:13:45 +01:00
7e03dacef4
build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 ( #6929 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.2 to 4.31.6.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/0499de31b99561a6d14a36a5f662c2a54f91beee...fe4161a26a8629af62121b670040955b330f9af2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-01 13:12:52 +01:00
7dddaa0e4a
build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 ( #6930 )
...
Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action ) from 2.3.6 to 2.3.7.
- [Release notes](https://github.com/coverallsapp/github-action/releases )
- [Commits](https://github.com/coverallsapp/github-action/compare/648a8eb78e6d50909eff900e4ec85cab4524a45b...5cbfd81b66ca5d10c19b062c04de0199c215fb6e )
---
updated-dependencies:
- dependency-name: coverallsapp/github-action
dependency-version: 2.3.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-01 13:12:08 +01:00
Shivam Sharma and GitHub
b9365df1bc
deps: body-parser@^2.2.1 ( #6922 )
...
Includes the security patch for CVE-2025-13466
2025-11-26 15:19:57 +01:00
12cca190df
docs: update emeritus triagers ( #6890 )
...
* docs: update emeritus triagers
---------
Co-authored-by: Ulises Gascón <[email protected] >
2025-11-25 11:32:32 +01:00
Sebastian Beltran and GitHub
376ed55017
Nominate to @efekrskl for triage team ( #6888 )
...
* Nominate to @efekrskl for triage team
* Update Readme.md
2025-11-24 22:32:28 -05:00
TheMysterious and GitHub
706065cb75
refactor: use cached slice in app.listen ( #6897 )
...
Signed-off-by: Tacit1 <[email protected] >
2025-11-23 18:52:16 -05:00
Phillip Barta and GitHub
72d37fabf2
docs: switch badges from badgen.net to shields.io ( #6900 )
2025-11-18 10:42:56 +01:00
8f24d46948
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 ( #6868 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-01 10:46:37 +01:00
64909a6344
build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 ( #6869 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-01 10:45:51 +01:00
6bc61a9afe
build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 ( #6870 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-01 10:45:07 +01:00
6e3bee2de4
build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 ( #6871 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-01 10:44:12 +01:00
Phillip Barta and GitHub
e01bc9fd20
ci: add node.js 25 to test matrix ( #6843 )
2025-10-16 13:51:39 +02:00
8c71c12a4f
build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 ( #6793 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.3.0 to 5.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/d3f86a106a0bac45b974a628896c90dbdf5c8093...634f93cb2916e3fdff6788551b99b062d0335ce0 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-03 14:44:02 +02:00
04b0573a72
build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 ( #6794 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4.4.0 to 5.0.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/49933ea5288caeca8642d1e84afbd3f7d6820020...a0853c24544627f65ddf259abe73b1d18a591444 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-03 14:43:54 +02:00
5ab9687d2c
build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 ( #6795 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/05b42c624433fc40578a4040d5cf5e36ddca8cde...4eaacf0543bb3f2c246792bd56e8cdeffafb205a )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-03 14:43:45 +02:00
2002c905a0
build(deps): bump github/codeql-action from 3.29.7 to 3.30.5 ( #6796 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.29.7 to 3.30.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/51f77329afa6477de8c49fc9c7046c15b9a4e79d...3599b3baa15b485a2e49ef411a7a4bb2452e7f93 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.30.5
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-03 14:40:08 +02:00
8db24c9131
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 ( #6797 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...08c6903cd8c0fde910a37f88322edcfb5dd907a8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-03 14:34:25 +02:00
Jean Burellier and GitHub
b7a149543a
chore: remove history.md from being packaged on publish ( #6780 )
2025-09-25 07:20:45 +02:00
415a519615
build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 ( #6675 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.29.2 to 3.29.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/181d5eefc20863364f96762470ba6f862bdef56b...51f77329afa6477de8c49fc9c7046c15b9a4e79d )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: bjohansebas <[email protected] >
2025-09-14 09:39:32 -05:00
Shivam Sharma and GitHub
0ef59a2ece
doc: update express app example ( #6718 )
2025-08-22 09:12:09 +02:00
Sebastian Beltran and GitHub
7865a30bba
lib: use req.socket over deprecated req.connection ( #6705 )
...
Signed-off-by: Sebastian Beltran <[email protected] >
2025-08-21 10:05:29 -05:00
2ffceac13a
chore: update git rules to ignore yarn.lock file ( #6588 )
...
Co-authored-by: Ulises Gascón <[email protected] >
2025-08-20 15:18:36 +02:00
Shivam Sharma and GitHub
341632e122
lint: add --fix flag to automatic fix linting issue ( #6644 )
...
* lint: add --fix flag to automatic fix linting issue
* add dedicated lint script
2025-08-12 17:58:13 -05:00
c05cecce27
build(deps-dev): bump cookie-session from 2.1.0 to 2.1.1 ( #6678 )
...
Bumps [cookie-session](https://github.com/expressjs/cookie-session ) from 2.1.0 to 2.1.1.
- [Release notes](https://github.com/expressjs/cookie-session/releases )
- [Changelog](https://github.com/expressjs/cookie-session/blob/master/HISTORY.md )
- [Commits](https://github.com/expressjs/cookie-session/compare/v2.1.0...v2.1.1 )
---
updated-dependencies:
- dependency-name: cookie-session
dependency-version: 2.1.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-05 20:24:48 -05:00
2b604e9b25
build(deps-dev): bump morgan from 1.10.0 to 1.10.1 ( #6679 )
...
Bumps [morgan](https://github.com/expressjs/morgan ) from 1.10.0 to 1.10.1.
- [Release notes](https://github.com/expressjs/morgan/releases )
- [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md )
- [Commits](https://github.com/expressjs/morgan/compare/1.10.0...1.10.1 )
---
updated-dependencies:
- dependency-name: morgan
dependency-version: 1.10.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-05 20:24:22 -05:00
shubham oulkar and GitHub
c748a981f6
update contributing and COC links ( #6601 )
2025-07-30 08:41:53 -05:00
Jon Church and GitHub
a3b7e0e687
doc: fix the Contributing.md link ( #6653 )
2025-07-21 19:14:33 -04:00
Sebastian Beltran and GitHub
bd017601a3
ci: run CI when the markdown changes ( #6632 )
2025-07-15 21:27:50 -05:00
Sebastian Beltran and GitHub
75c54fe017
feat: add deprecation warnings for redirect arguments undefined ( #6405 )
2025-07-14 22:18:10 -05:00
08c1b03d7f
build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 ( #6618 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.18 to 3.29.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/ff0a06e83cb2de871e5a09832bc6a81e7276941f...181d5eefc20863364f96762470ba6f862bdef56b )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-09 10:27:41 +02:00