6091 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
dependabot[bot]	1f311c59d4	build(deps-dev): bump cookie-session from 2.0.0 to 2.1.0 (#6399) ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-23 20:08:24 -05:00
Wes Todd	9e97144222	feat(deps): finalhandler@2.1.0 (#6373) ... * feat(deps): finalhandler@2.1.0 * Update History.md Co-authored-by: Phillip Barta <barta.phillip@gmail.com> --------- Co-authored-by: Phillip Barta <barta.phillip@gmail.com> Co-authored-by: Ulises Gascón <ulisesgascongonzalez@gmail.com>	2025-03-18 19:12:45 -05:00
dependabot[bot]	29d09803c1	build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (#6397) ... Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.0 to 2.4.1. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](62b2cac7ed...f49aabe0b5) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-18 17:12:20 +01:00
dependabot[bot]	1d63162dbf	build(deps): bump github/codeql-action from 3.24.7 to 3.28.11 (#6398) ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.7 to 3.28.11. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3.24.7...6bb031afdd8eb862ea3fc1848194185e076637e5) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-18 17:11:59 +01:00
Sebastian Beltran	4a2175dfc9	fix dependabot config (#6392)	2025-03-16 17:44:57 -05:00
Ulises Gascón	0bb00e1906	ci: add dependabot (#5435) ... Co-authored-by: Shivam Sharma <meshivam81@gmail.com> Co-authored-by: Sebastian Beltran <bjohansebas@gmail.com>	2025-03-11 22:50:59 +01:00
Wes Todd	1e359f57fc	fix(deps): qs@^6.14.0 (#6374)	2025-03-11 22:49:58 +01:00
Ulises Gascón	9cbe2c2cbb	docs: add @dpopp07 to the triage team (#6352)	2025-03-11 22:49:08 +01:00
Sebastian Beltran	35e15362ab	fix(docs): clarify guidelines for becoming a committer (#6364) ... * docs: clarify guidelines for becoming a committer * Update Contributing.md Co-authored-by: Chris de Almeida <ctcpip@users.noreply.github.com> --------- Co-authored-by: Chris de Almeida <ctcpip@users.noreply.github.com>	2025-03-05 09:11:29 -06:00
Sebastian Beltran	90e522ac90	fix(docs): update guidance for triager nominations (#6349) ... * docs: update guidance for triager nominations * Update Contributing.md Co-authored-by: Wes Todd <wes@wesleytodd.com> * Update Contributing.md --------- Co-authored-by: Wes Todd <wes@wesleytodd.com>	2025-03-04 08:09:18 -06:00
Ulises Gascón	59703c2321	docs: update emeritus triagers (#6345)	2025-02-27 22:47:13 +01:00
Andrea Polverino	caa4f68ee8	feat: Extend res.links() to allow adding multiple links with the same rel (closes #2729) (#4885)	2025-02-14 10:20:53 -06:00
Phillip Barta	6ed3439584	fix(docs): Update multiple links to use https instead of http (#6338)	2025-02-14 09:51:27 -06:00
Juan José	327af123a1	feat: add support for ETag option in res.sendFile (#6073) ... This patch introduces the ability to control the ETag generation through the `res.sendFile` function. Specifically, the ETag option is wired to the application's configuration, allowing it to be enabled or disabled based on the app's settings. Fixes: https://github.com/expressjs/express/issues/2294 Signed-off-by: Juan José Arboleda <soyjuanarbol@gmail.com>	2025-02-13 13:39:31 -06:00
Wes Todd	d2de128a32	fix (deps): update deps (#6337) ... fix(deps): mocha@^10.7.3 (closes #6121) fix(deps): marked@^15.0.3 (closes #6120) fix(deps): express-session@^1.18.1 (closes #6119) fix(deps): ejs@^3.1.10 (closes #6117) fix(deps): content-type@^1.0.5 (closes #6115) fix(deps): connect-redis@^8.0.1 (closes #6114) fix(deps): supertest@^6.3.4 (closes #6112) Co-authored-by: agungjati <agungjati94@gmail.com>	2025-02-13 10:44:50 -06:00
Agung Jati	2a53336e5d	fix(deps): nyc@^17.1.0 (#6122)	2025-02-12 10:47:19 -06:00
Ulises Gascón	a42413d4e3	fix(docs): Update repo captains (#6234) ... * docs: update repo captains * docs: update repo captain nomination policies Ref: https://github.com/expressjs/express/pull/6234#issuecomment-2578555232	2025-02-12 10:22:11 -06:00
Wes Todd	c2f576cbe9	feat(deps): router@^2.1.0 (#6331)	2025-02-12 10:09:50 -06:00
Wes Todd	99473c593a	feat(deps): body-parser@^2.1.0 (#6332)	2025-02-12 09:44:53 -06:00
Dustin Popp	2d589b644a	fix(docs): retroactively note 5.0.0-beta.1 api change in history file (#6333) ... Signed-off-by: Dustin Popp <dustinpopp@ibm.com>	2025-02-12 09:38:10 -06:00
Phillip Barta	85e48bb8c1	fix(deps): update debug to ^4.4.0 (#6313)	2025-02-10 13:41:39 -06:00
Alexander Cerutti	55869f49a6	feat: Added check to support Uint8Array in response sending (#6285) ... Unified usage of ArrayBuffer.isView to comprehend Buffer and removed isView function check Co-authored-by: Wes Todd <wes@wesleytodd.com> Added Uint8Array test with encoding fix: added history.md entry	2025-02-10 11:23:02 -06:00
Dustin Popp	af7cd90893	feat(deps): use carat notation for dependency versions (#6317) ... Signed-off-by: Dustin Popp <dustinpopp@ibm.com> Co-authored-by: Ulises Gascón <ulisesgascongonzalez@gmail.com>	2025-02-05 12:05:39 -06:00
Phillip Barta	ae6a4621bc	fix(ci): updated scorecard actions (#6322)	2025-02-05 11:40:08 -06:00
Phillip Barta	8d39345902	fix(ci): fix npm install --include typo (#6324)	2025-02-05 11:25:48 -06:00
Phillip Barta	a5cb681eb8	ci: updated github actions ci workflow (#6314)	2025-02-05 13:27:59 +01:00
Ayoub Mabrouk	511d9dfca8	refactor: simplify normalizeTypes function (#6097)	2025-02-04 11:59:48 +01:00
Ulises Gascón	7f13d572c1	docs: include team email in the security policy (#6278)	2025-02-04 11:28:18 +01:00
prajesh	62336717bf	fix: added a missing semicolon in css styles in examples/auth (#6297)	2025-01-26 11:54:07 +01:00
Sebastian Beltran	3bbffdc41c	docs: add @Phillip9587 to the triage team	2025-01-23 09:51:45 -06:00
Ulises Gascón	ff86319ed5	ci: add support for OSSF scorecard reporting (#5431)	2025-01-15 07:39:30 +01:00
Hamir Mahal	1c5cf0fead	refactor: remove Invalid action input	2025-01-14 13:01:39 -06:00
Jon Koops	256a3d1527	Remove unused depd dependency ... Signed-off-by: Jon Koops <jonkoops@gmail.com>	2025-01-12 11:08:51 -06:00
Wes Todd	4f952a953b	fix: remove download size badges	2025-01-11 11:12:04 -06:00
Szymon Łągiewka	41113599af	fix(refactor): prefix built-in node module imports ... Since v5 relies on node >= 18, this is now possible (since v16, v14.18.0 [^1][^2]). It's functionally irrelevant: 1. It's not required for CJS nor ESM (with a few exceptions [^3]) 2. It has no performance promises However, there are upsides to this approach: 1. It brings clear boundaries to what's a built-in and what's an external dependency 2. It reduces the risk of importing unwanted deps where a built-in is expected 3. It's slightly more interoperable with other JS runtimes that provide node compatibility[^4], albeit only during development. Once imported from npm, built-ins are assumed. [^1]:https://nodejs.org/docs/latest-v22.x/api/modules.html#built-in-modules [^2]:https://github.com/nodejs/node/pull/37246 [^3]:https://nodejs.org/api/modules.html#built-in-modules-with-mandatory-node-prefix [^4]:https://docs.deno.com/runtime/fundamentals/node/#using-node's-built-in-modules	2025-01-10 11:53:44 -06:00
AbdelMonaam Aouini	6a40af8293	fix(devdeps): update dev deps (#6211) ... Co-authored-by: Monaam Aouini <abdelmonaem.aouini@mispay.co>	2025-01-08 14:45:36 -06:00
Phillip Barta	246f6f5aee	fix: Remove utils-merge dependency - use spread syntax instead (#6091)	2025-01-08 09:56:16 -06:00
Jon Koops	b11122be85	chore: replace methods dependency with standard library (#6196)	2025-01-02 08:00:30 +01:00
Sebastian Beltran	43020ff275	docs: clarify the security process in the triage role (#6217)	2024-12-20 18:18:55 +01:00
Shahan Arshad	e4a61bd88e	refactor: improve readability (#6173)	2024-11-27 21:22:22 +01:00
Ulises Gascón	39f5d633b5	docs: add @rxmarbles to the triage team (#6151)	2024-11-27 19:59:36 +01:00
Jon Church	52ed64606f	update history.md for acceptParams change (#6177)	2024-11-20 14:40:39 -05:00
Phillip Barta	4e92ac9031	cleanup: remove AsyncLocalStorage check from tests (#6147) ... Co-authored-by: Wes Todd <wes@wesleytodd.com>	2024-11-15 10:23:42 -06:00
Phillip9587	9f8589e31c	cleanup: remove unnecessary require for global Buffer ... The Buffer object is globally available in Node.js, so there is no need to explicitly require it.	2024-11-15 10:16:29 -06:00
Sebastian Beltran	cc751cff8f	improve step update documentation	2024-11-15 08:53:37 -06:00
Blake Embrey	805ef52ae6	Use loop for acceptParams (#6066)	2024-11-14 16:01:25 -05:00
Phillip Barta	9e3dbb4374	chore(test): remove promise support check from tests (#6148) ... Promises are supported in all supported Node.js version so the check is unnecessary	2024-11-12 09:30:34 -06:00
Ulises Gascón	b31910c542	docs: Add DCO (#6048) ... Co-authored-by: Chris de Almeida <ctcpip@users.noreply.github.com>	2024-10-29 13:35:44 +01:00
Bhavya Dhiman	c70197ad33	fix(buffer): use node:buffer instead of safe-buffer (#6071) ... Main Changes: - Removed dependency `safe-buffer@5.2.1` - Use `node:buffer` core library instead of safe-buffer	2024-10-27 11:10:33 +01:00
Phillip Barta	8cb53ea5c3	refactor: Remove Object.setPrototypeOf polyfill (#6081)	2024-10-22 20:22:26 +02:00