You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

496 lines
12 KiB

4 years ago
  1. 0.17.1 / 2019-05-10
  2. ===================
  3. * Set stricter CSP header in redirect & error responses
  4. * deps: range-parser@~1.2.1
  5. 0.17.0 / 2019-05-03
  6. ===================
  7. * deps: http-errors@~1.7.2
  8. - Set constructor name when possible
  9. - Use `toidentifier` module to make class names
  10. - deps: depd@~1.1.2
  11. - deps: setprototypeof@1.1.1
  12. - deps: statuses@'>= 1.5.0 < 2'
  13. * deps: mime@1.6.0
  14. - Add extensions for JPEG-2000 images
  15. - Add new `font/*` types from IANA
  16. - Add WASM mapping
  17. - Update `.bdoc` to `application/bdoc`
  18. - Update `.bmp` to `image/bmp`
  19. - Update `.m4a` to `audio/mp4`
  20. - Update `.rtf` to `application/rtf`
  21. - Update `.wav` to `audio/wav`
  22. - Update `.xml` to `application/xml`
  23. - Update generic extensions to `application/octet-stream`:
  24. `.deb`, `.dll`, `.dmg`, `.exe`, `.iso`, `.msi`
  25. - Use mime-score module to resolve extension conflicts
  26. * deps: ms@2.1.1
  27. - Add `week`/`w` support
  28. - Fix negative number handling
  29. * deps: statuses@~1.5.0
  30. * perf: remove redundant `path.normalize` call
  31. 0.16.2 / 2018-02-07
  32. ===================
  33. * Fix incorrect end tag in default error & redirects
  34. * deps: depd@~1.1.2
  35. - perf: remove argument reassignment
  36. * deps: encodeurl@~1.0.2
  37. - Fix encoding `%` as last character
  38. * deps: statuses@~1.4.0
  39. 0.16.1 / 2017-09-29
  40. ===================
  41. * Fix regression in edge-case behavior for empty `path`
  42. 0.16.0 / 2017-09-27
  43. ===================
  44. * Add `immutable` option
  45. * Fix missing `</html>` in default error & redirects
  46. * Use instance methods on steam to check for listeners
  47. * deps: mime@1.4.1
  48. - Add 70 new types for file extensions
  49. - Set charset as "UTF-8" for .js and .json
  50. * perf: improve path validation speed
  51. 0.15.6 / 2017-09-22
  52. ===================
  53. * deps: debug@2.6.9
  54. * perf: improve `If-Match` token parsing
  55. 0.15.5 / 2017-09-20
  56. ===================
  57. * deps: etag@~1.8.1
  58. - perf: replace regular expression with substring
  59. * deps: fresh@0.5.2
  60. - Fix handling of modified headers with invalid dates
  61. - perf: improve ETag match loop
  62. - perf: improve `If-None-Match` token parsing
  63. 0.15.4 / 2017-08-05
  64. ===================
  65. * deps: debug@2.6.8
  66. * deps: depd@~1.1.1
  67. - Remove unnecessary `Buffer` loading
  68. * deps: http-errors@~1.6.2
  69. - deps: depd@1.1.1
  70. 0.15.3 / 2017-05-16
  71. ===================
  72. * deps: debug@2.6.7
  73. - deps: ms@2.0.0
  74. * deps: ms@2.0.0
  75. 0.15.2 / 2017-04-26
  76. ===================
  77. * deps: debug@2.6.4
  78. - Fix `DEBUG_MAX_ARRAY_LENGTH`
  79. - deps: ms@0.7.3
  80. * deps: ms@1.0.0
  81. 0.15.1 / 2017-03-04
  82. ===================
  83. * Fix issue when `Date.parse` does not return `NaN` on invalid date
  84. * Fix strict violation in broken environments
  85. 0.15.0 / 2017-02-25
  86. ===================
  87. * Support `If-Match` and `If-Unmodified-Since` headers
  88. * Add `res` and `path` arguments to `directory` event
  89. * Remove usage of `res._headers` private field
  90. - Improves compatibility with Node.js 8 nightly
  91. * Send complete HTML document in redirect & error responses
  92. * Set default CSP header in redirect & error responses
  93. * Use `res.getHeaderNames()` when available
  94. * Use `res.headersSent` when available
  95. * deps: debug@2.6.1
  96. - Allow colors in workers
  97. - Deprecated `DEBUG_FD` environment variable set to `3` or higher
  98. - Fix error when running under React Native
  99. - Use same color for same namespace
  100. - deps: ms@0.7.2
  101. * deps: etag@~1.8.0
  102. * deps: fresh@0.5.0
  103. - Fix false detection of `no-cache` request directive
  104. - Fix incorrect result when `If-None-Match` has both `*` and ETags
  105. - Fix weak `ETag` matching to match spec
  106. - perf: delay reading header values until needed
  107. - perf: enable strict mode
  108. - perf: hoist regular expressions
  109. - perf: remove duplicate conditional
  110. - perf: remove unnecessary boolean coercions
  111. - perf: skip checking modified time if ETag check failed
  112. - perf: skip parsing `If-None-Match` when no `ETag` header
  113. - perf: use `Date.parse` instead of `new Date`
  114. * deps: http-errors@~1.6.1
  115. - Make `message` property enumerable for `HttpError`s
  116. - deps: setprototypeof@1.0.3
  117. 0.14.2 / 2017-01-23
  118. ===================
  119. * deps: http-errors@~1.5.1
  120. - deps: inherits@2.0.3
  121. - deps: setprototypeof@1.0.2
  122. - deps: statuses@'>= 1.3.1 < 2'
  123. * deps: ms@0.7.2
  124. * deps: statuses@~1.3.1
  125. 0.14.1 / 2016-06-09
  126. ===================
  127. * Fix redirect error when `path` contains raw non-URL characters
  128. * Fix redirect when `path` starts with multiple forward slashes
  129. 0.14.0 / 2016-06-06
  130. ===================
  131. * Add `acceptRanges` option
  132. * Add `cacheControl` option
  133. * Attempt to combine multiple ranges into single range
  134. * Correctly inherit from `Stream` class
  135. * Fix `Content-Range` header in 416 responses when using `start`/`end` options
  136. * Fix `Content-Range` header missing from default 416 responses
  137. * Ignore non-byte `Range` headers
  138. * deps: http-errors@~1.5.0
  139. - Add `HttpError` export, for `err instanceof createError.HttpError`
  140. - Support new code `421 Misdirected Request`
  141. - Use `setprototypeof` module to replace `__proto__` setting
  142. - deps: inherits@2.0.1
  143. - deps: statuses@'>= 1.3.0 < 2'
  144. - perf: enable strict mode
  145. * deps: range-parser@~1.2.0
  146. - Fix incorrectly returning -1 when there is at least one valid range
  147. - perf: remove internal function
  148. * deps: statuses@~1.3.0
  149. - Add `421 Misdirected Request`
  150. - perf: enable strict mode
  151. * perf: remove argument reassignment
  152. 0.13.2 / 2016-03-05
  153. ===================
  154. * Fix invalid `Content-Type` header when `send.mime.default_type` unset
  155. 0.13.1 / 2016-01-16
  156. ===================
  157. * deps: depd@~1.1.0
  158. - Support web browser loading
  159. - perf: enable strict mode
  160. * deps: destroy@~1.0.4
  161. - perf: enable strict mode
  162. * deps: escape-html@~1.0.3
  163. - perf: enable strict mode
  164. - perf: optimize string replacement
  165. - perf: use faster string coercion
  166. * deps: range-parser@~1.0.3
  167. - perf: enable strict mode
  168. 0.13.0 / 2015-06-16
  169. ===================
  170. * Allow Node.js HTTP server to set `Date` response header
  171. * Fix incorrectly removing `Content-Location` on 304 response
  172. * Improve the default redirect response headers
  173. * Send appropriate headers on default error response
  174. * Use `http-errors` for standard emitted errors
  175. * Use `statuses` instead of `http` module for status messages
  176. * deps: escape-html@1.0.2
  177. * deps: etag@~1.7.0
  178. - Improve stat performance by removing hashing
  179. * deps: fresh@0.3.0
  180. - Add weak `ETag` matching support
  181. * deps: on-finished@~2.3.0
  182. - Add defined behavior for HTTP `CONNECT` requests
  183. - Add defined behavior for HTTP `Upgrade` requests
  184. - deps: ee-first@1.1.1
  185. * perf: enable strict mode
  186. * perf: remove unnecessary array allocations
  187. 0.12.3 / 2015-05-13
  188. ===================
  189. * deps: debug@~2.2.0
  190. - deps: ms@0.7.1
  191. * deps: depd@~1.0.1
  192. * deps: etag@~1.6.0
  193. - Improve support for JXcore
  194. - Support "fake" stats objects in environments without `fs`
  195. * deps: ms@0.7.1
  196. - Prevent extraordinarily long inputs
  197. * deps: on-finished@~2.2.1
  198. 0.12.2 / 2015-03-13
  199. ===================
  200. * Throw errors early for invalid `extensions` or `index` options
  201. * deps: debug@~2.1.3
  202. - Fix high intensity foreground color for bold
  203. - deps: ms@0.7.0
  204. 0.12.1 / 2015-02-17
  205. ===================
  206. * Fix regression sending zero-length files
  207. 0.12.0 / 2015-02-16
  208. ===================
  209. * Always read the stat size from the file
  210. * Fix mutating passed-in `options`
  211. * deps: mime@1.3.4
  212. 0.11.1 / 2015-01-20
  213. ===================
  214. * Fix `root` path disclosure
  215. 0.11.0 / 2015-01-05
  216. ===================
  217. * deps: debug@~2.1.1
  218. * deps: etag@~1.5.1
  219. - deps: crc@3.2.1
  220. * deps: ms@0.7.0
  221. - Add `milliseconds`
  222. - Add `msecs`
  223. - Add `secs`
  224. - Add `mins`
  225. - Add `hrs`
  226. - Add `yrs`
  227. * deps: on-finished@~2.2.0
  228. 0.10.1 / 2014-10-22
  229. ===================
  230. * deps: on-finished@~2.1.1
  231. - Fix handling of pipelined requests
  232. 0.10.0 / 2014-10-15
  233. ===================
  234. * deps: debug@~2.1.0
  235. - Implement `DEBUG_FD` env variable support
  236. * deps: depd@~1.0.0
  237. * deps: etag@~1.5.0
  238. - Improve string performance
  239. - Slightly improve speed for weak ETags over 1KB
  240. 0.9.3 / 2014-09-24
  241. ==================
  242. * deps: etag@~1.4.0
  243. - Support "fake" stats objects
  244. 0.9.2 / 2014-09-15
  245. ==================
  246. * deps: depd@0.4.5
  247. * deps: etag@~1.3.1
  248. * deps: range-parser@~1.0.2
  249. 0.9.1 / 2014-09-07
  250. ==================
  251. * deps: fresh@0.2.4
  252. 0.9.0 / 2014-09-07
  253. ==================
  254. * Add `lastModified` option
  255. * Use `etag` to generate `ETag` header
  256. * deps: debug@~2.0.0
  257. 0.8.5 / 2014-09-04
  258. ==================
  259. * Fix malicious path detection for empty string path
  260. 0.8.4 / 2014-09-04
  261. ==================
  262. * Fix a path traversal issue when using `root`
  263. 0.8.3 / 2014-08-16
  264. ==================
  265. * deps: destroy@1.0.3
  266. - renamed from dethroy
  267. * deps: on-finished@2.1.0
  268. 0.8.2 / 2014-08-14
  269. ==================
  270. * Work around `fd` leak in Node.js 0.10 for `fs.ReadStream`
  271. * deps: dethroy@1.0.2
  272. 0.8.1 / 2014-08-05
  273. ==================
  274. * Fix `extensions` behavior when file already has extension
  275. 0.8.0 / 2014-08-05
  276. ==================
  277. * Add `extensions` option
  278. 0.7.4 / 2014-08-04
  279. ==================
  280. * Fix serving index files without root dir
  281. 0.7.3 / 2014-07-29
  282. ==================
  283. * Fix incorrect 403 on Windows and Node.js 0.11
  284. 0.7.2 / 2014-07-27
  285. ==================
  286. * deps: depd@0.4.4
  287. - Work-around v8 generating empty stack traces
  288. 0.7.1 / 2014-07-26
  289. ==================
  290. * deps: depd@0.4.3
  291. - Fix exception when global `Error.stackTraceLimit` is too low
  292. 0.7.0 / 2014-07-20
  293. ==================
  294. * Deprecate `hidden` option; use `dotfiles` option
  295. * Add `dotfiles` option
  296. * deps: debug@1.0.4
  297. * deps: depd@0.4.2
  298. - Add `TRACE_DEPRECATION` environment variable
  299. - Remove non-standard grey color from color output
  300. - Support `--no-deprecation` argument
  301. - Support `--trace-deprecation` argument
  302. 0.6.0 / 2014-07-11
  303. ==================
  304. * Deprecate `from` option; use `root` option
  305. * Deprecate `send.etag()` -- use `etag` in `options`
  306. * Deprecate `send.hidden()` -- use `hidden` in `options`
  307. * Deprecate `send.index()` -- use `index` in `options`
  308. * Deprecate `send.maxage()` -- use `maxAge` in `options`
  309. * Deprecate `send.root()` -- use `root` in `options`
  310. * Cap `maxAge` value to 1 year
  311. * deps: debug@1.0.3
  312. - Add support for multiple wildcards in namespaces
  313. 0.5.0 / 2014-06-28
  314. ==================
  315. * Accept string for `maxAge` (converted by `ms`)
  316. * Add `headers` event
  317. * Include link in default redirect response
  318. * Use `EventEmitter.listenerCount` to count listeners
  319. 0.4.3 / 2014-06-11
  320. ==================
  321. * Do not throw un-catchable error on file open race condition
  322. * Use `escape-html` for HTML escaping
  323. * deps: debug@1.0.2
  324. - fix some debugging output colors on node.js 0.8
  325. * deps: finished@1.2.2
  326. * deps: fresh@0.2.2
  327. 0.4.2 / 2014-06-09
  328. ==================
  329. * fix "event emitter leak" warnings
  330. * deps: debug@1.0.1
  331. * deps: finished@1.2.1
  332. 0.4.1 / 2014-06-02
  333. ==================
  334. * Send `max-age` in `Cache-Control` in correct format
  335. 0.4.0 / 2014-05-27
  336. ==================
  337. * Calculate ETag with md5 for reduced collisions
  338. * Fix wrong behavior when index file matches directory
  339. * Ignore stream errors after request ends
  340. - Goodbye `EBADF, read`
  341. * Skip directories in index file search
  342. * deps: debug@0.8.1
  343. 0.3.0 / 2014-04-24
  344. ==================
  345. * Fix sending files with dots without root set
  346. * Coerce option types
  347. * Accept API options in options object
  348. * Set etags to "weak"
  349. * Include file path in etag
  350. * Make "Can't set headers after they are sent." catchable
  351. * Send full entity-body for multi range requests
  352. * Default directory access to 403 when index disabled
  353. * Support multiple index paths
  354. * Support "If-Range" header
  355. * Control whether to generate etags
  356. * deps: mime@1.2.11
  357. 0.2.0 / 2014-01-29
  358. ==================
  359. * update range-parser and fresh
  360. 0.1.4 / 2013-08-11
  361. ==================
  362. * update fresh
  363. 0.1.3 / 2013-07-08
  364. ==================
  365. * Revert "Fix fd leak"
  366. 0.1.2 / 2013-07-03
  367. ==================
  368. * Fix fd leak
  369. 0.1.0 / 2012-08-25
  370. ==================
  371. * add options parameter to send() that is passed to fs.createReadStream() [kanongil]
  372. 0.0.4 / 2012-08-16
  373. ==================
  374. * allow custom "Accept-Ranges" definition
  375. 0.0.3 / 2012-07-16
  376. ==================
  377. * fix normalization of the root directory. Closes #3
  378. 0.0.2 / 2012-07-09
  379. ==================
  380. * add passing of req explicitly for now (YUCK)
  381. 0.0.1 / 2010-01-03
  382. ==================
  383. * Initial release