Upgrade express: 4.16.3 → 4.17.0 (minor)

[depfu]

Here is everything you need to know about this upgrade. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ express (4.16.3 → 4.17.0) · Repo · Changelog

Release Notes

4.17.0

• Add express.raw to parse bodies into Buffer
• Add express.text to parse bodies into string
• Improve error message for non-strings to res.sendFile
• Improve error message for null/undefined to res.status
• Support multiple hosts in X-Forwarded-Host
• deps: accepts@~1.3.7
• deps: body-parser@1.19.0
  • Add encoding MIK
  • Add petabyte (pb) support
  • Fix parsing array brackets after index
  • deps: bytes@3.1.0
  • deps: http-errors@1.7.2
  • deps: iconv-lite@0.4.24
  • deps: qs@6.7.0
  • deps: raw-body@2.4.0
  • deps: type-is@~1.6.17
• deps: content-disposition@0.5.3
• deps: cookie@0.4.0
  • Add SameSite=None support
• deps: finalhandler@~1.1.2
  • Set stricter Content-Security-Policy header
  • deps: parseurl@~1.3.3
  • deps: statuses@~1.5.0
• deps: parseurl@~1.3.3
• deps: proxy-addr@~2.0.5
  • deps: ipaddr.js@1.9.0
• deps: qs@6.7.0
  • Fix parsing array brackets after index
• deps: range-parser@~1.2.1
• deps: send@0.17.1
  • Set stricter CSP header in redirect & error responses
  • deps: http-errors@~1.7.2
  • deps: mime@1.6.0
  • deps: ms@2.1.1
  • deps: range-parser@~1.2.1
  • deps: statuses@~1.5.0
  • perf: remove redundant path.normalize call
• deps: serve-static@1.14.1
  • Set stricter CSP header in redirect response
  • deps: parseurl@~1.3.3
  • deps: send@0.17.1
• deps: setprototypeof@1.1.1
• deps: statuses@~1.5.0
  • Add 103 Early Hints
• deps: type-is@~1.6.18
  • deps: mime-types@~2.1.24
  • perf: prevent internal throw on invalid type

4.16.4

• Fix issue where "Request aborted" may be logged in res.sendfile
• Fix JSDoc for Router constructor
• deps: body-parser@1.18.3
  • Fix deprecation warnings on Node.js 10+
  • Fix stack trace for strict json parse error
  • deps: depd@~1.1.2
  • deps: http-errors@~1.6.3
  • deps: iconv-lite@0.4.23
  • deps: qs@6.5.2
  • deps: raw-body@2.3.3
  • deps: type-is@~1.6.16
• deps: proxy-addr@~2.0.4
  • deps: ipaddr.js@1.8.0
• deps: qs@6.5.2
• deps: safe-buffer@5.1.2

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 73 commits:

• 4.17.0
• docs: remove Gratipay links
• tests: ignore unreachable line
• build: update example dependencies
• deps: cookie@0.4.0
• build: support Node.js 12.x
• build: test against Node.js 13.x nightly
• build: Node.js@10.15
• deps: range-parser@~1.2.1
• deps: serve-static@1.14.1
• deps: send@0.17.1
• deps: finalhandler@~1.1.2
• build: support Node.js 11.x
• build: Node.js@8.16
• build: Node.js@6.17
• tests: add express.text test suite
• Add express.text to parse bodies into string
• tests: add express.raw test suite
• Add express.raw to parse bodies into Buffer
• deps: serve-static@1.14.0
• deps: send@0.17.0
• tests: add express.static test suite
• tests: add express.urlencoded test suite
• tests: add express.json test suite
• deps: body-parser@1.19.0
• deps: qs@6.7.0
• deps: type-is@~1.6.18
• deps: accepts@~1.3.7
• deps: statuses@~1.5.0
• deps: setprototypeof@1.1.1
• docs: add link to contributing guide
• deps: parseurl@~1.3.3
• deps: proxy-addr@~2.0.5
• deps: content-disposition@0.5.3
• build: marked@0.6.2
• build: hbs@4.0.4
• build: test against Node.js 12.x nightly
• tests: assert calls order in middleware basic tests
• docs: use const in readme example
• tests: fix typos in descriptions
• docs: fix typo in jsdoc comment
• docs: add listening address to example
• examples: minor fixes to some examples
• docs: fix typos in history
• docs: fix typo in contributing
• Support multiple hosts in X-Forwarded-Host
• Improve error message for null/undefined to res.status
• Improve error message for non-strings to res.sendFile
• build: support Node.js 10.x
• build: support Node.js 9.x
• build: test against Node.js 11.x nightly
• build: coveralls@2.12.0
• tests: use supertest to perform assertions
• 4.16.4
• build: update example dependencies
• build: supertest@3.3.0
• build: mocha@5.2.0
• build: restructure CI build steps
• Fix issue where "Request aborted" may be logged in res.sendfile
• deps: safe-buffer@5.1.2
• build: supertest@2.0.0
• deps: proxy-addr@~2.0.4
• deps: body-parser@1.18.3
• deps: qs@6.5.2
• lint: move removed middlewares list to a variable
• Fix JSDoc for Router constructor
• examples: fix typo in multi-router example
• build: update example dependencies
• build: Node.js@8.12
• build: should@13.2.3
• build: Node.js@8.11
• build: Node.js@6.14
• build: Node.js@4.9

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)

[depfu]

Closed in favor of #32.