136e62896b16c7a8c872a4076abde40e11be89d48adc8a15d864aca4215250af9f763485a5df8a8eba8b716db3fc58dff840cca4f3ec89ed8e35c40ce7bf6e 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672
  1. 1.20.3 / 2024-09-10
  2. ===================
  3. * deps: qs@6.13.0
  4. * add `depth` option to customize the depth level in the parser
  5. * IMPORTANT: The default `depth` level for parsing URL-encoded data is now `32` (previously was `Infinity`)
  6. 1.20.2 / 2023-02-21
  7. ===================
  8. * Fix strict json error message on Node.js 19+
  9. * deps: content-type@~1.0.5
  10. - perf: skip value escaping when unnecessary
  11. * deps: raw-body@2.5.2
  12. 1.20.1 / 2022-10-06
  13. ===================
  14. * deps: qs@6.11.0
  15. * perf: remove unnecessary object clone
  16. 1.20.0 / 2022-04-02
  17. ===================
  18. * Fix error message for json parse whitespace in `strict`
  19. * Fix internal error when inflated body exceeds limit
  20. * Prevent loss of async hooks context
  21. * Prevent hanging when request already read
  22. * deps: depd@2.0.0
  23. - Replace internal `eval` usage with `Function` constructor
  24. - Use instance methods on `process` to check for listeners
  25. * deps: http-errors@2.0.0
  26. - deps: depd@2.0.0
  27. - deps: statuses@2.0.1
  28. * deps: on-finished@2.4.1
  29. * deps: qs@6.10.3
  30. * deps: raw-body@2.5.1
  31. - deps: http-errors@2.0.0
  32. 1.19.2 / 2022-02-15
  33. ===================
  34. * deps: bytes@3.1.2
  35. * deps: qs@6.9.7
  36. * Fix handling of `__proto__` keys
  37. * deps: raw-body@2.4.3
  38. - deps: bytes@3.1.2
  39. 1.19.1 / 2021-12-10
  40. ===================
  41. * deps: bytes@3.1.1
  42. * deps: http-errors@1.8.1
  43. - deps: inherits@2.0.4
  44. - deps: toidentifier@1.0.1
  45. - deps: setprototypeof@1.2.0
  46. * deps: qs@6.9.6
  47. * deps: raw-body@2.4.2
  48. - deps: bytes@3.1.1
  49. - deps: http-errors@1.8.1
  50. * deps: safe-buffer@5.2.1
  51. * deps: type-is@~1.6.18
  52. 1.19.0 / 2019-04-25
  53. ===================
  54. * deps: bytes@3.1.0
  55. - Add petabyte (`pb`) support
  56. * deps: http-errors@1.7.2
  57. - Set constructor name when possible
  58. - deps: setprototypeof@1.1.1
  59. - deps: statuses@'>= 1.5.0 < 2'
  60. * deps: iconv-lite@0.4.24
  61. - Added encoding MIK
  62. * deps: qs@6.7.0
  63. - Fix parsing array brackets after index
  64. * deps: raw-body@2.4.0
  65. - deps: bytes@3.1.0
  66. - deps: http-errors@1.7.2
  67. - deps: iconv-lite@0.4.24
  68. * deps: type-is@~1.6.17
  69. - deps: mime-types@~2.1.24
  70. - perf: prevent internal `throw` on invalid type
  71. 1.18.3 / 2018-05-14
  72. ===================
  73. * Fix stack trace for strict json parse error
  74. * deps: depd@~1.1.2
  75. - perf: remove argument reassignment
  76. * deps: http-errors@~1.6.3
  77. - deps: depd@~1.1.2
  78. - deps: setprototypeof@1.1.0
  79. - deps: statuses@'>= 1.3.1 < 2'
  80. * deps: iconv-lite@0.4.23
  81. - Fix loading encoding with year appended
  82. - Fix deprecation warnings on Node.js 10+
  83. * deps: qs@6.5.2
  84. * deps: raw-body@2.3.3
  85. - deps: http-errors@1.6.3
  86. - deps: iconv-lite@0.4.23
  87. * deps: type-is@~1.6.16
  88. - deps: mime-types@~2.1.18
  89. 1.18.2 / 2017-09-22
  90. ===================
  91. * deps: debug@2.6.9
  92. * perf: remove argument reassignment
  93. 1.18.1 / 2017-09-12
  94. ===================
  95. * deps: content-type@~1.0.4
  96. - perf: remove argument reassignment
  97. - perf: skip parameter parsing when no parameters
  98. * deps: iconv-lite@0.4.19
  99. - Fix ISO-8859-1 regression
  100. - Update Windows-1255
  101. * deps: qs@6.5.1
  102. - Fix parsing & compacting very deep objects
  103. * deps: raw-body@2.3.2
  104. - deps: iconv-lite@0.4.19
  105. 1.18.0 / 2017-09-08
  106. ===================
  107. * Fix JSON strict violation error to match native parse error
  108. * Include the `body` property on verify errors
  109. * Include the `type` property on all generated errors
  110. * Use `http-errors` to set status code on errors
  111. * deps: bytes@3.0.0
  112. * deps: debug@2.6.8
  113. * deps: depd@~1.1.1
  114. - Remove unnecessary `Buffer` loading
  115. * deps: http-errors@~1.6.2
  116. - deps: depd@1.1.1
  117. * deps: iconv-lite@0.4.18
  118. - Add support for React Native
  119. - Add a warning if not loaded as utf-8
  120. - Fix CESU-8 decoding in Node.js 8
  121. - Improve speed of ISO-8859-1 encoding
  122. * deps: qs@6.5.0
  123. * deps: raw-body@2.3.1
  124. - Use `http-errors` for standard emitted errors
  125. - deps: bytes@3.0.0
  126. - deps: iconv-lite@0.4.18
  127. - perf: skip buffer decoding on overage chunk
  128. * perf: prevent internal `throw` when missing charset
  129. 1.17.2 / 2017-05-17
  130. ===================
  131. * deps: debug@2.6.7
  132. - Fix `DEBUG_MAX_ARRAY_LENGTH`
  133. - deps: ms@2.0.0
  134. * deps: type-is@~1.6.15
  135. - deps: mime-types@~2.1.15
  136. 1.17.1 / 2017-03-06
  137. ===================
  138. * deps: qs@6.4.0
  139. - Fix regression parsing keys starting with `[`
  140. 1.17.0 / 2017-03-01
  141. ===================
  142. * deps: http-errors@~1.6.1
  143. - Make `message` property enumerable for `HttpError`s
  144. - deps: setprototypeof@1.0.3
  145. * deps: qs@6.3.1
  146. - Fix compacting nested arrays
  147. 1.16.1 / 2017-02-10
  148. ===================
  149. * deps: debug@2.6.1
  150. - Fix deprecation messages in WebStorm and other editors
  151. - Undeprecate `DEBUG_FD` set to `1` or `2`
  152. 1.16.0 / 2017-01-17
  153. ===================
  154. * deps: debug@2.6.0
  155. - Allow colors in workers
  156. - Deprecated `DEBUG_FD` environment variable
  157. - Fix error when running under React Native
  158. - Use same color for same namespace
  159. - deps: ms@0.7.2
  160. * deps: http-errors@~1.5.1
  161. - deps: inherits@2.0.3
  162. - deps: setprototypeof@1.0.2
  163. - deps: statuses@'>= 1.3.1 < 2'
  164. * deps: iconv-lite@0.4.15
  165. - Added encoding MS-31J
  166. - Added encoding MS-932
  167. - Added encoding MS-936
  168. - Added encoding MS-949
  169. - Added encoding MS-950
  170. - Fix GBK/GB18030 handling of Euro character
  171. * deps: qs@6.2.1
  172. - Fix array parsing from skipping empty values
  173. * deps: raw-body@~2.2.0
  174. - deps: iconv-lite@0.4.15
  175. * deps: type-is@~1.6.14
  176. - deps: mime-types@~2.1.13
  177. 1.15.2 / 2016-06-19
  178. ===================
  179. * deps: bytes@2.4.0
  180. * deps: content-type@~1.0.2
  181. - perf: enable strict mode
  182. * deps: http-errors@~1.5.0
  183. - Use `setprototypeof` module to replace `__proto__` setting
  184. - deps: statuses@'>= 1.3.0 < 2'
  185. - perf: enable strict mode
  186. * deps: qs@6.2.0
  187. * deps: raw-body@~2.1.7
  188. - deps: bytes@2.4.0
  189. - perf: remove double-cleanup on happy path
  190. * deps: type-is@~1.6.13
  191. - deps: mime-types@~2.1.11
  192. 1.15.1 / 2016-05-05
  193. ===================
  194. * deps: bytes@2.3.0
  195. - Drop partial bytes on all parsed units
  196. - Fix parsing byte string that looks like hex
  197. * deps: raw-body@~2.1.6
  198. - deps: bytes@2.3.0
  199. * deps: type-is@~1.6.12
  200. - deps: mime-types@~2.1.10
  201. 1.15.0 / 2016-02-10
  202. ===================
  203. * deps: http-errors@~1.4.0
  204. - Add `HttpError` export, for `err instanceof createError.HttpError`
  205. - deps: inherits@2.0.1
  206. - deps: statuses@'>= 1.2.1 < 2'
  207. * deps: qs@6.1.0
  208. * deps: type-is@~1.6.11
  209. - deps: mime-types@~2.1.9
  210. 1.14.2 / 2015-12-16
  211. ===================
  212. * deps: bytes@2.2.0
  213. * deps: iconv-lite@0.4.13
  214. * deps: qs@5.2.0
  215. * deps: raw-body@~2.1.5
  216. - deps: bytes@2.2.0
  217. - deps: iconv-lite@0.4.13
  218. * deps: type-is@~1.6.10
  219. - deps: mime-types@~2.1.8
  220. 1.14.1 / 2015-09-27
  221. ===================
  222. * Fix issue where invalid charset results in 400 when `verify` used
  223. * deps: iconv-lite@0.4.12
  224. - Fix CESU-8 decoding in Node.js 4.x
  225. * deps: raw-body@~2.1.4
  226. - Fix masking critical errors from `iconv-lite`
  227. - deps: iconv-lite@0.4.12
  228. * deps: type-is@~1.6.9
  229. - deps: mime-types@~2.1.7
  230. 1.14.0 / 2015-09-16
  231. ===================
  232. * Fix JSON strict parse error to match syntax errors
  233. * Provide static `require` analysis in `urlencoded` parser
  234. * deps: depd@~1.1.0
  235. - Support web browser loading
  236. * deps: qs@5.1.0
  237. * deps: raw-body@~2.1.3
  238. - Fix sync callback when attaching data listener causes sync read
  239. * deps: type-is@~1.6.8
  240. - Fix type error when given invalid type to match against
  241. - deps: mime-types@~2.1.6
  242. 1.13.3 / 2015-07-31
  243. ===================
  244. * deps: type-is@~1.6.6
  245. - deps: mime-types@~2.1.4
  246. 1.13.2 / 2015-07-05
  247. ===================
  248. * deps: iconv-lite@0.4.11
  249. * deps: qs@4.0.0
  250. - Fix dropping parameters like `hasOwnProperty`
  251. - Fix user-visible incompatibilities from 3.1.0
  252. - Fix various parsing edge cases
  253. * deps: raw-body@~2.1.2
  254. - Fix error stack traces to skip `makeError`
  255. - deps: iconv-lite@0.4.11
  256. * deps: type-is@~1.6.4
  257. - deps: mime-types@~2.1.2
  258. - perf: enable strict mode
  259. - perf: remove argument reassignment
  260. 1.13.1 / 2015-06-16
  261. ===================
  262. * deps: qs@2.4.2
  263. - Downgraded from 3.1.0 because of user-visible incompatibilities
  264. 1.13.0 / 2015-06-14
  265. ===================
  266. * Add `statusCode` property on `Error`s, in addition to `status`
  267. * Change `type` default to `application/json` for JSON parser
  268. * Change `type` default to `application/x-www-form-urlencoded` for urlencoded parser
  269. * Provide static `require` analysis
  270. * Use the `http-errors` module to generate errors
  271. * deps: bytes@2.1.0
  272. - Slight optimizations
  273. * deps: iconv-lite@0.4.10
  274. - The encoding UTF-16 without BOM now defaults to UTF-16LE when detection fails
  275. - Leading BOM is now removed when decoding
  276. * deps: on-finished@~2.3.0
  277. - Add defined behavior for HTTP `CONNECT` requests
  278. - Add defined behavior for HTTP `Upgrade` requests
  279. - deps: ee-first@1.1.1
  280. * deps: qs@3.1.0
  281. - Fix dropping parameters like `hasOwnProperty`
  282. - Fix various parsing edge cases
  283. - Parsed object now has `null` prototype
  284. * deps: raw-body@~2.1.1
  285. - Use `unpipe` module for unpiping requests
  286. - deps: iconv-lite@0.4.10
  287. * deps: type-is@~1.6.3
  288. - deps: mime-types@~2.1.1
  289. - perf: reduce try block size
  290. - perf: remove bitwise operations
  291. * perf: enable strict mode
  292. * perf: remove argument reassignment
  293. * perf: remove delete call
  294. 1.12.4 / 2015-05-10
  295. ===================
  296. * deps: debug@~2.2.0
  297. * deps: qs@2.4.2
  298. - Fix allowing parameters like `constructor`
  299. * deps: on-finished@~2.2.1
  300. * deps: raw-body@~2.0.1
  301. - Fix a false-positive when unpiping in Node.js 0.8
  302. - deps: bytes@2.0.1
  303. * deps: type-is@~1.6.2
  304. - deps: mime-types@~2.0.11
  305. 1.12.3 / 2015-04-15
  306. ===================
  307. * Slight efficiency improvement when not debugging
  308. * deps: depd@~1.0.1
  309. * deps: iconv-lite@0.4.8
  310. - Add encoding alias UNICODE-1-1-UTF-7
  311. * deps: raw-body@1.3.4
  312. - Fix hanging callback if request aborts during read
  313. - deps: iconv-lite@0.4.8
  314. 1.12.2 / 2015-03-16
  315. ===================
  316. * deps: qs@2.4.1
  317. - Fix error when parameter `hasOwnProperty` is present
  318. 1.12.1 / 2015-03-15
  319. ===================
  320. * deps: debug@~2.1.3
  321. - Fix high intensity foreground color for bold
  322. - deps: ms@0.7.0
  323. * deps: type-is@~1.6.1
  324. - deps: mime-types@~2.0.10
  325. 1.12.0 / 2015-02-13
  326. ===================
  327. * add `debug` messages
  328. * accept a function for the `type` option
  329. * use `content-type` to parse `Content-Type` headers
  330. * deps: iconv-lite@0.4.7
  331. - Gracefully support enumerables on `Object.prototype`
  332. * deps: raw-body@1.3.3
  333. - deps: iconv-lite@0.4.7
  334. * deps: type-is@~1.6.0
  335. - fix argument reassignment
  336. - fix false-positives in `hasBody` `Transfer-Encoding` check
  337. - support wildcard for both type and subtype (`*/*`)
  338. - deps: mime-types@~2.0.9
  339. 1.11.0 / 2015-01-30
  340. ===================
  341. * make internal `extended: true` depth limit infinity
  342. * deps: type-is@~1.5.6
  343. - deps: mime-types@~2.0.8
  344. 1.10.2 / 2015-01-20
  345. ===================
  346. * deps: iconv-lite@0.4.6
  347. - Fix rare aliases of single-byte encodings
  348. * deps: raw-body@1.3.2
  349. - deps: iconv-lite@0.4.6
  350. 1.10.1 / 2015-01-01
  351. ===================
  352. * deps: on-finished@~2.2.0
  353. * deps: type-is@~1.5.5
  354. - deps: mime-types@~2.0.7
  355. 1.10.0 / 2014-12-02
  356. ===================
  357. * make internal `extended: true` array limit dynamic
  358. 1.9.3 / 2014-11-21
  359. ==================
  360. * deps: iconv-lite@0.4.5
  361. - Fix Windows-31J and X-SJIS encoding support
  362. * deps: qs@2.3.3
  363. - Fix `arrayLimit` behavior
  364. * deps: raw-body@1.3.1
  365. - deps: iconv-lite@0.4.5
  366. * deps: type-is@~1.5.3
  367. - deps: mime-types@~2.0.3
  368. 1.9.2 / 2014-10-27
  369. ==================
  370. * deps: qs@2.3.2
  371. - Fix parsing of mixed objects and values
  372. 1.9.1 / 2014-10-22
  373. ==================
  374. * deps: on-finished@~2.1.1
  375. - Fix handling of pipelined requests
  376. * deps: qs@2.3.0
  377. - Fix parsing of mixed implicit and explicit arrays
  378. * deps: type-is@~1.5.2
  379. - deps: mime-types@~2.0.2
  380. 1.9.0 / 2014-09-24
  381. ==================
  382. * include the charset in "unsupported charset" error message
  383. * include the encoding in "unsupported content encoding" error message
  384. * deps: depd@~1.0.0
  385. 1.8.4 / 2014-09-23
  386. ==================
  387. * fix content encoding to be case-insensitive
  388. 1.8.3 / 2014-09-19
  389. ==================
  390. * deps: qs@2.2.4
  391. - Fix issue with object keys starting with numbers truncated
  392. 1.8.2 / 2014-09-15
  393. ==================
  394. * deps: depd@0.4.5
  395. 1.8.1 / 2014-09-07
  396. ==================
  397. * deps: media-typer@0.3.0
  398. * deps: type-is@~1.5.1
  399. 1.8.0 / 2014-09-05
  400. ==================
  401. * make empty-body-handling consistent between chunked requests
  402. - empty `json` produces `{}`
  403. - empty `raw` produces `new Buffer(0)`
  404. - empty `text` produces `''`
  405. - empty `urlencoded` produces `{}`
  406. * deps: qs@2.2.3
  407. - Fix issue where first empty value in array is discarded
  408. * deps: type-is@~1.5.0
  409. - fix `hasbody` to be true for `content-length: 0`
  410. 1.7.0 / 2014-09-01
  411. ==================
  412. * add `parameterLimit` option to `urlencoded` parser
  413. * change `urlencoded` extended array limit to 100
  414. * respond with 413 when over `parameterLimit` in `urlencoded`
  415. 1.6.7 / 2014-08-29
  416. ==================
  417. * deps: qs@2.2.2
  418. - Remove unnecessary cloning
  419. 1.6.6 / 2014-08-27
  420. ==================
  421. * deps: qs@2.2.0
  422. - Array parsing fix
  423. - Performance improvements
  424. 1.6.5 / 2014-08-16
  425. ==================
  426. * deps: on-finished@2.1.0
  427. 1.6.4 / 2014-08-14
  428. ==================
  429. * deps: qs@1.2.2
  430. 1.6.3 / 2014-08-10
  431. ==================
  432. * deps: qs@1.2.1
  433. 1.6.2 / 2014-08-07
  434. ==================
  435. * deps: qs@1.2.0
  436. - Fix parsing array of objects
  437. 1.6.1 / 2014-08-06
  438. ==================
  439. * deps: qs@1.1.0
  440. - Accept urlencoded square brackets
  441. - Accept empty values in implicit array notation
  442. 1.6.0 / 2014-08-05
  443. ==================
  444. * deps: qs@1.0.2
  445. - Complete rewrite
  446. - Limits array length to 20
  447. - Limits object depth to 5
  448. - Limits parameters to 1,000
  449. 1.5.2 / 2014-07-27
  450. ==================
  451. * deps: depd@0.4.4
  452. - Work-around v8 generating empty stack traces
  453. 1.5.1 / 2014-07-26
  454. ==================
  455. * deps: depd@0.4.3
  456. - Fix exception when global `Error.stackTraceLimit` is too low
  457. 1.5.0 / 2014-07-20
  458. ==================
  459. * deps: depd@0.4.2
  460. - Add `TRACE_DEPRECATION` environment variable
  461. - Remove non-standard grey color from color output
  462. - Support `--no-deprecation` argument
  463. - Support `--trace-deprecation` argument
  464. * deps: iconv-lite@0.4.4
  465. - Added encoding UTF-7
  466. * deps: raw-body@1.3.0
  467. - deps: iconv-lite@0.4.4
  468. - Added encoding UTF-7
  469. - Fix `Cannot switch to old mode now` error on Node.js 0.10+
  470. * deps: type-is@~1.3.2
  471. 1.4.3 / 2014-06-19
  472. ==================
  473. * deps: type-is@1.3.1
  474. - fix global variable leak
  475. 1.4.2 / 2014-06-19
  476. ==================
  477. * deps: type-is@1.3.0
  478. - improve type parsing
  479. 1.4.1 / 2014-06-19
  480. ==================
  481. * fix urlencoded extended deprecation message
  482. 1.4.0 / 2014-06-19
  483. ==================
  484. * add `text` parser
  485. * add `raw` parser
  486. * check accepted charset in content-type (accepts utf-8)
  487. * check accepted encoding in content-encoding (accepts identity)
  488. * deprecate `bodyParser()` middleware; use `.json()` and `.urlencoded()` as needed
  489. * deprecate `urlencoded()` without provided `extended` option
  490. * lazy-load urlencoded parsers
  491. * parsers split into files for reduced mem usage
  492. * support gzip and deflate bodies
  493. - set `inflate: false` to turn off
  494. * deps: raw-body@1.2.2
  495. - Support all encodings from `iconv-lite`
  496. 1.3.1 / 2014-06-11
  497. ==================
  498. * deps: type-is@1.2.1
  499. - Switch dependency from mime to mime-types@1.0.0
  500. 1.3.0 / 2014-05-31
  501. ==================
  502. * add `extended` option to urlencoded parser
  503. 1.2.2 / 2014-05-27
  504. ==================
  505. * deps: raw-body@1.1.6
  506. - assert stream encoding on node.js 0.8
  507. - assert stream encoding on node.js < 0.10.6
  508. - deps: bytes@1
  509. 1.2.1 / 2014-05-26
  510. ==================
  511. * invoke `next(err)` after request fully read
  512. - prevents hung responses and socket hang ups
  513. 1.2.0 / 2014-05-11
  514. ==================
  515. * add `verify` option
  516. * deps: type-is@1.2.0
  517. - support suffix matching
  518. 1.1.2 / 2014-05-11
  519. ==================
  520. * improve json parser speed
  521. 1.1.1 / 2014-05-11
  522. ==================
  523. * fix repeated limit parsing with every request
  524. 1.1.0 / 2014-05-10
  525. ==================
  526. * add `type` option
  527. * deps: pin for safety and consistency
  528. 1.0.2 / 2014-04-14
  529. ==================
  530. * use `type-is` module
  531. 1.0.1 / 2014-03-20
  532. ==================
  533. * lower default limits to 100kb