Release: 5.0.2

[UlisesGascon]

What's included in the HISTORY.md

• Remove Object.setPrototypeOf polyfill

What's Changed

• Update captains by @UlisesGascon in Update captains #6027
• build: Node.js 23.0 by @bjohansebas in build: Node.js 23.0 #6075
• Add funding field (v5) by @bjohansebas in Add funding field (v5) #6064
• ✅ add discarded middleware test by @ctcpip in ✅ add discarded middleware test #5819
• update homepage link http to https by @bjohansebas in update homepage link http to https #5920
• Improve readme by @bjohansebas in Improve readme #5994
• Add bjohansebas as repo captain for expressjs.com by @crandmck in Add bjohansebas as repo captain for expressjs.com #6058
• Remove Object.setPrototypeOf polyfill by @Phillip9587 in Remove Object.setPrototypeOf polyfill #6081
• fix(buffer): use node:buffer instead of safe-buffer by @bhavya3024 in fix(buffer): use node:buffer instead of safe-buffer #6071
• docs: Add DCO by @UlisesGascon in docs: Add DCO #6048
• cleanup: remove promise support check from tests by @Phillip9587 in cleanup: remove promise support check from tests #6148
• Use loop for acceptParams by @blakeembrey in Use loop for acceptParams #6066
• Improve documentation step in release process by @bjohansebas in Improve documentation step in release process #6150
• cleanup: remove unnecessary require for global Buffer by @Phillip9587 in cleanup: remove unnecessary require for global Buffer #6146
• cleanup: remove AsyncLocalStorage check by @Phillip9587 in cleanup: remove AsyncLocalStorage check #6147
• update history.md for acceptParams change by @jonchurch in update history.md for acceptParams change #6177
• docs: add @rxmarbles to the triage team by @UlisesGascon in docs: add @rxmarbles to the triage team #6151
• refactor: improve readability by @sazk07 in refactor: improve readability #6173
• docs: clarify the security process in the triage role by @bjohansebas in docs: clarify the security process in the triage role #6217
• chore: replace methods dependency with standard library by @jonkoops in chore: replace methods dependency with standard library #6196
• Remove utils-merge dependency - use spread syntax instead by @Phillip9587 in Remove utils-merge dependency - use spread syntax instead #6091
• fix(securite): fix vulnerabilities by @Abdel-Monaam-Aouini in fix(securite): fix vulnerabilities #6211
• refactor: prefix built-in node module imports by @slagiewka in refactor: prefix built-in node module imports #6236
• fix: remove download size badges by @wesleytodd in fix: remove download size badges #6266
• Remove unused depd dependency by @jonkoops in Remove unused depd dependency #6197
• fix: usage of Invalid action input 'persist-credentials' for actions/setup-node@v4 in ci.yml by @hamirmahal in fix: usage of Invalid action input 'persist-credentials' for actions/setup-node@v4 in ci.yml #6256
• Add support for OSSF scorecard reporting by @UlisesGascon in Add support for OSSF scorecard reporting #5431
• docs: add @Phillip9587 to the triage team by @bjohansebas in docs: add @Phillip9587 to the triage team #6276
• fix: added a missing semicolon in css styles in examples/auth by @pr4j3sh in fix: added a missing semicolon in css styles in examples/auth #6297
• docs: include team email in the security policy by @UlisesGascon in docs: include team email in the security policy #6278
• refactor: simplify normalizeTypes function by @Ayoub-Mabrouk in refactor: simplify normalizeTypes function #6097
• ci: updated github actions ci workflow by @Phillip9587 in ci: updated github actions ci workflow #6314
• ci: fix npm install --include typo by @Phillip9587 in ci: fix npm install --include typo #6324
• ci: updated scorecard actions by @Phillip9587 in ci: updated scorecard actions #6322
• build(deps): use carat notation for dependency versions by @dpopp07 in build(deps): use carat notation for dependency versions #6317
• chore(deps): update debug to ^4.4.0 by @Phillip9587 in chore(deps): update debug to ^4.4.0 #6313
• docs: retroactively note 5.0.0-beta.1 api change in history file by @dpopp07 in docs: retroactively note 5.0.0-beta.1 api change in history file #6333
• feat(deps): body-parser@^2.1.0 by @wesleytodd in feat(deps): body-parser@^2.1.0 #6332
• feat(deps): router@^2.1.0 by @wesleytodd in feat(deps): router@^2.1.0 #6331
• Update repo captains by @UlisesGascon in Update repo captains #6234
• deps: upgrade nyc by @agungjati in deps: upgrade nyc #6122
• fix (deps): update deps by @wesleytodd in fix (deps): update deps #6337
• response: add support for ETag option in res.sendFile by @juanarbol in response: add support for ETag option in res.sendFile #6073
• Update multiple links to use https instead of http by @Phillip9587 in Update multiple links to use https instead of http #6338
• Extend res.links() to allow adding multiple links with the same rel Extend res.links() to allow adding multiple links with the same rel #2729 by @andvea in Extend res.links() to allow adding multiple links with the same rel #2729 #4885
• docs: update emeritus triagers by @UlisesGascon in docs: update emeritus triagers #6345
• docs: update guidance for triager nominations by @bjohansebas in docs: update guidance for triager nominations #6349
• docs: clarify guidelines for becoming a committer by @bjohansebas in docs: clarify guidelines for becoming a committer #6364
• Nominate @dpopp07 to the triage team by @UlisesGascon in Nominate @dpopp07 to the triage team #6352
• fix(deps): qs@^6.14.0 by @wesleytodd in fix(deps): qs@^6.14.0 #6374
• Add dependabot by @UlisesGascon in Add dependabot #5435

New Contributors

• @bhavya3024 made their first contribution in fix(buffer): use node:buffer instead of safe-buffer #6071
• @jonkoops made their first contribution in chore: replace methods dependency with standard library #6196
• @Abdel-Monaam-Aouini made their first contribution in fix(securite): fix vulnerabilities #6211
• @slagiewka made their first contribution in refactor: prefix built-in node module imports #6236
• @hamirmahal made their first contribution in fix: usage of Invalid action input 'persist-credentials' for actions/setup-node@v4 in ci.yml #6256
• @pr4j3sh made their first contribution in fix: added a missing semicolon in css styles in examples/auth #6297
• @Ayoub-Mabrouk made their first contribution in refactor: simplify normalizeTypes function #6097
• @dpopp07 made their first contribution in build(deps): use carat notation for dependency versions #6317
• @agungjati made their first contribution in deps: upgrade nyc #6122
• @andvea made their first contribution in Extend res.links() to allow adding multiple links with the same rel #2729 #4885

Full Changelog: 5.0.1...master

[UlisesGascon]

We plan to include a security patch too so this release is on hold now

[kasir-barati]

Hi,

Thanks for all the hard work and dedication, just wanted to let you know that we are all waiting and some even went ahead of ExpressJS, e.g. @types/express has published v5.0.0 :). Any plan on when it will be live?