Release: 2.8.6#389

Closed

UlisesGascon wants to merge 1 commit intomasterfrom

Member

UlisesGascon commented Jan 19, 2026

cc: @expressjs/express-tc

What's included in the HISTORY.md

2.9.0 / 2026-01-22
==================

  * Improve documentation (API, context, examples...)
  * Remove additional markdown files from tarball

What's Changed

Build: Node.js@12.16 and Node.js.13.12 by @smondal in Build: Node.js@12.16 and Node.js.13.12 #189
Update README.md for origin function callback parameters by @dstudzinski in Update README.md for origin function callback parameters #180
Suggest passing false for disallowed domains, not erroring by @shackpank in Suggest passing false for disallowed domains, not erroring #175
Changed the term whitelist to allowlist in Documentation by @jkasun in Changed the term whitelist to allowlist in Documentation #200
Fix typo in README by @alex-grover in Fix typo in README #207
Added new link & website in the README by @manjunath00 in Added new link & website in the README #269
Fix functions call with extra parameter by @LuisEGR in Fix functions call with extra parameter #245
🐛 Fix readme status badge by @homersimpsons in 🐛 Fix readme status badge #306
chore: add support for OSSF scorecard reporting by @inigomarquinez in chore: add support for OSSF scorecard reporting #321
ci: fix errors in ci github action for node 8 by @inigomarquinez in ci: fix errors in ci github action for node 8 #322
test: improved test robustness by @Alex-GF in test: improved test robustness #320
chore: upgrade scorecard workflow pinned action versions by @carpasse in chore: upgrade scorecard workflow pinned action versions #341
ci: add CodeQL (SAST) by @bjohansebas in ci: add CodeQL (SAST) #340
docs: remove broken link to demo site by @dpopp07 in docs: remove broken link to demo site #344
OSSF Scorecard recommendations by @UlisesGascon in OSSF Scorecard recommendations #350
build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 #351
build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @dependabot[bot] in build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 #353
build(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @dependabot[bot] in build(deps): bump actions/checkout from 4.1.1 to 4.2.2 #354
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 by @dependabot[bot] in build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 #355
build(deps-dev): bump express from 4.17.1 to 4.21.2 by @dependabot[bot] in build(deps-dev): bump express from 4.17.1 to 4.21.2 #356
build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by @dependabot[bot] in build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 #352
build(deps-dev): bump mocha from 9.1.1 to 9.2.2 by @dependabot[bot] in build(deps-dev): bump mocha from 9.1.1 to 9.2.2 #358
update the docs for per request config by @jonchurch in update the docs for per request config #338
(fix): readme updated for A question about the type of the origin option value. #271 origin option for * by @dhananjaysa92 in (fix): readme updated for #271 origin option for * #289
ci: upgrade Node versions by @UlisesGascon in ci: upgrade Node versions #359
chore: add funding to package.json by @bjohansebas in chore: add funding to package.json #363
build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 #371
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 #370
docs: Cleanup README by @efekrskl in docs: Cleanup README #374
chore: add node v25 by @imangas in chore: add node v25 #375
Extend CI test matrix by @imangas in Extend CI test matrix #376
docs: simplify code examples with header comments by @jonchurch in docs: simplify code examples with header comments #386
docs: tweak intro, add note w/ browser enforcement, FAQ by @jonchurch in docs: tweak intro, add note w/ browser enforcement, FAQ #385
chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball by @Phillip9587 in chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball #388

New Contributors

@smondal made their first contribution in Build: Node.js@12.16 and Node.js.13.12 #189
@dstudzinski made their first contribution in Update README.md for origin function callback parameters #180
@shackpank made their first contribution in Suggest passing false for disallowed domains, not erroring #175
@jkasun made their first contribution in Changed the term whitelist to allowlist in Documentation #200
@alex-grover made their first contribution in Fix typo in README #207
@manjunath00 made their first contribution in Added new link & website in the README #269
@LuisEGR made their first contribution in Fix functions call with extra parameter #245
@homersimpsons made their first contribution in 🐛 Fix readme status badge #306
@inigomarquinez made their first contribution in chore: add support for OSSF scorecard reporting #321
@Alex-GF made their first contribution in test: improved test robustness #320
@carpasse made their first contribution in chore: upgrade scorecard workflow pinned action versions #341
@bjohansebas made their first contribution in ci: add CodeQL (SAST) #340
@dpopp07 made their first contribution in docs: remove broken link to demo site #344
@UlisesGascon made their first contribution in OSSF Scorecard recommendations #350
@dependabot[bot] made their first contribution in build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 #351
@jonchurch made their first contribution in update the docs for per request config #338
@dhananjaysa92 made their first contribution in (fix): readme updated for #271 origin option for * #289
@efekrskl made their first contribution in docs: Cleanup README #374
@imangas made their first contribution in chore: add node v25 #375
@Phillip9587 made their first contribution in chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball #388

Full Changelog: v2.8.5...master

UlisesGascon self-assigned this

bjohansebas approved these changes

View reviewed changes

Phillip9587 approved these changes

View reviewed changes

efekrskl approved these changes

View reviewed changes

Member

jonchurch commented Jan 19, 2026

Why a minor instead of a patch? There doesnt seem to be any functionality changes

Member

bjohansebas commented Jan 19, 2026

I reviewed what had changed, but I didn’t check whether it was a patch or a minor. That said, I agree it should be a patch.


          2.8.6

3a9e1a4

UlisesGascon force-pushed the release/2.9.0 branch from 4edbf4f to 3a9e1a4 Compare

January 22, 2026 13:42

UlisesGascon changed the title ~~Release: 2.9.0~~ Release: 2.8.6

UlisesGascon closed this

UlisesGascon deleted the release/2.9.0 branch

January 22, 2026 13:43

Member Author

UlisesGascon commented Jan 22, 2026

I renamed the branch and the PR got closed 😮‍💨... I will recreate it

UlisesGascon mentioned this pull request

Release: 2.8.6 #390

Merged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet