Release: 2.8.6#390

Merged

UlisesGascon merged 1 commit intomasterfrom

Jan 22, 2026

Member

UlisesGascon commented Jan 22, 2026

cc: @expressjs/express-tc
replace #389

What's included in the HISTORY.md

2.8.6 / 2026-01-22
==================

  * Improve documentation (API, context, examples...)
  * Remove additional markdown files from tarball

What's Changed

Build: Node.js@12.16 and Node.js.13.12 by @smondal in Build: Node.js@12.16 and Node.js.13.12 #189
Update README.md for origin function callback parameters by @dstudzinski in Update README.md for origin function callback parameters #180
Suggest passing false for disallowed domains, not erroring by @shackpank in Suggest passing false for disallowed domains, not erroring #175
Changed the term whitelist to allowlist in Documentation by @jkasun in Changed the term whitelist to allowlist in Documentation #200
Fix typo in README by @alex-grover in Fix typo in README #207
Added new link & website in the README by @manjunath00 in Added new link & website in the README #269
Fix functions call with extra parameter by @LuisEGR in Fix functions call with extra parameter #245
🐛 Fix readme status badge by @homersimpsons in 🐛 Fix readme status badge #306
chore: add support for OSSF scorecard reporting by @inigomarquinez in chore: add support for OSSF scorecard reporting #321
ci: fix errors in ci github action for node 8 by @inigomarquinez in ci: fix errors in ci github action for node 8 #322
test: improved test robustness by @Alex-GF in test: improved test robustness #320
chore: upgrade scorecard workflow pinned action versions by @carpasse in chore: upgrade scorecard workflow pinned action versions #341
ci: add CodeQL (SAST) by @bjohansebas in ci: add CodeQL (SAST) #340
docs: remove broken link to demo site by @dpopp07 in docs: remove broken link to demo site #344
OSSF Scorecard recommendations by @UlisesGascon in OSSF Scorecard recommendations #350
build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 #351
build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @dependabot[bot] in build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 #353
build(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @dependabot[bot] in build(deps): bump actions/checkout from 4.1.1 to 4.2.2 #354
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 by @dependabot[bot] in build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 #355
build(deps-dev): bump express from 4.17.1 to 4.21.2 by @dependabot[bot] in build(deps-dev): bump express from 4.17.1 to 4.21.2 #356
build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by @dependabot[bot] in build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 #352
build(deps-dev): bump mocha from 9.1.1 to 9.2.2 by @dependabot[bot] in build(deps-dev): bump mocha from 9.1.1 to 9.2.2 #358
update the docs for per request config by @jonchurch in update the docs for per request config #338
(fix): readme updated for A question about the type of the origin option value. #271 origin option for * by @dhananjaysa92 in (fix): readme updated for #271 origin option for * #289
ci: upgrade Node versions by @UlisesGascon in ci: upgrade Node versions #359
chore: add funding to package.json by @bjohansebas in chore: add funding to package.json #363
build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 #371
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 #370
docs: Cleanup README by @efekrskl in docs: Cleanup README #374
chore: add node v25 by @imangas in chore: add node v25 #375
Extend CI test matrix by @imangas in Extend CI test matrix #376
docs: simplify code examples with header comments by @jonchurch in docs: simplify code examples with header comments #386
docs: tweak intro, add note w/ browser enforcement, FAQ by @jonchurch in docs: tweak intro, add note w/ browser enforcement, FAQ #385
chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball by @Phillip9587 in chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball #388

New Contributors

@smondal made their first contribution in Build: Node.js@12.16 and Node.js.13.12 #189
@dstudzinski made their first contribution in Update README.md for origin function callback parameters #180
@shackpank made their first contribution in Suggest passing false for disallowed domains, not erroring #175
@jkasun made their first contribution in Changed the term whitelist to allowlist in Documentation #200
@alex-grover made their first contribution in Fix typo in README #207
@manjunath00 made their first contribution in Added new link & website in the README #269
@LuisEGR made their first contribution in Fix functions call with extra parameter #245
@homersimpsons made their first contribution in 🐛 Fix readme status badge #306
@inigomarquinez made their first contribution in chore: add support for OSSF scorecard reporting #321
@Alex-GF made their first contribution in test: improved test robustness #320
@carpasse made their first contribution in chore: upgrade scorecard workflow pinned action versions #341
@bjohansebas made their first contribution in ci: add CodeQL (SAST) #340
@dpopp07 made their first contribution in docs: remove broken link to demo site #344
@UlisesGascon made their first contribution in OSSF Scorecard recommendations #350
@dependabot[bot] made their first contribution in build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 #351
@jonchurch made their first contribution in update the docs for per request config #338
@dhananjaysa92 made their first contribution in (fix): readme updated for #271 origin option for * #289
@efekrskl made their first contribution in docs: Cleanup README #374
@imangas made their first contribution in chore: add node v25 #375
@Phillip9587 made their first contribution in chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball #388

Full Changelog: v2.8.5...master


          2.8.6

3a9e1a4

UlisesGascon self-assigned this

UlisesGascon requested review from Phillip9587, bjohansebas, efekrskl and jonchurch

January 22, 2026 13:45

efekrskl approved these changes

View reviewed changes

sheplu approved these changes

View reviewed changes

Member

sheplu left a comment

LGTM

UlisesGascon merged commit f00a8c1 into master

117 checks passed

UlisesGascon deleted the release/2.8.6 branch

January 22, 2026 14:36

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

sheplu sheplu approved these changes

jonchurch Awaiting requested review from jonchurch

Phillip9587 Awaiting requested review from Phillip9587

bjohansebas Awaiting requested review from bjohansebas

+1 more reviewer

efekrskl efekrskl approved these changes

Labels

None yet