v4.0.0-beta.1

compare changes

🚀 Enhancements

• Add unflatten handler (#248)
• server: Add parseURL option to customize URL parsing (#320)
• server: Answer etag revalidation before image processing (52d0000)
• server: Send X-Content-Type-Options: nosniff header (85290d9)
• handlers: Add opacity and the missing sharp operation modifiers (#322)
• http: Support opt-in blockPrivateIPs (f23c374)
• fs: ⚠️ Reject symlinks resolving outside the served dir (488fcf5)

🩹 Fixes

• handlers: Parse all modulate args and add lightness (#317)
• Use svg pass-thru when requested format is svg (#262)
• Add extendWith arg to extend modifier (#315)
• ⚠️ Always sanitize svg sources (#319)
• handlers: Validate all modifier arguments (#321)
• handlers: Clamp output dimensions with maxOutputDimension option (013c144)
• storage/http: Return 400 for unparseable ids instead of 500 (aeaae5b)
• storage/http: ⚠️ Only follow redirects within the domain allowlist (97e6eb7)
• ipx: Compare handler order numerically when sorting (9446f68)
• handlers: Apply maxOutputDimension to extend after a resize (5606f0f)
• fs: Dir fall-through and maxAge handling (933b0d6)
• fs: Accept non-JSON env values and guard process access (725a63c)

💅 Refactors

• Use node:path (c73f3c1)

📖 Documentation

• Add samples (5204d9c)

📦 Build

• Add engines field to package.json (c7227fb)

🤖 CI

• Run tests on macos and windows too (8ddca9b)

❤️ Contributors

• Pooya Parsa (@pi0)
• Damian Głowala (@DamianGlowala])
• Simon Garner (@sgarner)
• Nathan Chase (@nathanchase)

v4.0.0-alpha.2

compare changes

🩹 Fixes

• handlers: Preserve non-JSON string modifier values in VArg (#290)

🏡 Chore

• Update sharp and other deps (ef6973d)

❤️ Contributors

• Alexander Synaptic (@xsynaptic)

v4.0.0-alpha.1

compare changes

IPX v4 is now ESM-only and comes with significant dependency size reductions (v3 vs v4 alpha).

Internal H3 has been upgraded to v2, bringing native Web API compatibility and the new srvx layer for native performance with Node.js support.

Migration

• The server creation APIs have changed. See the Programmatic API section for examples.
• The JSON error format has changed from { error: string } to { status, statusText, message }.
• The svgo option is now svg.optimize. SVG images are always sanitized, even when optimization is disabled.
• SVG optimization now applies SVGO's preset-default unless custom plugins are configured (previously only the configured plugins ran), so SVG output is restructured more than before. See the SVG Images section.

v3.1.1

compare changes

🩹 Fixes

• fs: Ensure path stays within the exact directory (#271)

v2.1.1

compare changes

🩹 Fixes

• fs: Ensure path stays within the exact directory (#271, 81b86b1)

v1.3.2

compare changes

🩹 Fixes

• fs: Ensure path stays within the exact directory (#271, 94627ef)

v3.1.0

compare changes

📦 Dependencies

• Upgrade to svgo@4.0 (#231)
• Upgrade to sharp@0.34 (notes)
• Upgrade to unstorage@1.16

✅ Tests

• Increase coverage (#260)

❤️ Contributors

• Pooya Parsa (@pi0)
• Kanon (@ysknsid25)
• Maxime Pauvert (@maximepvrt)
• Seth Falco (@SethFalco)

v3.0.3

compare changes

🩹 Fixes

• Correctly handle format_auto,animated (#235)

📖 Documentation

• Added jsdocs to exported functions and types (#222)

❤️ Contributors

• Max (@onmax)
• James Wragg james.wragg@madgex.com

v3.0.1

compare changes

🩹 Fixes

• http: Properly respect ignoreCacheControl option (96a8489)

🏡 Chore

• Update lockfile (6b132ab)

❤️ Contributors

• Pooya Parsa (@pi0)

v3.0.0

IPX v3 is upgraded with sharp ^0.33 with major installation enhancements. See lovell/sharp#3750 for more info.