5.0.0

What's Changed

• 4.19.2 Staging by @wesleytodd in #5561
• remove duplicate location test for data uri by @wesleytodd in #5562
• feat: document beta releases expectations by @marco-ippolito in #5565
• Cut down on duplicated CI runs by @jonchurch in #5564
• Add a Threat Model by @UlisesGascon in #5526
• Assign captain of encodeurl by @blakeembrey in #5579
• Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in #5587
• docs: update Security.md by @inigomarquinez in #5590
• docs: update triage nomination policy by @UlisesGascon in #5600
• Add CodeQL (SAST) by @UlisesGascon in #5433
• docs: add UlisesGascon as triage initiative captain by @UlisesGascon in #5605
• Use object with null prototype for various app properties by @EvanHahn in #4861
• deps: encodeurl@~2.0.0 by @blakeembrey in #5569
• skip QUERY method test by @jonchurch in #5628
• ignore ETAG query test on 21 and 22, reuse skip util by @jonchurch in #5639
• add support Node.js@22 in the CI by @mertcanaltin in #5627
• doc: add table of contents, tc/triager lists to readme by @mertcanaltin in #5619
• List and sort all projects, add captains by @blakeembrey in #5653
• Call callback once on listen error by @wesleytodd in #3216
• docs: add @UlisesGascon as captain for cookie-parser by @UlisesGascon in #5666
• ✨ bring back query tests for node 21 by @ctcpip in #5690
• [v4] Deprecate res.clearCookie accepting options.maxAge and options.expires by @jonchurch in #5672
• skip QUERY tests for Node 21 only, still not supported by @jonchurch in #5695
• 📝 update people, add ctcpip to TC by @ctcpip in #5683
• remove minor version pinning from ci by @jonchurch in #5722
• Fix link variable use in attribution section of CODE OF CONDUCT by @IamLizu in #5762
• Replace Appveyor windows testing with GHA by @jonchurch in #5599
• Add OSSF Scorecard badge by @UlisesGascon in #5436
• Throw on invalid status codes by @jonchurch in #4212
• Use Array.flat instead of array-flatten by @almic in #5677
• Adopt Node@18 as the minimum supported version by @UlisesGascon in #5803
• Ignore expires and maxAge in res.clearCookie() by @jonchurch in #5792
• send@1.0.0 by @wesleytodd in #5786
• chore: upgrade debug dep from 3.10 to 4.3.6 by @carpasse in #5829
• refactor: replace 'path-is-absolute' dep with node:path isAbsolute method by @carpasse in #5830
• update scorecard link by @bjohansebas in #5814
• Nominate @IamLizu to the triage team by @UlisesGascon in #5836
• deps: path-to-regexp@0.1.8 by @blakeembrey in #5603
• docs: specify new instructions for question and discuss by @IamLizu in #5835
• 5.x: Upgrading merge-descriptors with allowing minors by @RobinTail in #5782
• 4.x: Upgrade merge-descriptors dependency by @RobinTail in #5781
• WIP: serve-static@2 by @wesleytodd in #5790
• chore: upgrade qs dp from 6.11.0 to 6.13.0 by @carpasse in #5847
• Upgrade cookie signature by @IamLizu in #5833
• accepts@2 by @wesleytodd in #5881
• mime-types@3 by @wesleytodd in #5882
• type-is@^2.0.0 by @wesleytodd in #5883
• content-disposition@^1.0.0 by @wesleytodd in #5884
• fix(deps): finalhandler@^2.0.0 by @wesleytodd in #5899
• path-to-regexp@0.1.10 by @blakeembrey in #5902
• update to fresh@^2.0.0 by @jonchurch in #5916
• router@^2.0.0 by @wesleytodd in #5885
• Adopt Node@18 as the minimum supported version by @UlisesGascon in #5595
• master -> 5.0 by @ctcpip in #5785
• 🔧 update CI, remove unsupported versions, clean up by @ctcpip in #5931
• Delete back as a magic string by @blakeembrey in #5933
• Release 5.0 by @dougwilson in #2237

New Contributors

• @marco-ippolito made their first contribution in #5565
• @inigomarquinez made their first contribution in #5590
• @mertcanaltin made their first contribution in #5627
• @ctcpip made their first contribution in #5690
• @IamLizu made their first contribution in #5762
• @almic made their first contribution in #5677
• @carpasse made their first contribution in #5829
• @bjohansebas made their first contribution in #5814
• @RobinTail made their first contribution in #5782

Full Changelog: v5.0.0-beta.3...v5.0.0