What's Changed
- fix(secure-headers): output standard empty parentheses () instead of none for disabled Permissions-Policy directives in #5197
- fix(jsx): render async children of document metadata tags instead of [object Promise] in #5204
- fix(etag): resolve incorrect incremental hashing for chunked responses in #5199
- fix(client): serialize multiple cookies correctly in #5202
- fix(etag): stabilize digest across stream chunks in #5205
- fix(url): strip trailing question mark correctly for optional params with regex quantifiers in #5209
- perf(cors): pre-join static array header options during initialization in #5210
- fix(client): send falsy JSON bodies in #5215
- feat(secure-headers): add missing W3C Permissions-Policy directives in #5214
Full Changelog: v4.13.1...v4.13.2