2.4.2

Highlights

🔧 Node.js deprecation

• isFinished(res) now reads writableEnded instead of the deprecated finished property (DEP0136), with a fallback to finished on older Node.js versions. No behavior change for consumers. (#54)

📦 Packaging

• HISTORY.md is no longer shipped in the npm tarball. (#109)
• package.json now declares "type": "commonjs" explicitly. (#108)

🧪 Testing and CI

• Added edge case tests for isFinished with invalid input. (#88)
• Node.js 19 through 26 added to the test matrix. (#53, #106)
• mocha bumped to 12.0.3 and the CI pipeline refreshed. (#103)
• OSSF Scorecard enabled and security best practices applied to the workflows. (#47, #60)
• Dependabot now groups GitHub Actions updates. (#104)

What's Changed

• Update node 8 version and pin nyc. Also added missing 9.x to ci-tests… by @carpasse in #49
• Add OSSF scorecard by @carpasse in #47
• build: Node.js 19+ by @bjohansebas in #53
• ci: apply OSSF Scorecard security best practices by @UlisesGascon in #60
• chore: add funding to package.json by @Phillip9587 in #76
• use writableEnd instead finished by @bjohansebas in #54
• build(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.3 by @dependabot[bot] in #85
• build(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by @dependabot[bot] in #64
• build(deps): bump actions/checkout from 3.6.0 to 5.0.0 by @dependabot[bot] in #84
• build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by @dependabot[bot] in #82
• test: add edge case tests for isFinished with invalid input by @Ayoub-Mabrouk in #88
• build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in #93
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #92
• build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #91
• build(deps): bump github/codeql-action from 2.23.2 to 4.31.6 by @dependabot[bot] in #90
• build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by @dependabot[bot] in #89
• chore: group github actions updates by @Phillip9587 in #104
• bump Mocha to version 12.0.3 by @rafapaezbas in #103
• ci: add Node 25 and 26 to workflow by @Phillip9587 in #106
• build(deps): bump the github-actions group with 10 updates by @dependabot[bot] in #105
• chore: add explicit type commonjs to package.json by @Phillip9587 in #108
• chore: remove HISTORY.md from being packaged on publish by @Phillip9587 in #109
• chore(ci): npm-publish via stage publish by @UlisesGascon in #111
• Release: 2.4.2 by @Phillip9587 in #110

New Contributors

• @carpasse made their first contribution in #49
• @UlisesGascon made their first contribution in #60
• @dependabot[bot] made their first contribution in #85
• @Ayoub-Mabrouk made their first contribution in #88
• @rafapaezbas made their first contribution in #103

Full Changelog: v2.4.1...v2.4.2