Merge branch 'master' into master

.travis.yml

@@ -1,8 +1,8 @@
 language: node_js
 node_js:
-  - 4.0.0
   - 6.0.0
   - 7.0.0
   - 8.0.0
   - 10.0.0
+  - 11.0.0
 after_success: npm run coverage

README.md

@@ -259,9 +259,9 @@ Special thanks to all those that use this library and report issues, but especia
 - [@davebaol](https://github.com/davebaol) - Added string support to defaultDuration option (previously just numeric ms)
 - [@Rauttis](https://github.com/rauttis) - Added ioredis support
 
-### Bugfixes, Documentation, etc.
+### Bugfixes, tweaks, documentation, etc.
 
-- @Amhri, @Webcascade, @conmarap, @cjfurelid, @scambier, @lukechilds, @Red-Lv, @gesposito, @viebel, @RowanMeara, @GoingFast, @luin
+- @Amhri, @Webcascade, @conmarap, @cjfurelid, @scambier, @lukechilds, @Red-Lv, @gesposito, @viebel, @RowanMeara, @GoingFast, @luin, @keithws, @daveross, @apascal
 
 ### Changelog
 - **v0.4.0** - dropped lodash and memory-cache external dependencies, and bumped node version requirements to 4.0.0+ to allow Object.assign native support
@@ -293,3 +293,6 @@ Special thanks to all those that use this library and report issues, but especia
 - **v1.2.2** - bugfix: ioredis.expire params (thanks @GoingFast and @luin)
 - **v1.2.3** - add etag to if-none-match 304 support (thanks for the test/issue @svozza)
 - **v1.2.4** - force content type to Buffer, using old and new Buffer creation syntax
+- **v1.2.5** - uses native Node setHeader() rather than express.js header() (thanks @keithws and @daveross)
+- **v1.2.6** - middlewareToggle() now prevents response block on cache hit + falsy toggle (thanks @apascal)
+- **v1.3.0** - [securityfix] apicache headers no longer embedded in cached responses when NODE_ENV === 'production' (thanks for feedback @satya-jugran, @smddzcy, @adamelliotfields).  Updated deps, now requiring Node v6.00+.