negotiator
1.1.0 · 20 Aug 2026MIT298.1M / weekRepositoryHomepagenpmAtom feed
Upgrading negotiator From 0.4.4 to 0.6.4
14 releases in betweennotes for 11
Counted from 11 of 14 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking0.6.0
- breaking0.6.0
Security
Fixes 1 advisory affecting 0.4.4
- Regular Expression Denial of Service in negotiatorhigh · GHSA-7mc5-chhp-fmc3
Release by release
- new
Added an option preferred encodings array (#59) 8f58d74
- new
0.6.3nothing new or fixed in the note
- fixed
Fix sorting charset, encoding, and language with extra parameters
- fixed
- new
Improve
Acceptparsing speed - new
Improve
Accept-Charsetparsing speed - new
Improve
Accept-Encodingparsing speed - new
Improve
Accept-Languageparsing speed
- new
- breaking
Remove closures getting spec properties
- breaking
Remove property delete from media type parsing
- new
Delay type concatenation until needed
- new
Enable strict mode
- breaking
- fixed
Fix media type parameter matching to be case-insensitive
- fixed
- fixed
Fix comparing media types with quoted values
- fixed
Fix splitting media types with quoted commas
- fixed
- fixed
Fix preference sorting to be stable for long acceptable lists
- fixed
5 other lines we could not sort, mostly version bumps
- 0.6.4
Replace deprecated String.prototype.substr() d3c7697
- 0.6.3
Revert "Lazy-load modules from main entry point"
- 0.6.0
Lazy-load modules from main entry point
- 0.5.0
Remove dynamic building of Negotiator class
- 0.4.8
Stable sort preferences of same quality according to client order