path-to-regexp
9.0.0 · 22 Oct 2026MIT310.6M / weekRepositoryHomepagenpmAtom feed
Upgrading path-to-regexp From 1.5.3 to 9.0.0
38 releases in betweennotes for 3
Reading releases, release notes and advisories…
- ?
- changes to make
- 1
- advisory fixed
- 2+
- new
- 4+
- fixes
Counted from 3 of 38 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 1 advisory affecting 1.5.3
- path-to-regexp outputs backtracking regular expressionshigh · GHSA-9wv6-86v2-598j
Release by release
- fixed
Avoid duplicate trailing delimiter matches
- fixed
Fix stringify of param names with control characters
- fixed
Fix stringify lookahead across empty text tokens
- fixed
7.0.0 – 8.4.210 releases, no release note
- new
Add backtrack protection to 6.x (#324) f1253b4
- new
6.2.2no release note
- new
New example in documentation (#256) ae9e576
- fixed
Fix invalid matching of
:name*parameter (#261) 762bc6b
- new
1.6.0 – 6.2.024 releases, no release note
9 other lines we could not sort, mostly version bumps
- 9.0.0
Refactor matching to be non-greedy
- 9.0.0
Build project as ESM
- 9.0.0
Remove
TokenDataclass andKeystype - 9.0.0
Reject an empty-string param in compile
- 9.0.0
Reject wildcard array that compiles to an empty path
- 9.0.0
Quote param names followed by astral ID_Continue text
- 6.2.1
Compare delimiter string over regexp 86baef8
- 6.2.1
Update demo link (#250) 77df638
- 6.2.1
Update README encode example b39edd4