Packages

path-to-regexp

9.0.0 · 22 Oct 2026MIT310.6M / weekRepositoryHomepagenpmAtom feed

Upgrading path-to-regexp From 6.2.2 to 9.0.0

12 releases in betweennotes for 2

Reading releases, release notes and advisories…

Other targets from 6.2.2Newest 6.x, Clears its advisory6.3.0
8.0.0, 7.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below. The note of 9.0.0 lists no breaking change or deprecation, which is rare for a major.
  1. 6.2.2yours
  2. 1 release
  3. 7.0.0major
  4. 2 releases
  5. 8.0.0major
  6. 6 releases
  7. 9.0.0target
?
changes to make
1
advisory fixed
1+
new
3+
fixes

Counted from 2 of 12 release notes. Advisories are counted from the advisory database, in full.

Security

Fixes 1 advisory affecting 6.2.2

Release by release

  1. 9.0.0

    22 Oct 20263 fixes
    • fixed

      Avoid duplicate trailing delimiter matches

    • fixed

      Fix stringify of param names with control characters

    • fixed

      Fix stringify lookahead across empty text tokens

  2. 7.0.0 – 8.4.210 releases, no release note

  3. 6.3.0

    12 Sep 20241 new
    • new

      Add backtrack protection to 6.x (#324) f1253b4

6 other lines we could not sort, mostly version bumps

  • Refactor matching to be non-greedy

    9.0.0

  • Build project as ESM

    9.0.0

  • Remove TokenData class and Keys type

    9.0.0

  • Reject an empty-string param in compile

    9.0.0

  • Reject wildcard array that compiles to an empty path

    9.0.0

  • Quote param names followed by astral ID_Continue text

    9.0.0