Packages

path-to-regexp

9.0.0 · 22 Oct 2026MIT310.6M / weekRepositoryHomepagenpmAtom feed

Upgrading path-to-regexp From 8.3.0 to 9.0.0

4 releases in betweennotes for 1

Reading releases, release notes and advisories…

Other targets from 8.3.0Newest 8.x8.4.2Clears its 2 advisories8.4.0
The note of 9.0.0 lists no breaking change or deprecation, which is rare for a major.
  1. 8.3.0yours
  2. 8.4.0
  3. 8.4.1
  4. 8.4.2
  5. 9.0.0target
?
changes to make
2
advisories fixed
?
new
3+
fixes

Counted from 1 of 4 release notes. Advisories are counted from the advisory database, in full.

Security

Fixes 2 advisories affecting 8.3.0

Release by release

  1. 9.0.0

    22 Oct 20263 fixes
    • fixed

      Avoid duplicate trailing delimiter matches

    • fixed

      Fix stringify of param names with control characters

    • fixed

      Fix stringify lookahead across empty text tokens

  2. 8.4.0 – 8.4.23 releases, no release note

6 other lines we could not sort, mostly version bumps

  • Refactor matching to be non-greedy

    9.0.0

  • Build project as ESM

    9.0.0

  • Remove TokenData class and Keys type

    9.0.0

  • Reject an empty-string param in compile

    9.0.0

  • Reject wildcard array that compiles to an empty path

    9.0.0

  • Quote param names followed by astral ID_Continue text

    9.0.0