Packages

serve-static

2.2.1 · 15 Dec 2025MIT202.2M / weekRepositoryHomepagenpmAtom feed

Upgrading serve-static From 1.0.3 to 1.16.0

56 releases in betweennotes for 50

Other targets from 1.0.3Newest 1.x1.16.3Latest2.2.1
  1. 1.0.3yours
  2. 27 releases
  3. 1.7.2security
  4. 6 releases
  5. 1.10.0breaking
  6. 20 releases
  7. 1.16.0target
1+
change to make
2
advisories fixed
3+
new
7+
fixes

Counted from 50 of 56 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking1.10.0

Security

Fixes 2 advisories affecting 1.0.3

  • Fix potential open redirect when mounted at root

    1.7.2

Release by release

  1. 1.14.0 – 1.16.05 releases, nothing new or fixed in the notes

  2. 1.13.2

    7 Feb 20181 fix
    • fixed

      Fix incorrect end tag in redirects

  3. 1.13.1

    29 Sep 20171 fix
    • fixed

      Fix regression when root is incorrectly set to a file

  4. 1.11.2 – 1.13.09 releases, nothing new or fixed in the notes

  5. 1.11.1

    11 Jun 20161 fix
    • fixed

      Fix redirect error when req.url contains raw non-URL characters

  6. 1.10.1 – 1.11.04 releases, nothing new or fixed in the notes

  7. 1.10.0

    Migration needed18 Jun 20152 new · 1 fix
    • breaking

      Remove argument reassignment

    • new

      Add fallthrough option

    • new

      Enable strict mode

    • fixed

      Fix reading options from options prototype

  8. 1.9.0 – 1.9.34 releases, nothing new or fixed in the notes

6 other lines we could not sort, mostly version bumps

  • Remove link renderization in html while redirecting (#173)

    1.16.0

  • Set stricter CSP header in redirect response

    1.14.1

  • Send complete HTML document in redirect response

    1.12.0

  • Use status code 301 for redirects

    1.11.0

  • Improve the default redirect response headers

    1.10.0

  • Include HTML link in redirect response

    1.3.0

46 internal lines (docs, tests, tooling) left out.