Packages

serve-static

2.2.1 · 15 Dec 2025MIT202.2M / weekRepositoryHomepagenpmAtom feed

Upgrading serve-static From 1.4.4 to 1.16.0

42 releases in betweenevery note read

Other targets from 1.4.4Newest 1.x1.16.3Latest2.2.1
  1. 1.4.4yours
  2. 13 releases
  3. 1.7.2security
  4. 6 releases
  5. 1.10.0breaking
  6. 20 releases
  7. 1.16.0target
1
change to make
2
advisories fixed
2
new
7
fixes

Before you upgrade

Tick each one off as you go
  • breaking1.10.0

Security

Fixes 2 advisories affecting 1.4.4

  • Fix potential open redirect when mounted at root

    1.7.2

Release by release

  1. 1.14.0 – 1.16.05 releases, nothing new or fixed in the notes

  2. 1.13.2

    7 Feb 20181 fix
    • fixed

      Fix incorrect end tag in redirects

  3. 1.13.1

    29 Sep 20171 fix
    • fixed

      Fix regression when root is incorrectly set to a file

  4. 1.11.2 – 1.13.09 releases, nothing new or fixed in the notes

  5. 1.11.1

    11 Jun 20161 fix
    • fixed

      Fix redirect error when req.url contains raw non-URL characters

  6. 1.10.1 – 1.11.04 releases, nothing new or fixed in the notes

  7. 1.10.0

    Migration needed18 Jun 20152 new · 1 fix
    • breaking

      Remove argument reassignment

    • new

      Add fallthrough option

    • new

      Enable strict mode

    • fixed

      Fix reading options from options prototype

  8. 1.9.0 – 1.9.34 releases, nothing new or fixed in the notes

5 other lines we could not sort, mostly version bumps

  • Remove link renderization in html while redirecting (#173)

    1.16.0

  • Set stricter CSP header in redirect response

    1.14.1

  • Send complete HTML document in redirect response

    1.12.0

  • Use status code 301 for redirects

    1.11.0

  • Improve the default redirect response headers

    1.10.0

37 internal lines (docs, tests, tooling) left out.