3.7.0

• proper proxy trust with app.set('trust proxy', trust)
  • app.set('trust proxy', 1) trust first hop
  • app.set('trust proxy', 'loopback') trust loopback addresses
  • app.set('trust proxy', '10.0.0.1') trust single IP
  • app.set('trust proxy', '10.0.0.1/16') trust subnet
  • app.set('trust proxy', '10.0.0.1, 10.0.0.2') trust list
  • app.set('trust proxy', false) turn off
  • app.set('trust proxy', true) trust everything
• update connect to 2.16.2
  • deprecate res.headerSent -- use res.headersSent
  • deprecate res.on("header") -- use on-headers module instead
  • fix edge-case in res.appendHeader that would append in wrong order
  • json: use body-parser
  • urlencoded: use body-parser
  • dep: bytes@1.0.0
  • dep: cookie-parser@1.1.0
  • dep: csurf@1.2.0
  • dep: express-session@1.1.0
  • dep: method-override@1.0.1

4.2.0

• deprecate app.del() -- use app.delete() instead
• deprecate res.json(obj, status) -- use res.json(status, obj) instead
  • the edge-case res.json(status, num) requires res.status(status).json(num)
• deprecate res.jsonp(obj, status) -- use res.jsonp(status, obj) instead
  • the edge-case res.jsonp(status, num) requires res.status(status).jsonp(num)
• fix req.next when inside router instance
• include ETag header in HEAD requests
• keep previous Content-Type for res.jsonp
• support PURGE method
  • add app.purge
  • add router.purge
  • include PURGE in app.all
• update debug to 0.8.0
  • add enable() method
  • change from stderr to stdout
• update methods to 1.0.0
  • add PURGE

3.6.0

• deprecate app.del() -- use app.delete() instead
• deprecate res.json(obj, status) -- use res.json(status, obj) instead
  • the edge-case res.json(status, num) requires res.status(status).json(num)
• deprecate res.jsonp(obj, status) -- use res.jsonp(status, obj) instead
  • the edge-case res.jsonp(status, num) requires res.status(status).jsonp(num)
• support PURGE method
  • add app.purge
  • add router.purge
  • include PURGE in app.all
• update connect to 2.15.0
  • Add res.appendHeader
  • Call error stack even when response has been sent
  • Patch res.headerSent to return Boolean
  • Patch res.headersSent for node.js 0.8
  • Prevent default 404 handler after response sent
  • dep: compression@1.0.2
  • dep: connect-timeout@1.1.0
  • dep: debug@^0.8.0
  • dep: errorhandler@1.0.1
  • dep: express-session@1.0.4
  • dep: morgan@1.0.1
  • dep: serve-favicon@2.0.0
  • dep: serve-index@1.0.2
• update debug to 0.8.0
  • add enable() method
  • change from stderr to stdout
• update methods to 1.0.0
  • add PURGE
• update mkdirp to 0.5.0

4.1.2

• fix req.host for IPv6 literals
• fix res.jsonp error if callback param is object

3.5.3

• fix req.host for IPv6 literals
• fix res.jsonp error if callback param is object