release: 1.9.2

[bjohansebas]

What's included in the HISTORY.md

  * Fix icons for MIME types with `+`
  * Fix text and json responses to match html sorting
  * Show font icon for more font types
  * Use 400 error on URI decode failure instead of 500
  * deps: accepts@~1.3.8
    - deps: mime-types@~2.1.24
    - deps: negotiator@0.6.3
  * deps: http-errors@~1.8.0
    - Set constructor name when possible
    - deps: depd@~1.1.2
    - deps: inherits@2.0.4
    - deps: setprototypeof@1.2.0
    - deps: statuses@'>= 1.5.0 < 2'
  * deps: mime-types@~2.1.35
    - Add new mime types
    - deps: mime-db@~1.52.0
  * deps: parseurl@~1.3.3

What's Changed

This will be included in the release details

🐞 Bug fixes

• Icons for MIME types containing "+" were not displayed correctly - by @dougwilson in 4e7785c

  fixed where file icons with MIME types containing the "+" character (such as image/svg+xml) were not displayed correctly. The bug occurred during the conversion of the MIME type to a CSS class name, since the "+" symbol is not valid in class names.

• Improved error handling for malformed URIs by @rjoonas in #85

  The HTTP response status code has been fixed for cases where the server receives a URI that cannot be properly decoded. It now returns a 400 (Bad Request) error instead of a 500 (Internal Server Error), more accurately reflecting that the issue is with the client’s request rather than the server itself.

🚀 Improvements

• Sorting in text/plain and application/json responses by @dougwilson in 002a251

• Show font icon for more font types - by @dougwilson in 9d29665

  Support has been expanded to display the font icon in directory listings. Now all font file formats will automatically show the corresponding icon, instead of only a few specific formats as before.

PRs

• Serve HTTP 400 instead of throwing on badly encoded request URI by @rjoonas in Serve HTTP 400 instead of throwing on badly encoded request URI #85
• chore: add support for OSSF scorecard reporting by @inigomarquinez in chore: add support for OSSF scorecard reporting #110
• ci: replace travis with github action by @inigomarquinez in ci: replace travis with github action #109
• chore: upgrade scorecard workflow pinned action versions by @carpasse in chore: upgrade scorecard workflow pinned action versions #112
• ci: apply OSSF Scorecard security best practices by @UlisesGascon in ci: apply OSSF Scorecard security best practices #119
• ci: upgrade Node versions by @UlisesGascon in ci: upgrade Node versions #128
• build(deps): bump github/codeql-action from 3.27.9 to 3.28.19 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.27.9 to 3.28.19 #124
• build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @dependabot[bot] in build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 #121
• build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by @dependabot[bot] in build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 #122
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 by @dependabot[bot] in build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 #123
• chore: add funding to package.json by @bjohansebas in chore: add funding to package.json #131
• build(deps): bump step-security/harden-runner from 2.12.0 to 2.13.0 by @dependabot[bot] in build(deps): bump step-security/harden-runner from 2.12.0 to 2.13.0 #132
• build(deps): bump github/codeql-action from 3.28.19 to 3.29.5 by @dependabot[bot] in build(deps): bump github/codeql-action from 3.28.19 to 3.29.5 #133
• doc(package): remove history.md and add readme.md to published files by @sheplu in doc(package): remove history.md and add readme.md to published files #143
• fix: downgrade supertest to version 6.3.4 for restore ci by @bjohansebas in fix: downgrade supertest to version 6.3.4 for restore ci #145
• build(deps): update accepts and mime-types dependencies to latest versions by @bjohansebas in build(deps): update accepts and mime-types dependencies to latest versions #147
• build(deps): bump actions/checkout from 4.2.2 to 6.0.1 by @dependabot[bot] in build(deps): bump actions/checkout from 4.2.2 to 6.0.1 #135
• build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 #137
• build(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0 by @dependabot[bot] in build(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0 #140
• build(deps): bump step-security/harden-runner from 2.13.0 to 2.14.0 by @dependabot[bot] in build(deps): bump step-security/harden-runner from 2.13.0 to 2.14.0 #139

New Contributors

• @rjoonas made their first contribution in Serve HTTP 400 instead of throwing on badly encoded request URI #85
• @inigomarquinez made their first contribution in chore: add support for OSSF scorecard reporting #110
• @carpasse made their first contribution in chore: upgrade scorecard workflow pinned action versions #112
• @UlisesGascon made their first contribution in ci: apply OSSF Scorecard security best practices #119
• @dependabot[bot] made their first contribution in build(deps): bump github/codeql-action from 3.27.9 to 3.28.19 #124
• @bjohansebas made their first contribution in chore: add funding to package.json #131
• @sheplu made their first contribution in doc(package): remove history.md and add readme.md to published files #143

Full Changelog: v1.9.1...master

[bjohansebas]

i will do the rebase once #147 is merge

[bjohansebas]

cc: @expressjs/express-tc

[UlisesGascon]

I plan to do a release this week, but we need to decide first between #149 or #142. How urgent do you need the release @bjohansebas? Worse case scenario I can do a local publication release to unblock u.

[bjohansebas]

Actually, this release is to unblock #144 so we can make changes to update libraries.

[bjohansebas]

While that’s happening, can you create the new branch, or would you like me to do it on master?

[UlisesGascon]

Created v2.x. I will pull this commit later on to that branch. Feel free to work against the branch. We can try to release both versions on Thursday 🤔