express v5.1.0 release notes

What's Changed

Update captains by @UlisesGascon in https://github.com/expressjs/express/pull/6027
build: Node.js 23.0 by @bjohansebas in https://github.com/expressjs/express/pull/6075
Add funding field (v5) by @bjohansebas in https://github.com/expressjs/express/pull/6064
✅ add discarded middleware test by @ctcpip in https://github.com/expressjs/express/pull/5819
update homepage link http to https by @bjohansebas in https://github.com/expressjs/express/pull/5920
Improve readme by @bjohansebas in https://github.com/expressjs/express/pull/5994
Add bjohansebas as repo captain for expressjs.com by @crandmck in https://github.com/expressjs/express/pull/6058
Remove Object.setPrototypeOf polyfill by @Phillip9587 in https://github.com/expressjs/express/pull/6081
fix(buffer): use node:buffer instead of safe-buffer by @bhavya3024 in https://github.com/expressjs/express/pull/6071
docs: Add DCO by @UlisesGascon in https://github.com/expressjs/express/pull/6048
cleanup: remove promise support check from tests by @Phillip9587 in https://github.com/expressjs/express/pull/6148
Use loop for acceptParams by @blakeembrey in https://github.com/expressjs/express/pull/6066
Improve documentation step in release process by @bjohansebas in https://github.com/expressjs/express/pull/6150
cleanup: remove unnecessary require for global Buffer by @Phillip9587 in https://github.com/expressjs/express/pull/6146
cleanup: remove AsyncLocalStorage check by @Phillip9587 in https://github.com/expressjs/express/pull/6147
update history.md for acceptParams change by @jonchurch in https://github.com/expressjs/express/pull/6177
docs: add @rxmarbles to the triage team by @UlisesGascon in https://github.com/expressjs/express/pull/6151
refactor: improve readability by @sazk07 in https://github.com/expressjs/express/pull/6173
docs: clarify the security process in the triage role by @bjohansebas in https://github.com/expressjs/express/pull/6217
chore: replace methods dependency with standard library by @jonkoops in https://github.com/expressjs/express/pull/6196
Remove utils-merge dependency - use spread syntax instead by @Phillip9587 in https://github.com/expressjs/express/pull/6091
fix(securite): fix vulnerabilities by @Abdel-Monaam-Aouini in https://github.com/expressjs/express/pull/6211
refactor: prefix built-in node module imports by @slagiewka in https://github.com/expressjs/express/pull/6236
fix: remove download size badges by @wesleytodd in https://github.com/expressjs/express/pull/6266
Remove unused depd dependency by @jonkoops in https://github.com/expressjs/express/pull/6197
fix: usage of Invalid action input 'persist-credentials' for actions/setup-node@v4 in ci.yml by @hamirmahal in https://github.com/expressjs/express/pull/6256
Add support for OSSF scorecard reporting by @UlisesGascon in https://github.com/expressjs/express/pull/5431
docs: add @Phillip9587 to the triage team by @bjohansebas in https://github.com/expressjs/express/pull/6276
fix: added a missing semicolon in css styles in examples/auth by @pr4j3sh in https://github.com/expressjs/express/pull/6297
docs: include team email in the security policy by @UlisesGascon in https://github.com/expressjs/express/pull/6278
refactor: simplify normalizeTypes function by @Ayoub-Mabrouk in https://github.com/expressjs/express/pull/6097
ci: updated github actions ci workflow by @Phillip9587 in https://github.com/expressjs/express/pull/6314
ci: fix npm install --include typo by @Phillip9587 in https://github.com/expressjs/express/pull/6324
ci: updated scorecard actions by @Phillip9587 in https://github.com/expressjs/express/pull/6322
build(deps): use carat notation for dependency versions by @dpopp07 in https://github.com/expressjs/express/pull/6317
chore(deps): update debug to ^4.4.0 by @Phillip9587 in https://github.com/expressjs/express/pull/6313
docs: retroactively note 5.0.0-beta.1 api change in history file by @dpopp07 in https://github.com/expressjs/express/pull/6333
feat(deps): body-parser@^2.1.0 by @wesleytodd in https://github.com/expressjs/express/pull/6332
feat(deps): router@^2.1.0 by @wesleytodd in https://github.com/expressjs/express/pull/6331
Update repo captains by @UlisesGascon in https://github.com/expressjs/express/pull/6234
deps: upgrade nyc by @agungjati in https://github.com/expressjs/express/pull/6122
fix (deps): update deps by @wesleytodd in https://github.com/expressjs/express/pull/6337
response: add support for ETag option in res.sendFile by @juanarbol in https://github.com/expressjs/express/pull/6073
Update multiple links to use https instead of http by @Phillip9587 in https://github.com/expressjs/express/pull/6338
Extend res.links() to allow adding multiple links with the same rel #2729 by @andvea in https://github.com/expressjs/express/pull/4885
docs: update emeritus triagers by @UlisesGascon in https://github.com/expressjs/express/pull/6345
docs: update guidance for triager nominations by @bjohansebas in https://github.com/expressjs/express/pull/6349
docs: clarify guidelines for becoming a committer by @bjohansebas in https://github.com/expressjs/express/pull/6364
Nominate @dpopp07 to the triage team by @UlisesGascon in https://github.com/expressjs/express/pull/6352
fix(deps): qs@^6.14.0 by @wesleytodd in https://github.com/expressjs/express/pull/6374
Add dependabot by @UlisesGascon in https://github.com/expressjs/express/pull/5435
fix dependabot config by @bjohansebas in https://github.com/expressjs/express/pull/6392
build(deps): bump github/codeql-action from 3.24.7 to 3.28.11 by @dependabot in https://github.com/expressjs/express/pull/6398
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @dependabot in https://github.com/expressjs/express/pull/6397
feat(deps): finalhandler@2.1.0 by @wesleytodd in https://github.com/expressjs/express/pull/6373
build(deps-dev): bump cookie-session from 2.0.0 to 2.1.0 by @dependabot in https://github.com/expressjs/express/pull/6399
deps: body-parser@^2.2.0 by @UlisesGascon in https://github.com/expressjs/express/pull/6419
deps: type-is@^2.0.1 by @UlisesGascon in https://github.com/expressjs/express/pull/6420
deps: router@^2.2.0 by @UlisesGascon in https://github.com/expressjs/express/pull/6417
ci: use full SHAs for github action versions by @Phillip9587 in https://github.com/expressjs/express/pull/6415
doc: remove @mertcanaltin from Triagers by @mertcanaltin in https://github.com/expressjs/express/pull/6408
deps: serve-static@^2.2.0 by @UlisesGascon in https://github.com/expressjs/express/pull/6418
5.1.0 by @wesleytodd in https://github.com/expressjs/express/pull/6425

New Contributors

@bhavya3024 made their first contribution in https://github.com/expressjs/express/pull/6071
@jonkoops made their first contribution in https://github.com/expressjs/express/pull/6196
@Abdel-Monaam-Aouini made their first contribution in https://github.com/expressjs/express/pull/6211
@slagiewka made their first contribution in https://github.com/expressjs/express/pull/6236
@hamirmahal made their first contribution in https://github.com/expressjs/express/pull/6256
@pr4j3sh made their first contribution in https://github.com/expressjs/express/pull/6297
@Ayoub-Mabrouk made their first contribution in https://github.com/expressjs/express/pull/6097
@dpopp07 made their first contribution in https://github.com/expressjs/express/pull/6317
@agungjati made their first contribution in https://github.com/expressjs/express/pull/6122
@andvea made their first contribution in https://github.com/expressjs/express/pull/4885
@dependabot made their first contribution in https://github.com/expressjs/express/pull/6398

Full Changelog: https://github.com/expressjs/express/compare/5.0.1...v5.1.0