What changed in koa from 2 to 3
7 releases numbered after v2.16.4 up to and including v3.2.1, stable releases only. v2.16.4 and v3.2.1 are the newest stable releases of 2 and 3 we track; this page follows them as new ones ship.
13 changes across 7 releases
- Defer AsyncLocalStorage creation for v8 startup snapshots
- Bump http-errors from 2.0.0 to 2.0.1
- Bump mime-types from 3.0.1 to 3.0.2
- Bump content-disposition from 0.5.4 to 1.0.1
- Bump qs from 6.14.0 to 6.14.1
- Bump js-yaml from 4.1.0 to 4.1.1
- request.length no longer overflows on Content-Length greater than 2GB
- Only destroy the original value if the new value is not a stream
- Fix memory leak relating to issue 1834
- Add stream cleanup
- Normalize referer before redirect
- Fix response.attachment behaviour that leads to Content-Type Sniffing
- Fix Host Header Injection via ctx.hostname
Original release notes, newest first
The list above is our reading of these notes; the originals from koa are here, one fold per release.
v3.2.1
What's Changed
- fix: request.length overflows on Content-Length > 2GB by @tejgokani in https://github.com/koajs/koa/pull/1961
New Contributors
- @tejgokani made their first contribution in https://github.com/koajs/koa/pull/1961
Full Changelog: https://github.com/koajs/koa/compare/v3.2.0...v3.2.1
v3.2.0
What's Changed
- docs: remove dead Job Board links by @Jerry-CodeHub in https://github.com/koajs/koa/pull/1926
- build(deps-dev): bump qs from 6.14.1 to 6.14.2 by @dependabot[bot] in https://github.com/koajs/koa/pull/1927
- chore: Add workflow_dispatch trigger to npm-publish workflow by @Copilot in https://github.com/koajs/koa/pull/1930
- feat: defer AsyncLocalStorage creation for v8 startup snapshots by @killagu in https://github.com/koajs/koa/pull/1946
New Contributors
- @Jerry-CodeHub made their first contribution in https://github.com/koajs/koa/pull/1926
- @killagu made their first contribution in https://github.com/koajs/koa/pull/1946
Full Changelog: https://github.com/koajs/koa/compare/v3.1.2...v3.2.0
v3.1.2
What's Changed
- fix: typo in troubleshooting.md by @WuMingDao in https://github.com/koajs/koa/pull/1916
- build(deps-dev): bump qs from 6.14.0 to 6.14.1 by @dependabot[bot] in https://github.com/koajs/koa/pull/1921
- build(deps): bump http-errors from 2.0.0 to 2.0.1 by @dependabot[bot] in https://github.com/koajs/koa/pull/1919
- build(deps): bump mime-types from 3.0.1 to 3.0.2 by @dependabot[bot] in https://github.com/koajs/koa/pull/1918
- docs: use correct term "Server-Sent Events" in guide by @jtr860830 in https://github.com/koajs/koa/pull/1920
- build(deps): bump content-disposition from 0.5.4 to 1.0.1 by @dependabot[bot] in https://github.com/koajs/koa/pull/1917
- build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 by @dependabot[bot] in https://github.com/koajs/koa/pull/1922
- fix(security): Host Header Injection via
ctx.hostnameby @killagu https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm
New Contributors
- @WuMingDao made their first contribution in https://github.com/koajs/koa/pull/1916
- @jtr860830 made their first contribution in https://github.com/koajs/koa/pull/1920
Full Changelog: https://github.com/koajs/koa/compare/v3.1.1...v3.1.2
v3.1.1
What's Changed
- fix: only original value destroy if the new value is not a stream by @yowainwright in https://github.com/koajs/koa/pull/1914
Full Changelog: https://github.com/koajs/koa/compare/v3.1.0...v3.1.1
v3.1.0
What's Changed
- feat: fixes mem leak relating to issue-1834 by @yowainwright in https://github.com/koajs/koa/pull/1893
- fix: adds steam clean up by @yowainwright in https://github.com/koajs/koa/pull/1910
Full Changelog: https://github.com/koajs/koa/compare/v3.0.3...v3.1.0
v3.0.3
What's Changed
- fix: normalize referer before redirect by @fengmk2 in https://github.com/koajs/koa/pull/1908
Full Changelog: https://github.com/koajs/koa/compare/v3.0.2...v3.0.3
v3.0.2
What's Changed
- fix: fixes response.attachment behaviour leads to Content-Type Sniffing by @yowainwright in https://github.com/koajs/koa/pull/1904
- chore: use NPM trusted publishing with semver tag triggers by @Copilot in https://github.com/koajs/koa/pull/1907
New Contributors
- @Copilot made their first contribution in https://github.com/koajs/koa/pull/1907
Full Changelog: https://github.com/koajs/koa/compare/v3.0.1...v3.0.2