What expressjs/express shipped
Written by FoxPlug from the repository's own releases; not affiliated with Express. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/expressjs/express; Express did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- Express v5.3.0 was released with bug fixes, including a fix for an HTTP header conflict between Content-Length and Transfer-Encoding in res.send. Release
- The 5.3.0 release PR prepared the History.md entry listing the bug fix in res.send for the header conflict between Content-Length and Transfer-Encoding. Pull request #7468
- The supertest dev dependency bump to 7.3.0 was reverted because supertest 7.3.1 breaks CI. Pull request #7518
- The proxy-addr dependency on the Express 4.x branch was updated from 2.0.7 to 2.0.8. Pull request #7484
- Typos and a stale API reference in lib comment JSDoc, covering req.ip and res.download, were corrected. Pull request #7512
- Pass-through typos in the docs were fixed. Pull request #7509
- A missing apostrophe in "can't" was added in a lib response JSDoc example and an MVC controller example. Pull request #7483
- A PR proposed upgrading the deprecated SuperTest 6.x dev dependency to 7.x with a test helper for paths containing.. or %2e%2e, but it was reverted. Pull request #7494
Why it matters
A new release of Express means users on version 5 can pick up the fix for the Content-Length and Transfer-Encoding header conflict in res.send. Alongside the release, dependency work on proxy-addr for the 4.x branch and doc and comment cleanups keep both branches in better shape. The supertest bump was backed out, so CI stays green for contributors.
Changelog entry
- Release v5.3.0 with a fix for the Content-Length and Transfer-Encoding header conflict in res.send. Release
- Prepare the 5.3.0 History.md entry describing the res.send header fix. Pull request #7468
- Update proxy-addr to 2.0.8 on the Express 4.x branch. Pull request #7484
- Revert the supertest dev dependency bump from 6.3.0 to 7.3.0 because supertest 7.3.1 breaks CI. Pull request #7518
- Propose upgrading supertest to 7.x with a test helper for paths containing.. or %2e%2e. Pull request #7494
- Fix typos and a stale API reference in lib comment JSDoc, including req.ip and res.download. Pull request #7512
- Fix pass-through typos in the docs. Pull request #7509
- Add a missing apostrophe in "can't" in a lib JSDoc example and an MVC controller example. Pull request #7483
Express v5.3.0 is out, fixing the Content-Length and Transfer-Encoding header conflict in res.send. Also this week: proxy-addr updated to 2.0.8 on the 4.x branch, doc and comment typo fixes, and a supertest bump reverted to keep CI green.
Express v5.3.0 has been released. It includes a fix for the HTTP header conflict between Content-Length and Transfer-Encoding in res.send. This week also brought an update of the proxy-addr dependency to 2.0.8 on the Express 4.x branch, a set of documentation and code comment typo fixes including a stale API reference and a missing apostrophe in an example, and a revert of the supertest dev dependency bump to 7.3.0 after supertest 7.3.1 broke CI. The release PR also updated the History.md entry to record the res.send fix.