v2.0.10-beta.0

What's Changed

• fix: harden proxy-table matching to prevent routing bypass by @G-Rath in #1268
• ci(github-actions): update publish.yml by @chimurai in #1270

New Contributors

• @G-Rath made their first contribution in #1268

Full Changelog: v2.0.9...v2.0.10-beta.0

v4.1.1

What's Changed

• fix(fixRequestBody): harden form-data stringification by @chimurai in #1260
• chore(package.json): v4.1.1 by @chimurai in #1262

Full Changelog: v4.1.0...v4.1.1

v3.0.7

What's Changed

• fix(fixRequestBody): harden form-data stringification by @chimurai in #1259
• chore(package.json): v3.0.7 by @chimurai in #1261

Full Changelog: v3.0.6...v3.0.7

v4.1.0

What's Changed

• docs(MIGRATION.md): restore MIGRATION.md by @chimurai in #1226
• ci(ci.yml): add permissions by @chimurai in #1227
• test: add http2 tests by @chimurai in #1228
• feat(definePlugin): helper function to create plugins by @chimurai in #1229
• docs: improve jsdoc for responseInterceptor and fixRequestBody by @chimurai in #1230
• chore(package.json): update dev deps by @chimurai in #1231
• fix(types): widen Filter callback return type by @Mallikarjun-0 in #1232
• chore(package.json): update to httpxy@0.5.3 by @chimurai in #1234
• test(logger): add e2e test for ENOTFOUND error log by @chimurai in #1233
• fix(response-interceptor): reduce responseInterceptor buffer churn by @chimurai in #1236
• fix(ws): handle multi-server upgrade subscription and safe proxy shutdown by @chimurai in #1237
• test(ws): add tests docs by @chimurai in #1238
• ci(publish.yml): npm stage publish by @chimurai in #1239
• chore(package.json): v4.1.0-beta.0 by @chimurai in #1240
• ci(publish.yml): unpin npm version by @chimurai in #1241
• chore(package.json): v4.1.0-beta.1 by @chimurai in #1242
• test(ws): on error event with unreachable websocket target by @chimurai in #1243
• feat(router): add 'res' and 'options' to router function by @chimurai in #1244
• test(http2): improve test by @chimurai in #1245
• test(router): add dynamic agent test by @chimurai in #1246
• feat(pathRewrite): add 'res' and 'options' to custom pathRewrite function by @chimurai in #1247
• docs: fix documentation drift by @chimurai in #1248
• fix(responseInterceptor): prevent trailer/content-length conflict by @chimurai in #1249
• feat(zstd): support zstd compression in responseInterceptor and fixRequestBody by @chimurai in #1250
• fix(responseInterceptor): handle bodyless responses (HEAD/1xx/204/304) with content-encoding by @chimurai in #1251
• chore(package.json): v4.1.0-beta.2 by @chimurai in #1252
• chore(package.json): bump dev deps by @chimurai in #1253
• fix(router): harden proxy-table matching by @chimurai in #1255
• chore(package.json): v4.1.0 by @chimurai in #1257

New Contributors

• @Mallikarjun-0 made their first contribution in #1232

Full Changelog: v4.0.0...v4.1.0

v3.0.6

What's Changed

• fix(types): fix Logger type by @chimurai in #1104
• fix(fixRequestBody): support text/plain by @knudtty in #1103
• chore(examples): bump deps by @chimurai in #1105
• build(prettier): improve prettier setup by @chimurai in #1108
• chore(deps): fix punycode node deprecation warning by @chimurai in #1109
• chore(examples): bump deps by @chimurai in #1110
• build(codespaces): add devcontainer.json by @chimurai in #1112
• chore(package): bump dev dependencies by @chimurai in #1116
• ci(github-action): ci.yml add node v24 by @chimurai in #1117
• chore(package): bump dev dependencies by @chimurai in #1118
• chore(package): upgrade to jest v30 by @chimurai in #1122
• chore(examples): upgrade deps by @chimurai in #1124
• chore(package): update dev deps by @chimurai in #1125
• test(websocket): fix ws import by @chimurai in #1126
• chore(refactor): use node: protocol imports by @chimurai in #1127
• ci(node24): pin node24 due to TLS issue with mockttp by @chimurai in #1137
• docs(recipes/pathRewrite.md): fix comment by @DEBargha2004 in #1135
• chore(package): bump dev deps by @chimurai in #1138
• chore(deps): update actions/checkout action to v5 by @chimurai in #1140
• fix(error-response-plugin): sanitize input by @chimurai in #1141
• chore(package.json): update dev deps by @chimurai in #1143
• chore: add context7.json by @chimurai in #1144
• build(eslint): update eslint.config.mjs by @chimurai in #1145
• ci(github workflow): harden github workflows by @chimurai in #1146
• chore(package): bump dev deps by @chimurai in #1147
• ci(ci.yml): unpin node 24 by @chimurai in #1148
• docs(recipes): fix servers.md http.createServer example by @hacklschorsch in #1150
• ci: publish with oidc by @chimurai in #1152
• chore(package.json): bump dev deps by @chimurai in #1153
• chore(package.json): bump dev deps by @chimurai in #1155
• chore(package.json): bump dev deps by @chimurai in #1158
• test(types.spec.ts): add type check when req or res are 'any' by @chimurai in #1161
• chore(package.json): bump deps by @chimurai in #1164
• chore(package.json): eslint v10 by @chimurai in #1165
• chore(package.json): bump dev deps by @chimurai in #1166
• chore(package.json): bump dev-deps by @chimurai in #1171
• docs(examples): fix websocket example by @chimurai in #1170
• build(vscode): use workspace version of TypeScript by @chimurai in #1173
• fix(router): harden proxy-table matching by @chimurai in #1254
• chore(package.json): v3.0.6 by @chimurai in #1256

New Contributors

• @knudtty made their first contribution in #1103
• @DEBargha2004 made their first contribution in #1135
• @hacklschorsch made their first contribution in #1150

Full Changelog: v3.0.5...v3.0.6

v4.1.0-beta.2

What's Changed

• test(ws): on error event with unreachable websocket target by @chimurai in #1243
• feat(router): add 'res' and 'options' to router function by @chimurai in #1244
• test(http2): improve test by @chimurai in #1245
• test(router): add dynamic agent test by @chimurai in #1246
• feat(pathRewrite): add 'res' and 'options' to custom pathRewrite function by @chimurai in #1247
• docs: fix documentation drift by @chimurai in #1248
• fix(responseInterceptor): prevent trailer/content-length conflict by @chimurai in #1249
• feat(zstd): support zstd compression in responseInterceptor and fixRequestBody by @chimurai in #1250
• fix(responseInterceptor): handle bodyless responses (HEAD/1xx/204/304) with content-encoding by @chimurai in #1251
• chore(package.json): v4.1.0-beta.2 by @chimurai in #1252

Full Changelog: v4.1.0-beta.1...v4.1.0-beta.2

v4.1.0-beta.1

What's Changed

• docs(MIGRATION.md): restore MIGRATION.md by @chimurai in #1226
• ci(ci.yml): add permissions by @chimurai in #1227
• test: add http2 tests by @chimurai in #1228
• feat(definePlugin): helper function to create plugins by @chimurai in #1229
• docs: improve jsdoc for responseInterceptor and fixRequestBody by @chimurai in #1230
• chore(package.json): update dev deps by @chimurai in #1231
• fix(types): widen Filter callback return type by @Mallikarjun-0 in #1232
• chore(package.json): update to httpxy@0.5.3 by @chimurai in #1234
• test(logger): add e2e test for ENOTFOUND error log by @chimurai in #1233
• fix(response-interceptor): reduce responseInterceptor buffer churn by @chimurai in #1236
• fix(ws): handle multi-server upgrade subscription and safe proxy shutdown by @chimurai in #1237
• test(ws): add tests docs by @chimurai in #1238
• ci(publish.yml): npm stage publish by @chimurai in #1239
• chore(package.json): v4.1.0-beta.0 by @chimurai in #1240
• ci(publish.yml): unpin npm version by @chimurai in #1241
• chore(package.json): v4.1.0-beta.1 by @chimurai in #1242

New Contributors

• @Mallikarjun-0 made their first contribution in #1232

Full Changelog: v4.0.0...v4.1.0-beta.1

v4.1.0-beta.0

⚠️ This version is never published

Fix was needed for npm stage publish: #1241

What's Changed

• docs(MIGRATION.md): restore MIGRATION.md by @chimurai in #1226
• ci(ci.yml): add permissions by @chimurai in #1227
• test: add http2 tests by @chimurai in #1228
• feat(definePlugin): helper function to create plugins by @chimurai in #1229
• docs: improve jsdoc for responseInterceptor and fixRequestBody by @chimurai in #1230
• chore(package.json): update dev deps by @chimurai in #1231
• fix(types): widen Filter callback return type by @Mallikarjun-0 in #1232
• chore(package.json): update to httpxy@0.5.3 by @chimurai in #1234
• test(logger): add e2e test for ENOTFOUND error log by @chimurai in #1233
• fix(response-interceptor): reduce responseInterceptor buffer churn by @chimurai in #1236
• fix(ws): handle multi-server upgrade subscription and safe proxy shutdown by @chimurai in #1237
• test(ws): add tests docs by @chimurai in #1238
• ci(publish.yml): npm stage publish by @chimurai in #1239
• chore(package.json): v4.1.0-beta.0 by @chimurai in #1240

New Contributors

• @Mallikarjun-0 made their first contribution in #1232

Full Changelog: v4.0.0...v4.1.0-beta.0

v4.0.0

Notable changes

• Switched proxy from http-proxy to httpxy ✨ (#1160)
  This replaces a long-standing core dependency and brings in many upstream fixes and behavior improvements documented by the httpxy project: unjs/httpxy#2

  • many fixes: https://github.com/unjs/httpxy/pulls?q=sort%3Aupdated-desc+is%3Apr+is%3Aclosed
  • http/2 support: unjs/httpxy#102
  • performance: unjs/httpxy#124

• ESM-only package [BREAKING CHANGE] 💣
  http-proxy-middleware now ships as native ES modules only. CommonJS require() usage is no longer supported, so imports should use ESM syntax.

• Updated Node.js support policy [BREAKING CHANGE] 💣
  Dropped Node.js 14, 16, 18, and 20.
  New minimum supported runtime is Node.js 22.15.0

• Removed legacyCreateProxyMiddleware() [BREAKING CHANGE] 💣
  The legacy compatibility wrapper has been removed as part of API cleanup. Use createProxyMiddleware() directly.

• Added IPv6 literal support ✨
  target and forward now support literal IPv6 URLs, for example: http://[::1]:3000.

• Experimental Hono support 🧪
  Added createHonoProxyMiddleware() for Hono apps, including dedicated subpath support via http-proxy-middleware/hono.

Many thanks to everyone who helped make this release possible. 🙏

What's Changed

• fix(types): fix Logger type by @chimurai in #1104
• fix(fixRequestBody): support text/plain by @knudtty in #1103
• chore(examples): bump deps by @chimurai in #1105
• build(prettier): improve prettier setup by @chimurai in #1108
• chore(deps): fix punycode node deprecation warning by @chimurai in #1109
• chore(examples): bump deps by @chimurai in #1110
• build(codespaces): add devcontainer.json by @chimurai in #1112
• chore(package): bump dev dependencies by @chimurai in #1116
• ci(github-action): ci.yml add node v24 by @chimurai in #1117
• chore(package): bump dev dependencies by @chimurai in #1118
• chore(package): upgrade to jest v30 by @chimurai in #1122
• chore(examples): upgrade deps by @chimurai in #1124
• chore(package): update dev deps by @chimurai in #1125
• test(websocket): fix ws import by @chimurai in #1126
• chore(refactor): use node: protocol imports by @chimurai in #1127
• ci(node24): pin node24 due to TLS issue with mockttp by @chimurai in #1137
• docs(recipes/pathRewrite.md): fix comment by @DEBargha2004 in #1135
• chore(package): bump dev deps by @chimurai in #1138
• chore(deps): update actions/checkout action to v5 by @chimurai in #1140
• fix(error-response-plugin): sanitize input by @chimurai in #1141
• chore(package.json): update dev deps by @chimurai in #1143
• chore: add context7.json by @chimurai in #1144
• build(eslint): update eslint.config.mjs by @chimurai in #1145
• ci(github workflow): harden github workflows by @chimurai in #1146
• chore(package): bump dev deps by @chimurai in #1147
• ci(ci.yml): unpin node 24 by @chimurai in #1148
• docs(recipes): fix servers.md http.createServer example by @hacklschorsch in #1150
• ci: publish with oidc by @chimurai in #1152
• chore(package.json): bump dev deps by @chimurai in #1153
• chore(package.json): bump dev deps by @chimurai in #1155
• chore(package.json): bump dev deps by @chimurai in #1158
• test(types.spec.ts): add type check when req or res are 'any' by @chimurai in #1161
• chore(package.json): bump deps by @chimurai in #1164
• chore(package.json): eslint v10 by @chimurai in #1165
• chore(package.json): bump dev deps by @chimurai in #1166
• chore(package.json): bump dev-deps by @chimurai in #1171
• docs(examples): fix websocket example by @chimurai in #1170
• build(vscode): use workspace version of TypeScript by @chimurai in #1173
• refactor(#1136): replace http-proxy w/ httpxy by @SukkaW in #1160
• feat: drop node v14/v16/v18, update to es2022, remove req.connection by @bjnewman in #1162
• chore(package.json): v4.0.0-beta.0 by @chimurai in #1174
• chore: remove legacyCreateProxyMiddleware() [BREAKING CHANGE] by @chimurai in #1175
• fix: applyPathRewrite logs old req.url instead of rewritten path by @nicoabie in #1157
• fix: prevent TypeError when ws enabled but server is undefined by @bjnewman in #1163
• fix(fixRequestBody): support content-encoding on request body by @robbtraister in #1142
• refactor: remove deprecated url.parse() by @chimurai in #1176
• chore(package.json): drop node20 [BREAKING CHANGE] by @chimurai in #1179
• ci: migrate from jest to vitest by @chimurai in #1180
• chore(package.json): esm only [BREAKING CHANGE] by @chimurai in #1181
• chore(package.json): bump to httpxy 0.5.0 by @chimurai in #1183
• chore: remove third party config by @chimurai in #1184
• chore: minor improvements by @chimurai in #1185
• test: target connection errors by @chimurai in #1186
• chore(package.json): v4.0.0-beta.1 by @chimurai in #1187
• ci(github-actions): bump actions by @chimurai in #1188
• chore(package.json): bump dependencies by @chimurai in #1189
• refactor(is-plain-object): replace with is-plain-obj by @chimurai in #1191
• chore(examples): add ts-check by @chimurai in #1192
• fix(types): allow Promise return type for proxyRes callback by @cyphercodes in #1190
• feat(hono): support for hono with createHonoProxyMiddleware by @chimurai in #1193
• chore(package.json): v4.0.0-beta.3 by @chimurai in #1194
• chore(eslint): @typescript-eslint/consistent-type-imports by @chimurai in #1195
• docs(examples): sse example by @chimurai in #1196
• refactor: typescript strict types by @chimurai in #1197
• docs(examples): add Next.js v16 example by @chimurai in #1198
• docs(examples): use subpath import #http-proxy-middleware by @chimurai in #1199
• docs(fastify): fix fastify example by @chimurai in #1200
• fix(hono): use Hono HttpBindings in createHonoProxyMiddleware by @chimurai in #1201
• chore(package.json): bump deps by @chimurai in #1202
• build(oxfmt): migrate prettier to oxfmt by @chimurai in #1203
• test: improve tests by @chimurai in #1204
• docs: update docs by @chimurai in https://github.com/chimurai...

v4.0.0-beta.6

What's Changed

• chore(package.json): remove patch-package by @chimurai in #1217
• chore(package.json): node ^22.15.0 by @chimurai in #1218
• refactor(package): subpath 'http-proxy-middleware/hono' by @chimurai in #1220
• chore(package.json): v4.0.0-beta.6 by @chimurai in #1221

Full Changelog: v4.0.0-beta.5...v4.0.0-beta.6