v3.0.0

3.0.0 (2025-12-22)

⚠ BREAKING CHANGES

• use internal types for appFinalErrorHandler and appAuthHandler (#102)
• csrf: change appCsrfMethods type to HttpMethod[] (#104)
• make http methods uppercase (#103)
• remove redirect from AuthPolicy and add authDisable redirect option (#101)

Features

• remove redirect from AuthPolicy and add authDisable redirect option (#101) (17d113e)

Bug Fixes

• csrf: change appCsrfMethods type to HttpMethod[] (#104) (31bb591)
• expose withErrorContract (#99) (c115085)
• make http methods uppercase (#103) (501210d)
• use internal types for appFinalErrorHandler and appAuthHandler (#102) (6082a25)

🚚 Migration guide

• Replace AuthPolicy.redirect value with AuthPolicy.required. Now redirect policy should have the same behaviour as the required policy. You can use appAuthDisableRedirect in global scope and authDisableRedirect in route scope to control redirect behaviour.
• HTTP methods are now uppercase in the HttpMethod type. Keep this in mind when updating.
• appCsrfMethods is now HttpMethod[] instead of string[]. Keep this in mind when updating.

v2.11.1

2.11.1 (2025-11-21)

Bug Fixes

• use unknown type for middleware result (#95) (82523b8)

v2.11.0

2.11.0 (2025-11-13)

Features

• add custom setup (#92) (fc1d711)

v2.10.0

2.10.0 (2025-11-12)

Features

• add userId to self stats and redact sensitive query params for requestUrl (#90) (91e84f2)

Bug Fixes

• fix closing context for middlewares and route handlers and fix error handling (#88) (12cac40)
• use originalContext for stats (#89) (554de8f)

v2.9.0

2.9.0 (2025-11-10)

Features

• add caching control (#85) (182169f)
• add exports for HttpMethod and setLang (#84) (126f32a)

Bug Fixes

• support expressRequestIdHeaderName config option (#86) (46a2363)

v2.8.0

2.8.0 (2025-10-13)

Features

• csrf: add csrf middleware (#79) (855e1a1)

v2.7.0

2.7.0 (2025-09-23)

Features

• validator: zod v4 integration (#72) (ac509d1)

v2.6.0

2.6.0 (2025-09-10)

Features

• add option to exclude actions from self telemetry (#80) (a68bc6f)

v2.5.0

2.5.0 (2025-07-04)

Features

• add an option for omitting req id in log message (#73) (ae57255)

Bug Fixes

• update CODEOWNERS with correct syntax (#75) (289710f)

v2.4.0

2.4.0 (2025-05-21)

Features

• add spanId to all logs, add tests for traceId and spanId check (#69) (cbc2644)