GitHub / tinyhttp/tinyhttp / commits
🦄 0-legacy, tiny & fast web framework as a replacement of Express
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| f8227d00 | merge Merge pull request #521 from tinyhttp/chore/prune-dead-examples |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
20 days ago | |
| 727eee88 |
fix(examples): respond to plain HTTP requests in ws example
Co-authored-by: Claude Opus 5 (1M context) <n****y@a****m> |
v1rtl <h****i@v****e> | 20 days ago | |
| 34eb03e0 |
chore(deps): bump typescript to ~7.0.2
Co-authored-by: Claude Opus 5 (1M context) <n****y@a****m> |
v1rtl <h****i@v****e> | 20 days ago | |
| 9690da2f |
chore(examples): remove dead examples, refresh vue-ssr and ws
Co-authored-by: Claude Opus 5 (1M context) <n****y@a****m> |
v1rtl <h****i@v****e> | 20 days ago | |
| 7a543bef | merge Merge pull request #519 from tinyhttp/changeset-release/master |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
20 days ago | |
| 417f7708 | chore: release | github-actions[bot] <4****]@u****m> | 20 days ago | |
| 37d9961a | merge Merge pull request #520 from tinyhttp/fix/ghsa-63x4-8g8c-vhww-cookie-signature |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
20 days ago | |
| e46a5ccc |
fix(cookie-signature): verify the full signature in unsign (GHSA-63x4-8g8c-vhww)
Co-authored-by: Claude Opus 5 (1M context) <n****y@a****m> |
v1rtl <h****i@v****e> | 20 days ago | |
| 9266f9ea | merge Merge pull request #518 from tinyhttp/fix/ghsa-rqg5-h5qr-gp89-xss-error-handler |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 0d819694 | fix: sanitize default error handler output (GHSA-rqg5-h5qr-gp89) | v1rtl <h****i@v****e> | about 1 month ago | |
| 4d303991 | merge Merge pull request #516 from tinyhttp/changeset-release/master |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 98729db9 | chore: release | github-actions[bot] <4****]@u****m> | about 1 month ago | |
| bf0e89b2 | chore: changeset | v1rtl <h****i@v****e> | about 1 month ago | |
| 4842ed5a |
merge
fix: add TypeScript overload signatures for accepts methods
Co-authored-by: claygeo <2****o@u****m> |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| dba8def6 | chore: bump dev deps to close down dependabot vulns | v1rtl <h****i@v****e> | about 1 month ago | |
| bd43b780 | fix: bump header-range-parser to v2 (#515) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 674ed834 | chore: use pnpm catalogs to reuse versions | v1rtl <h****i@v****e> | about 1 month ago | |
| 57d53dad |
chore: release (#513)
Co-authored-by: github-actions[bot] <4****]@u****m> |
github-actions[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 4869a413 | fix(res): encode authority backslash to prevent open redirect (GHSA-8q4p-mhxr... |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 7f6bdf7f | fix(send): prevent DoS via malformed Range header (GHSA-w65r-fqv6-q6w9) (#512) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| dfcda1ed | ci: restore git tags and GitHub releases in release workflow (#511) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 6ff53444 |
chore: release (#502)
Co-authored-by: github-actions[bot] <4****]@u****m> |
github-actions[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 65fa2f76 | Path traversal sendfile fix (#510) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| d28bdb80 |
refactor: replace mime with mrmime for smaller bundle size (#509)
Co-authored-by: raghavsharma29 <r****4@g****m> |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 40d845ef | chore: bump dev deps | v1rtl <h****i@v****e> | about 1 month ago | |
| b0d78973 | chore: remove socket overrrides because they are no longer needed | v1rtl <h****i@v****e> | about 1 month ago | |
| a4f83835 | chore: bump typescript to 6 | v1rtl <h****i@v****e> | about 1 month ago | |
| 273d8192 | chore: bump pnpm to v11 | v1rtl <h****i@v****e> | about 1 month ago | |
| ea07bfda | refactor(app): remove unused AcceptsReturns type and format accepts casts |
claygeo <c****6@g****m>
Committed by: v1rtl <h****i@v****e> |
2 months ago | |
| 707168f6 | test: use path.join for cross-platform view path assertion | v1rtl <h****i@v****e> | 4 months ago | |
| 2b27ddaf | test: cover edge cases to raise branch coverage 98% -> 99.2% | v1rtl <h****i@v****e> | 4 months ago | |
| 47385470 | refactor(dotenv): mirror motdotla/dotenv parser rewrite (#501) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 9f28c06d | chore: pin header-range-parser to 1.1.4 | v1rtl <h****i@v****e> | 4 months ago | |
| 22b31a71 | chore: run pnpm up | v1rtl <h****i@v****e> | 4 months ago | |
| 8dfec433 | chore: use pnpm publish directly for releases with provenance | v1rtl <h****i@v****e> | 4 months ago | |
| 9ed3529f | ci: drop broken npm bump, use pnpm for release publish | v1rtl <h****i@v****e> | 4 months ago | |
| e1fc76ec | chore: switch module/moduleResolution to NodeNext | v1rtl <h****i@v****e> | 4 months ago | |
| a32bf6f4 | chore: migrate tsconfig to Node16 module resolution | v1rtl <h****i@v****e> | 4 months ago | |
| 8b90c5bf | chore: relax trust policy 1 day, bump dev deps | v1rtl <h****i@v****e> | 4 months ago | |
| 2ed27150 | chore: bump release workflow to Node 22, fix min Node version in COMPARISON | v1rtl <h****i@v****e> | 4 months ago | |
| b638583e | ci: drop Node.js 20 from test matrix | v1rtl <h****i@v****e> | 4 months ago | |
| bd553332 | chore: bump pnpm to v11, bump dev deps | v1rtl <h****i@v****e> | 4 months ago | |
| 8ac18cc1 | chore: bump commitlint | v1rtl <h****i@v****e> | 4 months ago | |
| 1f60d107 | chore: bump dev deps | v1rtl <h****i@v****e> | 4 months ago | |
| 00260ebf |
chore: release (#497)
Co-authored-by: github-actions[bot] <4****]@u****m> |
github-actions[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 29a4c871 | Fix potential XSS in `res.redirect` (#498) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| ccd11296 | fix: prevent sendFile root path traversal (#496) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| d6df0774 | fix: narrow boolean to false literal in accepts return types |
kmaclip <c****6@g****m>
Committed by: v1rtl <h****i@v****e> |
5 months ago | |
| cad4538e | fix: add TypeScript overload signatures for accepts methods |
kmaclip <k****s@p****e>
Committed by: v1rtl <h****i@v****e> |
5 months ago | |
| ba2554ab | chore: remove unused vite dev dep | v1rtl <h****i@v****e> | 6 months ago | |
| 39a175da | merge Merge branch 'master' of https://github.com/tinyhttp/tinyhttp | v1rtl <h****i@v****e> | 6 months ago | |
| 80cdf84b | chore: bump vitest | v1rtl <h****i@v****e> | 6 months ago | |
| f14d8b91 |
chore: release (#488)
Co-authored-by: github-actions[bot] <4****]@u****m> |
github-actions[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 8b4743c4 | fix: invalid deps |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 962c6abe |
perf: improvements for request handling (#487)
Co-authored-by: Claude Opus 4.5 <n****y@a****m>, v1rtl <h****i@v****e>, Claude Opus 4.5 <n****y@a****m> |
Reve <a****c@g****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 2873bfb9 |
chore: release (#486)
Co-authored-by: github-actions[bot] <4****]@u****m> |
github-actions[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 7221030d |
perf: optimize hot path performance in request handling (#485)
Co-authored-by: Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m> |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| f47d89c8 |
chore: release (#482)
Co-authored-by: github-actions[bot] <4****]@u****m> |
github-actions[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| f8911366 |
Remove ipaddrjs (#484)
Co-authored-by: Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m> |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 1f3c0586 |
Potential fix for code scanning alert no. 9: Workflow does not contain permis...
Co-authored-by: Copilot Autofix powered by AI <6****]@u****m> |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 7576d703 |
Max coverage (#481)
Co-authored-by: Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m> |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 65954cd6 |
chore: release (#480)
Co-authored-by: github-actions[bot] <4****]@u****m> |
github-actions[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 8c981e03 |
refactor(accepts): inline negotiator dependency (#479)
Co-authored-by: Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m> |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| c31446a5 |
2026 updates (#477)
Co-authored-by: Claude Sonnet 4.5 <n****y@a****m>, Claude Sonnet 4.5 <n****y@a****m>, Claude Sonnet 4.5 <n****y@a****m>, Claude Sonnet 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Opus 4.5 <n****y@a****m>, Claude Sonnet 4.5 <n****y@a****m> |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| b2755ce6 | merge Merge branch 'master' of https://github.com/tinyhttp/tinyhttp | v1rtl <h****i@v****e> | 7 months ago | |
| d1a81442 | chore: release | v1rtl <h****i@v****e> | 7 months ago | |
| 1ec37ad9 |
fix(content-disposition): allow empty filename without throwing error (#466)
Co-authored-by: v1rtl <h****i@v****e>, v1rtl <h****i@v****e> |
Itay Leon <i****1@w****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 2799a2ea | ci: test against multiple node versions (#476) |
Reinaldy Rafli <a****5@p****e>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| c0393e3f |
chore(deps-dev): bump vite from 7.1.5 to 7.1.11 (#475)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
8 months ago | |
| 2d85e7ef | Update sponsors section in README |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| 86ce7e37 | Update funding sources in FUNDING.yml |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| a5fb6cca | Refine README.md for clarity and conciseness (#474) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| 1758ac00 | Revise README for clarity and accuracy |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| ede6aa10 |
chore: release (#473)
Co-authored-by: github-actions[bot] <4****]@u****m> |
github-actions[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| b6090cee | chore: make sure OIDC is actually triggered (#472) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| 915adacf | chore: remove and unpublish unused ip-filter | v1rtl <h****i@v****e> | 12 months ago | |
| ba2d616d | chore: force OIDC | v1rtl <h****i@v****e> | 12 months ago | |
| 2b56825c |
chore: release (#471)
Co-authored-by: github-actions[bot] <4****]@u****m> |
github-actions[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| c9710e34 | chore: changeset | v1rtl <h****i@v****e> | 12 months ago | |
| 0f19f711 | 2025 updates (#470) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| 2d2003ac | ci: inherit pnpm version from package.json | v1rtl <h****i@v****e> | over 1 year ago | |
| a29218dc | fix(app, router): improve perf by caching regex and using `push` instead of s... | v1rtl <h****i@v****e> | over 1 year ago | |
| 6ca52b4d | chore: remove unused c8 | v1rtl <h****i@v****e> | over 1 year ago | |
| 39f34b20 | chore: bump dev deps | v1rtl <h****i@v****e> | over 1 year ago | |
| 773ee103 | merge Merge branch 'master' of https://github.com/tinyhttp/tinyhttp | v1rtl <h****i@v****e> | over 1 year ago | |
| 19a76d0c |
chore(deps-dev): bump vite from 6.2.6 to 6.2.7 (#467)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 478c04c9 | fix: run `autocompat` and add missing"files" dirs | v1rtl <h****i@v****e> | over 1 year ago | |
| 4c5d15bc | chore: fmt | v1rtl <h****i@v****e> | over 1 year ago | |
| 6b76b1f1 | fix(res): incorrect handling of multiple params in `acceptParams` | v1rtl <h****i@v****e> | over 1 year ago | |
| 2586a5d6 | chore: refresh logo | v1rtl <h****i@v****e> | over 1 year ago | |
| fca597bf | test: increase coverage | v1rtl <h****i@v****e> | over 1 year ago | |
| 516eb906 | chore: bump dev deps and examples | v1rtl <h****i@v****e> | over 1 year ago | |
| 1f86f86b | chore: report html as well | v1rtl <h****i@v****e> | over 1 year ago | |
| 2ba766aa |
chore(deps-dev): bump vite from 6.2.4 to 6.2.6 (#465)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 4319f78d |
chore(deps-dev): bump vite from 6.2.1 to 6.2.4 (#462)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 49d25ac4 | chore: bump dev deps | v1rtl <h****i@v****e> | over 1 year ago | |
| 34192e0f |
chore: release (#459)
Co-authored-by: github-actions[bot] <g****]@u****m> |
github-actions[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| d3ae4341 | Fix res send file type signature (#458) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 4f17201a |
chore: release (#456)
Co-authored-by: github-actions[bot] <g****]@u****m> |
github-actions[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 26459169 | Slight refactor (#457) |
v1rtl <h****i@v****e>
Committed by: GitHub <n****y@g****m> |
over 1 year ago |