What's Changed

• perf: faster route lookup (+8.7% geomean, up to +40% on long static routes) by @mcollina in #456
• perf: make repeated %25 sanitisation linear instead of quadratic by @mcollina in #455
• fix: bound regex host lookup cache by @mcollina in #454
• fix: do not leak a global from the compiled constraint matcher by @gurgunday in #458
• fix(constrainer): guard strategy lookups against inherited Object prototype properties by @koding88 in #452
• feat: compiler mode for route lookup by @mcollina in #462
• fix: use strict mode in all generated functions by @gurgunday in #464
• fix: do not remove duplicate slashes from the querystring by @baptisteArno in #463
• perf: validate absolute URLs without throwing by @gurgunday in #460
• fix: do not remove duplicate slashes from the querystring in compiled lookups by @gurgunday in #465
• perf: make route registration linear instead of quadratic by @Skn0tt in #457

New Contributors

• @koding88 made their first contribution in #452
• @baptisteArno made their first contribution in #463
• @Skn0tt made their first contribution in #457

Full Changelog: v9.9.0...v9.10.0

What's Changed

• chore: migrate to ESLint 9 and neostandard by @mcollina in #450
• fix: parse absolute-form request targets safely by @mcollina in #451

Full Changelog: v9.8.0...v9.9.0

What's Changed

• fix: serialize RegExp values in prettyPrint constraints and meta by @aquie00t in #443
• fix: keep static parts between parameters in the route pattern by @rajanpanth in #442
• chore: bump actions/setup-node from 6 to 7 by @dependabot[bot] in #445
• chore: bump chalk from 5.6.2 to 6.0.0 in the dev-dependencies group by @dependabot[bot] in #446
• perf: faster route lookup (+18.7% geomean, every benchmark scenario faster) by @mcollina in #447
• refactor(types): migrate from tsd to tstyche by @Tony133 in #444

New Contributors

• @rajanpanth made their first contribution in #442
• @Tony133 made their first contribution in #444

Full Changelog: v9.7.0...v9.8.0

What's Changed

• fix: backtrack on regex param mismatch by @mcollina in #427
• fix: apply root path fallback for optional params in off() by @aquie00t in #428
• ci: add node v26 to test matrix by @aquie00t in #435
• perf(host): cache regex lookup results in HostStorage by @aquie00t in #436
• chore: bump inquirer from 13.4.3 to 14.0.2 in the dev-dependencies group by @dependabot[bot] in #437
• chore: bump fastify/github-action-merge-dependabot from 3.12.0 to 3.15.0 by @dependabot[bot] in #438
• chore: bump @types/node from 25.9.4 to 26.1.0 in the dev-dependencies group by @dependabot[bot] in #440
• fix: prevent done from being called multiple times on async constraint errors by @deepview-autofix in #425
• fix: align isParamSafe state in findRoute with _on by @deepview-autofix in #424
• chore: bump actions/checkout from 6 to 7 by @dependabot[bot] in #439
• fix: avoid crash on undefined regex capture during route lookup by @bianyifan in #441

New Contributors

• @aquie00t made their first contribution in #428
• @deepview-autofix made their first contribution in #425
• @bianyifan made their first contribution in #441

Full Changelog: v9.6.0...v9.7.0

What's Changed

• chore: bump borp from 0.21.0 to 1.0.0 in the dev-dependencies group by @dependabot[bot] in #419
• perf: optimize bitmask handler retrieval using Math.clz32 by @gurgunday in #420
• chore: bump fastify/github-action-merge-dependabot from 3.11.2 to 3.12.0 by @dependabot[bot] in #429
• chore: bump pre-commit from 1.2.2 to 2.0.0 in the dev-dependencies group by @dependabot[bot] in #430
• feat: add onMaxParamLength to support 414 URI Too Long by @oldregime in #432

New Contributors

• @oldregime made their first contribution in #432

Full Changelog: v9.5.0...v9.6.0

What's Changed

• feat: expose path normalization utility methods by @mcollina in #417
• fix: ignore inherited constraint keys by @mcollina in #416
• feat: expose path utility methods and document them by @mcollina in #418
• chore: bump fastify/github-action-merge-dependabot from 3.11.1 to 3.11.2 by @dependabot[bot] in #408

Full Changelog: v9.4.0...v9.5.0

What's Changed

• chore: bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in #398
• chore: bump the dev-dependencies group with 2 updates by @dependabot[bot] in #399
• ci(nodejs): add node 24 to test matrix by @Fdawgs in #400
• ci: use tags for immutable github actions by @Fdawgs in #401
• chore: bump @types/node from 22.15.34 to 24.0.8 in the dev-dependencies group by @dependabot[bot] in #403
• chore: bump actions/setup-node from 4 to 6 by @dependabot[bot] in #409
• chore: bump the dev-dependencies group across 1 directory with 2 updates by @dependabot[bot] in #410
• chore: bump actions/checkout from 4 to 6 by @dependabot[bot] in #412
• chore: bump the dev-dependencies group with 2 updates by @dependabot[bot] in #413
• feat: expose sanitizeUrlPath by @Eomm in #415

Full Changelog: v9.3.0...v9.4.0

What's Changed

• Feat/node test runner by @ilteoood in #381
• chore: prefer charCodeAt by @gurgunday in #384
• perf: improve string operations by @gurgunday in #382
• chore: bump the dev-dependencies group with 4 updates by @dependabot in #385
• chore: bump fastify/github-action-merge-dependabot from 3.10.1 to 3.11.0 by @dependabot in #386
• chore: add typings for query string parser by @vwong in #387
• perf: use map for sting-based stores by @gurgunday in #383
• chore: bump safe-regex2 from 4.0.1 to 5.0.0 in the dependencies-major group by @dependabot in #390
• ci(node.js): update workflow by @Fdawgs in #392
• build(dependabot): reduce npm updates to monthly by @Fdawgs in #394
• chore(package): explicitly declare js module type by @Fdawgs in #391
• chore: bump fastify/github-action-merge-dependabot from 3.11.0 to 3.11.1 by @dependabot in #395
• chore(package): update engines.node to >=20 by @Fdawgs in #397
• ci(node.js): pin actions to commit-hash by @Fdawgs in #396
• fix: missing the param done of lookup method by @zhennann in #389
• perf: refactor escapeRegExp and removeDuplicateSlashes functions by @DarkGL in #388

New Contributors

• @gurgunday made their first contribution in #384
• @vwong made their first contribution in #387
• @zhennann made their first contribution in #389
• @DarkGL made their first contribution in #388

Full Changelog: v9.1.0...v9.3.0

What's Changed

• fix: add QUERY to httpMethods which was added in Node 22.2.0 by @andokai in #380

New Contributors

• @andokai made their first contribution in #380

Full Changelog: v9.0.1...v9.1.0

⚠️ Security release ⚠️

Fixes: GHSA-rrr8-f88r-h8q6 CVE-2024-45813

Full Changelog: v9.0.0...v9.0.1