This is a tracking issue for release 4.17.

Please keep feature requests in their own issues

If you want to make a comment on a particular change, please make the comment in the "Files changed" tab so comments are not lost during a rebase.

List of changes for release:

• Add express.raw to parse raw bodies Expose bodyParser.raw on express #3708
• Add express.text to parse text bodies expose text middleware of bodyparser #3455
• Improve error message for non-strings to res.sendFile Better error handling for sendFile #3582
• Improve error message for null/undefined to res.status Throw on bad argument to res.status() #2795 Throw error if argument to res.status is null or undefined #2797 Throw TypeError if argument passed to res.status is null or undefined #3111
• Support multiple hosts in X-Forwarded-Host req.hostname: check first comma-delimited host #3494 req.hostname: check first comma-delimited host #3495
• Support Node.js 9.x remove nodejs 9 in nightly  #3617
• Support Node.js 10.x Update build matrix #3656
• Support Node.js 11.x
• Support Node.js 12.x chore(travis) add node 12 #3946
• Upgrade accepts to 1.3.7 to bring in sorting fixes
• Upgrade body-parser to 1.19.0 to bring in new encoding, pb shorthand, and url encoded parse fix
• Upgrade content-disposition to 0.5.3
• Upgrade cookie to 0.4.0 to add support for SameSite=None Allow response cookie sameSite value "none" #3958
• Upgrade finalhandler to 1.1.2 for stricter CSP header
• Upgrade parseurl to 1.3.3
• Upgrade proxy-addr to 2.0.5
• Upgrade qs to 6.7.0 to bring in query parse fix
• Upgrade range-parser to 1.2.1
• Upgrade send to 0.17.1 to bring in stricter CSP and adjusted MIME types different mime type for .bmp files since 4.16.0 #3486
• Upgrade serve-static to 1.14.1 to bring in send 0.17.1 changes
• Upgrade setprototypeof to 1.1.1
• Upgrade statuses to 1.5.0
• Upgrade type-is to 1.6.18

Testing this release

If you want to try out this release, you can install it with the following commands:

$ npm cache clean express
$ npm install expressjs/express#4.17

Owners/collaborators: please do not merge this PR :)