This is a tracking issue for release 4.18.

Please keep feature requests in their own issues

If you want to make a comment on a particular change, please make the comment in the "Files changed" tab so comments are not lost during a rebase.

List of changes for release:

• Add "root" option to res.download res.download building a wrong path when root options is set #4834 Add root support in res.download() #4855
• Allow options without filename in res.download
• Deprecate non-integer status codes in res.status Deprecate non integer status codes in v4 #4223
• Fix behavior of non-number maxAge in res.cookie A Cookie maxAge of undefined causes incorrect behavior. #3935 Validate maxAge appropriateness before use #3936
• Fix handling very large stacks of sync middleware Correctly invoke async router callback asynchronously #4891
• Ignore Object.prototype values in settings through app.set/app.get Settings includes values on Object.prototype #4802 Ignore settings on Object.prototype #4803
• Invoke default with same arguments as types in res.format res.format(): call default using obj as the context #3587
• Support Node.js 15.x chore: add ci from node 15 to node 16 #4767
• Support Node.js 16.x chore: add ci from node 15 to node 16 #4767
• Support Node.js 17.x
• Support Node.js 18.x
• Support proper 205 responses using res.send res.sendStatus(205) returns a Reset Content body #4592 Send Content-Length: 0 and empty chunk for HTTP 205 #4596
• Use http-errors for res.format error
• Upgrade body-parser to 1.20.0
• Upgrade cookie to 0.5.0
• Upgrade depd to 2.0.0 Feature/4171 depd #4174
• Upgrade finalhandler to 1.2.0
• Upgrade send to 0.18.0
• Upgrade serve-static to 1.15.0
• Upgrade statuses to 2.0.1 deps: statuses@2.0.1 #4336

Testing this release

If you want to try out this release, you can install it with the following commands:

$ npm cache clean express
$ npm install expressjs/express#4.18

Owners/collaborators: please do not merge this PR :)