superagent

• Fixed handling of exceptions thrown from callbacks
• Stricter matching of +json MIME types.

• Clear authorization header on cross-domain redirect

• Added support for "globally" defined headers and event handlers via superagent.agent(). It now remembers default settings for all its requests.
• Added optional callback to .retry() (Alexander Murphy)
• Unified auth args handling in node/browser (Edmundo Alvarez)
• Fixed error handling in zlib pipes (Kornel)
• Documented that 3xx status codes are errors (Mickey Reiss)

• Limit maximum response size. Prevents zip bombs (Kornel)
• Catch and pass along errors in .ok() callback (Jeremy Ruppel)
• Fixed parsing of XHR headers without a newline (nsf)

• Upgrade MIME type dependency to a newer, secure version
• Recognize PDF MIME as binary
• Fix for error in subsequent require() calls (Steven de Salas)

• Support disabling TCP_NODELAY option (#1240) (xiamengyu)
• Send payload in query string for GET and HEAD shorthand API (Peter Lyons)
• Support passphrase with pfx certificate (Paul Westerdale (ABRS Limited))
• Documentation improvements (Peter Lyons)
• Fixed duplicated query string params (#1200) (Kornel)

• Allow crossDomain errors to be retried (#1194) (Michael Olson)
• Read responseType property from the correct object (Julien Dupouy)
• Check for ownProperty before adding header (Lucas Vieira)

• Add errno to distinguish between request timeout and body download timeout (#1184) (Kornel)
• Warn about bogus timeout options (#1185) (Kornel)

• Treat videos like images (Kornel Lesiński)
• Avoid renaming module (Kornel Lesiński)

• Fixed being able to define own parsers when their mime type starts with text/ (Damien Clark)
• withCredentials(false) (Andy Woods)
• Use formData.on instead of .once (Kornel Lesiński)
• Ignore attach("file",null) (Kornel Lesiński)

• Allow retry() and retry(0) (Alexander Pope)
• Allow optional body/data in DELETE requests (Alpha Shuro)
• Fixed query string on retried requests (Kornel Lesiński)

• New .retry(n) method and err.retries (Alexander Pope)
  • superagent will retry the request n times before giving up
• Docs for HTTPS request (Jun Wan Goh)

• Fixed "double callback bug" warning on timeouts of gzipped responses

• Added .ok(callback) that allows customizing which responses are errors (Kornel Lesiński)
• Added .responseType() to Node version (Kornel Lesiński)
• Added .parse() to browser version (jakepearson)
• Fixed parse error when using responseType('blob') (Kornel Lesiński)

• Added .timeout({response:ms}), which allows limiting maximum response time independently from total download time (Kornel Lesiński)
• Added warnings when .end() is called more than once (Kornel Lesiński)
• Added response.links to browser version (Lukas Eipert)
• btoa is no longer required in IE9 (Kornel Lesiński)
• Fixed .sortQuery() on URLs without query strings (Kornel Lesiński)
• Refactored common response code into ResponseBase (Lukas Eipert)

• Added .sortQuery() (vicanso)
• Added support for arrays and bools in .field() (Kornel Lesiński)
• Made superagent.Request subclassable without need to patch all static methods (Kornel Lesiński)

There are no big breaking changes and the upgrade should be smooth.

We no longer support Node 0.x. If you're still using Internet Explorer 6 Node 0.x, please please upgrade ASAP, as the old Node isn't even getting security patches any more.

• Dropped support for Node 0.10 and 0.12.
• Dropped support for componentjs (Damien Caselli)
• Multiple .send() calls mixing Buffer/Blob and JSON data are not possible and will now throw instead of messing up the data.
• Improved .send() data object type check (Fernando Mendes)
• Added pfx TLS option with new pfx() method. (Reid Burke)
• Added common prototype for Node and browser versions (Andreas Helmberger)
• Added http+unix: schema to support Unix sockets (Yuki KAN)
• Added full attach options parameter in the Node version (Lapo Luchini)
• Internally changed .on to .once to prevent possible memory leaks (Matt Blair)
• Made all errors reported as an event (Kornel Lesiński)
• set xhr.response instead of xhr.responseText to err.rawResponse (Pavel Ayusheev)

• Enabled .field() to handle objects (Affan Shahid)
• Added authentication with client certificates (terusus)
• Added .catch() for more Promise-like interface (Maxim Samoilov, Kornel Lesiński)
• Silenced errors from incomplete gzip streams for compatibility with web browsers (Kornel Lesiński)
• Fixed event.direction in uploads (Kornel Lesiński)
• Fixed returned value of overwritten response object's on() method (Juan Dopazo)

• Added timedout property to node Request instance (Alexander Pope)
• Unified null querystring values in node and browser environments. (George Chung)

• Wait for async parsers to avoid double callback (Kornel Lesiński)
• DRY parser selection and response creation code (Kornel Lesiński)
• Treat multipart like other parsers (Kornel Lesiński)
• Errors thrown in .end() callback don't cause the callback to be called twice (Kornel Lesiński)

Breaking changes

Breaking changes are in rarely used functionality, so we hope upgrade will be smooth for most users.

• Browser: The .parse() method has been renamed to .serialize() to avoid inconsistency with NodeJS version (v1.8.3 supports .serialize() too)
• Browser: Query string keys without a value used to be parsed as 'undefined', now their value is '' (empty string) (shura, Kornel Lesiński).
• NodeJS: The redirect event is called after new query string and headers have been set and is allowed to override the request URL (Kornel Lesiński)
• .then() returns a real Promise. Note that use of superagent with promises now requires a global Promise object. If you target Internet Explorer or Node 0.10, you'll need require('es6-promise').polyfill() or similar.
• Upgraded all dependencies (Peter Lyons)
• Renamed properties documented as @api private to have _prefixed names (Kornel Lesiński)

Probably not breaking changes:

• Extracted common functions to request-base (Peter Lyons)
• Fixed race condition in pipe tests (Peter Lyons)
• Handle FormData error events (scriptype)
• Fixed wrong jsdoc of Request#attach (George Chung)
• Updated and improved tests (Peter Lyons)

• Fixed handling of HTTP status 204 with content-encoding: gzip (Andrew Shelton)
• Handling of FormData error events (scriptype)
• Fixed parsing of vnd+json MIME types (Kornel Lesiński)
• Aliased browser implementation of .parse() as .serialize() for forward compatibility

• Fixed form-data incompatibility with IE9

• Extracted common code into request-base class (Peter Lyons)
  • It does not affect the public API, but please let us know if you notice any plugins/subclasses breaking!
• Added option {type:'auto'} to auth method, which enables browser-native auth types (Jungle, Askar Yusupov)
• Added responseType() to set XHR responseType (chris)
• Switched to form-data for browserify-compatible FormData (Peter Lyons)
• Added statusCode to error response when JSON response is malformed (mattdell)
• Prevented TCP port conflicts in all tests (Peter Lyons)
• Updated form-data dependency

• Fix case-sensitivity of header fields introduced by a4ddd6a. (Edward J. Jinotti)
• bump extend dependency, as former version did not contain any license information (Lukas Eipert)

• Fixed a conflict with express when using npm 3.x (Glenn)
• Fixed redirects after a multipart/form-data POST request (cyclist2)

• when attaching files, read default filename from the File object (JD Isaacks)
• add direction property to progress events (Joseph Dykstra)
• update component-emitter & formidable (Kornel Lesiński)
• don't re-encode query string needlessly (Ruben Verborgh)
• ensure querystring is appended when doing stream.pipe(request) (Keith Grennan)
• change set header function, not call this.request() until call this.end() (vicanso)
• add no-op withCredentials to Node API (markdalgleish)
• fix delete breaking on ie8 (kenjiokabe)
• don't let request error override responses (Clay Reimann)
• increased number of tests shared between node and client (Kornel Lesiński)

(same as v1.6.0, but needed re-publishing to npm)

• avoid misleading CORS error message
• add 'progress' event on file/form upload in Node (Olivier Lalonde)
• return raw response if the response parsing fails (Rei Colina)
• parse content-types ending with +json as JSON (Eiryyy)
• fix to avoid throwing errors on aborted requests (gjurgens)
• retain cookies on redirect when hosts match (Tom Conroy)
• add Bower manifest (Johnny Freeman)
• upgrade to latest cookiejar (Andy Burke)

• encode array values as key=1&key=2&key=3 etc... (aalpern, Davis Kim)
• avoid the error which is omitted from 'socket hang up'
• faster JSON parsing, handling of zlib errors (jbellenger)
• fix IE11 sends 'undefined' string if data was undefined (Vadim Goncharov)
• alias del() method as delete() (Aaron Krause)
• revert Request#parse since it was actually Response#parse

• add Request#parse method to client library
• add missing statusCode in client response
• don't apply JSON heuristics if a valid parser is found
• fix detection of root object for webworkers

• fix incorrect content-length of data set to buffer
• serialize request data takes into account charsets
• add basic promise support via a then function

• add progress events to downlodas
• make usable in webworkers
• add support for 308 redirects
• update node-form-data dependency
• update to work in react native
• update node-mime dependency

• Fix responseType checks without xhr2 and ie9 tests (rase-)
• errors have .status and .response fields if applicable (defunctzombie)
• fix end callback called before saving cookies (rase-)