9.5.0 (2026-09-29)

Features

• cli: add --status-codes flag to accept non-2XX http statuses (46efb67), closes #187 #49

9.4.1 (2026-09-29)

Bug Fixes

• types: restore @types/wait-on compatibility (callback err?: Error, aliases) (348126a), closes jeffbski/wait-on#250 jeffbski/wait-on#250
• types: widen headers to accept number and boolean values (#250) (3c15038)

9.4.0 (2026-09-28)

Features

• add command resource (15e2d99)
• command: serialize execs and add per-attempt commandTimeout (4af2299), closes #88

9.3.0 (2026-09-28)

Features

• accept a string or string array as waitOn opts (7f7358e), closes #61 #61
• add TypeScript definitions (496b2d5)
• string-opts overload and type-check test for the TS defs (0fab870), closes jeffbski/wait-on#197

9.2.0 (2026-09-28)

Bug Fixes

• deps: bump transitive @humanfs/node and js-yaml in lockfile (039354f)
• deps: refresh dependencies within majors (3f64a8b)
• destroy tcp/unix sockets after checks (9951f3c), closes jeffbski/wait-on#82
• fail fast on malformed http/tcp resources and support tcp IPv6 (02033ff), closes jeffbski/wait-on#217 jeffbski/wait-on#140 jeffbski/wait-on#141
• release: let npm use OIDC and stop shipping repo tooling in the tarball (8e36f4a)

Features

• parseArgs non-strict parity with minimist (9.2.0) (9c6cc55), closes #218
• repeatable -H/--header CLI flag (#126) (a917ad4)

Updated some dependencies

• axios
• joi
• mocha
• eslint-plugin-chai-friendly

Cleaned up unnecessary files from npm published package, added code coverage

Removed:

• .fastembed_cache
• .github
• .nyc_output
• coverage
• .editorconfig
• .nycrc.json
• .prettierrc.js
• eslint.config.mjs

Increased code coverage

Thanks @aarongoldenthal

Update minor deps for security vulnerabilities

• axios
  • follow-redirects
• joi

Update minor dependencies and npm audit fixes

Updated patch dependencies including axios and lodash

Update to jsdoc. Thanks @westonruter

Minor dependencies updated: eslint, mocha, axios

Replaced unmaintained expect-legacy package with chai. Thanks @bdkopen

Update minor deps:

• axios
• eslint

Updating major version to align with removal of unspported versions of Node.js

wait-on will continue to support the active and maintained releases listed at https://nodejs.org/en/about/previous-releases which currently is 20, 22, 24.

There are no other breaking changes other than changing the versions of Node.js that are supported.

Update minor deps including axios@1.12.1 and joi@18

Update dependencies including axios@1.11.0 which also updated form-data@4.0.4

• update minor deps
  • axios@1.8.2 fixes CVE-2024-39338
• update eslint to v9

Dependency updates:

• axios@1.7.9
• eslint-plugin-import@2.31.0
• cross-spawn - npm audit fix

Updated for security vulnerabilities with axios@1.7.4 and braces.

Breaking change in using latest axios with a unix socket URL

As part of the axios update, the syntax for using a socket with an http URL in axios has changed so you must specify the protocol and server

For example:

http://unix:SOCKETPATH:http://server/foo/bar

instead of just using only the path (no protocol and no server)

http://unix:SOCKETPATH:/foo/bar

Due to this change, I have updated my tests, docs, bumped the major version.

Update axios from 0.27.2 to latest 1.6.1 which fixes security vulnerability CVE-2023-45857.

Thanks @AndrewMax for the PR #147 and also for those that confirmed it.

Update dependencies.

Add ability to specify timeout, httpTimeout, and tcpTimeout with a unit (ms, m, s, h), defaults to ms if not specified. Thanks @ntkoopman

Removed unnecessary eslint-plugin-standard. It was no longer needed since already included in another package.

Updated dependencies:

• minimist
• eslint
• minimatch
• axios
• mocha
• rxjs

The update to latest mocha removed support for Node.js below 12.

Updated minor dependencies to fix vulnerabilities

Other than dropping support for Node.js v8 there should be no other breaking changes.

Node.js v8 was no longer supported by the yargs parser. Node.js v8 users should use v5.3.0

Allow resources to be passed in via config file. Thanks @michaelmerrill for the PR.

Example config.js file with resources

module.exports = {
  resources: ['http://localhost:8123', 'http://localhost:8123/foo'],
};

Updated lodash@4.17.21

Updated lodash dependency to close vulnerability

• expose the remaining resources in the timeout error message (thanks @jmealo)
• update from the deprecated @hapi/joi to joi (thanks @AleF83)

Add proxy option which can override the http(s) proxy which might be configured in environment variables.

• opts.proxy: undefined, false, or object as defined in axios. Default is undefined. If not set (undefined) axios detects proxy from env vars http_proxy and https_proxy. https://github.com/axios/axios#config-defaults

  // example proxy object
  {
    host: '127.0.0.1',
    port: 9000,
    auth: {
      username: 'mikeymike',
      password: 'rapunz3l'
    }
  }

lodash@4.17.18 update which resolved some potential lodash vulnerabilities

Force axios to use http adapter to keep logs clean if jest/jsdom are used with the wait-on API.

If jest/jsdom is used then a polyfill for xhr is created which will cause axios to default the adapter to it. Since jsdom logs all errors use of wait-on will have any failed attempts to connect logged which is rather noisy and misleading.

By forcing axios to use the node.js http adapter instead this problem is bypassed keeping logs clean.

Switch HTTP client from request to axios

Since the request package is no longer receiving updates, wait-on switched to using axios. Attempt to keep the same wait-on options as much as possible.

These breaking changes occurred in the switch:

1. There is only one option for redirects followRedirect: true|false (defaults to true).
2. httpSignature is not implemented in axios and now not available. (If this feature is still desired, please help by providing a pull request to implement it.)
3. auth allows only username and password but not the previous aliases user and pass

add optional validateStatus fn property

If validateStatus property is provided in the config and set to a function, it will use this to validate whether a status is valid.

The default validateStatus if not provided is

validateStatus: function (status) {
  return status >= 200 && status < 300;
}

To also allow a 401 unauthorized as a valid status

validateStatus: function (status) {
  return status === 401 || (status >= 200 && status < 300);
}

Since the request package is no longer receiving updates, wait-on switched to using axios. Attempt to keep the same wait-on options as much as possible.

These breaking changes occurred in the switch:

1. There is only one option for redirects followRedirect: true|false (defaults to true).
2. httpSignature is not implemented in axios and now not available. (If this feature is still desired, please help by providing a pull request to implement it.)
3. auth allows only username and password but not the previous aliases user and pass

Updated dependencies which closed security vulnerability in minimist and acorn.

Rewrite of the main code to simplify the logic and reduce possibility for race conditions. Bumped the major version do to the rewrite and also a minor change in how the stability window is used. In the new version the stability window only applies to file resources (waiting for them to exist and stop changing), for other resources they are completed as soon as available.

Also in the new logic, once a resource becomes available the system doesn't continue to check it, it only continues checking the pending resources.

Logging was improved and simplified.

• -l / --log just indicate what resources are still pending
• -v / --verbose includes resources that are pending and debug info from checks

Updated many dependencies including rxjs, and joi. Removed core-js polyfill as no longer needed.

Added a -s / --simultaneous optional flag to the command. If provided it will limit the number of simultaneous or concurrent connections to an individual resource. It defaults to Infinity so it will make requests without caring about previous ones. If you were to set it to "1" then it wouldn't be sending new requests to http://foo before the previous one finished (success, failure, or timeout).

• Added --httpTimeout option

--httpTimeout

  Maximum time in ms to wait for an HTTP HEAD/GET request, default 0
  which results in using the OS default

• Upgraded dependencies: #38, thanks @matijagaspar

• Require Node Version +8.9.0: #33

Thanks to @valscion for summarizing the release notes. Also thanks to @perry-mitchell for mentioning that this should have been a major release bump due to dropping support for Node 6. Node 6 users should use v3.2.0. In the future, I will bump major version when Node version support changes.

Added --tcpTimeout option

 --tcpTimeout

   Maximum time in ms for tcp connect, default 300ms

thanks @Sarithis

Now supports promises thanks to @gyszalai

Pushed to update the Readme that is displayed for npmjs.com to mention Node.js v6+ requirement for wait-on@3. Refers node.js v4 users to wait-on@2.1.2 and older engines to wait-on@1.5.4.

Update packages which results in drop of support for Node 4.

V3+ requires node 6+

Updated:

• mocha@5.2.0
• expect replaced with expect-legacy@1.20.2 (later expect doesn't support mocha, only jest)
• core-js@2.5.7
• joi@13.0.0
• request@2.88.0

wait-on@2.1.2 is last version to support Node.js v4.

Reverted recent updates which dropped support for Node v4.

updated travis CI to test with Node.js v4, 6, 8, 10, and latest

Moving these previous breaking updates to major release v3.

Minor readme update. Basically the same as v2.0.0

Updated joi dependency which requires Node.js v4+, so starting with this release wait-on requires Node.js v4 or greater.