Update changelogs (#5224)

* moves last unreleasd changes to changeset
* gets last version of express cache on demand

Author: ValJed

.changeset/frank-horses-sink.md

@@ -0,0 +1,5 @@
+---
+"apostrophe": minor
+---
+
+Restores relative import paths inside Vite-generated entrypoints on \*nix builds so dev server HMR works again, while keeping the Windows-specific absolute path workaround.

.changeset/green-dingos-like.md

@@ -0,0 +1,5 @@
+---
+"apostrophe": minor
+---
+
+Fixes an issue where the frontend was caching stale choices for `select`, `radio` and `checkboxes`

.changeset/hip-cycles-warn.md

@@ -0,0 +1,5 @@
+---
+"apostrophe": minor
+---
+
+Bumped dependency on `express-cache-on-demand` to guarantee installation of recent fixes for edge cases that could share a response between two locales of a single-site project, report errors without a process restart, and correctly handle `res.send('')` with an empty string.

.changeset/pink-hands-enjoy.md

@@ -0,0 +1,5 @@
+---
+"apostrophe": patch
+---
+
+When we reach the max in a widget area, the `Add Content` button is now disabled.

.changeset/purple-balloons-own.md

@@ -0,0 +1,5 @@
+---
+"apostrophe": patch
+---
+
+Fixes an issue where the frontend was caching stale choices for `select`, `radio` and `checkboxes` fields that were saved but no longer valid (i.e removed from the schema).

.changeset/twelve-paws-sniff.md

@@ -0,0 +1,5 @@
+---
+"@apostrophecms/login-totp": patch
+---
+
+Bumbs `eslint-config-apostrophe` to `5`, fixes errors, removes unused dependencies.

packages/apostrophe/CHANGELOG.md

@@ -1,22 +1,5 @@
 # Changelog
 
-## UNRELEASED
-
-### Adds
-
-
-### Fixes
-
-* Fixes an issue where the frontend was caching stale choices for `select`, `radio` and `checkboxes` fields that were saved but no longer valid (i.e removed from the schema).
-* When we reach the max in a widget area, the `Add Content` button is now disabled.
-
-### Changes
-
-* Fixes an issue where the frontend was caching stale choices for `select`, `radio` and `checkboxes`
-fields that were saved but no longer valid (i.e removed from the schema).
-* Bumped dependency on `express-cache-on-demand` to guarantee installation of recent fixes for edge cases that could share a response between two locales of a single-site project, report errors without a process restart, and correctly handle `res.send('')` with an empty string.
-* Restores relative import paths inside Vite-generated entrypoints on *nix builds so dev server HMR works again, while keeping the Windows-specific absolute path workaround.
-
 ## 4.24.1 (2025-12-04)
 
 ### Fixes

packages/event/CHANGELOG.md

@@ -1,11 +1,5 @@
 # Changelog
 
-## UNRELEASED
-
-### Changes
-
-* Removes circle ci, adds github actions.
-
 ## 1.0.2 (2024-09-05)
 
 ### Adds

packages/express-cache-on-demand/CHANGELOG.md

@@ -0,0 +1,23 @@
+# Changelog
+
+## 1.0.4 (2025-12-01)
+
+* Default hash function now distinguishes requests by hostname, and respects `req.originalUrl` in preference to `req.url` if available (ApostropheCMS).
+* Passing the empty string to `res.send()` no longer causes a failure.
+* If `express-cache-on-demand` does fail due to an unsupported way of ending a response, just issue a 500 error and log a useful message. Don't terminate the process.
+
+## 1.0.3 (2022-02-18)
+
+* eslint fixes
+
+## 1.0.2 (2017-11-17)
+
+* Supports getHeader
+
+## 1.0.1 (2016-10-07)
+
+* Modern dependencies
+
+## 1.0.0 (2016-10-17)
+
+* First stable release. Status code support in `res.redirect`, thanks to Alexey Astafiev

packages/express-cache-on-demand/index.js

@@ -15,21 +15,26 @@ function expressCacheOnDemand(hasher = expressHasher) {
       _.each(_res.headers || {}, (val, key) => {
         res.setHeader(key, val);
       });
-      if (_res.redirect) {
+      if (_res.redirect != null) {
         return res.redirect(_res.redirectStatus, _res.redirect);
       }
-      if (_res.body) {
+      if (_res.body != null) {
         return res.send(_res.body);
       }
-      if (_res.raw) {
+      if (_res.raw != null) {
         return res.end(_res.raw);
       }
+
       // We know about ending a request with one of
       // the above three methods. Anything else doesn't
       // make sense with this middleware
 
-      console.log('Attempted Request URL: ' + req.url);
-      throw 'cacheOnDemand.middleware does not know how to deliver this response, use the middleware only with routes that end with res.redirect, res.send or res.end';
+      console.error(
+        `cacheOnDemand.middleware does not know how to deliver a response for ${req.originalUrl || req.url},\n` +
+        'use the middleware only with routes that end with res.redirect, res.send or res.end'
+      );
+      // Report the bad news, but don't take the entire process down
+      return res.status(500).send('error');
     });
   };
 
@@ -131,6 +136,10 @@ function expressHasher(req) {
       return false;
     }
   });
-
-  return !safe ? safe : req.url;
+  if (!safe) {
+    return false;
+  }
+  // Create a key that distinguishes requests by hostname, and respect req.originalUrl
+  // if available (ApostropheCMS)
+  return `${req.hostname}:${req.originalUrl || req.url}`;
 }