Bump version

patrickjuchli · patrickjuchli · commit b35e76082ffa · 2026-04-29T16:32:56.000+02:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 6.0.0
+
+- **Breaking change**: This library does not allow separate transfer hosts by default anymore. This provides security by default against FTP bounce attacks. This FTP feature is used very rarely, there is a good chance you don't actually have to change anything in your code. You can allow separate transfer hosts by using `allowSeparateTransferHost: true` when instantiating a `Client`. (Thanks, @Jvr2022)
+
 ## 5.3.1
 
 - Fixed: Protect against unbounded control response, fixes https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-rpmf-866q-6p89.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "basic-ftp",
-  "version": "5.3.1",
+  "version": "6.0.0",
   "description": "FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.",
   "main": "dist/index",
   "types": "dist/index",

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "basic-ftp",`
`3`		`- "version": "5.3.1",`
	`3`	`+ "version": "6.0.0",`
`4`	`4`	`"description": "FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.",`
`5`	`5`	`"main": "dist/index",`
`6`	`6`	`"types": "dist/index",`