Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 19, 2022

Bumps cookie-session from 1.4.0 to 2.0.0.

Release notes

Sourced from cookie-session's releases.

2.0.0

  • Change default cookie name to session
  • Change .populated to .isPopulated
  • Create new session for all types of invalid sessions
  • Drop support for Node.js 0.8
  • Remove private req.session.save()
  • Remove the key option; use name instead
  • Remove undocumented req.session.length to free up key name
  • Remove undocumented req.sessionCookies and req.sessionKey
  • Save all enumerable properties on req.session
    • Including _-prefixed properties
  • Use Object.defineProperty instead of deprecated __define*__
  • Use safe-buffer for improved Buffer API
  • deps: cookies@0.8.0
    • Fix check for default secure option behavior
    • Fix maxAge option preventing cookie deletion
    • Support "none" in sameSite option
    • deps: depd@~2.0.0
    • deps: keygrip@~1.1.0
    • perf: remove argument reassignment
  • deps: debug@3.2.7
    • Add DEBUG_HIDE_DATE
    • Add 256 color mode support
    • Enable / disable namespaces dynamically
    • Make millisecond timer namespace-specific
    • Remove DEBUG_FD support
    • Use Date#toISOString() when output is not a TTY
  • deps: on-headers@~1.0.2
    • Fix res.writeHead patch missing return value
  • deps: safe-buffer@5.2.1
  • perf: reduce the scope of try-catch deopt
  • perf: remove internal reference to request from session object

2.0.0-rc.1

  • Remove private req.session.save()
  • Remove undocumented req.session.length to free up key name
  • Remove undocumented req.sessionCookies and req.sessionKey
  • deps: cookies@0.8.0
    • Fix check for default secure option behavior
    • Fix maxAge option preventing cookie deletion
    • Support "none" in sameSite option
    • deps: depd@~2.0.0
    • deps: keygrip@~1.1.0
    • perf: remove argument reassignment
  • deps: debug@3.2.6
  • deps: on-headers@~1.0.2
    • Fix res.writeHead patch missing return value
  • deps: safe-buffer@5.2.0
  • perf: remove internal reference to request from session object

... (truncated)

Changelog

Sourced from cookie-session's changelog.

2.0.0 / 2021-12-16

  • deps: debug@3.2.7
  • deps: safe-buffer@5.2.1

2.0.0-rc.1 / 2020-01-23

  • Remove private req.session.save()
  • Remove undocumented req.session.length to free up key name
  • Remove undocumented req.sessionCookies and req.sessionKey
  • deps: cookies@0.8.0
    • Fix check for default secure option behavior
    • Fix maxAge option preventing cookie deletion
    • Support "none" in sameSite option
    • deps: depd@~2.0.0
    • deps: keygrip@~1.1.0
    • perf: remove argument reassignment
  • deps: debug@3.2.6
  • deps: on-headers@~1.0.2
    • Fix res.writeHead patch missing return value
  • deps: safe-buffer@5.2.0
  • perf: remove internal reference to request from session object

2.0.0-beta.3 / 2017-10-13

  • deps: cookies@0.7.1
    • deps: depd@~1.1.1
    • deps: keygrip@~1.0.2
  • deps: debug@3.1.0
    • Add DEBUG_HIDE_DATE
    • Add 256 color mode support
    • Enable / disable namespaces dynamically
    • Make millisecond timer namespace-specific
    • Remove DEBUG_FD support
    • Use Date#toISOString() when output is not a TTY
  • deps: safe-buffer@5.1.1

2.0.0-beta.2 / 2017-05-23

  • Create new session for all types of invalid sessions
  • Use safe-buffer for improved Buffer API
  • deps: debug@2.6.8
    • Fix DEBUG_MAX_ARRAY_LENGTH
    • deps: ms@2.0.0

2.0.0-beta.1 / 2017-02-19

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [cookie-session](https://github.com/expressjs/cookie-session) from 1.4.0 to 2.0.0.
- [Release notes](https://github.com/expressjs/cookie-session/releases)
- [Changelog](https://github.com/expressjs/cookie-session/blob/master/HISTORY.md)
- [Commits](expressjs/cookie-session@1.4.0...v2.0.0)

---
updated-dependencies:
- dependency-name: cookie-session
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 19, 2022
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 19, 2024

Superseded by #339.

@dependabot dependabot bot closed this Feb 19, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dev/cookie-session-2.0.0 branch February 19, 2024 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants