Bump express-session from 1.18.0 to 1.18.1

[dependabot[bot]]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps express-session from 1.18.0 to 1.18.1.

Release notes

Sourced from express-session's releases.

1.18.1

What's Changed

• chore: add support for OSSF scorecard reporting by @​inigomarquinez in expressjs/session#984
• dep: cookie@0.7.2 by @​knolleary in expressjs/session#997
• Release: 1.18.1 by @​UlisesGascon in expressjs/session#998

New Contributors

• @​inigomarquinez made their first contribution in expressjs/session#984
• @​knolleary made their first contribution in expressjs/session#997
• @​UlisesGascon made their first contribution in expressjs/session#998

Full Changelog: https://github.com/expressjs/session/compare/v1.18.0...v1.18.1

Changelog

Sourced from express-session's changelog.

1.18.1 / 2024-10-08

• deps: cookie@0.7.2
  • Fix object assignment of hasOwnProperty
• deps: cookie@0.7.1
  • Allow leading dot for domain
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing
• deps: cookie@0.7.0
  • perf: parse cookies ~10% faster
  • fix: narrow the validation of cookies to match RFC6265
  • fix: add main to package.json for rspack

Commits

• bbeca94 1.18.1
• 341b179 dep: cookie@0.7.2 (#997)
• 8f0a1c4 ci: add support for OSSF scorecard reporting (#984)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for express-session since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)