search

smashwilson / pushbot

A Hubot instance that's here to protect you.
11 stars 15 forks source link

Bump cookie-session from 1.4.0 to 2.0.0 #700

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps cookie-session from 1.4.0 to 2.0.0.

Release notes

Sourced from cookie-session's releases.

2.0.0

  • Change default cookie name to session
  • Change .populated to .isPopulated
  • Create new session for all types of invalid sessions
  • Drop support for Node.js 0.8
  • Remove private req.session.save()
  • Remove the key option; use name instead
  • Remove undocumented req.session.length to free up key name
  • Remove undocumented req.sessionCookies and req.sessionKey
  • Save all enumerable properties on req.session
    • Including _-prefixed properties
  • Use Object.defineProperty instead of deprecated __define*__
  • Use safe-buffer for improved Buffer API
  • deps: cookies@0.8.0
    • Fix check for default secure option behavior
    • Fix maxAge option preventing cookie deletion
    • Support "none" in sameSite option
    • deps: depd@~2.0.0
    • deps: keygrip@~1.1.0
    • perf: remove argument reassignment
  • deps: debug@3.2.7
    • Add DEBUG_HIDE_DATE
    • Add 256 color mode support
    • Enable / disable namespaces dynamically
    • Make millisecond timer namespace-specific
    • Remove DEBUG_FD support
    • Use Date#toISOString() when output is not a TTY
  • deps: on-headers@~1.0.2
    • Fix res.writeHead patch missing return value
  • deps: safe-buffer@5.2.1
  • perf: reduce the scope of try-catch deopt
  • perf: remove internal reference to request from session object

2.0.0-rc.1

  • Remove private req.session.save()
  • Remove undocumented req.session.length to free up key name
  • Remove undocumented req.sessionCookies and req.sessionKey
  • deps: cookies@0.8.0
    • Fix check for default secure option behavior
    • Fix maxAge option preventing cookie deletion
    • Support "none" in sameSite option
    • deps: depd@~2.0.0
    • deps: keygrip@~1.1.0
    • perf: remove argument reassignment
  • deps: debug@3.2.6
  • deps: on-headers@~1.0.2
    • Fix res.writeHead patch missing return value
  • deps: safe-buffer@5.2.0
  • perf: remove internal reference to request from session object

... (truncated)

Changelog

Sourced from cookie-session's changelog.

2.0.0 / 2021-12-16

  • deps: debug@3.2.7
  • deps: safe-buffer@5.2.1

2.0.0-rc.1 / 2020-01-23

  • Remove private req.session.save()
  • Remove undocumented req.session.length to free up key name
  • Remove undocumented req.sessionCookies and req.sessionKey
  • deps: cookies@0.8.0
    • Fix check for default secure option behavior
    • Fix maxAge option preventing cookie deletion
    • Support "none" in sameSite option
    • deps: depd@~2.0.0
    • deps: keygrip@~1.1.0
    • perf: remove argument reassignment
  • deps: debug@3.2.6
  • deps: on-headers@~1.0.2
    • Fix res.writeHead patch missing return value
  • deps: safe-buffer@5.2.0
  • perf: remove internal reference to request from session object

2.0.0-beta.3 / 2017-10-13

  • deps: cookies@0.7.1
    • deps: depd@~1.1.1
    • deps: keygrip@~1.0.2
  • deps: debug@3.1.0
    • Add DEBUG_HIDE_DATE
    • Add 256 color mode support
    • Enable / disable namespaces dynamically
    • Make millisecond timer namespace-specific
    • Remove DEBUG_FD support
    • Use Date#toISOString() when output is not a TTY
  • deps: safe-buffer@5.1.1

2.0.0-beta.2 / 2017-05-23

  • Create new session for all types of invalid sessions
  • Use safe-buffer for improved Buffer API
  • deps: debug@2.6.8
    • Fix DEBUG_MAX_ARRAY_LENGTH
    • deps: ms@2.0.0

2.0.0-beta.1 / 2017-02-19

... (truncated)

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 2 years ago

Looks like cookie-session is up-to-date now, so this is no longer needed.