deps: cookie@0.7.2 (#116)

Resolves issue #114 for GHSA-pxg6-pf52-xh8x.
expressjs · Oct 8, 2024 · ccf1f54 · ccf1f54
1 parent 429cfd4
commit ccf1f54
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 1 deletion.
diff --git a/HISTORY.md b/HISTORY.md
@@ -1,6 +1,23 @@
 unreleased
 ==========
 
+  * deps: cookie@0.7.2
+    - Fix object assignment of `hasOwnProperty`
+  * deps: cookie@0.7.1
+    - Allow leading dot for domain
+      - Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
+    - Add fast path for `serialize` without options, use `obj.hasOwnProperty` when parsing
+  * deps: cookie@0.7.0
+    - perf: parse cookies ~10% faster
+    - fix: narrow the validation of cookies to match RFC6265
+    - fix: add `main` to `package.json` for rspack
+  * deps: cookie@0.6.0
+    - Add `partitioned` option
+  * deps: cookie@0.5.0
+    - Add `priority` option
+    - Fix `expires` option to reject invalid dates
+    - pref: improve default decode speed
+    - pref: remove slow string split in parse
   * deps: cookie@0.4.2
     - pref: read value only when assigning in parse
     - pref: remove unnecessary regexp in parse

diff --git a/package.json b/package.json
@@ -13,7 +13,7 @@
     "middleware"
   ],
   "dependencies": {
-    "cookie": "0.4.2",
+    "cookie": "0.7.2",
     "cookie-signature": "1.0.6"
   },
   "devDependencies": {