[Snyk] Upgrade express-session from 1.15.3 to 1.17.1

[snyk-bot]

Snyk has created this PR to upgrade express-session from 1.15.3 to 1.17.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 7 months ago, on 2020-04-17.

Release notes

Package name: express-session

• 1.17.1 - 2020-04-17
  
  • Fix internal method wrapping error on failed reloads
• 1.17.0 - 2019-10-11
  
  • deps: cookie@0.4.0
    • Add SameSite=None support
  • deps: safe-buffer@5.2.0
• 1.16.2 - 2019-06-12
  
  • Fix restoring cookie.originalMaxAge when store returns Date
  • deps: parseurl@~1.3.3
• 1.16.1 - 2019-04-11
  
  • Fix error passing data option to Cookie constructor
  • Fix uncaught error from bad session data
• 1.16.0 - 2019-04-11
  
  • Catch invalid cookie.maxAge value earlier
  • Deprecate setting cookie.maxAge to a Date object
  • Fix issue where resave: false may not save altered sessions
  • Remove utils-merge dependency
  • Use safe-buffer for improved Buffer API
  • Use Set-Cookie as cookie header name for compatibility
  • deps: depd@~2.0.0
    • Replace internal eval usage with Function constructor
    • Use instance methods on process to check for listeners
    • perf: remove argument reassignment
  • deps: on-headers@~1.0.2
    • Fix res.writeHead patch missing return value
• 1.15.6 - 2017-09-26
  
  • deps: debug@2.6.9
  • deps: parseurl@~1.3.2
    • perf: reduce overhead for full URLs
    • perf: unroll the "fast-path" RegExp
  • deps: uid-safe@~2.1.5
    • perf: remove only trailing =
  • deps: utils-merge@1.0.1
• 1.15.5 - 2017-08-03
  
  • Fix TypeError when req.url is an empty string
  • deps: depd@~1.1.1
    • Remove unnecessary Buffer loading
• 1.15.4 - 2017-07-19
  
  • deps: debug@2.6.8
• 1.15.3 - 2017-05-18
  
  • deps: debug@2.6.7
    • deps: ms@2.0.0

from express-session GitHub release notes

Commit messages

Package name: express-session

• 80ae6a5 1.71.1
• 4b40b2f tests: fix flaky cookie.maxAge test
• 5d5b51f tests: resolve originalMaxAge flaky tests
• ac3f0a2 Fix internal method wrapping error on failed reloads
• 909d9e0 docs: add debugging section
• bcf1f07 build: Node.js@13.12
• 06e5579 build: cookie-parser@1.4.5
• 82cc882 build: mocha@7.1.1
• 95946e3 build: nyc@15.0.1
• a2b2795 build: Node.js@12.16
• f927fc1 build: Node.js@10.19
• a3c9dd3 build: eslint-plugin-markdown@1.0.2
• e3c04a2 build: Node.js@13.9
• 99d21d1 build: mocha@7.1.0
• 0461302 build: support Node.js 13.x
• 40a6408 build: remove deprecated Travis CI directive
• dfee1fa build: Node.js@12.14
• c7849bc build: Node.js@10.18
• adb1140 build: Node.js@8.17
• 4ea1ba3 build: mocha@7.0.1
• e18fb51 build: nyc@15.0.0
• 7d07156 build: Node.js@12.13
• 77a3d19 build: Node.js@10.17
• 3281442 build: mocha@6.2.2

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs