1.18.1

What's Changed

• chore: add support for OSSF scorecard reporting by @inigomarquinez in #984
• dep: [email protected] by @knolleary in #997
• Release: 1.18.1 by @UlisesGascon in #998

New Contributors

• @inigomarquinez made their first contribution in #984
• @knolleary made their first contribution in #997
• @UlisesGascon made their first contribution in #998

Full Changelog: v1.18.0...v1.18.1

1.18.0

• Add debug log for pathname mismatch
• Add partitioned to cookie options
• Add priority to cookie options
• Fix handling errors from setting cookie
• Support any type in secret that crypto.createHmac supports
• deps: [email protected]
  • Fix expires option to reject invalid dates
  • perf: improve default decode speed
  • perf: remove slow string split in parse
• deps: [email protected]

1.17.3

• Fix resaving already-saved new session at end of request
• deps: [email protected]

1.17.2

• Fix res.end patch to always commit headers
• deps: [email protected]
• deps: [email protected]

1.17.1

• Fix internal method wrapping error on failed reloads

1.17.0

• deps: [email protected]
  • Add SameSite=None support
• deps: [email protected]

1.16.2

• Fix restoring cookie.originalMaxAge when store returns Date
• deps: parseurl@~1.3.3

1.16.1

• Fix error passing data option to Cookie constructor
• Fix uncaught error from bad session data

1.16.0

• Catch invalid cookie.maxAge value earlier
• Deprecate setting cookie.maxAge to a Date object
• Fix issue where resave: false may not save altered sessions
• Remove utils-merge dependency
• Use safe-buffer for improved Buffer API
• Use Set-Cookie as cookie header name for compatibility
• deps: depd@~2.0.0
  • Replace internal eval usage with Function constructor
  • Use instance methods on process to check for listeners
  • perf: remove argument reassignment
• deps: on-headers@~1.0.2
  • Fix res.writeHead patch missing return value

1.15.6

• deps: [email protected]
• deps: parseurl@~1.3.2
  • perf: reduce overhead for full URLs
  • perf: unroll the "fast-path" RegExp
• deps: uid-safe@~2.1.5
  • perf: remove only trailing =
• deps: [email protected]