Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: expressjs/session
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.19.0
Choose a base ref
...
head repository: expressjs/session
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: master
Choose a head ref
  • 10 commits
  • 8 files changed
  • 8 contributors

Commits on Mar 2, 2026

  1. build(deps): bump github/codeql-action from 4.31.6 to 4.32.4 (#1111)

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.6 to 4.32.4.
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@fe4161a...89a39a4)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-version: 4.32.4
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 2, 2026
    Configuration menu
    Copy the full SHA
    31bb903 View commit details
    Browse the repository at this point in the history
  2. build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 (#1112)

    Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5.0.0 to 7.0.0.
    - [Release notes](https://github.com/actions/upload-artifact/releases)
    - [Commits](actions/upload-artifact@330a01c...bbbca2d)
    
    ---
    updated-dependencies:
    - dependency-name: actions/upload-artifact
      dependency-version: 7.0.0
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 2, 2026
    Configuration menu
    Copy the full SHA
    1d90a1a View commit details
    Browse the repository at this point in the history
  3. build(deps): bump actions/download-artifact from 6.0.0 to 8.0.0 (#1113)

    Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6.0.0 to 8.0.0.
    - [Release notes](https://github.com/actions/download-artifact/releases)
    - [Commits](actions/download-artifact@018cc2c...70fc10c)
    
    ---
    updated-dependencies:
    - dependency-name: actions/download-artifact
      dependency-version: 8.0.0
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 2, 2026
    Configuration menu
    Copy the full SHA
    625c136 View commit details
    Browse the repository at this point in the history

Commits on Mar 16, 2026

  1. Configuration menu
    Copy the full SHA
    663359c View commit details
    Browse the repository at this point in the history

Commits on Jun 14, 2026

  1. Configuration menu
    Copy the full SHA
    2c9512f View commit details
    Browse the repository at this point in the history

Commits on Jul 6, 2026

  1. fix: use RFC 6265 path matching for cookie path option (#1114)

    * test: add specific RFC 6265 5.1.4 compliance tests
    
    * feat: add specific RFC 6265 5.1.4 handler
    
    * docs: note RFC 6265 5.1.4 compliance in cookie.path documentation
    
    * feat: enhance cookie handling for RFC 6265 compliance with path matching and auto secure/sameSite options
    
    * feat: enforce RFC 6265 section 5.1.4 path matching for session cookie path
    
    ---------
    
    Co-authored-by: Sebastian Beltran <bjohansebas@gmail.com>
    UlisesGascon and bjohansebas authored Jul 6, 2026
    Configuration menu
    Copy the full SHA
    e6509b1 View commit details
    Browse the repository at this point in the history
  2. fix: detect secure socket when connection is missing (#1124)

    * fix: detect secure socket when connection is missing
    
    * fix: improve secure socket detection logic in session handling
    
    ---------
    
    Co-authored-by: Sebastian Beltran <bjohansebas@gmail.com>
    raashish1601 and bjohansebas authored Jul 6, 2026
    Configuration menu
    Copy the full SHA
    953bfe2 View commit details
    Browse the repository at this point in the history
  3. refactor: replace deprecated substr() with slice() (#1099)

    Replace all instances of String.prototype.substr() with String.prototype.slice()
    to use the standard, non-deprecated method. This maintains compatibility with
    Node.js >= 0.8.0 while following modern JavaScript best practices.
    
    All replacements maintain identical functionality as slice() and substr() behave
    the same for these use cases.
    
    Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
    Ayoub-Mabrouk and bjohansebas authored Jul 6, 2026
    Configuration menu
    Copy the full SHA
    2deb78e View commit details
    Browse the repository at this point in the history

Commits on Jul 7, 2026

  1. Configuration menu
    Copy the full SHA
    2799984 View commit details
    Browse the repository at this point in the history

Commits on Jul 14, 2026

  1. build(deps): bump the github-actions group with 6 updates (#1140)

    Bumps the github-actions group with 6 updates:
    
    | Package | From | To |
    | --- | --- | --- |
    | [actions/checkout](https://github.com/actions/checkout) | `6.0.0` | `7.0.0` |
    | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.0` | `7.0.1` |
    | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.0` | `8.0.1` |
    | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.32.4` | `4.36.3` |
    | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.32.4` | `4.36.3` |
    | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.32.4` | `4.36.3` |
    
    
    Updates `actions/checkout` from 6.0.0 to 7.0.0
    - [Release notes](https://github.com/actions/checkout/releases)
    - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
    - [Commits](actions/checkout@1af3b93...9c091bb)
    
    Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
    - [Release notes](https://github.com/actions/upload-artifact/releases)
    - [Commits](actions/upload-artifact@bbbca2d...043fb46)
    
    Updates `actions/download-artifact` from 8.0.0 to 8.0.1
    - [Release notes](https://github.com/actions/download-artifact/releases)
    - [Commits](actions/download-artifact@70fc10c...3e5f45b)
    
    Updates `github/codeql-action/init` from 4.32.4 to 4.36.3
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@89a39a4...54f647b)
    
    Updates `github/codeql-action/analyze` from 4.32.4 to 4.36.3
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@89a39a4...54f647b)
    
    Updates `github/codeql-action/upload-sarif` from 4.32.4 to 4.36.3
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@89a39a4...54f647b)
    
    ---
    updated-dependencies:
    - dependency-name: actions/checkout
      dependency-version: 7.0.0
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: github-actions
    - dependency-name: actions/upload-artifact
      dependency-version: 7.0.1
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: github-actions
    - dependency-name: actions/download-artifact
      dependency-version: 8.0.1
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: github-actions
    - dependency-name: github/codeql-action/init
      dependency-version: 4.36.3
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: github-actions
    - dependency-name: github/codeql-action/analyze
      dependency-version: 4.36.3
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: github-actions
    - dependency-name: github/codeql-action/upload-sarif
      dependency-version: 4.36.3
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: github-actions
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jul 14, 2026
    Configuration menu
    Copy the full SHA
    d209c1f View commit details
    Browse the repository at this point in the history
Loading