From a38db898deb9ed8bd417718542337c25b115340f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 18 Jul 2025 16:13:29 +0000
Subject: [PATCH] build(deps): bump the npm_and_yarn group across 1 directory
 with 3 updates

Bumps the npm_and_yarn group with 3 updates in the / directory: [cookie](https://github.com/jshttp/cookie), [on-headers](https://github.com/jshttp/on-headers) and [express](https://github.com/expressjs/express).


Updates `cookie` from 0.4.0 to 0.7.0
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](https://github.com/jshttp/cookie/compare/v0.4.0...v0.7.0)

Updates `on-headers` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/jshttp/on-headers/releases)
- [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md)
- [Commits](https://github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0)

Updates `express` from 4.17.1 to 4.20.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.17.1...4.20.0)

---
updated-dependencies:
- dependency-name: cookie
  dependency-version: 0.7.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: on-headers
  dependency-version: 1.1.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-version: 4.20.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package.json b/package.json
index a8f34e4e..2d553c7f 100644
--- a/package.json
+++ b/package.json
@@ -10,11 +10,11 @@
   "repository": "expressjs/session",
   "license": "MIT",
   "dependencies": {
-    "cookie": "0.4.0",
+    "cookie": "0.7.0",
     "cookie-signature": "1.0.6",
     "debug": "2.6.9",
     "depd": "~2.0.0",
-    "on-headers": "~1.0.2",
+    "on-headers": "~1.1.0",
     "parseurl": "~1.3.3",
     "safe-buffer": "5.2.0",
     "uid-safe": "~2.1.5"
@@ -24,7 +24,7 @@
     "cookie-parser": "1.4.4",
     "eslint": "3.19.0",
     "eslint-plugin-markdown": "1.0.0",
-    "express": "4.17.1",
+    "express": "4.20.0",
     "mocha": "6.2.0",
     "nyc": "14.1.1",
     "supertest": "4.0.2"