z and GitHub
663a78d661
Delete upstream workflows
...
This fork does not ship upstream's releases, and its hosted-runner jobs
never start here.
Claude-Session: https://claude.ai/code/session_01HuMDfgFssPUptYUzgZ6Cp8
2026-09-24 10:02:31 -07:00
zeekay and Hanzo Dev
cfdd8f0c08
ci: canonical pair — hanzo.yml + forge caller
...
github.com has no runner for hanzo-build-linux-amd64, so a caller under
.github/workflows is a gate that can never be scheduled. This is the ~7-line
caller on the plane that can (git.hanzo.ai git-runner fleet), pinned @v1.
Co-authored-by: Hanzo Dev <[email protected]
2026-08-06 02:36:28 -07:00
b0ad87b4c8
build(deps): bump the github-actions group with 6 updates ( #1140 )
...
Bumps the github-actions group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `6.0.0` | `7.0.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `7.0.0` | `7.0.1` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `8.0.0` | `8.0.1` |
| [github/codeql-action/init](https://github.com/github/codeql-action ) | `4.32.4` | `4.36.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action ) | `4.32.4` | `4.36.3` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) | `4.32.4` | `4.36.3` |
Updates `actions/checkout` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
Updates `actions/download-artifact` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3...3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c )
Updates `github/codeql-action/init` from 4.32.4 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/89a39a4e59826350b863aa6b6252a07ad50cf83e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a )
Updates `github/codeql-action/analyze` from 4.32.4 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/89a39a4e59826350b863aa6b6252a07ad50cf83e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a )
Updates `github/codeql-action/upload-sarif` from 4.32.4 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/89a39a4e59826350b863aa6b6252a07ad50cf83e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: actions/download-artifact
dependency-version: 8.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.36.3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.36.3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.36.3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-14 12:23:53 -05:00
Sebastian Beltran and GitHub
438f51c217
chore: add groups for GitHub Actions and npm dependencies in dependabot ( #1133 )
2026-07-07 11:15:48 -05:00
b6f151362a
refactor: replace deprecated substr() with slice() ( #1099 )
...
Replace all instances of String.prototype.substr() with String.prototype.slice()
to use the standard, non-deprecated method. This maintains compatibility with
Node.js >= 0.8.0 while following modern JavaScript best practices.
All replacements maintain identical functionality as slice() and substr() behave
the same for these use cases.
Co-authored-by: bjohansebas <[email protected]
2026-07-05 21:30:48 -05:00
9897eded61
fix: detect secure socket when connection is missing ( #1124 )
...
* fix: detect secure socket when connection is missing
* fix: improve secure socket detection logic in session handling
---------
Co-authored-by: Sebastian Beltran <[email protected]
2026-07-05 21:24:05 -05:00
672216dd12
fix: use RFC 6265 path matching for cookie path option ( #1114 )
...
* test: add specific RFC 6265 5.1.4 compliance tests
* feat: add specific RFC 6265 5.1.4 handler
* docs: note RFC 6265 5.1.4 compliance in cookie.path documentation
* feat: enhance cookie handling for RFC 6265 compliance with path matching and auto secure/sameSite options
* feat: enforce RFC 6265 section 5.1.4 path matching for session cookie path
---------
Co-authored-by: Sebastian Beltran <[email protected]
2026-07-05 21:07:01 -05:00
krzysdz and GitHub
143d26eb9f
Remove nonexistent projects and update link in readme ( #1122 )
...
- sequelize has a new website and a slightly broken redirect to the new one
- cyclic has shut down
- dynamodb-store-v3 package does not exist
https://github.com/sequelize/website/issues/839
https://github.com/cyclic-software/www/blob/31e26692f2f04e29917fe011b9bfd7a03fbd7e81/content/posts/cyclic-is-shutting-down.md
https://web.archive.org/web/20240501064115/https://www.cyclic.sh/posts/cyclic-is-shutting-down/
2026-06-14 14:11:21 -05:00
Ignacio Mangas and GitHub
a682ca8602
chore: fix node to v25 ( #1110 )
2026-03-16 12:23:53 +01:00
f004347d5f
build(deps): bump actions/download-artifact from 6.0.0 to 8.0.0 ( #1113 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 6.0.0 to 8.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/018cc2cf5baa6db3ef3c5f8a56943fffe632ef53...70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 8.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2026-03-02 08:43:16 +01:00
6586f0ed38
build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 ( #1112 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/330a01c490aca151604b8cf639adc76d48f6c5d4...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2026-03-02 08:42:39 +01:00
6e1fdfeec5
build(deps): bump github/codeql-action from 4.31.6 to 4.32.4 ( #1111 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.6 to 4.32.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/fe4161a26a8629af62121b670040955b330f9af2...89a39a4e59826350b863aa6b6252a07ad50cf83e )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.4
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-03-02 08:42:03 +01:00
Ulises Gascón and GitHub
d3c12c9391
1.19.0 ( #1107 )
2026-01-22 15:44:27 +01:00
00819ea8b5
feat: add support to dynamic cookie options ( #1027 )
...
Co-authored-by: Sebastian Beltran <[email protected] [email protected]
2026-01-19 15:44:13 +01:00
b1bd2fda4e
Add sameSite 'auto' support to match secure 'auto' pattern ( #1087 )
...
* feat: add sameSite 'auto' support for automatic cross-site cookie configuration
* test: enhance session tests for secure and SameSite cookie attributes
* test: update session tests for SameSite cookie handling and logging
* docs: add history entry
* refactor: cache issecure result to avoid duplicate calls
* Apply suggestion from @bjohansebas
---------
Co-authored-by: Sebastian Beltran <[email protected]
2026-01-17 17:20:37 -05:00
Sebastian Beltran and GitHub
5b5c3bb6de
deps: use tilde notation for dependencies ( #1096 )
2025-12-18 12:46:00 +01:00
Sebastian Beltran and GitHub
be59e88883
chore: remove history.md from being packaged on publish ( #1097 )
2025-12-18 12:45:22 +01:00
3fa3ac5ed4
refactor: remove unused sess parameter from generateSessionId function ( #1001 )
...
The `sess` parameter was not used in `generateSessionId`, so it was removed to improve code clarity and reduce potential confusion.
Co-authored-by: Sebastian Beltran <[email protected]
2025-12-17 20:53:00 -05:00
d0be84e5e7
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.3 ( #1082 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.1 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/f49aabe0b5af0936a0987cfb85d86b75731b0186...4eaacf0543bb3f2c246792bd56e8cdeffafb205a )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2025-12-17 16:04:48 -05:00
075f291111
build(deps): bump actions/checkout from 4.2.2 to 6.0.0 ( #1088 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-02 09:18:56 +01:00
da823d612a
build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 ( #1089 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-02 09:17:30 +01:00
1040cd58ae
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 ( #1090 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-02 09:16:45 +01:00
03e8b52e45
build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 ( #1091 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-02 09:15:55 +01:00
e754fc198c
build(deps): bump github/codeql-action from 3.28.18 to 4.31.2 ( #1085 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-02 09:30:20 +01:00
1df1394523
build(deps): bump actions/download-artifact from 4.3.0 to 6.0.0 ( #1086 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-02 09:29:37 +01:00
Sebastian Beltran and GitHub
9e1a27a86d
chore: add funding to package.json ( #1071 )
2025-07-23 14:42:19 +02:00
Chris de Almeida and GitHub
a7992a39a6
🔖 v1.18.2 ( #1070 )
2025-07-17 19:51:20 +02:00
Ulises Gascón and GitHub
f2d36a8d41
deps: [email protected] ( #1069 )
2025-07-17 19:25:18 +02:00
Noritaka Kobayashi and GitHub
0e309c03b6
chore: fix typos ( #1066 )
2025-07-11 12:21:20 -05:00
e14540869b
build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 ( #1051 )
...
Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action ) from 1.2.5 to 2.3.6.
- [Release notes](https://github.com/coverallsapp/github-action/releases )
- [Upgrade guide](https://github.com/coverallsapp/github-action/blob/main/UPGRADE.md )
- [Commits](https://github.com/coverallsapp/github-action/compare/09b709cf6a16e30b0808ba050c7a6e8a5ef13f8d...648a8eb78e6d50909eff900e4ec85cab4524a45b )
---
updated-dependencies:
- dependency-name: coverallsapp/github-action
dependency-version: 2.3.6
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2025-05-31 19:34:41 -05:00
0960000377
build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 ( #1052 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.5.0 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4.5.0...ea165f8d65b6e75b540449e92b4886f43607fa02 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 4.6.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2025-05-31 19:33:55 -05:00
c189e1d3e5
build(deps): bump actions/checkout from 4.1.1 to 4.2.2 ( #1049 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...11bd71901bbe5b1630ceea73d27597364c9af683 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 4.2.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2025-05-31 19:33:21 -05:00
6f65b5eacf
build(deps): bump github/codeql-action from 3.24.7 to 3.28.18 ( #1050 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.24.7 to 3.28.18.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3.24.7...ff0a06e83cb2de871e5a09832bc6a81e7276941f )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.28.18
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2025-05-31 19:32:43 -05:00
f5094296dd
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 ( #1048 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/62b2cac7ed8198b15735ed49ab1e5cf35480ba46...f49aabe0b5af0936a0987cfb85d86b75731b0186 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2025-05-31 19:32:09 -05:00
9888fbc6a2
build(deps-dev): bump mocha from 10.2.0 to 10.8.2 ( #1061 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ulises Gascón <[email protected]
2025-05-18 11:19:32 +02:00
Sebastian Beltran
79fb87c077
fix(dependabot): do not update major versions
...
Signed-off-by: Sebastian Beltran <[email protected]
2025-05-17 13:02:43 -05:00
2e7eaa5f44
[StepSecurity] Apply security best practices ( #1047 )
...
* [StepSecurity] Apply security best practices
Signed-off-by: StepSecurity Bot <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2025-05-17 12:33:44 -05:00
Sebastian Beltran and GitHub
2c5828164a
ci: add CodeQL (SAST) ( #1005 )
2025-04-26 22:09:29 -05:00
Carlos Serrano and GitHub
2380c02e5b
chore: upgrade scorecard workflow pinned action versions ( #1008 )
2025-04-17 16:18:22 +02:00
ctcpip
61f7994d4b
⬆️ bump actions
2025-01-23 12:45:47 -06:00
ctcpip
0483250f7b
✅ always generate fresh cert
2025-01-23 12:45:47 -06:00
Wes Todd and Chris de Almeida
c16b387cad
feat: gencert script to regenerate the test ssl certs
2025-01-23 12:45:47 -06:00
ctcpip
927eb0a3d1
🔒 ️ use 2048 bit key
...
cd test/fixtures
openssl genpkey -algorithm RSA -out new_server.key -pkeyopt rsa_keygen_bits:2048
openssl x509 -in server.crt -signkey new_server.key -days 3650 -out new_server.crt
openssl x509 -in new_server.crt -text -noout
mv new_server.crt server.crt
mv new_server.key server.key
2025-01-22 09:21:49 -06:00
BaileyFirman and Chris de Almeida
ac03912090
Refresh server.crt with existing key extending expiry to Nov 21 03:28:10 2024 GMT
2025-01-22 09:21:49 -06:00
Ulises Gascón and GitHub
a175fc2142
1.18.1
...
PR-URL: https://github.com/expressjs/session/pull/998
2024-10-08 21:52:45 +02:00
8f099d94ec
dep: [email protected] ( #997 )
...
Co-authored-by: Ulises Gascón <[email protected]
2024-10-08 19:50:29 +02:00
Íñigo Marquínez Prado and GitHub
ae25f9bf81
ci: add support for OSSF scorecard reporting ( #984 )
...
PR-URL: https://github.com/expressjs/session/pull/984
2024-05-14 18:19:12 +02:00
Douglas Christopher Wilson
24d4972764
1.18.0
2024-01-28 16:20:57 -05:00
noiissyboy and Douglas Christopher Wilson
855f21ab93
docs: add connect-ottoman to the list of session stores
...
closes #895
2024-01-28 15:56:59 -05:00
Kenneth Tan Xin You and Douglas Christopher Wilson
991b7ee815
Add debug log for pathname mismatch
...
closes #840
2024-01-28 15:51:27 -05:00
zeekayandHanzo Dev