Skip to content

Releases: fastify/session

v11.0.1

21 Sep 08:39
c180049
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v11.0.0...v11.0.1

v11.0.0

05 Sep 14:46
3534fee
Compare
Choose a tag to compare

What's Changed

  • Merge next into master by @jsumners in #256
  • build(deps): bump fastify/workflows from 4.1.0 to 4.2.1 by @dependabot in #258
  • improve type test readability by @zetaraku in #259
  • Added the ability to configure cookie options within a route by @ogheo in #260
  • build(deps-dev): bump @types/node from 20.14.13 to 22.0.0 by @dependabot in #263
  • build(deps): bump fastify/workflows from 4.2.1 to 5.0.0 by @dependabot in #265
  • chore: update min fastify version by @Fdawgs in #264

New Contributors

Full Changelog: v10.9.0...v11.0.0

v10.9.0

21 May 16:28
742e1dc
Compare
Choose a tag to compare

⚠️ Security Release ⚠️

This release fixes GHSA-pj27-2xvp-4qxg with CVE CVE-2024-35220. It's severity is classified as HIGH.

When restoring the cookie from the session store, the expires field is overriden if the maxAge field was set.
This means a cookie is never correctly detected as expired and thus expired sessions are not destroyed.

Full Changelog: v10.8.0...v10.9.0

v10.8.0

07 May 17:38
8b6241c
Compare
Choose a tag to compare

What's Changed

  • use sha256 instead of sha1 as default by @mcollina in #247
  • fix: npm run benchmark isn't working by @zetaraku in #248
  • Fix type argument inference of session.get(key) and session.set(key, value) by @zetaraku in #249

New Contributors

Full Changelog: v10.7.2...v10.8.0

v10.7.2

18 Apr 10:53
a94dfbb
Compare
Choose a tag to compare

What's Changed

Full Changelog: v10.7.1...v10.7.2

v10.7.1

15 Apr 16:24
7372714
Compare
Choose a tag to compare

What's Changed

  • build(deps-dev): bump tsd from 0.29.0 to 0.30.1 by @dependabot in #231
  • docs(readme): replace fastify.io links with fastify.dev by @Fdawgs in #232
  • chore(license): Update licensing year by @codershiba in #233
  • chore(.gitignore): add .tap/ dir by @Fdawgs in #235
  • build(deps-dev): bump cronometro from 1.2.0 to 3.0.1 by @dependabot in #236
  • fix: use request.protocol to check for HTTPS by @mohd-akram in #238
  • build(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @dependabot in #239
  • fix race condition in cookie.maxAge test by @autopulated in #242
  • Ensure maxAge type has milliseconds as the unit by @chuanqisun in #245

New Contributors

Full Changelog: v10.7.0...v10.7.1

v10.7.0

08 Dec 09:41
8ea7e46
Compare
Choose a tag to compare

What's Changed

  • Fix: add ability to create Partitioned Cookies by @nicob-29 in #226

New Contributors

Full Changelog: v10.6.1...v10.7.0

v10.6.1

27 Nov 21:40
25b4f6b
Compare
Choose a tag to compare

What's Changed

Full Changelog: v10.6.0...v10.6.1

v10.6.0

24 Nov 14:35
a2d146b
Compare
Choose a tag to compare

What's Changed

  • perf: use node: prefix to bypass require.cache call for builtins by @Fdawgs in #210
  • chore: add .gitattributes file by @Fdawgs in #212
  • perf(lib/fastifysession): optimize split param by @Fdawgs in #214
  • chore(package): explicitly declare js module type by @Fdawgs in #217
  • Added documentation for import of modules w/ declaration merging by @VIEWVIEWVIEW in #220
  • Updated import as per redis-connect docs by @maxt41 in #219
  • export cookie types by @gurgunday in #221

New Contributors

Full Changelog: v10.5.0...v10.6.0

v10.5.0

07 Sep 07:01
b3bea04
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v10.4.0...v10.5.0