Skip to content

build(deps): bump cookie from 0.7.2 to 2.0.1 - #1146

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/cookie-2.0.1
Open

build(deps): bump cookie from 0.7.2 to 2.0.1#1146
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/cookie-2.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps cookie from 0.7.2 to 2.0.1.

Release notes

Sourced from cookie's releases.

v2.0.1

Improved:

  • Small performance improvement by incrementing = index while parsing set-cookie (jshttp/cookie#280)

v2.0.0

Important: This release moves the package to ESM only. In node 22+ you can require(esm), and older node versions are not supported.

Changed

  • Switch to ESM (jshttp/cookie#273)
  • Remove deprecated code paths (jshttp/cookie#272)
    • The old parse and stringify methods have been renamed: parseCookie and stringifySetCookie
    • stringifySetCookie only supports object mode (e.g. { name: "", value: "" })

Improvements

Fixed

  • Omit leading semicolon when stringifying cookies with skipped values (#267)

v1.1.1

Fixed

  • Overwrite value in passed in options (#253) c66147c
    • When value was provided in serialize(key, value, { value }) the value in options was used instead of the value passed as an argument

jshttp/cookie@v1.1.0...v1.1.1

v1.1.0

Added:

  • Add stringifyCookie and parseSetCookie methods (#244, #214)
  • Rename existing methods for clarity (old method names remain for backward compatibility)
    • parseparseCookie
    • serializestringifySetCookie
  • Add side effects field (#245) 00b0327

jshttp/cookie@v1.0.2...v1.1.0

v1.0.2

Fixed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cookie since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 1, 2026
Bumps [cookie](https://github.com/jshttp/cookie) from 0.7.2 to 2.0.1.
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.7.2...v2.0.1)

---
updated-dependencies:
- dependency-name: cookie
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/cookie-2.0.1 branch from b417c83 to 5a6543a Compare July 9, 2026 01:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants