andylockran/Libero

Watch

Fork 0

Update dependency express-session to ~1.19.0 #9

Open

renovate wants to merge 1 commit from renovate/express-session-1.x into master

renovate commented

2026-10-28 00:18:35 +00:00

Collaborator

This PR contains the following updates:

Package	Change	Age	Confidence
express-session	`~1.8.2` → `~1.19.0`

Release Notes

expressjs/session (express-session)

`v1.19.0`

Compare Source

==========

Add dynamic cookie options support
Add sameSite 'auto' support for automatic SameSite attribute configuration
deps: use tilde notation for dependencies

`v1.18.2`

Compare Source

==========

deps: mocha@10.8.2
deps: on-headers@~1.1.0
- Fix CVE-2025-7339 (GHSA-76c9-3jph-rj3q)

`v1.18.1`

Compare Source

==========

deps: cookie@0.7.2
- Fix object assignment of hasOwnProperty
deps: cookie@0.7.1
- Allow leading dot for domain
  - Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
- Add fast path for serialize without options, use obj.hasOwnProperty when parsing
deps: cookie@0.7.0
- perf: parse cookies ~10% faster
- fix: narrow the validation of cookies to match RFC6265
- fix: add main to package.json for rspack

`v1.18.0`

Compare Source

===================

Add debug log for pathname mismatch
Add partitioned to cookie options
Add priority to cookie options
Fix handling errors from setting cookie
Support any type in secret that crypto.createHmac supports
deps: cookie@0.6.0
- Fix expires option to reject invalid dates
- perf: improve default decode speed
- perf: remove slow string split in parse
deps: cookie-signature@1.0.7

`v1.17.3`

Compare Source

===================

Fix resaving already-saved new session at end of request
deps: cookie@0.4.2

`v1.17.2`

Compare Source

===================

Fix res.end patch to always commit headers
deps: cookie@0.4.1
deps: safe-buffer@5.2.1

`v1.17.1`

Compare Source

===================

Fix internal method wrapping error on failed reloads

`v1.17.0`

Compare Source

===================

deps: cookie@0.4.0
- Add SameSite=None support
deps: safe-buffer@5.2.0

`v1.16.2`

Compare Source

===================

Fix restoring cookie.originalMaxAge when store returns Date
deps: parseurl@~1.3.3

`v1.16.1`

Compare Source

===================

Fix error passing data option to Cookie constructor
Fix uncaught error from bad session data

`v1.16.0`

Compare Source

===================

Catch invalid cookie.maxAge value earlier
Deprecate setting cookie.maxAge to a Date object
Fix issue where resave: false may not save altered sessions
Remove utils-merge dependency
Use safe-buffer for improved Buffer API
Use Set-Cookie as cookie header name for compatibility
deps: depd@~2.0.0
- Replace internal eval usage with Function constructor
- Use instance methods on process to check for listeners
- perf: remove argument reassignment
deps: on-headers@~1.0.2
- Fix res.writeHead patch missing return value

`v1.15.6`

Compare Source

===================

deps: debug@2.6.9
deps: parseurl@~1.3.2
- perf: reduce overhead for full URLs
- perf: unroll the "fast-path" RegExp
deps: uid-safe@~2.1.5
- perf: remove only trailing =
deps: utils-merge@1.0.1

`v1.15.5`

Compare Source

===================

Fix TypeError when req.url is an empty string
deps: depd@~1.1.1
- Remove unnecessary Buffer loading

`v1.15.4`

Compare Source

===================

deps: debug@2.6.8

`v1.15.3`

Compare Source

===================

deps: debug@2.6.7
- deps: ms@2.0.0

`v1.15.2`

Compare Source

===================

deps: debug@2.6.3
- Fix DEBUG_MAX_ARRAY_LENGTH
deps: uid-safe@~2.1.4
- Remove base64-url dependency

`v1.15.1`

Compare Source

===================

deps: debug@2.6.1
- Fix deprecation messages in WebStorm and other editors
- Undeprecate DEBUG_FD set to 1 or 2

`v1.15.0`

Compare Source

===================

Fix detecting modified session when session contains "cookie" property
Fix resaving already-saved reloaded session at end of request
deps: crc@3.4.4
- perf: use Buffer.from when available
deps: debug@2.6.0
- Allow colors in workers
- Deprecated DEBUG_FD environment variable
- Use same color for same namespace
- Fix error when running under React Native
- deps: ms@0.7.2
perf: remove unreachable branch in set-cookie method

`v1.14.2`

Compare Source

===================

deps: crc@3.4.1
- Fix deprecation warning in Node.js 7.x
deps: uid-safe@~2.1.3
- deps: base64-url@1.3.3

`v1.14.1`

Compare Source

===================

Fix not always resetting session max age before session save
Fix the cookie sameSite option to actually alter the Set-Cookie
deps: uid-safe@~2.1.2
- deps: base64-url@1.3.2

`v1.14.0`

Compare Source

===================

Correctly inherit from EventEmitter class in Store base class
Fix issue where Set-Cookie Expires was not always updated
Methods are no longer enumerable on req.session object
deps: cookie@0.3.1
- Add sameSite option
- Improve error message when encode is not a function
- Improve error message when expires is not a Date
- perf: enable strict mode
- perf: use for loop in parse
- perf: use string concatenation for serialization
deps: parseurl@~1.3.1
- perf: enable strict mode
deps: uid-safe@~2.1.1
- Use random-bytes for byte source
- deps: base64-url@1.2.2
perf: enable strict mode
perf: remove argument reassignment

`v1.13.0`

Compare Source

===================

Fix rolling: true to not set cookie when no session exists
- Better saveUninitialized: false + rolling: true behavior
deps: crc@3.4.0

`v1.12.1`

Compare Source

===================

deps: cookie@0.2.3
- Fix cookie Max-Age to never be a floating point number

`v1.12.0`

Compare Source

===================

Support the value 'auto' in the cookie.secure option
deps: cookie@0.2.2
- Throw on invalid values provided to serialize
deps: depd@~1.1.0
- Enable strict mode in more places
- Support web browser loading
deps: on-headers@~1.0.1
- perf: enable strict mode

`v1.11.3`

Compare Source

===================

deps: cookie@0.1.3
- Slight optimizations
deps: crc@3.3.0

`v1.11.2`

Compare Source

===================

deps: debug@~2.2.0
- deps: ms@0.7.1
deps: uid-safe@~2.0.0

`v1.11.1`

Compare Source

===================

Fix mutating options.secret value

`v1.11.0`

Compare Source

===================

Support an array in secret option for key rotation
deps: depd@~1.0.1

`v1.10.4`

Compare Source

===================

deps: debug@~2.1.3
- Fix high intensity foreground color for bold
- deps: ms@0.7.0

`v1.10.3`

Compare Source

===================

deps: cookie-signature@1.0.6
deps: uid-safe@1.1.0
- Use crypto.randomBytes, if available
- deps: base64-url@1.2.1

`v1.10.2`

Compare Source

===================

deps: uid-safe@1.0.3
- Fix error branch that would throw
- deps: base64-url@1.2.0

`v1.10.1`

Compare Source

===================

deps: uid-safe@1.0.2
- Remove dependency on mz

`v1.10.0`

Compare Source

===================

Add store.touch interface for session stores
Fix MemoryStore expiration with resave: false
deps: debug@~2.1.1

`v1.9.3`

Compare Source

==================

Fix error when req.sessionID contains a non-string value

`v1.9.2`

Compare Source

==================

deps: crc@3.2.1
- Minor fixes

`v1.9.1`

Compare Source

==================

Remove unnecessary empty write call
- Fixes Node.js 0.11.14 behavior change
- Helps work-around Node.js 0.10.1 zlib bug

`v1.9.0`

Compare Source

==================

deps: debug@~2.1.0
- Implement DEBUG_FD env variable support
deps: depd@~1.0.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [express-session](https://github.com/expressjs/session) | [`~1.8.2` → `~1.19.0`](https://renovatebot.com/diffs/npm/express-session/1.8.2/1.19.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/express-session/1.19.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express-session/1.8.2/1.19.0?slim=true) | --- ### Release Notes <details> <summary>expressjs/session (express-session)</summary> ### [`v1.19.0`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1190--2026-01-22) [Compare Source](https://github.com/expressjs/session/compare/v1.18.2...v1.19.0) \========== - Add dynamic cookie options support - Add sameSite 'auto' support for automatic SameSite attribute configuration - deps: use tilde notation for dependencies ### [`v1.18.2`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1182--2025-07-17) [Compare Source](https://github.com/expressjs/session/compare/v1.18.1...v1.18.2) \========== - deps: mocha\@10.8.2 - deps: on-headers@\~1.1.0 - Fix [CVE-2025-7339](https://www.cve.org/CVERecord?id=CVE-2025-7339) ([GHSA-76c9-3jph-rj3q](https://github.com/expressjs/on-headers/security/advisories/GHSA-76c9-3jph-rj3q)) ### [`v1.18.1`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1181--2024-10-08) [Compare Source](https://github.com/expressjs/session/compare/v1.18.0...v1.18.1) \========== - deps: cookie\@0.7.2 - Fix object assignment of `hasOwnProperty` - deps: cookie\@0.7.1 - Allow leading dot for domain - Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec - Add fast path for `serialize` without options, use `obj.hasOwnProperty` when parsing - deps: cookie\@0.7.0 - perf: parse cookies \~10% faster - fix: narrow the validation of cookies to match RFC6265 - fix: add `main` to `package.json` for rspack ### [`v1.18.0`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1180--2024-01-28) [Compare Source](https://github.com/expressjs/session/compare/v1.17.3...v1.18.0) \=================== - Add debug log for pathname mismatch - Add `partitioned` to `cookie` options - Add `priority` to `cookie` options - Fix handling errors from setting cookie - Support any type in `secret` that `crypto.createHmac` supports - deps: cookie\@0.6.0 - Fix `expires` option to reject invalid dates - perf: improve default decode speed - perf: remove slow string split in parse - deps: cookie-signature\@1.0.7 ### [`v1.17.3`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1173--2022-05-11) [Compare Source](https://github.com/expressjs/session/compare/v1.17.2...v1.17.3) \=================== - Fix resaving already-saved new session at end of request - deps: cookie\@0.4.2 ### [`v1.17.2`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1172--2021-05-19) [Compare Source](https://github.com/expressjs/session/compare/v1.17.1...v1.17.2) \=================== - Fix `res.end` patch to always commit headers - deps: cookie\@0.4.1 - deps: safe-buffer\@5.2.1 ### [`v1.17.1`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1171--2020-04-16) [Compare Source](https://github.com/expressjs/session/compare/v1.17.0...v1.17.1) \=================== - Fix internal method wrapping error on failed reloads ### [`v1.17.0`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1170--2019-10-10) [Compare Source](https://github.com/expressjs/session/compare/v1.16.2...v1.17.0) \=================== - deps: cookie\@0.4.0 - Add `SameSite=None` support - deps: safe-buffer\@5.2.0 ### [`v1.16.2`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1162--2019-06-12) [Compare Source](https://github.com/expressjs/session/compare/v1.16.1...v1.16.2) \=================== - Fix restoring `cookie.originalMaxAge` when store returns `Date` - deps: parseurl@\~1.3.3 ### [`v1.16.1`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1161--2019-04-11) [Compare Source](https://github.com/expressjs/session/compare/v1.16.0...v1.16.1) \=================== - Fix error passing `data` option to `Cookie` constructor - Fix uncaught error from bad session data ### [`v1.16.0`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1160--2019-04-10) [Compare Source](https://github.com/expressjs/session/compare/v1.15.6...v1.16.0) \=================== - Catch invalid `cookie.maxAge` value earlier - Deprecate setting `cookie.maxAge` to a `Date` object - Fix issue where `resave: false` may not save altered sessions - Remove `utils-merge` dependency - Use `safe-buffer` for improved Buffer API - Use `Set-Cookie` as cookie header name for compatibility - deps: depd@\~2.0.0 - Replace internal `eval` usage with `Function` constructor - Use instance methods on `process` to check for listeners - perf: remove argument reassignment - deps: on-headers@\~1.0.2 - Fix `res.writeHead` patch missing return value ### [`v1.15.6`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1156--2017-09-26) [Compare Source](https://github.com/expressjs/session/compare/v1.15.5...v1.15.6) \=================== - deps: debug\@2.6.9 - deps: parseurl@\~1.3.2 - perf: reduce overhead for full URLs - perf: unroll the "fast-path" `RegExp` - deps: uid-safe@\~2.1.5 - perf: remove only trailing `=` - deps: utils-merge\@1.0.1 ### [`v1.15.5`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1155--2017-08-02) [Compare Source](https://github.com/expressjs/session/compare/v1.15.4...v1.15.5) \=================== - Fix `TypeError` when `req.url` is an empty string - deps: depd@\~1.1.1 - Remove unnecessary `Buffer` loading ### [`v1.15.4`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1154--2017-07-18) [Compare Source](https://github.com/expressjs/session/compare/v1.15.3...v1.15.4) \=================== - deps: debug\@2.6.8 ### [`v1.15.3`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1153--2017-05-17) [Compare Source](https://github.com/expressjs/session/compare/v1.15.2...v1.15.3) \=================== - deps: debug\@2.6.7 - deps: ms\@2.0.0 ### [`v1.15.2`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1152--2017-03-26) [Compare Source](https://github.com/expressjs/session/compare/v1.15.1...v1.15.2) \=================== - deps: debug\@2.6.3 - Fix `DEBUG_MAX_ARRAY_LENGTH` - deps: uid-safe@\~2.1.4 - Remove `base64-url` dependency ### [`v1.15.1`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1151--2017-02-10) [Compare Source](https://github.com/expressjs/session/compare/v1.15.0...v1.15.1) \=================== - deps: debug\@2.6.1 - Fix deprecation messages in WebStorm and other editors - Undeprecate `DEBUG_FD` set to `1` or `2` ### [`v1.15.0`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1150--2017-01-22) [Compare Source](https://github.com/expressjs/session/compare/v1.14.2...v1.15.0) \=================== - Fix detecting modified session when session contains "cookie" property - Fix resaving already-saved reloaded session at end of request - deps: crc\@3.4.4 - perf: use `Buffer.from` when available - deps: debug\@2.6.0 - Allow colors in workers - Deprecated `DEBUG_FD` environment variable - Use same color for same namespace - Fix error when running under React Native - deps: ms\@0.7.2 - perf: remove unreachable branch in set-cookie method ### [`v1.14.2`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1142--2016-10-30) [Compare Source](https://github.com/expressjs/session/compare/v1.14.1...v1.14.2) \=================== - deps: crc\@3.4.1 - Fix deprecation warning in Node.js 7.x - deps: uid-safe@\~2.1.3 - deps: base64-url\@1.3.3 ### [`v1.14.1`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1141--2016-08-24) [Compare Source](https://github.com/expressjs/session/compare/v1.14.0...v1.14.1) \=================== - Fix not always resetting session max age before session save - Fix the cookie `sameSite` option to actually alter the `Set-Cookie` - deps: uid-safe@\~2.1.2 - deps: base64-url\@1.3.2 ### [`v1.14.0`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1140--2016-07-01) [Compare Source](https://github.com/expressjs/session/compare/v1.13.0...v1.14.0) \=================== - Correctly inherit from `EventEmitter` class in `Store` base class - Fix issue where `Set-Cookie` `Expires` was not always updated - Methods are no longer enumerable on `req.session` object - deps: cookie\@0.3.1 - Add `sameSite` option - Improve error message when `encode` is not a function - Improve error message when `expires` is not a `Date` - perf: enable strict mode - perf: use for loop in parse - perf: use string concatenation for serialization - deps: parseurl@\~1.3.1 - perf: enable strict mode - deps: uid-safe@\~2.1.1 - Use `random-bytes` for byte source - deps: base64-url\@1.2.2 - perf: enable strict mode - perf: remove argument reassignment ### [`v1.13.0`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1130--2016-01-10) [Compare Source](https://github.com/expressjs/session/compare/v1.12.1...v1.13.0) \=================== - Fix `rolling: true` to not set cookie when no session exists - Better `saveUninitialized: false` + `rolling: true` behavior - deps: crc\@3.4.0 ### [`v1.12.1`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1121--2015-10-29) [Compare Source](https://github.com/expressjs/session/compare/v1.12.0...v1.12.1) \=================== - deps: cookie\@0.2.3 - Fix cookie `Max-Age` to never be a floating point number ### [`v1.12.0`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1120--2015-10-25) [Compare Source](https://github.com/expressjs/session/compare/v1.11.3...v1.12.0) \=================== - Support the value `'auto'` in the `cookie.secure` option - deps: cookie\@0.2.2 - Throw on invalid values provided to `serialize` - deps: depd@\~1.1.0 - Enable strict mode in more places - Support web browser loading - deps: on-headers@\~1.0.1 - perf: enable strict mode ### [`v1.11.3`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1113--2015-05-22) [Compare Source](https://github.com/expressjs/session/compare/v1.11.2...v1.11.3) \=================== - deps: cookie\@0.1.3 - Slight optimizations - deps: crc\@3.3.0 ### [`v1.11.2`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1112--2015-05-10) [Compare Source](https://github.com/expressjs/session/compare/v1.11.1...v1.11.2) \=================== - deps: debug@\~2.2.0 - deps: ms\@0.7.1 - deps: uid-safe@\~2.0.0 ### [`v1.11.1`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1111--2015-04-08) [Compare Source](https://github.com/expressjs/session/compare/v1.11.0...v1.11.1) \=================== - Fix mutating `options.secret` value ### [`v1.11.0`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1110--2015-04-07) [Compare Source](https://github.com/expressjs/session/compare/v1.10.4...v1.11.0) \=================== - Support an array in `secret` option for key rotation - deps: depd@\~1.0.1 ### [`v1.10.4`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1104--2015-03-15) [Compare Source](https://github.com/expressjs/session/compare/v1.10.3...v1.10.4) \=================== - deps: debug@\~2.1.3 - Fix high intensity foreground color for bold - deps: ms\@0.7.0 ### [`v1.10.3`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1103--2015-02-16) [Compare Source](https://github.com/expressjs/session/compare/v1.10.2...v1.10.3) \=================== - deps: cookie-signature\@1.0.6 - deps: uid-safe\@1.1.0 - Use `crypto.randomBytes`, if available - deps: base64-url\@1.2.1 ### [`v1.10.2`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1102--2015-01-31) [Compare Source](https://github.com/expressjs/session/compare/v1.10.1...v1.10.2) \=================== - deps: uid-safe\@1.0.3 - Fix error branch that would throw - deps: base64-url\@1.2.0 ### [`v1.10.1`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1101--2015-01-08) [Compare Source](https://github.com/expressjs/session/compare/v1.10.0...v1.10.1) \=================== - deps: uid-safe\@1.0.2 - Remove dependency on `mz` ### [`v1.10.0`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#1100--2015-01-05) [Compare Source](https://github.com/expressjs/session/compare/v1.9.3...v1.10.0) \=================== - Add `store.touch` interface for session stores - Fix `MemoryStore` expiration with `resave: false` - deps: debug@\~2.1.1 ### [`v1.9.3`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#193--2014-12-02) [Compare Source](https://github.com/expressjs/session/compare/v1.9.2...v1.9.3) \================== - Fix error when `req.sessionID` contains a non-string value ### [`v1.9.2`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#192--2014-11-22) [Compare Source](https://github.com/expressjs/session/compare/v1.9.1...v1.9.2) \================== - deps: crc\@3.2.1 - Minor fixes ### [`v1.9.1`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#191--2014-10-22) [Compare Source](https://github.com/expressjs/session/compare/v1.9.0...v1.9.1) \================== - Remove unnecessary empty write call - Fixes Node.js 0.11.14 behavior change - Helps work-around Node.js 0.10.1 zlib bug ### [`v1.9.0`](https://github.com/expressjs/session/blob/HEAD/HISTORY.md#190--2014-09-16) [Compare Source](https://github.com/expressjs/session/compare/v1.8.2...v1.9.0) \================== - deps: debug@\~2.1.0 - Implement `DEBUG_FD` env variable support - deps: depd@\~1.0.0 </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate added 1 commit

2026-10-28 00:18:35 +00:00

Update dependency express-session to ~1.19.0 55826d8911

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin "renovate/express-session-1.x:renovate/express-session-1.x"

git switch "renovate/express-session-1.x"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "master"

git merge --no-ff "renovate/express-session-1.x"

git switch "renovate/express-session-1.x"

git rebase "master"

git switch "master"

git merge --ff-only "renovate/express-session-1.x"

git switch "renovate/express-session-1.x"

git rebase "master"

git switch "master"

git merge --no-ff "renovate/express-session-1.x"

git switch "master"

git merge --squash "renovate/express-session-1.x"