Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump github.com/gorilla/sessions from 1.1.1 to 1.4.0 in /quesma (#887)
Bumps [github.com/gorilla/sessions](https://github.com/gorilla/sessions) from 1.1.1 to 1.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gorilla/sessions/releases">github.com/gorilla/sessions's releases</a>.</em></p> <blockquote> <h2>v1.4.0</h2> <h2>Summary</h2> <p>There were new features important for <a href="https://redirect.github.com/golang/go/issues/62490#issuecomment-2127685955">compatibility with some of the upcoming cookie security changes</a> with google that required a new <code>Partitioned</code> attribute be added to the cookies, this attribute was only available in go 1.23, which has just recently been released.</p> <p>If you require a version that is backward compatible with a lower version than go 1.23 then you'll need to use release v1.3.0.</p> <p>The following notes show the difference between 1.2.2 and the current version because 1.3.0 was a hotfix for go 1.22 and below.</p> <h2>What's Changed</h2> <ul> <li>Improve File System Path Handling by <a href="https://github.com/moloch"><code>@moloch</code></a>-- in <a href="https://redirect.github.com/gorilla/sessions/pull/274">gorilla/sessions#274</a></li> <li><a href="https://redirect.github.com/gorilla/sessions/issues/272">#272</a>: feat: Add support for paritioned attribute in cookies as per chrome 3rd party cookie phaseout by <a href="https://github.com/kashishbehl"><code>@kashishbehl</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/273">gorilla/sessions#273</a></li> <li>fix no default samesite by <a href="https://github.com/bharat-rajani"><code>@bharat-rajani</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/276">gorilla/sessions#276</a></li> <li>Fix gorillatoolkit link in README.md by <a href="https://github.com/mbacalan"><code>@mbacalan</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/278">gorilla/sessions#278</a></li> <li>Add mysql store to the readme by <a href="https://github.com/danielepintore"><code>@danielepintore</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/279">gorilla/sessions#279</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/moloch"><code>@moloch</code></a>-- made their first contribution in <a href="https://redirect.github.com/gorilla/sessions/pull/274">gorilla/sessions#274</a></li> <li><a href="https://github.com/kashishbehl"><code>@kashishbehl</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/sessions/pull/273">gorilla/sessions#273</a></li> <li><a href="https://github.com/bharat-rajani"><code>@bharat-rajani</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/sessions/pull/276">gorilla/sessions#276</a></li> <li><a href="https://github.com/mbacalan"><code>@mbacalan</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/sessions/pull/278">gorilla/sessions#278</a></li> <li><a href="https://github.com/danielepintore"><code>@danielepintore</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/sessions/pull/279">gorilla/sessions#279</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gorilla/sessions/compare/v1.2.2...v1.4.0">https://github.com/gorilla/sessions/compare/v1.2.2...v1.4.0</a></p> <h2>v1.3.0</h2> <p>The maintainers of this repo merged a PR into main with the <code>net/http.Cookie</code> field <code>Partitioned</code> which is a field only available in go 1.23. As a result all usage of the main branch will not work unless users are on 1.23 which at the time of writing is currently unreleased. This broke the install for a number of users so the intent of this release is to push out a couple of features and bugfixes with the go 1.23 specific changes removed.</p> <p>Releases should be used exclusively until go 1.23 is released.</p> <h2>What's Changed</h2> <ul> <li>Improve File System Path Handling by <a href="https://github.com/moloch"><code>@moloch</code></a>-- in <a href="https://redirect.github.com/gorilla/sessions/pull/274">gorilla/sessions#274</a></li> <li><a href="https://redirect.github.com/gorilla/sessions/issues/272">#272</a>: feat: Add support for paritioned attribute in cookies as per chrome 3rd party cookie phaseout by <a href="https://github.com/kashishbehl"><code>@kashishbehl</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/273">gorilla/sessions#273</a></li> <li>fix no default samesite by <a href="https://github.com/bharat-rajani"><code>@bharat-rajani</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/276">gorilla/sessions#276</a></li> <li>Fix gorillatoolkit link in README.md by <a href="https://github.com/mbacalan"><code>@mbacalan</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/278">gorilla/sessions#278</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/moloch"><code>@moloch</code></a>-- made their first contribution in <a href="https://redirect.github.com/gorilla/sessions/pull/274">gorilla/sessions#274</a></li> <li><a href="https://github.com/kashishbehl"><code>@kashishbehl</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/sessions/pull/273">gorilla/sessions#273</a></li> <li><a href="https://github.com/bharat-rajani"><code>@bharat-rajani</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/sessions/pull/276">gorilla/sessions#276</a></li> <li><a href="https://github.com/mbacalan"><code>@mbacalan</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/sessions/pull/278">gorilla/sessions#278</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gorilla/sessions/compare/v1.2.2...v1.3.0">https://github.com/gorilla/sessions/compare/v1.2.2...v1.3.0</a></p> <h2>Release v1.2.2</h2> <h2>What's Changed</h2> <ul> <li>build: use build matrix; drop Go <= 1.10 by <a href="https://github.com/elithrar"><code>@elithrar</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/230">gorilla/sessions#230</a></li> <li>refactor: use base32 encoder with no padding by <a href="https://github.com/leungyauming"><code>@leungyauming</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/240">gorilla/sessions#240</a></li> <li>docs: Add new TiKV store to README by <a href="https://github.com/ryicoh"><code>@ryicoh</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/245">gorilla/sessions#245</a></li> <li>Fix linting errors for go1.17 by <a href="https://github.com/mariusor"><code>@mariusor</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/253">gorilla/sessions#253</a></li> <li>Update README.md by <a href="https://github.com/coreydaley"><code>@coreydaley</code></a> in <a href="https://redirect.github.com/gorilla/sessions/pull/261">gorilla/sessions#261</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gorilla/sessions/commit/bb4cd60c952a9ce48ea0dc6cc7b282ff79c38263"><code>bb4cd60</code></a> chore: Update readme to relect go 1.23 release</li> <li><a href="https://github.com/gorilla/sessions/commit/e2083f956282b2e627d9734f4ebbd51fa0339f09"><code>e2083f9</code></a> chore: update to go 1.23 for workflows</li> <li><a href="https://github.com/gorilla/sessions/commit/6eef180e176e826b77f4d2f5f8e1cf855a87db02"><code>6eef180</code></a> fix: Missing SameSite attribute on options</li> <li><a href="https://github.com/gorilla/sessions/commit/a56e60c14e37beb3f690c14311c8ad7be7580bb5"><code>a56e60c</code></a> Add mysql store to the readme (<a href="https://redirect.github.com/gorilla/sessions/issues/279">#279</a>)</li> <li><a href="https://github.com/gorilla/sessions/commit/466d29e7f343560836292b7c922e1385e908ef95"><code>466d29e</code></a> chore: Update readme and copyrights</li> <li><a href="https://github.com/gorilla/sessions/commit/7a8159ef2d1bc1afea2b9fbb52e947ded867cf0c"><code>7a8159e</code></a> chore(go): Remove go version 1.11 support</li> <li><a href="https://github.com/gorilla/sessions/commit/ff5660f3c355c08371621b642d76c7a4c88836c6"><code>ff5660f</code></a> chore(go): Add warning about main branch</li> <li><a href="https://github.com/gorilla/sessions/commit/8e2d54718e949e895e6a0268e9d4df396b3fbe06"><code>8e2d547</code></a> chore(go): Remove vendored dependencies</li> <li><a href="https://github.com/gorilla/sessions/commit/c373b3e334dc26e3e513168292d784d7773f7d27"><code>c373b3e</code></a> Fix gorillatoolkit link in README.md (<a href="https://redirect.github.com/gorilla/sessions/issues/278">#278</a>)</li> <li><a href="https://github.com/gorilla/sessions/commit/ef99c782e9aae430b326a614151c983dcd7c2c1d"><code>ef99c78</code></a> fix(cookie): Add default samesite (<a href="https://redirect.github.com/gorilla/sessions/issues/276">#276</a>)</li> <li>Additional commits viewable in <a href="https://github.com/gorilla/sessions/compare/v1.1.1...v1.4.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information
1 parent
0fe3bd7
commit d388c92