1.18.0

• Add debug log for pathname mismatch
• Add partitioned to cookie options
• Add priority to cookie options
• Fix handling errors from setting cookie
• Support any type in secret that crypto.createHmac supports
• deps: cookie@0.6.0
  • Fix expires option to reject invalid dates
  • perf: improve default decode speed
  • perf: remove slow string split in parse
• deps: cookie-signature@1.0.7

1.17.3

• Fix resaving already-saved new session at end of request
• deps: cookie@0.4.2

1.17.2

• Fix res.end patch to always commit headers
• deps: cookie@0.4.1
• deps: safe-buffer@5.2.1

1.17.1

• Fix internal method wrapping error on failed reloads

1.17.0

• deps: cookie@0.4.0
  • Add SameSite=None support
• deps: safe-buffer@5.2.0

1.16.2

• Fix restoring cookie.originalMaxAge when store returns Date
• deps: parseurl@~1.3.3

1.16.1

• Fix error passing data option to Cookie constructor
• Fix uncaught error from bad session data

1.16.0

• Catch invalid cookie.maxAge value earlier
• Deprecate setting cookie.maxAge to a Date object
• Fix issue where resave: false may not save altered sessions
• Remove utils-merge dependency
• Use safe-buffer for improved Buffer API
• Use Set-Cookie as cookie header name for compatibility
• deps: depd@~2.0.0
  • Replace internal eval usage with Function constructor
  • Use instance methods on process to check for listeners
  • perf: remove argument reassignment
• deps: on-headers@~1.0.2
  • Fix res.writeHead patch missing return value

1.15.6

• deps: debug@2.6.9
• deps: parseurl@~1.3.2
  • perf: reduce overhead for full URLs
  • perf: unroll the "fast-path" RegExp
• deps: uid-safe@~2.1.5
  • perf: remove only trailing =
• deps: utils-merge@1.0.1

1.15.5

• Fix TypeError when req.url is an empty string
• deps: depd@~1.1.1
  • Remove unnecessary Buffer loading