Skip to content
This repository was archived by the owner on Mar 14, 2026. It is now read-only.

⬆️ Bump cookie from 1.0.2 to 1.1.0#327

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cookie-1.1.0
Open

⬆️ Bump cookie from 1.0.2 to 1.1.0#327
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cookie-1.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 1, 2026

Copy link
Copy Markdown
Contributor

Bumps cookie from 1.0.2 to 1.1.0.

Release notes

Sourced from cookie's releases.

v1.1.0

Added:

  • Add stringifyCookie and parseSetCookie methods (#244, #214)
  • Rename existing methods for clarity (old method names remain for backward compatibility)
    • parseparseCookie
    • serializestringifySetCookie
  • Add side effects field (#245) 00b0327

jshttp/cookie@v1.0.2...v1.1.0

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Changelog

Bump cookie package to latest minor version with new parsing methods.

Changed

  • ⬆️ Bump cookie from 1.0.2 to 1.1.0 in package.json

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [cookie](https://github.com/jshttp/cookie) from 1.0.2 to 1.1.0.
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v1.0.2...v1.1.0)

---
updated-dependencies:
- dependency-name: cookie
  dependency-version: 1.1.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 1, 2026
@dependabot dependabot Bot requested a review from NatoBoram as a code owner January 1, 2026 12:02
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 1, 2026
@coderabbitai

coderabbitai Bot commented Jan 1, 2026

Copy link
Copy Markdown

Walkthrough

Updates the cookie package devDependency from version ^1.0.2 to ^1.1.0 in package.json, allowing access to minor version updates and patches within the 1.1.x range.

Changes

Cohort / File(s) Summary
Dependency version update
package.json
cookie devDependency bumped from ^1.0.2 to ^1.1.0

Suggested reviewers

  • NatoBoram
🚥 Pre-merge checks | ✅ 4 | ❌ 1
❌ Failed checks (1 inconclusive)
Check name Status Explanation Resolution
Gitmoji Commits ❓ Inconclusive Unable to retrieve commit information from PR #327. No commit data available for gitmoji verification. Verify that the PR number is correct and that commit information is accessible.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title correctly uses the ⬆️ emoji for dependency upgrades and clearly describes the specific version change of the cookie package.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Git Flow ✅ Passed The source branch uses the dependabot/ prefix, which is explicitly permitted for the @dependabot[bot] user. The target branch main aligns with the Git Flow configuration.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/npm_and_yarn/cookie-1.1.0

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

0 participants