Skip to content

πŸ”’οΈ bump js-cookie from 3.0.5 to 3.0.8 - #195

Merged
haliphax merged 1 commit into
mainfrom
dependabot/npm_and_yarn/js-cookie-3.0.7
Sep 8, 2026
Merged

πŸ”’οΈ bump js-cookie from 3.0.5 to 3.0.8#195
haliphax merged 1 commit into
mainfrom
dependabot/npm_and_yarn/js-cookie-3.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 21, 2026

Copy link
Copy Markdown
Contributor

Bumps js-cookie from 3.0.5 to 3.0.8.

Release notes

Sourced from js-cookie's releases.

v3.0.8

  • Restore ES5 compatibility, inadvertently broken in 3.0.7 - #959
  • Lift Node version restriction, inadvertently restricted to >= 20 in 3.0.7 - #956

v3.0.7

  • Prevent cookie attribute injection: CVE-2026-46625 (eb3c40e)
  • Add Partitioned attribute to readme (b994768)
  • Publish to npm registry via trusted publisher exclusively (4dc71be)
  • Ensure consistent behaviour for get('name') + get() (1953d30)
Commits
  • d7a1096 Craft v3.0.8 release
  • 248e685 Use existing Chrome with puppeteer
  • fc04269 Remove QUnit related workaround in Grunt config
  • 265a685 Tidy up package lock file
  • 478e591 Disable Node deprecation DEP0044 for release workflow
  • 331d524 Fix node version config for E2E test job
  • 11d773d Ensure ECMAScript compatibility
  • d788646 Remove engines property from package
  • e7d9a4d Fix typo in test assertion message
  • b5fca24 Make credentials use explicit in release workflow
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for js-cookie since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 21, 2026
@coveralls

coveralls commented May 21, 2026

Copy link
Copy Markdown

Coverage Report for CI Build 34271017928

Coverage remained the same at 98.903%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 1176
Covered Lines: 1172
Line Coverage: 99.66%
Relevant Branches: 191
Covered Branches: 180
Branch Coverage: 94.24%
Branches in Coverage %: Yes
Coverage Strength: 3.66 hits per line

πŸ’› - Coveralls

@haliphax

haliphax commented Sep 8, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [js-cookie](https://github.com/js-cookie/js-cookie) from 3.0.5 to 3.0.8.
- [Release notes](https://github.com/js-cookie/js-cookie/releases)
- [Commits](js-cookie/js-cookie@v3.0.5...v3.0.8)

---
updated-dependencies:
- dependency-name: js-cookie
  dependency-version: 3.0.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump js-cookie from 3.0.5 to 3.0.7 Bump js-cookie from 3.0.5 to 3.0.8 Sep 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-cookie-3.0.7 branch from f372b7f to 9ffa057 Compare September 8, 2026 19:47
@haliphax haliphax changed the title Bump js-cookie from 3.0.5 to 3.0.8 πŸ”’οΈ bump js-cookie from 3.0.5 to 3.0.8 Sep 8, 2026
@haliphax
haliphax merged commit f4f7a24 into main Sep 8, 2026
8 of 10 checks passed
@haliphax
haliphax deleted the dependabot/npm_and_yarn/js-cookie-3.0.7 branch September 8, 2026 19:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants