Fixed

• Perf optimize cookie value validation by @blakeembrey in #285
• Small convention cleanups by @blakeembrey in #284
• Reject Expires dates outside cookie year bounds by @offyotto in #290
• Reject unsafe-integer maxAge by @spokodev in #286

Full Changelog: v2.0.1...v2.0.2

Improved:

• Small performance improvement by incrementing = index while parsing set-cookie (#280)

Important: This release moves the package to ESM only. In node 22+ you can require(esm), and older node versions are not supported.

Changed

• Switch to ESM (#273)
• Remove deprecated code paths (#272)
  • The old parse and stringify methods have been renamed: parseCookie and stringifySetCookie
  • stringifySetCookie only supports object mode (e.g. { name: "", value: "" })

Improvements

• Faster stringify cookie (#262)
• Optimize encode performance (#269)
• Apply encode to empty cookie values (#277)

Fixed

• Omit leading semicolon when stringifying cookies with skipped values (#267)

Fixed

• Overwrite value in passed in options (#253) c66147c
  • When value was provided in serialize(key, value, { value }) the value in options was used instead of the value passed as an argument

v1.1.0...v1.1.1

Added:

• Add stringifyCookie and parseSetCookie methods (#244, #214)
• Rename existing methods for clarity (old method names remain for backward compatibility)
  • parse → parseCookie
  • serialize → stringifySetCookie
• Add side effects field (#245) 00b0327

v1.0.2...v1.1.0

Fixed

• Loosen cookie name/value validation (#210)
• fix: options.priority used incorrect fallback (#207) by @jonchurch

Added

• Add import example to README (#190) by @isnifer

v1.0.1...v1.0.2

Added

• Allow case insensitive options (#194) 3bed080

v1.0.0...v1.0.1

Breaking changes

• Use modern JS features, ship TypeScript definition (#175) 1cc64ff
  • Adds __esModule marker, imports need to use import { parse, serialize } or import * as cookie
• Minimum node.js v18
• Uses null prototype object for parse return value
• Changes strict and priority to match the lower case strings (i.e. low, not LOW or Low)
• Require maxAge to be an integer using Number.isInteger check
• Delegates decode implementation details to decode option (i.e. error handling and quote parsing is defined by decode)
  • Delegate quote parsing to decode (#180) c4a2597
  • Shift try/catch to decode (#179) 93a5b97
• Improve arg/option error messages (#162) e206fd5 @MaoShizhong

Other

• Remove hasOwnProperty, use undefined check for performance (#183) 8f3ee9e @gurgunday

v0.7.2...v1.0.0

Fixed

• Fix object assignment of hasOwnProperty (#177) bc38ffd

v0.7.1...v0.7.2

Fixed

• Allow leading dot for domain (#174)
  • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
• Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

v0.7.0...v0.7.1