chore(deps): update dependency passport to version 0.6.0 🌟

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
passport (source)	0.5.0 -> 0.6.0

GitHub Vulnerability Alerts

CVE-2022-25896

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.

---

Release Notes

jaredhanson/passport (passport)

v0.6.0

Compare Source

Added

• authenticate(), req#login, and req#logout accept a
  keepSessionInfo: true option to keep session information after regenerating
  the session.

Changed

• req#login() and req#logout() regenerate the the session and clear session
  information by default.
• req#logout() is now an asynchronous function and requires a callback
  function as the last argument.

Security

• Improved robustness against session fixation attacks in cases where there is
  physical access to the same system or the application is susceptible to
  cross-site scripting (XSS).

v0.5.3

Compare Source

Fixed

• initialize() middleware extends request with login(), logIn(),
  logout(), logOut(), isAuthenticated(), and isUnauthenticated() functions
  again, reverting change from 0.5.1.

v0.5.2

Compare Source

Fixed

• Introduced a compatibility layer for strategies that depend directly on
  passport@0.4.x or earlier (such as passport-azure-ad), which were
  broken by the removal of private variables in passport@0.5.1.

v0.5.1

Compare Source

Added

• Informative error message in session strategy if session support is not
  available.

Changed

• authenticate() middleware, rather than initialize() middleware, extends
  request with login(), logIn(), logout(), logOut(), isAuthenticated(),
  and isUnauthenticated() functions.

---

Configuration

📅 Schedule: Branch creation - "" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[cypress-app-bot]

See the guidelines for reviewing dependency updates for info on how to review dependency update PRs.

[cypress]

29 failed tests on run #6366 ↗︎

29

208

2

155

0

Details:

chore(deps): update passport to 0.6.0 🌟
Project: cypress-realworld-app	Commit: 06830a7b57
Status: Failed	Duration: 09:06 💡
Started: Mar 11, 2024 5:29 PM	Ended: Mar 11, 2024 5:38 PM

  ui/notifications.spec.ts • 1 failed test • Component

View Output

Test		Artifacts
Notifications > notifications from user interactions > User A likes a transaction of User B; User B gets notification that User A liked transaction		Test Replay Screenshots

  ui/new-transaction.spec.ts • 1 failed test • Component

View Output

Test		Artifacts
New Transaction > navigates to the new transaction form, selects a user and submits a transaction payment		Test Replay Screenshots

  ui/auth.spec.ts • 1 failed test • Component

View Output

Test		Artifacts
User Sign-up and Login > should allow a visitor to sign-up, login, and logout		Test Replay Screenshots

  ui/bankaccounts.spec.ts • 1 failed test • Component

View Output

Test		Artifacts
Bank Accounts > creates a new bank account		Test Replay Screenshots

  demo/cypress-studio.spec.ts • 1 failed test • Component

View Output

Test		Artifacts
Cypress Studio Demo > create new transaction		Test Replay Screenshots

The first 5 failed specs are shown, see all 29 specs in Cypress Cloud.

Review all test suite changes for PR #1526 ↗︎

[jennifer-shehane]

There's an existing issue with this noted here that makes development not great.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (0.6.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.