Bump github.com/gorilla/sessions from 1.2.1 to 1.4.0

[dependabot]

Bumps github.com/gorilla/sessions from 1.2.1 to 1.4.0.

Release notes

Sourced from github.com/gorilla/sessions's releases.

v1.4.0

Summary

There were new features important for compatibility with some of the upcoming cookie security changes with google that required a new Partitioned attribute be added to the cookies, this attribute was only available in go 1.23, which has just recently been released.

If you require a version that is backward compatible with a lower version than go 1.23 then you'll need to use release v1.3.0.

The following notes show the difference between 1.2.2 and the current version because 1.3.0 was a hotfix for go 1.22 and below.

What's Changed

• Improve File System Path Handling by @​moloch-- in gorilla/sessions#274
• #272: feat: Add support for paritioned attribute in cookies as per chrome 3rd party cookie phaseout by @​kashishbehl in gorilla/sessions#273
• fix no default samesite by @​bharat-rajani in gorilla/sessions#276
• Fix gorillatoolkit link in README.md by @​mbacalan in gorilla/sessions#278
• Add mysql store to the readme by @​danielepintore in gorilla/sessions#279

New Contributors

• @​moloch-- made their first contribution in gorilla/sessions#274
• @​kashishbehl made their first contribution in gorilla/sessions#273
• @​bharat-rajani made their first contribution in gorilla/sessions#276
• @​mbacalan made their first contribution in gorilla/sessions#278
• @​danielepintore made their first contribution in gorilla/sessions#279

Full Changelog: gorilla/sessions@v1.2.2...v1.4.0

v1.3.0

The maintainers of this repo merged a PR into main with the net/http.Cookie field Partitioned which is a field only available in go 1.23. As a result all usage of the main branch will not work unless users are on 1.23 which at the time of writing is currently unreleased. This broke the install for a number of users so the intent of this release is to push out a couple of features and bugfixes with the go 1.23 specific changes removed.

Releases should be used exclusively until go 1.23 is released.

What's Changed

• Improve File System Path Handling by @​moloch-- in gorilla/sessions#274
• #272: feat: Add support for paritioned attribute in cookies as per chrome 3rd party cookie phaseout by @​kashishbehl in gorilla/sessions#273
• fix no default samesite by @​bharat-rajani in gorilla/sessions#276
• Fix gorillatoolkit link in README.md by @​mbacalan in gorilla/sessions#278

New Contributors

• @​moloch-- made their first contribution in gorilla/sessions#274
• @​kashishbehl made their first contribution in gorilla/sessions#273
• @​bharat-rajani made their first contribution in gorilla/sessions#276
• @​mbacalan made their first contribution in gorilla/sessions#278

Full Changelog: gorilla/sessions@v1.2.2...v1.3.0

Release v1.2.2

What's Changed

• build: use build matrix; drop Go <= 1.10 by @​elithrar in gorilla/sessions#230
• refactor: use base32 encoder with no padding by @​leungyauming in gorilla/sessions#240
• docs: Add new TiKV store to README by @​ryicoh in gorilla/sessions#245
• Fix linting errors for go1.17 by @​mariusor in gorilla/sessions#253
• Update README.md by @​coreydaley in gorilla/sessions#261

... (truncated)

Commits

• bb4cd60 chore: Update readme to relect go 1.23 release
• e2083f9 chore: update to go 1.23 for workflows
• 6eef180 fix: Missing SameSite attribute on options
• a56e60c Add mysql store to the readme (#279)
• 466d29e chore: Update readme and copyrights
• 7a8159e chore(go): Remove go version 1.11 support
• ff5660f chore(go): Add warning about main branch
• 8e2d547 chore(go): Remove vendored dependencies
• c373b3e Fix gorillatoolkit link in README.md (#278)
• ef99c78 fix(cookie): Add default samesite (#276)
• Additional commits viewable in compare view