[Snyk] Upgrade connect-redis from 3.4.2 to 7.1.1

[YoutacRandS-VA]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade connect-redis from 3.4.2 to 7.1.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 19 versions ahead of your current version.

• The recommended version was released on 5 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-REDIS-1255645	479	No Known Exploit

Release notes

Package name: connect-redis

• 7.1.1 - 2024-01-22
  

  Maintenance

  • #408 - Fix typo in readme (@ kunal-mandalia)
  • #409 - Fix broken windows (@ wavded)
• 7.1.0 - 2023-05-11
  

  Enhancements

  • #393 - Add TTL interception for external conditional TTL handling (@ movwf)
  • #390 - Add support for async serializer so it can be used with worker threads (@ ozcanovunc)
• 7.0.1 - 2023-03-06
  

  Maintenance

  • #382 - Remove FAQ section in readme (@ wavded)
  • #381 - Declare express-session as a peerDependency (@ wavded)
• 7.0.0 - 2023-02-28
  

  Breaking changes

  This drops support for the following legacy clients:

  • redis@v3
  • redis-mock

  This also rewrites the codebase in TypeScript removing the need to include a separate @ types/connect-redis dependency.

  Build now supports both CJS and ESM. Support for Node 14 has been removed.

  Migration from v6

  If you were using @ types/connect-redis, remove that package as types are now included in this package.

  If you were using the legacyMode: true setting for the redis package, remove this as legacy mode is no longer required to run this package and is no longer supported.

  Initializing the RedisStore no longer takes in express-session.

  // Previously
  import connectRedis from "connect-redis"
  import session from "express-session"
  const RedisStore = connectRedis(seession)

  // Now
  import RedisStore from "connect-redis"

  If you are using CommonJS (require) modules. You must import the default export.

  // Previously
  const RedisStore = require("connect-redis")

  // Now
  const RedisStore = require("connect-redis").default

  
  


• 
  7.0.0-rc.2 - 2023-02-21
  


• 
  7.0.0-rc.1 - 2023-02-21
  


• 
  6.1.3 - 2022-03-18
  

  • #347 - Revert concurrent sessions again (@ wavded)
• 6.1.2 - 2022-03-14
  

  Bug fixes

  • #348 - Fix merging bug in 6.1.0 that resulted in sessions being deleted. (@ zkldi)

  Maintenance

  • #350 - Add keywords in package.json (@ noahliechti)
• 6.1.1 - 2022-02-07
  
  • #347 - Revert concurrent sessions (@ wavded)
• 6.1.0 - 2022-02-04
  

  Enhancements

  • #345 - Add support for Redis V4 through legacyMode (@ wavded)
  • #333 - Support for concurrent sessions (@ xarnze)

  Maintenance

  • #344 - Update import format on readme (@ cechiorlu)
  • #342 - Add note about using multiple Redis versions (@ abhijoshi2k)
• 6.0.0 - 2021-06-02
  

  Breaking changes

  • #327 - Remove Node 10 support (@ wavded)

  Maintenance

  • #326 - Fix broken windows (@ wavded)
• 5.2.0 - 2021-04-27
  

  Enhancements

  • #322 - Delete key if resulting TTL is negative in set method (@ baumgarb)

  Maintenance

  • #324 - Bump redis from 3.0.2 -> 3.1.2 (@ dnwe)
  • #318 - Update readme.md (@ lunush)
• 5.1.0 - 2021-02-08
• 5.0.0 - 2020-07-09
• 4.0.4 - 2020-01-30
• 4.0.3 - 2019-10-01
• 4.0.2 - 2019-09-03
• 4.0.1 - 2019-09-02
• 4.0.0 - 2019-08-28
• 3.4.2 - 2019-07-19

from connect-redis GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs