# What changed in express-session

> 2 changes in express-session 1 from its official release notes, upgrade guides and advisories: 2 new APIs and options. Each one cited. Sources checked 2026-10-24. HTML: https://unstale.sh/npm/express-session/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## express-session 1

### New APIs and options

- Cookie options can now be provided dynamically based on each request, enabling context-aware configuration of cookie attributes. (1.19.0) — [release notes](https://github.com/expressjs/session/releases/tag/v1.19.0)
- The `auto` option sets SameSite=None for HTTPS and SameSite=Lax for HTTP connections. (1.19.0) — [release notes](https://github.com/expressjs/session/releases/tag/v1.19.0)