deps: bump cookie from 1.1.1 to 2.0.1 (#791)

Co-authored-by: Renée Kooi <renee@kooi.me>
Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

package.json

@@ -35,7 +35,7 @@
     "bcryptjs": "^3.0.1",
     "better-sqlite3": "^12.1.0",
     "body-parser": "^2.2.0",
-    "cookie": "^1.0.1",
+    "cookie": "^2.0.1",
     "cookie-parser": "^1.4.4",
     "cors": "^2.8.5",
     "emittery": "^1.2.0",

src/controllers/authenticate.js

@@ -1,6 +1,6 @@
 import { randomUUID } from 'node:crypto';
 import { promisify } from 'node:util';
-import cookie from 'cookie';
+import { stringifySetCookie } from 'cookie';
 import jwt from 'jsonwebtoken';
 import randomString from 'random-string';
 import nodeFetch from 'node-fetch';
@@ -467,7 +467,9 @@ async function logout(req, res) {
 
   // Clear the legacy `uwsession` cookie.
   if (cookies && cookies.uwsession) {
-    const serialized = cookie.serialize('uwsession', '', {
+    const serialized = stringifySetCookie({
+      name: 'uwsession',
+      value: '',
       httpOnly: true,
       secure: !!cookieSecure,
       path: cookiePath ?? '/',