Bump cookie to v0.7.0

[ivasilov]

There was a vulnerability which was fixed in v0.7.0. Since this library depends on cookie and has strict version range, it can't be updated to 0.7.0.

[Eric-Arellano]

Thank you for fixing this! Any ETA on a release to NPM?

[kettanaito]

@Eric-Arellano, I've opened a pull request to add release automation to this package (see #4). If we get it merged, I will see the release to NPM. All the following releases will be published automatically on merge to main.

[jpreynat]

@thepassle Any chance to get a new version of this module on npm that includes this fix? 🙏
Thanks in advance!

[RomeoDespres]

For anyone trying to fix the recent security issue - just found out you can add the following to package.json:

"overrides": {
    "@bundled-es-modules/cookie": {
      "cookie": ">=0.7.0"
    }
  }

which will force installation of the patched version of cookie - and likely won't break anything since this package does not depend on any feature of cookie.