v1.6.0

• Enforce config.timeout on read and write for MemoryEngine and FileEngine: expired sessions are rejected immediately (no need to wait for GC), stale data is not revived on write, and expired file sessions are removed from disk #117. Thanks @sdogruyol 🙏

v1.5.0

• Default session cookie SameSite to Lax (previously unset). Improves protection against cross-site cookie sending while keeping typical first-visit flows working; use config.samesite = nil to omit the attribute, or HTTP::Cookie::SameSite::Strict for a stricter policy. Thanks @past3l 🙏

v1.4.0

• Prevent empty sessions from being stored (lazy session creation) #113 Thanks @sdogruyol 🙏
• Add flash functionality #112. Thanks @sdogruyol 🙏

v1.3.0

• Add option for per-session CSRF token #105. Thanks @swsch 🙏

v1.2.0

• Built-in CSRF support 🎉

v1.1.0

• Crystal 1.16.3 support 🎉
• Kemal 1.7.1 support 🎉

v1.0.0

• Crystal 1.0.0 support 🎉
• Kemal 1.0.0 support 🎉
• Secure cookies with samesite #96. Thanks @kingsleysh 🙏

v0.13.0

• Crystal 0.36.0 support

0.12.1

• Crystal 0.34.0 support

v0.12.0

• Crystal 0.30.0 support 🎉