| B | ↘ | C | Session got worse |
| ⇢ | B | Session::getCookieDomain() added | |
| ⇢ | A | Configuration::setCookieSameSite() added | |
| ⇢ | A | Session::withSessionCookie() added | |
| ⇢ | A | Session::getSessionCookieString() added | |
| ⇢ | A | Session::loadIdFromRequest() added | |
| ⇢ | A | Configuration::getCookieSameSite() added | |
| B | ↗ | A | SessionHandling::__invoke() improved |
| A | ↛ | Session::getCookieString() removed |