From ab359bc8e9e49edc05a7fa446277cbec17790345 Mon Sep 17 00:00:00 2001
From: Sergei Predvoditelev <sergei@predvoditelev.ru>
Date: Wed, 26 Aug 2026 09:17:48 +0300
Subject: [PATCH] Bump `yiisoft/session` version to `^3.0.2`

---
 CHANGELOG.md  | 1 +
 composer.json | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index bf0dc8f..0b17c40 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@
 
 - Enh #120: Explicitly import classes and constants in "use" section (@vjik)
 - Enh #127: Bump `yiisoft/auth` version to `^3.3.0`, and fix deprecated classes usage (@klsoft-web, @vjik)
+- Enh #132: Bump `yiisoft/session` version to `^3.0.2` (@vjik)
 
 ## 2.3.2 December 23, 2025
 
diff --git a/composer.json b/composer.json
index 830a9dc..a84e804 100644
--- a/composer.json
+++ b/composer.json
@@ -37,7 +37,7 @@
         "yiisoft/access": "^2.0",
         "yiisoft/auth": "^3.3.0",
         "yiisoft/cookies": "^1.2",
-        "yiisoft/session": "^1.0 || ^2.0 || ^3.0",
+        "yiisoft/session": "^3.0.2",
         "yiisoft/http": "^1.2"
     },
     "require-dev": {