PCC-1332 Set PCC-GRANT cookie very permissively. Update github action version.

.changeset/young-maps-fly.md

@@ -0,0 +1,5 @@
+---
+"@pantheon-systems/pcc-sdk-core": patch
+---
+
+PCC-GRANT (preview token) cookie now set with most relaxed security so that preview-pages can be shown in iframes.

.github/workflows/changeset.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout code repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: setup node.js

packages/cli/CHANGELOG.md

@@ -5,7 +5,8 @@
 ### Patch Changes
 
 - 0c75736: CLI replaces "--version" command with "version"
-- 1fd7c4d: Added support for setting preferred webhook events. Webhook notifications will only be sent on events matching preferred events
+- 1fd7c4d: Added support for setting preferred webhook events. Webhook
+  notifications will only be sent on events matching preferred events
 - Updated dependencies [183ad17]
   - @pantheon-systems/[email protected]
 

packages/core/__tests__/core/pantheon-api.test.ts

@@ -110,7 +110,7 @@ describe("Request Handling", () => {
     );
 
     expect(mockResponse.setHeader).toHaveBeenCalledWith("Set-Cookie", [
-      "PCC-GRANT=test-grant; Path=/; SameSite=Lax",
+      "PCC-GRANT=test-grant; Path=/; SameSite=None;Secure;",
     ]);
   });
 

packages/core/src/core/pantheon-api.ts

@@ -127,7 +127,10 @@ export const PantheonAPI = (givenOptions?: PantheonAPIOptions) => {
 
     // Set or delete the PCC-GRANT cookie.
     if (pccGrant) {
-      await setCookie(res, `PCC-GRANT=${pccGrant}; Path=/; SameSite=Lax`);
+      await setCookie(
+        res,
+        `PCC-GRANT=${pccGrant}; Path=/; SameSite=None;Secure;`,
+      );
     } else if (
       options?.getSiteId != null &&
       req.cookies?.["PCC-GRANT"] != null