Merge branch 'release/7.50.0'

Author: appurva21

CHANGELOG.yaml

@@ -1,3 +1,8 @@
+7.50.0:
+  date: 2025-11-06
+  new features:
+    - GH-1534 Add support for disabling cookie jar via requester options
+
 7.49.1:
   date: 2025-10-30
   chores:

README.md

@@ -85,6 +85,9 @@ runner.run(collection, {
         // jar.allowProgrammaticAccess = function (domain) { return domain === 'postman-echo.com'; };
         cookieJar: jar,
 
+        // Prevents cookie jar from being used for in a request
+        disableCookies: false,
+
         // Controls redirect behavior (only supported on Node, ignored in the browser)
         followRedirects: true,
 

docs/protocol-profile-behavior.md

@@ -15,6 +15,9 @@ Follow HTTP 3xx responses as redirects.
 - `maxRedirects: Number`<br/>
 Set maximum number of redirects to follow.
 
+- `disableCookies: Boolean`<br/>
+Prevent cookie jar from being used in a request.
+
 - `disableBodyPruning: Boolean`<br/>
 Control request body pruning for following methods: ```GET, COPY, HEAD, PURGE, UNLOCK```
 

lib/requester/core.js

@@ -85,7 +85,10 @@ var dns = require('dns'),
         removeRefererHeader: 'removeRefererHeaderOnRedirect',
 
         // Select the HTTP protocol version to be used. Valid options are http1/http2/auto
-        protocolVersion: 'protocolVersion'
+        protocolVersion: 'protocolVersion',
+
+        // disable cookie jar
+        disableCookies: 'disableCookies'
     },
 
     /**
@@ -484,7 +487,7 @@ module.exports = {
         }
 
         // set cookie jar if not disabled
-        if (!protocolProfileBehavior.disableCookies) {
+        if (!options.disableCookies) {
             options.jar = defaultOpts.cookieJar || true;
         }
 

lib/requester/dry-run.js

@@ -316,7 +316,11 @@ function dryRun (request, options, done) {
         implicitCacheControl = options.implicitCacheControl,
         implicitTraceHeader = options.implicitTraceHeader,
         disabledSystemHeaders = _.get(options.protocolProfileBehavior, 'disabledSystemHeaders') || {},
-        disableCookies = _.get(options.protocolProfileBehavior, 'disableCookies');
+
+        // TODO: Unify the logic to read ppb properties with core.js
+        disableCookies = Object.hasOwn(options.protocolProfileBehavior || {}, 'disableCookies') ?
+            options.protocolProfileBehavior.disableCookies :
+            options.disableCookies;
 
     async.waterfall([
         function setContentTypeHeader (next) {

lib/requester/requester-pool.js

@@ -22,6 +22,7 @@ RequesterPool = function (options, callback) {
         keepAlive: _.get(options, 'requester.keepAlive', true),
         agents: _.get(options, 'requester.agents'), // http(s).Agent instances
         cookieJar: _.get(options, 'requester.cookieJar'), // default set later in this constructor
+        disableCookies: _.get(options, 'requester.disableCookies', false),
         strictSSL: _.get(options, 'requester.strictSSL'),
         maxResponseSize: _.get(options, 'requester.maxResponseSize'),
         protocolVersion: _.get(options, 'requester.protocolVersion'),

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "postman-runtime",
-  "version": "7.49.1",
+  "version": "7.50.0",
   "description": "Underlying library of executing Postman Collections",
   "author": "Postman Inc.",
   "license": "Apache-2.0",