[Snyk] Security upgrade socket.io-client from 1.4.5 to 1.7.4

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Arbitrary Code Injection SNYK-JS-XMLHTTPREQUESTSSL-1082936	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: socket.io-client

The new version differs by 117 commits.

• 18d8f2b [chore] Release 1.7.4
• 3420770 [chore] Bump engine.io-client to version 1.8.4
• 70f8888 [chore] Release 1.7.3
• c70d98e [chore] bump engine.io-client to version 1.8.3
• 177a65f [chore] Release 1.7.2 (#1045)
• 766cef4 [chore] Bump engine.io-client to version 1.8.2 (#1044)
• 9dec44a [chore] Speed up lint by avoiding '**/*.js' matching pattern (#1043)
• 8f18970 [chore] Release 1.7.1 (#1037)
• d47bbd8 [fix] Fix json import in slim build (#1036)
• 1aa91eb [docs] Add saucelabs browser matrix in README (#1035)
• 5ecf06a [chore] Release 1.7.0 (#1033)
• 3d20b0f [chore] Bump engine.io-client to 1.8.1 (#1032)
• c1dd34c [chore] Provide a slim build without JSON3 and debug (#1030)
• 3ba3fe3 [chore] Move generated files to `dist` folder (#1025)
• fa14f91 [chore] Release 1.6.0 (#1027)
• ed63f96 [chore] Bump dependencies (#1026)
• 1f55bf2 [feature] Support minified `socket.io.min.js` (#1021)
• 4d1c20d [feature] emit sourcemap for socket.io.js (#953)
• 3df7e09 [chore] Release 1.5.1 (#1016)
• 838c9c2 [chore] Bump engine.io-client to 1.7.2 and socket.io-parser to 2.3.1 (#1015)
• c2fb41c [chore] Add Github issue and PR templates (#1013)
• 298034f [chore] Update zuul browser settings (#1011)
• cbc3d67 [chore] Bump engine.io-client to 1.7.1 (#1010)
• d9e4931 [chore] Bump socket.io-parser to 2.3.0 (#1009)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Arbitrary Code Injection