Skip to content

Update ws package version to 7.5.11#67408

Merged
wtgodbe merged 2 commits into
dotnet:release/8.0from
birarroshan:wp/upgrade-ws-version
Jul 7, 2026
Merged

Update ws package version to 7.5.11#67408
wtgodbe merged 2 commits into
dotnet:release/8.0from
birarroshan:wp/upgrade-ws-version

Conversation

@birarroshan

@birarroshan birarroshan commented Jun 25, 2026

Copy link
Copy Markdown

Upgrade ws version for SingnalR release 8

  • You've read the Contributor Guide and Code of Conduct.
  • You've included unit or integration tests for your change, where applicable.
  • You've included inline docs for your change, where applicable.
  • There's an open issue for the PR that you are making. If you'd like to propose a new feature or change, please open an issue to discuss the change or find an existing issue.

Summary of the changes (Less than 80 chars)

Description

Upgrade ws package to latest fixed version 7.5.11

Fixes #67407 #67271

Copilot AI review requested due to automatic review settings June 25, 2026 06:09
@dotnet-policy-service dotnet-policy-service Bot added the community-contribution Indicates that the PR has been added by a community member label Jun 25, 2026
@dotnet-policy-service

Copy link
Copy Markdown
Contributor

Thanks for your PR, @birarroshan. Someone from the team will get assigned to your PR shortly and we'll get it reviewed.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the TypeScript SignalR client’s ws dependency to a non-vulnerable patch level to address the reported CVE (issue #67407).

Changes:

  • Bump ws dependency range in @microsoft/signalr from ^7.5.10 to ^7.5.11.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread src/SignalR/clients/ts/signalr/package.json

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 2 changed files in this pull request and generated no new comments.

@birarroshan

Copy link
Copy Markdown
Author

@birarroshan please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@dotnet-policy-service agree [company="{your company}"]

Options:

  • (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.
@dotnet-policy-service agree
  • (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.
@dotnet-policy-service agree company="Microsoft"

Contributor License Agreement

@dotnet-policy-service agree

@wtgodbe wtgodbe added the tell-mode Indicates a PR which is being merged during tell-mode label Jun 29, 2026
@wtgodbe

wtgodbe commented Jun 29, 2026

Copy link
Copy Markdown
Member

Will merge once branches re-open for August (next week)

@wtgodbe wtgodbe merged commit d93ecc4 into dotnet:release/8.0 Jul 7, 2026
21 of 25 checks passed
@birarroshan

Copy link
Copy Markdown
Author

Thanks @wtgodbe for accepting change. What is tentative release date?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

community-contribution Indicates that the PR has been added by a community member tell-mode Indicates a PR which is being merged during tell-mode

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants