Skip to content

build(deps): bump uWebSockets.js from v20.58.0 to v20.63.0 in /benchmarks#5028

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/benchmarks/uWebSockets.js-v20.63.0
Open

build(deps): bump uWebSockets.js from v20.58.0 to v20.63.0 in /benchmarks#5028
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/benchmarks/uWebSockets.js-v20.63.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 13, 2026

Bumps uWebSockets.js from v20.58.0 to v20.63.0.

Release notes

Sourced from uWebSockets.js's releases.

v20.63.0

Faster String arguments

With research & benchmarks done by @​BV-WebDev, this release introduces optimizations for methods taking JavaScript Strings. The following demo runs with 17% higher req/sec overall, entirely due to this faster String argument passing:

get('/', (res, req) => {
  res.writeHeader("Hello", "There");
  res.writeHeader("Hi", "On you");
  res.end('Hello World!');
})

This optimization applies to Node.js 24 or later and relies on the new v8::String::ValueView.

v20.62.0

  • Disables WebSocket.send V8 fastcall variant, suspected of causing issues for existing apps.
  • Disables the UWS_REMOTE_ADDRESS_USERSPACE enabled in v20.61.0. There are cases where this feature is not fully implemented (such as use together with worker threads).

v20.61.0

10 years of uWS

If you are interested, there is a more detailed retrospect release post in the main repo. For Node.js we have the following changes:

  • getRemoteAddress(), getRemoteAddressAsText() calls are now zero cost. This is a major performance boost for apps using these in hot paths.
  • onDataV2 is a superior alternative to onData, explained in the linked retrospect release.
  • collectBody is a helper function making optimal use of the new onDataV2. It allows efficient and easy collection of smallish HTTP posts into RAM, returned as one whole buffer.
  • We now build AddressSanitizer binaries, available in branch binaries-asan. These can be very useful for debugging or filing bug reports related to crashes and segfaults. To run the ASAN binaries, your Node.js invocation needs to be prefixed with LD_PRELOAD like so: LD_PRELOAD=$(gcc -print-file-name=libasan.so) node server.js
  • DeclarativeResponse can now do writeStatus as well as end with binary, not just text.
  • Many documentation fixes.
  • Support for symbol-keyed properties in WebSocket UserData.
  • getRemotePort, getProxiedRemotePort.

giphy (4)

v20.60.0

Bump lsquic

The experimental HTTP3 support is now building on latest lsquic 4.6.0.

v20.59.0

Following new BoringSSL versions

BoringSSL has deprecated their chromium-stable branch in favor of "date tagging". This version builds the recent 0.20260211.0 date tag.

giphy (1)

Commits
  • d584e62 [GitHub Actions] Updated macos-15 binaries
  • 6207ee7 [GitHub Actions] Updated windows-latest binaries
  • 21c93e3 [GitHub Actions] Updated ubuntu-24.04 binaries
  • b0a2f82 [GitHub Actions] Updated ubuntu-24.04-arm binaries
  • e16f23f Bump version to 20.63.0
  • a2f616d [GitHub Actions] Updated macos-15 binaries
  • 77ba9da [GitHub Actions] Updated windows-latest binaries
  • 33dbf67 [GitHub Actions] Updated ubuntu-24.04 binaries
  • f101ef8 [GitHub Actions] Updated ubuntu-24.04-arm binaries
  • 302f05d [GitHub Actions] Updated macos-15 binaries
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [uWebSockets.js](https://github.com/uNetworking/uWebSockets.js) from v20.58.0 to v20.63.0.
- [Release notes](https://github.com/uNetworking/uWebSockets.js/releases)
- [Commits](uNetworking/uWebSockets.js@v20.58.0...d584e62)

---
updated-dependencies:
- dependency-name: uWebSockets.js
  dependency-version: d584e6247998f725e86db77130de139eda936473
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 13, 2026
@codecov-commenter
Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.03%. Comparing base (6824eed) to head (571aaa0).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #5028      +/-   ##
==========================================
- Coverage   93.04%   93.03%   -0.02%     
==========================================
  Files         110      110              
  Lines       35793    35793              
==========================================
- Hits        33305    33301       -4     
- Misses       2488     2492       +4     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant