Bump the npm_and_yarn group across 2 directories with 5 updates #8

dependabot · 2024-06-17T20:16:52Z

Bumps the npm_and_yarn group with 4 updates in the /examples/client/javascript directory: engine.io, express, xmlhttprequest-ssl and engine.io-client.
Bumps the npm_and_yarn group with 4 updates in the /examples/server/javascript directory: engine.io, express, xmlhttprequest-ssl and engine.io-client.

Updates engine.io from 4.1.2 to 6.4.2

Release notes

Sourced from engine.io's releases.

6.4.2

⚠️ This release contains an important security fix ⚠️

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:
TypeError: Cannot read properties of undefined (reading 'handlesUpgrades')
  at Server.onWebSocket (build/server.js:515:67)
Please upgrade as soon as possible.

Bug Fixes

include error handling for Express middlewares (#674) (9395782)

prevent crash when provided with an invalid query param (fc480b4)

typings: make clientsCount public (#675) (bd6d471)

uws: prevent crash when using with middlewares (8b22162)

Credits

Huge thanks to @tyilo and @cieldeville for helping!

Links

Diff: socketio/engine.io@6.4.1...6.4.2

Client release: -

ws version: ~8.11.0 (no change)

6.4.1

This release contains 6e78489, which exports the BaseServer class in order to restore the compatibility with the nodenext module resolution strategy of TypeScript.

Reference: https://www.typescriptlang.org/tsconfig/#moduleResolution

Related: socketio/socket.io#4621

Links

Diff: socketio/engine.io@6.4.0...6.4.1

Client release: -

ws version: ~8.11.0 (no change)

6.4.0

Features

add support for Express middlewares (24786e7)

This commit implements middlewares at the Engine.IO level, because Socket.IO middlewares are meant for namespace authorization and are not executed during a classic HTTP request/response cycle.

... (truncated)

Changelog

Sourced from engine.io's changelog.

6.4.2 (2023-05-02)

⚠️ This release contains an important security fix ⚠️

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:
TypeError: Cannot read properties of undefined (reading 'handlesUpgrades')
  at Server.onWebSocket (build/server.js:515:67)
Please upgrade as soon as possible.

Bug Fixes

include error handling for Express middlewares (#674) (9395782)

prevent crash when provided with an invalid query param (fc480b4)

typings: make clientsCount public (#675) (bd6d471)

uws: prevent crash when using with middlewares (8b22162)

Credits

Huge thanks to @tyilo and @cieldeville for helping!

Dependencies

ws@~8.11.0 (no change)

6.4.1 (2023-02-20)

This release contains 6e78489, which exports the BaseServer class in order to restore the compatibility with the nodenext module resolution strategy of TypeScript.

Reference: https://www.typescriptlang.org/tsconfig/#moduleResolution

Related: socketio/socket.io#4621

Dependencies

ws@~8.11.0 (no change)

6.4.0 (2023-02-06)

... (truncated)

Commits

95e2153 chore(release): 6.4.2
fc480b4 fix: prevent crash when provided with an invalid query param
0141951 refactor(types): ensure compatibility with Express middlewares
8b22162 fix(uws): prevent crash when using with middlewares
9395782 fix: include error handling for Express middlewares (#674)
911d0e3 refactor: return HTTP 400 upon invalid request overlap
bd6d471 fix(typings): make clientsCount public (#675)
7033c0e chore(release): 6.4.1
6e78489 refactor: export BaseServer class (#669)
535b068 docs: add upgrade event in the documentation
Additional commits viewable in compare view

Updates express from 4.17.1 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Improved fix for open redirect allow list bypass

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Fix ci after location patch by @wesleytodd in expressjs/express#5552

fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

fix typo in release date by @UlisesGascon in expressjs/express#5527

docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511

docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510

Add note on how to update docs for new release by @crandmck in expressjs/express#5541

Prevent open redirect allow list bypass due to encodeurl

Release 4.19.0 by @wesleytodd in expressjs/express#5551

New Contributors

@crandmck made their first contribution in expressjs/express#5541

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

Other Changes

Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032

build: Node.js@16.18 and Node.js@18.12 by @abenhamdine in expressjs/express#5034

ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027

test: remove unused function arguments in params by @raksbisht in expressjs/express#5124

Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119

Fixed typos by @raksbisht in expressjs/express#5117

examples: remove unused params by @raksbisht in expressjs/express#5113

fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130

fix: typos in History.md by @raksbisht in expressjs/express#5131

build : add Node.js@19.7 by @abenhamdine in expressjs/express#5028

test: remove unused function arguments in params by @raksbisht in expressjs/express#5137

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: cookie@0.6.0

4.18.3 / 2024-02-29

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

deps: cookie@0.6.0

Add partitioned option

4.18.2 / 2022-10-08

Fix regression routing a large stack in a single route

deps: body-parser@1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

deps: qs@6.11.0

4.18.1 / 2022-04-29

Fix hanging on large stack of sync routes

4.18.0 / 2022-04-25

Add "root" option to res.download

Allow options without filename in res.download

Deprecate string and non-integer arguments to res.status

Fix behavior of null/undefined as maxAge in res.cookie

Fix handling very large stacks of sync middleware

Ignore Object.prototype values in settings through app.set/app.get

... (truncated)

Commits

04bc627 4.19.2
da4d763 Improved fix for open redirect allow list bypass
4f0f6cc 4.19.1
a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
a1fa90f fixed un-edited version in history.md for 4.19.0
11f2b1d build: fix build due to inconsistent supertest behavior in older versions
084e365 4.19.0
0867302 Prevent open redirect allow list bypass due to encodeurl
567c9c6 Add note on how to update docs for new release (#5541)
69a4cf2 deps: cookie@0.6.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.

Updates qs from 6.7.0 to 6.11.0

Changelog

Sourced from qs's changelog.

6.11.0

[New] [Fix] stringify: revert 0e903c0; add commaRoundTrip option (#442)

[readme] fix version badge

6.10.5

[Fix] stringify: with arrayFormat: comma, properly include an explicit [] on a single-item array (#434)

6.10.4

[Fix] stringify: with arrayFormat: comma, include an explicit [] on a single-item array (#441)

[meta] use npmignore to autogenerate an npmignore file

[Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbol, object-inspect, tape

6.10.3

[Fix] parse: ignore __proto__ keys (#428)

[Robustness] stringify: avoid relying on a global undefined (#427)

[actions] reuse common workflows

[Dev Deps] update eslint, @ljharb/eslint-config, object-inspect, tape

6.10.2

[Fix] stringify: actually fix cyclic references (#426)

[Fix] stringify: avoid encoding arrayformat comma when encodeValuesOnly = true (#424)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] add note and links for coercing primitive values (#408)

[actions] update codecov uploader

[actions] update workflows

[Tests] clean up stringify tests slightly

[Dev Deps] update eslint, @ljharb/eslint-config, aud, object-inspect, safe-publish-latest, tape

6.10.1

[Fix] stringify: avoid exception on repeated object values (#402)

6.10.0

[New] stringify: throw on cycles, instead of an infinite loop (#395, #394, #393)

[New] parse: add allowSparse option for collapsing arrays with missing indices (#312)

[meta] fix README.md (#399)

[meta] only run npm run dist in publish, not install

[Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbols, tape

[Tests] fix tests on node v0.6

[Tests] use ljharb/actions/node/install instead of ljharb/actions/node/run

[Tests] Revert "[meta] ignore eclint transitive audit warning"

6.9.7

[Fix] parse: ignore __proto__ keys (#428)

[Fix] stringify: avoid encoding arrayformat comma when encodeValuesOnly = true (#424)

[Robustness] stringify: avoid relying on a global undefined (#427)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] add note and links for coercing primitive values (#408)

[Tests] clean up stringify tests slightly

[meta] fix README.md (#399)

Revert "[meta] ignore eclint transitive audit warning"

... (truncated)

Commits

56763c1 v6.11.0
ddd3e29 [readme] fix version badge
c313472 [New] [Fix] stringify: revert 0e903c0; add commaRoundTrip option
95bc018 v6.10.5
0e903c0 [Fix] stringify: with arrayFormat: comma, properly include an explicit `[...
ba9703c v6.10.4
4e44019 [Fix] stringify: with arrayFormat: comma, include an explicit [] on a s...
113b990 [Dev Deps] update object-inspect
c77f38f [Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbol, tape
2cf45b2 [meta] use npmignore to autogenerate an npmignore file
Additional commits viewable in compare view

Updates xmlhttprequest-ssl from 1.5.5 to 1.6.3

Commits

711bd4a Prepare release 1.6.3
4e8322f Merge pull request #8 from mrcarlberg/mjwwit_unescape_url_pathname_when_loadi...
ee1e81f Fix CVE-2020-28502
6a0a91d Unescape pathname from url when loading from local filesystem
bf53329 Fix issue where rejectUnauthorized would default to false instead of true
ae38832 1.6.0
534b586 Remove superfluous + operator
a9d93fb Replace deprecated sys.puts calls with console.log in tests
efc39e9 Merge pull request #6 from wesgarland/master
b9fedb0 pushed version to 1.5.6
Additional commits viewable in compare view

Updates engine.io-client from 4.0.4 to 4.1.4

Release notes

Sourced from engine.io-client's releases.

4.1.4

This release only contains a bump of xmlhttprequest-ssl, in order to fix the following vulnerability: https://www.npmjs.com/advisories/1665.

Please note that engine.io-client was not directly impacted by this vulnerability, since we are always using async: true.

Links

Diff: socketio/engine.io-client@4.1.3...4.1.4

Server release: -

ws version: ~7.4.2

4.1.3

Bug Fixes

ignore packets when the transport is silently closed (46e6de0)

Links

Diff: socketio/engine.io-client@4.1.2...4.1.3

Server release: -

ws version: ~7.4.2

4.1.2

Bug Fixes

silently close the transport in the beforeunload hook (ed48b5d)

Links

Diff: socketio/engine.io-client@4.1.1...4.1.2

Server release: -

ws version: ~7.4.2

4.1.1

Bug Fixes

remove polyfill for process in the bundle (c95fdea)

Links

Diff: socketio/engine.io-client@4.1.0...4.1.1

Server release: 4.1.1

ws version: ~7.4.2

4.1.0

Features

add missing ws options (d134fee)

Links

... (truncated)

Changelog

Sourced from engine.io-client's changelog.

4.1.4 (2021-05-05)

This release only contains a bump of xmlhttprequest-ssl, in order to fix the following vulnerability: https://www.npmjs.com/advisories/1665.

Please note that engine.io-client was not directly impacted by this vulnerability, since we are always using async: true.

3.5.2 (2021-05-05)

This release only contains a bump of xmlhttprequest-ssl, in order to fix the following vulnerability: https://www.npmjs.com/advisories/1665.

Please note that engine.io-client was not directly impacted by this vulnerability, since we are always using async: true.

5.1.0 (2021-05-04)

Features

add the "closeOnBeforeunload" option (dcb85e9)

5.0.1 (2021-03-31)

Bug Fixes

ignore packets when the transport is silently closed (d291a4c)

5.0.0 (2021-03-10)

The major bump is due to a breaking change on the server side.

Features

add autoUnref option (6551683)

listen to the "offline" event (c361bc6)

3.5.1 (2021-03-02)

Bug Fixes

replace default nulls in SSL options with undefineds (d0c551c)

4.1.2 (2021-02-25)

... (truncated)

Commits

c03e877 chore(release): 4.1.4
de1456d chore: bump xmlhttprequest-ssl version
f6287f9 chore(release): 4.1.3
46e6de0 fix: ignore packets when the transport is silently closed
6f7c89d chore(release): 4.1.2
ed48b5d fix: silently close the transport in the beforeunload hook
76338d7 refactor: use globalObject "this" in webpack configuration
ee0a35d chore(release): 4.1.1
e551fc0 chore: point towards the master branch for the CI badge
c95fdea fix: remove polyfill for process in the bundle
Additional commits viewable in compare view

Updates engine.io from 4.1.2 to 6.4.2

Release notes

Sourced from engine.io's releases.

6.4.2

⚠️ This release contains an important security fix ⚠️

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:
TypeError: Cannot read properties of undefined (reading 'handlesUpgrades')
  at Server.onWebSocket (build/server.js:515:67)
Please upgrade as soon as possible.

Bug Fixes

include error handling for Express middlewares (#674) (9395782)

prevent crash when provided with an invalid query param (fc480b4)

typings: make clientsCount public (#675) (bd6d471)

uws: prevent crash when using with middlewares (8b22162)

Credits

Huge thanks to @tyilo and @cieldeville for helping!

Links

Diff: socketio/engine.io@6.4.1...6.4.2

Client release: -

ws version: ~8.11.0 (no change)

6.4.1

This release contains 6e78489, which exports the BaseServer class in order to restore the compatibility with the nodenext module resolution strategy of TypeScript.

Reference: https://www.typescriptlang.org/tsconfig/#moduleResolution

Related: socketio/socket.io#4621

Links

Diff: socketio/engine.io@6.4.0...6.4.1

Client release: -

ws version: ~8.11.0 (no change)

6.4.0

Features

add support for Express middlewares (24786e7)

This commit implements middlewares at the Engine.IO level, because Socket.IO middlewares are meant for namespace authorization and are not executed during a classic HTTP request/response cycle.

... (truncated)

Changelog

Sourced from engine.io's changelog.

6.4.2 (2023-05-02)

⚠️ This release contains an important security fix ⚠️

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:
TypeError: Cannot read properties of undefined (reading 'handlesUpgrades')
  at Server.onWebSocket (build/server.js:515:67)
Please upgrade as soon as possible.

Bug Fixes

include error handling for Express middlewares (#674) (9395782)

prevent crash when provided with an invalid query param (fc480b4)

typings: make clientsCount public (#675) (bd6d471)

uws: prevent crash when using with middlewares (8b22162)

Credits

Huge thanks to @tyilo and @cieldeville for helping!

Dependencies

ws@~8.11.0 (no change)

6.4.1 (2023-02-20)

This release contains 6e78489, which exports the BaseServer class in order to restore the compatibility with the nodenext module resolution strategy of TypeScript.

Reference: https://www.typescriptlang.org/tsconfig/#moduleResolution

Related: socketio/socket.io#4621

Dependencies

ws@~8.11.0 (no change)

6.4.0 (2023-02-06)

... (truncated)

Commits

95e2153 chore(release): 6.4.2
fc480b4 fix: prevent crash when provided with an invalid query param
0141951 refactor(types): ensure compatibility with Express middlewares
8b22162 fix(uws): prevent crash when using with middlewares
9395782 fix: include error handling for Express middlewares (#674)
911d0e3 refactor: return HTTP 400 upon invalid request overlap
bd6d471 fix(typings): make clientsCount public (#675)
7033c0e chore(release): 6.4.1
6e78489 refactor: export BaseServer class (#669)
535b068 docs: add upgrade event in the documentation
Additional commits viewable in compare view

Updates express from 4.17.1 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Improved fix for open redirect allow list bypass

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Fix ci after location patch by @wesleytodd in expressjs/express#5552

fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

fix typo in release date by @UlisesGascon in expressjs/express#5527

docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511

docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510

Add note on how to update docs for new release by @crandmck in expressjs/express#5541

Prevent open redirect allow list bypass due to encodeurl

Release 4.19.0 by @wesleytodd in expressjs/express#5551

New Contributors

@crandmck made their first contribution in expressjs/express#5541

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

Other Changes

Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032

build: Node.js@16.18 and Node.js@18.12 by @abenhamdine in expressjs/express#5034

ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027

test: remove unused function arguments in params by @raksbisht in expressjs/express#5124

Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119

Fixed typos by @raksbisht in expressjs/express#5117

examples: remove unused params by @raksbisht in expressjs/express#5113

fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130

fix: typos in History.md by @raksbisht in expressjs/express#5131

build : add Node.js@19.7 by @abenhamdine in expressjs/express#5028

test: remove unused function arguments in params by @raksbisht in expressjs/express#5137

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: cookie@0.6.0

4.18.3 / 2024-02-29

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

deps: cookie@0.6.0

Add partitioned option

4.18.2 / 2022-10-08

Fix regression routing a large stack in a single route

deps: body-parser@1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

deps: qs@6.11.0

4.18.1 / 2022-04-29

Fix hanging on large stack of sync routes

4.18.0 / 2022-04-25

Add "root" option to res.download

Allow options without filename in res.download

Deprecate string and non-integer arguments to res.status

Fix behavior of null/undefined as maxAge in res.cookie

Fix handling very large stacks of sync middleware

Ignore Object.prototype values in settings through app.set/app.get

... (truncated)

Commits

04bc627 4.19.2
da4d763 Improved fix for open redirect allow list bypass
4f0f6cc 4.19.1
a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
a1fa90f fixed un-edited version in history.md for 4.19.0
11f2b1d build: fix build due to inconsistent supertest behavior in older versions
084e365 4.19.0
0867302 Prevent open redirect allow list bypass due to encodeurl
567c9c6 Add note on how to update docs for new release (#5541)
69a4cf2 deps: cookie@0.6.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.

Updates qs from 6.7.0 to 6.11.0

Changelog

Sourced from qs's changelog.

6.11.0

[New] [Fix] stringify: revert 0e903c0; add commaRoundTrip option (#442)

[readme] fix version badge

6.10.5

[Fix] stringify: with arrayFormat: comma, properly include an explicit [] on a single-item array (#434)

6.10.4

[Fix] stringify: with arrayFormat: comma, include an explicit [] on a single-item array (#441)

[meta] use npmignore to autogenerate an npmignore file

[Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbol, object-inspect, tape

6.10.3

[Fix] parse: ignore __proto__ keys (#428)

[Robustness] stringify: avoid relying on a global undefined (#427)

[actions] reuse common workflows

[Dev Deps] update eslint, @ljharb/eslint-config, object-inspect, tape

6.10.2

[Fix] stringify: actually fix cyclic references (#426)

[Fix] stringify: avoid encoding arrayformat comma when encodeValuesOnly = true (#424)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] add note and links for coercing primitive values (#408)

[actions] update codecov uploader

[actions] update workflows

[Tests] clean up stringify tests slightly

[Dev Deps] update eslint, @ljharb/eslint-config, aud, object-inspect, safe-publish-latest, tape

6.10.1

[Fix] stringify: avoid exception on repeated object values (#402)

6.10.0

[New] stringify: throw on cycles, instead of an infinite loop (#395, #394, #393)

[New] parse: add allowSparse option for collapsing arrays with missing indices (#312)

[meta] fix README.md (#399)

[meta] only run npm run dist in publish, not install

[Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbols, tape

[Tests] fix tests on node v0.6

[Tests] use ljharb/actions/node/install instead of ljharb/actions/node/run

[Tests] Revert "[meta] ignore eclint transitive audit warning"

6.9.7

[Fix] parse: ignore __proto__ keys (#428)

[Fix] stringify: avoid encoding arrayformat comma when encodeValuesOnly = true (#424)

[Robustness] stringify: avoid relying on a global undefined (#427)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] add note and links for coercing primitive values (#408)

[Tests] clean up stringify tests slightly

[meta] fix README.md (#399)

Revert "[meta] ignore eclint transitive audit warning"

... (truncated)

Commits

56763c1 v6.11.0
ddd3e29 [readme] fix version badge
c313472 [New] [Fix] stringify: revert 0e903c0; add commaRoundTrip option
95bc018 v6.10.5
0e903c0 [Fix] stringify: with arrayFormat: comma, properly include an explicit `[...
ba9703c v6.10.4
4e44019 [Fix] stringify: with arrayFormat: comma, include an explicit [] on a s...
113b990 [Dev Deps] update object-inspect
c77f38f [Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbol, tape
2cf45b2 [meta] use npmignore to autogenerate an npmignore file
Additional commits viewable in compare view

Updates xmlhttprequest-ssl from 1.5.5 to 1.6.3

Commits

711bd4a Prepare release 1.6.3
4e8322f Merge pull request #8 from mrcarlberg/mjwwit_unescape_url_pathname_when_loadi...
ee1e81f Fix CVE-2020-28502
6a0a91d Unescape pathname from url when loading from local filesystem
bf53329 Fix issue where rejectUnauthorized would default to false instead of true
ae38832 1.6.0
534b586 Remove superfluous + operator
a9d93fb Replace deprecated sys.puts calls with console.log in tests
efc39e9 Merge pull request #6 from wesgarland/master
b9fedb0 pushed version to 1.5.6
Additional commits viewable in compare view

Updates engine.io-client from 4.0.4 to 4.1.4

Release notes

Sourced from engine.io-client's releases.

4.1.4

This release only contains a bump of xmlhttprequest-ssl, in order to fix the following vulnerability: https://www.npmjs.com/advisories/1665.

Please note that engine.io-client was not directly impacted by this vulnerability, since we are always using async: true.

Links

Diff: socketio/engine.io-client@4.1.3...4.1.4

Server release: -

ws version: ~7.4.2

4.1.3

Bug Fixes

ignore packets when the transport is silently closed (46e6de0)

Links

Diff: socketio/engine.io-client@4.1.2...4.1.3

Server release: -

ws version: ~7.4.2

4.1.2

Bug Fixes

silently close the transport in the beforeunload hook (ed48b5d)

Links

Diff: socketio/engine.io-client@4.1.1...4.1.2

Server release: -

ws version: ~7.4.2

4.1.1

Bug Fixes

remove polyfill for process in the bundle (c95fdea)

Links

Diff: socketio/engine.io-client@4.1.0...4.1.1

Server release: 4.1.1...
Description has been truncated

Bumps the npm_and_yarn group with 4 updates in the /examples/client/javascript directory: [engine.io](https://github.com/socketio/engine.io), [express](https://github.com/expressjs/express), [xmlhttprequest-ssl](https://github.com/mjwwit/node-XMLHttpRequest) and [engine.io-client](https://github.com/socketio/engine.io-client). Bumps the npm_and_yarn group with 4 updates in the /examples/server/javascript directory: [engine.io](https://github.com/socketio/engine.io), [express](https://github.com/expressjs/express), [xmlhttprequest-ssl](https://github.com/mjwwit/node-XMLHttpRequest) and [engine.io-client](https://github.com/socketio/engine.io-client). Updates `engine.io` from 4.1.2 to 6.4.2 - [Release notes](https://github.com/socketio/engine.io/releases) - [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md) - [Commits](socketio/engine.io@4.1.2...6.4.2) Updates `express` from 4.17.1 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.1...4.19.2) Updates `qs` from 6.7.0 to 6.11.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.7.0...v6.11.0) Updates `xmlhttprequest-ssl` from 1.5.5 to 1.6.3 - [Commits](mjwwit/node-XMLHttpRequest@1.5.5...1.6.3) Updates `engine.io-client` from 4.0.4 to 4.1.4 - [Release notes](https://github.com/socketio/engine.io-client/releases) - [Changelog](https://github.com/socketio/engine.io-client/blob/main/CHANGELOG.md) - [Commits](socketio/engine.io-client@4.0.4...4.1.4) Updates `engine.io` from 4.1.2 to 6.4.2 - [Release notes](https://github.com/socketio/engine.io/releases) - [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md) - [Commits](socketio/engine.io@4.1.2...6.4.2) Updates `express` from 4.17.1 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.1...4.19.2) Updates `qs` from 6.7.0 to 6.11.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.7.0...v6.11.0) Updates `xmlhttprequest-ssl` from 1.5.5 to 1.6.3 - [Commits](mjwwit/node-XMLHttpRequest@1.5.5...1.6.3) Updates `engine.io-client` from 4.0.4 to 4.1.4 - [Release notes](https://github.com/socketio/engine.io-client/releases) - [Changelog](https://github.com/socketio/engine.io-client/blob/main/CHANGELOG.md) - [Commits](socketio/engine.io-client@4.0.4...4.1.4) --- updated-dependencies: - dependency-name: engine.io dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: xmlhttprequest-ssl dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: engine.io-client dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: engine.io dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: xmlhttprequest-ssl dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: engine.io-client dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 17, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group across 2 directories with 5 updates #8

Bump the npm_and_yarn group across 2 directories with 5 updates #8

Uh oh!

dependabot bot commented on behalf of github Jun 17, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the npm_and_yarn group across 2 directories with 5 updates #8

Are you sure you want to change the base?

Bump the npm_and_yarn group across 2 directories with 5 updates #8

Uh oh!

Conversation

dependabot bot commented on behalf of github Jun 17, 2024

6.4.2

Bug Fixes

Credits

Links

6.4.1

Links

6.4.0

Features

6.4.2 (2023-05-02)

Bug Fixes

Credits

Dependencies

6.4.1 (2023-02-20)

Dependencies

6.4.0 (2023-02-06)

4.19.2

What's Changed

4.19.1

What's Changed

4.19.0

What's Changed

New Contributors

4.18.3

Main Changes

Other Changes

4.19.2 / 2024-03-25

4.19.1 / 2024-03-20

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

4.18.2 / 2022-10-08

4.18.1 / 2022-04-29

4.18.0 / 2022-04-25

6.11.0

6.10.5

6.10.4

6.10.3

6.10.2

6.10.1

6.10.0

6.9.7

4.1.4

Links

4.1.3

Bug Fixes

Links

4.1.2

Bug Fixes

Links

4.1.1

Bug Fixes

Links

4.1.0

Features

Links

4.1.4 (2021-05-05)

3.5.2 (2021-05-05)

5.1.0 (2021-05-04)

Features

5.0.1 (2021-03-31)

Bug Fixes

5.0.0 (2021-03-10)

Features

3.5.1 (2021-03-02)

Bug Fixes

4.1.2 (2021-02-25)

6.4.2

Bug Fixes

Credits

Links

6.4.1

Links

6.4.0

Features

6.4.2 (2023-05-02)