Skip to content

Conversation

@snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade ws from 8.6.0 to 8.7.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 23 days ago, on 2022-05-26.
Release notes
Package name: ws
  • 8.7.0 - 2022-05-26

    Features

    • Added the ability to inspect the invalid handshake requests and respond to
      them with a custom HTTP response. (6e5a5ce).

    Bug fixes

    • The handshake is now aborted if the Upgrade header field value in the HTTP
      response is not a case-insensitive match for the value "websocket" (0fdcc0a).
    • The Authorization and Cookie headers are no longer sent when following an
      insecure redirect (wss: to ws:) to the same host (d68ba9e).
  • 8.6.0 - 2022-05-01

    Features

    • Added the ability to remove confidential headers on a per-redirect basis (#2030).
from ws GitHub release notes
Commit messages
Package name: ws
  • 4b62fbf [dist] 8.7.0
  • 6e5a5ce [feature] Introduce the `'wsClientError'` event (Remove unused function #2046)
  • 903ec62 [doc] Update the type of the `socket` argument
  • d68ba9e [security] Drop sensitive headers when following insecure redirects
  • a690791 [ci] Exclude node 18 on Windows x86 from the test matrix
  • 8889e48 [test] Increase code coverage
  • fb658bd [minor] Use consistent error messages
  • 0fdcc0a [fix] Abort the handshake if the Upgrade header is invalid
  • e56cdfe [minor] Clarify why the handshake is aborted

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@parse-github-assistant
Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title [Snyk] Upgrade ws from 8.6.0 to 8.7.0 refactor: upgrade ws from 8.6.0 to 8.7.0 Jun 18, 2022
@codecov
Copy link

codecov bot commented Jun 18, 2022

Codecov Report

Merging #8064 (01440b1) into alpha (4c9e956) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##            alpha    #8064   +/-   ##
=======================================
  Coverage   94.15%   94.15%           
=======================================
  Files         182      182           
  Lines       13691    13691           
=======================================
  Hits        12891    12891           
  Misses        800      800           
Impacted Files Coverage Δ
src/batch.js 92.98% <0.00%> (-1.76%) ⬇️
src/Adapters/Files/GridFSBucketAdapter.js 80.32% <0.00%> (+0.81%) ⬆️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 4c9e956...01440b1. Read the comment docs.

@mtrezza mtrezza merged commit e26beb1 into alpha Jun 19, 2022
@mtrezza mtrezza deleted the snyk-upgrade-526e139e9a318acfa89bf3ff2095f2e4 branch June 19, 2022 08:12
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 5.3.0-alpha.19

@parseplatformorg parseplatformorg added the state:released-alpha Released as alpha version label Jul 3, 2022
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 5.4.0-beta.1

@parseplatformorg parseplatformorg added the state:released-beta Released as beta version label Oct 29, 2022
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 5.4.0-alpha.1

@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 5.4.0

@parseplatformorg parseplatformorg added the state:released Released as stable version label Nov 19, 2022
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 5.4.0

@parseplatformorg parseplatformorg added the state:released-5.x.x Released as LTS version label Nov 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

state:released Released as stable version state:released-5.x.x Released as LTS version state:released-alpha Released as alpha version state:released-beta Released as beta version

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants