[Snyk] Upgrade socket.io-client from 4.1.3 to 4.5.4 #3

snyk-bot · 2023-02-06T20:59:46Z

Snyk has created this PR to upgrade socket.io-client from 4.1.3 to 4.5.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 11 versions ahead of your current version.
The recommended version was released 2 months ago, on 2022-11-22.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Improper Input Validation SNYK-JS-SOCKETIOPARSER-3091012	490/1000 Why? CVSS 9.8	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: socket.io-client

4.5.4 - 2022-11-22
This release contains a bump of the socket.io-parser dependency, in order to fix CVE-2022-2421.

Links:
- Diff: 4.5.3...4.5.4
- Server release: 4.5.4
- engine.io-client version: ~6.2.3
- ws version: ~8.2.3
Size of the bundles:

min min+gzip

socket.io.min.js 42.6 KB (-) 13.6 KB (-)

socket.io.msgpack.min.js 47.7 KB (-) 14.6 KB (-)

socket.io.esm.min.js 34.5 KB (-) 11.5 KB (-)
4.5.3 - 2022-10-15
Bug Fixes
- do not swallow user exceptions (2403b88)
Links:
- Diff: 4.5.2...4.5.3
- Server release: 4.5.3
- engine.io-client version: ~6.2.1
- ws version: ~8.2.3
Size of the bundles:

min min+gzip

socket.io.min.js 42.6 KB (-) 13.6 KB (-)

socket.io.msgpack.min.js 47.7 KB (-) 14.6 KB (-)

socket.io.esm.min.js 34.5 KB (-) 11.5 KB (-)
4.5.2 - 2022-09-02
Bug Fixes
- handle ill-formatted packet from server (c597023)
Links:
- Diff: 4.5.1...4.5.2
- Server release: 4.5.2
- engine.io-client version: ~6.2.1 (diff)
- ws version: ~8.2.3
Size of the bundles:

min min+gzip

socket.io.min.js 42.6 KB (-) 13.6 KB (-)

socket.io.msgpack.min.js 47.7 KB (-) 14.6 KB (-)

socket.io.esm.min.js 34.5 KB (-) 11.5 KB (-)
4.5.1 - 2022-05-17
There were some minor bug fixes on the server side, which mandate a client bump.

Links:
- Diff: 4.5.0...4.5.1
- Server release: 4.5.1
- engine.io-client version: ~6.2.1 (diff)
- ws version: ~8.2.3
Size of the bundles:

min min+gzip

socket.io.min.js 42.6 KB (-) 13.6 KB (-)

socket.io.msgpack.min.js 47.7 KB (-) 14.6 KB (-)

socket.io.esm.min.js 34.5 KB (-) 11.5 KB (-)

4.5.0 - 2022-04-23

Features

add details to the disconnect event (b862924)

The "disconnect" event will now include additional details to help debugging if anything has gone wrong.

Example when a payload is over the maxHttpBufferSize value in HTTP long-polling mode:

socket.on("disconnect", (reason, details) => {
console.log(reason); // "transport error"

// in that case, details is an error object
console.log(details.message); "xhr post error"
console.log(details.description); // 413 (the HTTP status of the response)

// details.context refers to the XMLHttpRequest object
console.log(details.context.status); // 413
console.log(details.context.responseText); // ""
});

add support for catch-all listeners for outgoing packets (74e3e60)

This is similar to onAny(), but for outgoing packets.

Syntax:

socket.onAnyOutgoing((event, ...args) => {
  console.log(event);
});

slice write buffer according to the maxPayload value (46fdc2f)

The server will now include a "maxPayload" field in the handshake details, allowing the clients to decide how many packets they have to send to stay under the maxHttpBufferSize value.

Links:

Diff: 4.4.1...4.5.0
Server release: 4.5.0
engine.io-client version: ~6.2.1 (diff)
ws version: ~8.2.3

Size of the bundles:

	min	min+gzip
socket.io.min.js	42.6 KB (+ 2.2 KB ⬆️)	13.6 KB (+ 0.5 KB ⬆️)
socket.io.msgpack.min.js	47.7 KB (+ 2.1 KB ⬆️)	14.6 KB (+ 0.4 KB ⬆️)
socket.io.esm.min.js	34.5 KB (+ 1.4 KB ⬆️)	11.5 KB (+ 0.2 KB ⬆️)

4.4.1 - 2022-01-06
This release only contains minor changes. Please see the diff for more details.

Links:
- Diff: 4.4.0...4.4.1
- Server release: 4.4.1
- engine.io-client version: ~6.1.1
- ws version: ~8.2.3
Size of the bundles:

min min+gzip

socket.io.min.js 40.4 KB (-) 13.1 KB (-)

socket.io.msgpack.min.js 45.6 KB (-) 14.2 KB (-)

socket.io.esm.min.js 33.1 KB (-) 11.3 KB (-)

4.4.0 - 2021-11-18

Bug Fixes

add package name in nested package.json (53d8fca), closes socketio/socket.io-client#1513
fix socket.disconnect().connect() usage (99c2cb8)
prevent socket from reconnecting after middleware failure (d54d12c)

Features

add timeout feature (ccf7998)

socket.timeout(5000).emit("my-event", (err) => {
  if (err) {
    // the server did not acknowledge the event in the given delay
  }
});

Links:

Diff: 4.3.2...4.4.0
Server release: 4.4.0
engine.io-client version: ~6.1.1 (diff)
ws version: ~8.2.3

Size of the bundles:

	min	min+gzip
socket.io.min.js	40.4 KB (+ 0.4 KB ⬆️)	13.1 KB (+ 0.1 KB ⬆️)
socket.io.msgpack.min.js	45.6 KB (+ 0.4 KB ⬆️)	14.2 KB (-)
socket.io.esm.min.js	33.1 KB (+ 0.3 KB ⬆️)	11.3 KB (+ 0.2 KB ⬆️)

4.3.2 - 2021-10-16
Bug Fixes
- restore the default export (bis) (6780f29)
Links:
- Diff: 4.3.1...4.3.2
- Server release: -
- engine.io-client version: ~6.0.1
- ws version: ~8.2.3
Size of the bundles:

min min+gzip

socket.io.min.js 40.0 KB (-) 13.0 KB (-)

socket.io.msgpack.min.js 45.2 KB (-) 14.2 KB (-)

socket.io.esm.min.js 32.8 KB (-) 11.1 KB (-)
4.3.1 - 2021-10-15
4.3.0 - 2021-10-14
4.2.0 - 2021-08-30
4.1.3 - 2021-07-10

from socket.io-client GitHub release notes

Commit messages

Package name: socket.io-client

91ef839 chore(release): 4.5.4
d882822 ci: migrate from zuul to webdriver.io
e891289 ci: update actions in GitHub Actions workflows (#1564)
cedd311 chore: bump socket.io-parser to version 4.2.1 (#1559)
9ec85f7 docs: add missing versions in the changelog (2)
f9b773f docs: add missing versions in the changelog
2eca8da chore(release): 4.5.3
7c05688 docs: add jsdoc for each public method
2403b88 fix: do not swallow user exceptions
1098618 ci: temporarily remove iOS 16 from the test matrix
2d70813 chore(release): 4.5.2
c597023 fix: handle ill-formatted packet from server
8c659bc chore: regenerate lockfile
f0350a0 chore(release): 4.5.1
abdba07 chore(release): 4.5.0
faf68a5 chore: update default label for bug reports
c0ba734 chore: add Node.js 16 in the test matrix
e859018 refactor: replace the disconnected attribute by a getter
74e3e60 feat: add support for catch-all listeners for outgoing packets
692d54e chore: point the CI badge towards the main branch
6fdf3c9 refactor: import single-file 3rd party modules
b862924 feat: add details to the disconnect event
eaf782c docs: remove broken badges
359d1e2 chore(release): 4.4.1

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade socket.io-client from 4.1.3 to 4.5.4. See this package in npm: https://www.npmjs.com/package/socket.io-client See this project in Snyk: https://app.snyk.io/org/suryaa6666/project/0ac74579-6b0e-45ba-bae1-b46d2ad9a997?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade socket.io-client from 4.1.3 to 4.5.4 #3

[Snyk] Upgrade socket.io-client from 4.1.3 to 4.5.4 #3

Uh oh!

snyk-bot commented Feb 6, 2023

Links:

Bug Fixes

Links:

Bug Fixes

Links:

Links:

Features

Links:

Links:

Bug Fixes

Features

Links:

Bug Fixes

Links:

Uh oh!

Uh oh!

	min	min+gzip
socket.io.min.js	42.6 KB (-)	13.6 KB (-)
socket.io.msgpack.min.js	47.7 KB (-)	14.6 KB (-)
socket.io.esm.min.js	34.5 KB (-)	11.5 KB (-)

	min	min+gzip
socket.io.min.js	40.4 KB (-)	13.1 KB (-)
socket.io.msgpack.min.js	45.6 KB (-)	14.2 KB (-)
socket.io.esm.min.js	33.1 KB (-)	11.3 KB (-)

	min	min+gzip
socket.io.min.js	40.0 KB (-)	13.0 KB (-)
socket.io.msgpack.min.js	45.2 KB (-)	14.2 KB (-)
socket.io.esm.min.js	32.8 KB (-)	11.1 KB (-)

[Snyk] Upgrade socket.io-client from 4.1.3 to 4.5.4 #3

Are you sure you want to change the base?

[Snyk] Upgrade socket.io-client from 4.1.3 to 4.5.4 #3

Uh oh!

Conversation

snyk-bot commented Feb 6, 2023

Snyk has created this PR to upgrade socket.io-client from 4.1.3 to 4.5.4.

Links:

Bug Fixes

Links:

Bug Fixes

Links:

Links:

Features

Links:

Links:

Bug Fixes

Features

Links:

Bug Fixes

Links:

Uh oh!

Uh oh!