Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor: upgrade ws from 8.6.0 to 8.7.0 #8064

Merged
merged 1 commit into from
Jun 19, 2022

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade ws from 8.6.0 to 8.7.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 23 days ago, on 2022-05-26.
Release notes
Package name: ws
  • 8.7.0 - 2022-05-26

    Features

    • Added the ability to inspect the invalid handshake requests and respond to
      them with a custom HTTP response. (6e5a5ce).

    Bug fixes

    • The handshake is now aborted if the Upgrade header field value in the HTTP
      response is not a case-insensitive match for the value "websocket" (0fdcc0a).
    • The Authorization and Cookie headers are no longer sent when following an
      insecure redirect (wss: to ws:) to the same host (d68ba9e).
  • 8.6.0 - 2022-05-01

    Features

    • Added the ability to remove confidential headers on a per-redirect basis (#2030).
from ws GitHub release notes
Commit messages
Package name: ws
  • 4b62fbf [dist] 8.7.0
  • 6e5a5ce [feature] Introduce the `'wsClientError'` event (Remove unused function #2046)
  • 903ec62 [doc] Update the type of the `socket` argument
  • d68ba9e [security] Drop sensitive headers when following insecure redirects
  • a690791 [ci] Exclude node 18 on Windows x86 from the test matrix
  • 8889e48 [test] Increase code coverage
  • fb658bd [minor] Use consistent error messages
  • 0fdcc0a [fix] Abort the handshake if the Upgrade header is invalid
  • e56cdfe [minor] Clarify why the handshake is aborted

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@parse-github-assistant
Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title [Snyk] Upgrade ws from 8.6.0 to 8.7.0 refactor: upgrade ws from 8.6.0 to 8.7.0 Jun 18, 2022
@codecov
Copy link

codecov bot commented Jun 18, 2022

Codecov Report

Merging #8064 (01440b1) into alpha (4c9e956) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##            alpha    #8064   +/-   ##
=======================================
  Coverage   94.15%   94.15%           
=======================================
  Files         182      182           
  Lines       13691    13691           
=======================================
  Hits        12891    12891           
  Misses        800      800           
Impacted Files Coverage Δ
src/batch.js 92.98% <0.00%> (-1.76%) ⬇️
src/Adapters/Files/GridFSBucketAdapter.js 80.32% <0.00%> (+0.81%) ⬆️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 4c9e956...01440b1. Read the comment docs.

@mtrezza mtrezza merged commit e26beb1 into alpha Jun 19, 2022
@mtrezza mtrezza deleted the snyk-upgrade-526e139e9a318acfa89bf3ff2095f2e4 branch June 19, 2022 08:12
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 5.3.0-alpha.19

@parseplatformorg parseplatformorg added the state:released-alpha Released as alpha version label Jul 3, 2022
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 5.4.0-beta.1

@parseplatformorg parseplatformorg added the state:released-beta Released as beta version label Oct 29, 2022
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 5.4.0-alpha.1

@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 5.4.0

@parseplatformorg parseplatformorg added the state:released Released as stable version label Nov 19, 2022
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 5.4.0

@parseplatformorg parseplatformorg added the state:released-5.x.x Released as LTS version label Nov 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
state:released Released as stable version state:released-5.x.x Released as LTS version state:released-alpha Released as alpha version state:released-beta Released as beta version
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants