3AHAT0P / StrangeTextRPG

This is just try to made a Text-based RPG with strange scenario =)
https://t.me/StrangeTextRPGBot
10 stars 2 forks source link

[Snyk] Security upgrade socket.io from 4.3.2 to 4.4.0 #74

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
high severity Uncaught Exception
SNYK-JS-ENGINEIO-2336356
No No Known Exploit
Commit messages
Package name: socket.io The new version differs by 8 commits.
  • 0f11c47 chore(release): 4.4.0
  • b839a3b fix: prevent double ack when emitting with a timeout
  • f0ed42f feat: add timeout feature
  • b7213e7 test: fix flaky test
  • 2da8210 test: add test for volatile packet with binary
  • 02b0f73 fix: only set 'connected' to true after middleware execution
  • c0d8c5a feat: add an implementation based on uWebSockets.js
  • fe8730c feat: add type information to `socket.data` (#4159)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic