This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade node-opcua from 2.81.0 to 2.121.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

- The recommended version is **50 versions** ahead of your current version. - The recommended version was released **22 days ago**, on 2024-02-25. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:-------------------------

| Observable Discrepancy
[SNYK-JS-JSRSASIGN-6070731](https://snyk.io/vuln/SNYK-JS-JSRSASIGN-6070731) | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Proof of Concept

| Regular Expression Denial of Service (ReDoS)
[SNYK-JS-SEMVER-3247795](https://snyk.io/vuln/SNYK-JS-SEMVER-3247795) | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Proof of Concept (*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: node-opcua

2.121.0 - 2024-02-25
Release Notes

🐛 Bug Fixes
- d81924c60 Adjust UAVariable: fixing #1342 by forcing timestamp to be set when a simple variable getter is used
- ef9878409 Fix ambiguous abstract DataType with encoding while loading nodeset2 xml
- 3b8613468 Server: monitored item; fix keep alive and resendInitialValue behavior
- 7d161b074 Server channel: fix channel termination in registerChannel
- ea7fac356 Fix release continuation point behavior
- f521d25cb Fix eventNotifier type to be a EventNotifierFlags in InstantiateObjectOptions
- e85efe29f Fix boiler instantiation by specifying the correct value for event notifier
- 7c42fe464 Ensure event notifier flag SubscribeToEvents automatically set when an object has EventSource or Notifier
- aacd2c86c Fix default variable matrix value while loading nodeset2.xml
- 7fb5d7c88 Fix a bug causing the server to crash while raising AuditCertificate Events
- 1e51b2184 Call should return BadMethodInvalid instead of BadNodeIdUnknown when MethodId doesn't exist or is not a method
- e482774c8 BadChannelIdInvalid should be returned in a ServiceFault instead of a Valid Request
- aae18eed7 Issue #1320 bug-fix: now instantiating variable with same name as parent objectType.
- b9503fdf4 Issue #1326 bug-fix: no longer adding nodes from an unrelated object type to a node with the same browseName.
🛡️ Security Updates
- 8ec25b71a Deprecate RSAPKCS1V15_Decrypt due to CVE-2023-46809
- 97568f4bf Update packages - node-opcua-crypto@4.8.0 CVE-2023-46809
- 0a27cef67 Fix: dockertest/Dockerfile to reduce vulnerabilities
- ce26af470 Fix: packages/node-opcua-local-discovery-server/Dockerfile to reduce vulnerabilities
✨ Enhancements
- 9ebe882e6 Feat: add description and displayName to base object when crawling
- 17b48cc99 ArgumentList: verifyArgumentList returns BadTypeMismatch if at least one argument has a BadTypeMismatch status code
- ea7fac356 Fix release continuation point behavior
🛠 Maintenance
- c38096565 Adjust flaky test on windows
- 2eca643f2 Chore: reduce verbosity in test
- 862ae72f5 Chore: adjust temporary folder location in tests
- 22606c59b Update CTT.xml
- adf2b22e9 CTT: ensure keepAlive is sent after 1xpublishInterval first time
- 77ccf6417 Refactor: server tests to typescript
- 88ba311f5 Add leak detector in test
- 794e35cd1 Chore: fix typescript error in test
- 47c75b7fb Address space for ctt: fix matrix variables
- 4610fa986 Chore: adjust TCP socket in test
- cd8d2705b Chore: server_tcp_transport cleanup
- 4e75b2d5a ServerSecureChannel: return ServiceFault when OpenSecureChannel fails
- 52388f80c Chore: remove unused import
- b7b1f62ab Chore: improve log message
- dd8872782 Chore: fix typos in comments
- f85e696f4 Chore: fix typescript issue
- 2e60c9984 Chore: fix timer id déclaration
- 515303c2f Chore: improve error message in internalDecodeVariant, when matrices are inconsistent
- 1dd5562a0 Update standard UA nodeSet2.xml to version 1.5.3
- e8d592bb9 Update standard status codes
- d5f8f15c3 Improve Variable value set typescript definition and add new async mode
👬🏽 Contributors
- @ mb-software, @ tetanw
What's Changed
- feat: add a description and displayName to base object when crawling by @ narttmk in #1338
- [Snyk] Security upgrade node from 21.2-alpine3.18 to 21.6-alpine3.18 by @ erossignon in #1337
- [Snyk] Security upgrade node from 20.8-bookworm-slim to 20.11.0-bookworm-slim by @ erossignon in #1340
- Fix variable with the same name as object type by @ tetanw in #1329
New Contributors
- @ narttmk made their first contribution in #1338
- @ tetanw made their first contribution in #1329
Full Changelog: v2.120.0...v2.121.0

⚠️ Known issue
- This version may cause OPCUAClient to fail to connect when the OPCUA Server exposes a UserTokenIdentity policy based on Basic192RSA15. This issue has been addressed in 2.112.0
2.120.0 - 2024-01-21
Release note for v2.200.0

🐛 Bug Fixes
- [521f18d2f] Fixes #1277 - Instantiating ObjectType with two Folders
- [744648e3f] Relax Encoding detection to cope with bugs in python's asyncua - fixing #1232
- [56b40b191] ClientSecureChannel: fix connection issue highlighted when server imposes maxChunk=1 #1335 #1263
- [2372431fd] Ensure client.isReconnecting=true when client emits the 'connection_reestablished' event fixing #1331
✨ Enhancements
- [45240f862] Add example for GitHub #1232
🛠 Maintenance
- [a0234bbb5] Update packages
- [37e181611] Add open collective badges
- [2e6d5937b] Update book URL
- [85bee187a] Update lock file
- [af3520542] Update copyright year
- [f3d452bd6] Fix copyright year and other adjustments
👬🏽 contributors
- @ Salvoc14 , @ nakr94 , @ szelski , @ ePluvinage
🌟 Join the NodeOPCUA Support Network! 🌟

NodeOPCUA continues to grow and evolve, thanks to the invaluable support from community members like YOU! 🚀

We're dedicated to enhancing and expanding the capabilities of node-opcua, and we invite you to be a part of this exciting journey. Consider contributing through our membership program at Sterfive or by donating on

OpenCollective.

Your support is crucial! 🤝

Your contributions foster innovation and strengthen a community founded on cooperation and the exchange of knowledge. 🌱

🌍 Together, we can drive the future of node-opcua forward! 🌍

2.119.2 - 2023-12-25

v2.119.2

  </li>
  <li>
    <b>2.119.1</b> - <a href="https://snyk.io/redirect/github/node-opcua/node-opcua/releases/tag/v2.119.1">2023-12-25</a></br><p>v2.119.1</p>
  </li>
  <li>
    <b>2.119.0</b> - <a href="https://snyk.io/redirect/github/node-opcua/node-opcua/releases/tag/v2.119.0">2023-12-23</a></br><h1>Release Notes for 2.119.0</h1>

🐛 Bug Fixes

[c70438e] Fix ConditionVariableType behavior with SourceTimestamp property
[77f1bf6] Fix MultiStateValueDiscrete behavior #1323
[3c7c80b] Fix: packages/node-opcua-local-discovery-server/Dockerfile to reduce vulnerabilities
[9eeb81a] Use AcknowledgeableConditionType_Acknowledge/Confirm when ConditionId is not an instance

✨ Enhancements

[84b55ee] Allow effectiveTransitionTime to be passed when setting a TwoStateVariable for instance UACondition#setEnableState(true, { effectiveTransitionTime: somedate})
[200e233] Allow time and receiveTime to be optionally passed on raiseNewCondition
[734c0d9] Issue #1303 refactor: Add 'host' parameter to OPCUAServer for specific interface binding
[8166185] Add findMethodId utility function to find a MethodId in a object or in its super type
[ee7b7e3] Factor out node-opcua-alarm-condition module

🛠 Maintenance

[0270f16] Update packages
[1cba6e9] Chore: refactor client example
[7843dec] Add some more edge tests

👬🏽 contributors

@ muddasir-barnes , @ tetanw
special thanks for @ iliareshetov for fixing #1303

🌟 Join the NodeOPCUA Support Network! 🌟

NodeOPCUA continues to grow and evolve, thanks to the invaluable support from community members like YOU! 🚀

We're dedicated to enhancing and expanding the capabilities of node-opcua, and we invite you to be a part of this exciting journey. Consider contributing through our membership program at Sterfive or by donating on OpenCollective. Your support is crucial! 🤝

Your contributions foster innovation and strengthen a community founded on cooperation and the exchange of knowledge. 🌱

🌍 Together, we can drive the future of node-opcua forward! 🌍

We're profoundly grateful for your continued support and commitment to our mission! 💕👐

  </li>
  <li>
    <b>2.118.0</b> - <a href="https://snyk.io/redirect/github/node-opcua/node-opcua/releases/tag/v2.118.0">2023-11-20</a></br><a href="https://snyk.io/redirect/github/node-opcua/node-opcua/releases/tag/v2.118.0"> Read more </a>
  </li>
  <li>
    <b>2.117.0</b> - <a href="https://snyk.io/redirect/github/node-opcua/node-opcua/releases/tag/v2.117.0">2023-11-13</a></br><a href="https://snyk.io/redirect/github/node-opcua/node-opcua/releases/tag/v2.117.0"> Read more </a>
  </li>
  <li>
    <b>2.116.0</b> - <a href="https://snyk.io/redirect/github/node-opcua/node-opcua/releases/tag/v2.116.0">2023-11-03</a></br><a href="https://snyk.io/redirect/github/node-opcua/node-opcua/releases/tag/v2.116.0"> Read more </a>
  </li>
  <li>
    <b>2.115.0</b> - 2023-10-04
  </li>
  <li>
    <b>2.114.0</b> - 2023-10-02
  </li>
  <li>
    <b>2.113.2</b> - <a href="https://snyk.io/redirect/github/node-opcua/node-opcua/releases/tag/v2.113.2">2023-12-23</a></br><p>v2.113.2</p>
  </li>
  <li>
    <b>2.113.1</b> - <a href="https://snyk.io/redirect/github/node-opcua/node-opcua/releases/tag/v2.113.1">2023-12-22</a></br><p>v2.113.1</p>
  </li>
  <li>
    <b>2.113.0</b> - 2023-09-07
  </li>
  <li>
    <b>2.112.0</b> - 2023-09-06
  </li>
  <li>
    <b>2.111.0</b> - 2023-09-03
  </li>
  <li>
    <b>2.110.0</b> - 2023-08-17
  </li>
  <li>
    <b>2.109.0</b> - 2023-08-15
  </li>
  <li>
    <b>2.108.0</b> - 2023-07-18
  </li>
  <li>
    <b>2.107.0</b> - 2023-07-11
  </li>
  <li>
    <b>2.106.0</b> - 2023-06-30
  </li>
  <li>
    <b>2.105.1</b> - 2023-06-16
  </li>
  <li>
    <b>2.105.0</b> - 2023-06-10
  </li>
  <li>
    <b>2.104.0</b> - 2023-06-05
  </li>
  <li>
    <b>2.103.0</b> - 2023-05-05
  </li>
  <li>
    <b>2.102.0</b> - 2023-05-02
  </li>
  <li>
    <b>2.101.0</b> - 2023-05-01
  </li>
  <li>
    <b>2.100.0</b> - 2023-04-14
  </li>
  <li>
    <b>2.99.0</b> - 2023-04-11
  </li>
  <li>
    <b>2.98.2</b> - 2023-04-10
  </li>
  <li>
    <b>2.98.1</b> - 2023-04-10
  </li>
  <li>
    <b>2.98.0</b> - 2023-04-09
  </li>
  <li>
    <b>2.97.0</b> - 2023-04-05
  </li>
  <li>
    <b>2.96.0</b> - 2023-03-24
  </li>
  <li>
    <b>2.95.0</b> - 2023-03-18
  </li>
  <li>
    <b>2.94.0</b> - 2023-03-14
  </li>
  <li>
    <b>2.93.0</b> - 2023-03-13
  </li>
  <li>
    <b>2.92.0</b> - 2023-03-12
  </li>
  <li>
    <b>2.91.1</b> - 2023-02-24
  </li>
  <li>
    <b>2.91.0</b> - 2023-02-17
  </li>
  <li>
    <b>2.90.1</b> - 2023-02-15
  </li>
  <li>
    <b>2.90.0</b> - 2023-01-29
  </li>
  <li>
    <b>2.89.0</b> - 2023-01-22
  </li>
  <li>
    <b>2.88.0</b> - 2023-01-03
  </li>
  <li>
    <b>2.87.0</b> - 2022-12-18
  </li>
  <li>
    <b>2.86.1</b> - 2022-12-16
  </li>
  <li>
    <b>2.86.0</b> - 2022-12-15
  </li>
  <li>
    <b>2.85.0</b> - 2022-11-25
  </li>
  <li>
    <b>2.84.0</b> - 2022-11-18
  </li>
  <li>
    <b>2.83.0</b> - 2022-11-14
  </li>
  <li>
    <b>2.82.0</b> - 2022-10-27
  </li>
  <li>
    <b>2.81.0</b> - 2022-10-11
  </li>
</ul>
from <a href="https://snyk.io/redirect/github/node-opcua/node-opcua/releases">node-opcua GitHub release notes</a>

Commit messages

Package name: node-opcua

ba93a78 v2.121.0
c380965 adjust flaky test on windows
d81924c UAVariable: fixing #1342 by forcing timestamp to be set when a simple variable getter is used
8ec25b7 deprecate RSAPKCS1V15_Decrypt due to CVE-2023-46809
97568f4 update packages - node-opcua-crypto@4.8.0 CVE-2023-46809
ef98784 Fix ambiguous abstract DataType with encoding while loading nodeset2 xml
2eca643 chore: reduce verbosity in test
862ae72 chore: adjust temporary folder location in tests
22606c5 update CTT.xml
adf2b22 CTT: ensure keepAlive is sent after 1xpublishInterval first time
17b48cc argumentList: verifyArgumentList returns BadTypeMismatch if at least one argument has a BadTypeMismatch status code
77ccf64 refactor: server tests to typescript
88ba311 add leak detector in test
3b86134 server: monitored item ; fix keep alive and resendInitialValue behavior
794e35c chore: fix typescript error in test
47c75b7 address space for ctt: fix matrix variables
7d161b0 server channel: fix channel termination i n registerChannel
4610fa9 chore: adjust tcp socket in test
cd8d270 chore: sever_tcp_transport cleanup
4e75b2d ServerSecureChannel: return ServiceFault when OpenSecureChannel fails
52388f8 chore: remove unused import
b7b1f62 chore: improve log message
ea7fac3 fix release continuation point behavior
f029365 chore: add asserts in test for #119

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

BiancoRoyal / node-red-contrib-iiot-opcua

[Snyk] Upgrade node-opcua from 2.81.0 to 2.121.0 #272

Snyk has created this PR to upgrade node-opcua from 2.81.0 to 2.121.0.

Release Notes

🐛 Bug Fixes

🛡️ Security Updates

✨ Enhancements

🛠 Maintenance

👬🏽 Contributors

What's Changed

New Contributors

⚠️ Known issue

Release note for v2.200.0

🐛 Bug Fixes

✨ Enhancements

🛠 Maintenance

👬🏽 contributors

🌟 Join the NodeOPCUA Support Network! 🌟

🐛 Bug Fixes

✨ Enhancements

🛠 Maintenance

👬🏽 contributors

🌟 Join the NodeOPCUA Support Network! 🌟