search

Javier-Rotelli / taperbot

5 stars 2 forks source link

Bump ws from 3.3.1 to 5.2.3 #39

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 3 years ago

Bumps ws from 3.3.1 to 5.2.3.

Release notes

Sourced from ws's releases.

5.2.3

Bug fixes

  • Backported 00c425ec to the 5.x release line (76d47c14).

5.2.2

Bug fixes

  • Fixed a use after invalidation bug introduced in 6046a28 (8aba871).

5.2.1

Bug fixes

  • Fixed a bug that could prevent buffered data from being processed under certain circumstances (6046a28).

5.2.0

Features

  • Added ability to specify custom headers when rejecting the handshake (#1379).

5.1.1

Bug fixes

  • Fixed a regression introduced in 9e152f9 (#1347).

5.1.0

Features

  • The address argument of the WebSocket constructor can now be a URL instance (#1329).
  • The options argument of the WebSocket constructor now accepts any TLS option that is also accepted by https.request() (#1332).

5.0.0

Breaking changes

  • Dropped support for Node.js < 4.5.0 (#1313).
  • The connection is no longer closed if the server does not agree to any of the client's requested subprotocols (#1312).
  • net.Socket errors are no longer re-emitted (a4050db).

Features

  • Read backpressure is now properly handled when permessage-deflate is enabled (#1302).

... (truncated)

Commits
  • 6dd88e7 [dist] 5.2.3
  • 76d47c1 [security] Fix ReDoS vulnerability
  • 5d55e52 [dist] 5.2.2
  • 8aba871 [fix] Fix use after invalidation bug
  • 175ce46 [dist] 5.2.1
  • 307be7a [fix] Remove the 'data' listener when the receiver emits an error
  • 6046a28 [fix] Do not prematurely remove the listener of the 'data' event
  • bf9b2ec chore(package): update nyc to version 12.0.2 (#1395)
  • bcab531 chore(package): update eslint-plugin-promise to version 3.8.0 (#1389)
  • e4d032c [dist] 5.2.0
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Javier-Rotelli/taperbot/network/alerts).
dependabot[bot] commented 2 years ago

Looks like ws is up-to-date now, so this is no longer needed.