search

bigcommerce / widget-builder

MIT License
18 stars 39 forks source link

[Snyk] Upgrade socket.io-client from 4.6.2 to 4.7.5 #161

Open bcsnyk opened 6 months ago

bcsnyk commented 6 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade socket.io-client from 4.6.2 to 4.7.5.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **6 versions** ahead of your current version. - The recommended version was released **a month ago**, on 2024-03-14.
Release notes
Package name: socket.io-client
  • 4.7.5 - 2024-03-14

    Bug Fixes

    • discard acknowledgements upon disconnection (34cbfbb)

    Links

  • 4.7.4 - 2024-01-12

    There were some minor bug fixes on the server side, which mandate a client bump.

    Links

      </li>
  <li>
    <b>4.7.3</b> - <a href="https://snyk.io/redirect/github/socketio/socket.io-client/releases/tag/4.7.3">2024-01-03</a></br><h3>Bug Fixes</h3>
    • improve compatibility with node16 module resolution (#1595) (605de78)
    • typings: accept string | undefined as init argument (5a3eafe)
    • typings: fix the type of the socket#id attribute (f9c16f2)

    Links

      </li>
  <li>
    <b>4.7.2</b> - <a href="https://snyk.io/redirect/github/socketio/socket.io-client/releases/tag/4.7.2">2023-08-02</a></br><p>Some bug fixes are included from the <code>engine.io-client</code> package:</p>
    • webtransport: add proper framing (d55c39e)
    • webtransport: honor the binaryType attribute (8270e00)

    Links

      </li>
  <li>
    <b>4.7.1</b> - <a href="https://snyk.io/redirect/github/socketio/socket.io-client/releases/tag/4.7.1">2023-06-28</a></br><p>Some bug fixes are included from the <code>engine.io-client</code> package:</p>
    • make closeOnBeforeunload default to false (a63066b)
    • webtransport: properly handle abruptly closed connections (cf6aa1f)

    Links

      </li>
  <li>
    <b>4.7.0</b> - <a href="https://snyk.io/redirect/github/socketio/socket.io-client/releases/tag/4.7.0">2023-06-22</a></br><h3>Bug Fixes</h3>
    • properly report timeout error when connecting (5bc94b5)
    • use same scope for setTimeout and clearTimeout calls (#1568) (f2892ab)

    Features

    Support for WebTransport

    The Engine.IO client can now use WebTransport as the underlying transport.

    WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.

    References:

    For Node.js clients: until WebTransport support lands in Node.js, you can use the @ fails-components/webtransport package:

    <div class="highlight highlight-source-js notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="import { WebTransport } from "@ fails-components/webtransport";

    global.WebTransport = WebTransport;">

    import { WebTransport } from "@ fails-components/webtransport";
    

    global.WebTransport = WebTransport;

Added in 7195c0f.

Cookie management for the Node.js client

When setting the withCredentials option to true, the Node.js client will now include the cookies in the HTTP requests, making it easier to use it with cookie-based sticky sessions.

<div class="highlight highlight-source-js notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="import { io } from "socket.io-client";

const socket = io("https://example.com&quot;, { withCredentials: true });">

import { io } from "socket.io-client";


const socket = io("https://example.com", {
withCredentials: true
});

Added in 5fc88a6.

Conditional import of the ESM build with debug logs

By default, the ESM build does not include the debug package in the browser environments, because it increases the bundle size (see 16b6569).

Which means that, unfortunately, debug logs are not available in the devtools console, even when setting the localStorage.debug = ... attribute.

You can now import the build which includes the debug packages with a conditional import. Example with vite:

<div class="highlight highlight-source-js notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="import { defineConfig } from 'vite' import react from '@ vitejs/plugin-react'

export default defineConfig({ plugins: [react()], server: { port: 4000 }, resolve: { conditions: ["development"] } })">

import { defineConfig } from 'vite'
import react from '@ vitejs/plugin-react'


export default defineConfig({
plugins: [react()],
server: {
port: 4000
},
resolve: {
conditions: ["development"]
}
})

Reference: https://v2.vitejs.dev/config/#resolve-conditions

Added in 781d753.

Links

  </li>
  <li>
    <b>4.6.2</b> - <a href="https://snyk.io/redirect/github/socketio/socket.io-client/releases/tag/4.6.2">2023-05-31</a></br><h3>Bug Fixes</h3>

Links

  </li>
</ul>
from <a href="https://snyk.io/redirect/github/socketio/socket.io-client/releases">socket.io-client GitHub release notes</a>

Commit messages
Package name: socket.io-client Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs