Bump socket.io-parser, socket.io, socket.io-client and karma

[dependabot[bot]]

Bumps socket.io-parser to 4.2.1 and updates ancestor dependencies socket.io-parser, socket.io, socket.io-client and karma. These dependencies need to be updated together.

Updates socket.io-parser from 2.3.1 to 4.2.1

Release notes

Sourced from socket.io-parser's releases.

4.2.1

Bug Fixes

• check the format of the index of each attachment (b5d0cb7)

Links

• Diff: https://github.com/socketio/socket.io-parser/compare/4.2.0...4.2.1

4.2.0

Features

• allow the usage of custom replacer and reviver (#112) (b08bc1a)

Links

• Diff: https://github.com/socketio/socket.io-parser/compare/4.1.2...4.2.0

4.1.2

Bug Fixes

• allow objects with a null prototype in binary packets (#114) (7f6b262)

Links

• Diff: https://github.com/socketio/socket.io-parser/compare/4.1.1...4.1.2

4.1.1

Links

• Diff: https://github.com/socketio/socket.io-parser/compare/4.1.0...4.1.1

4.1.0

Features

• provide an ESM build with and without debug (388c616)

Links

• Diff: https://github.com/socketio/socket.io-parser/compare/4.0.4...4.1.0

4.0.5

Bug Fixes

• check the format of the index of each attachment (b559f05)

Links

• Diff: https://github.com/socketio/socket.io-parser/compare/4.0.4...4.0.5

... (truncated)

Changelog

Sourced from socket.io-parser's changelog.

4.2.1 (2022-06-27)

Bug Fixes

• check the format of the index of each attachment (b5d0cb7)

4.2.0 (2022-04-17)

Features

• allow the usage of custom replacer and reviver (#112) (b08bc1a)

4.1.2 (2022-02-17)

Bug Fixes

• allow objects with a null prototype in binary packets (#114) (7f6b262)

4.1.1 (2021-10-14)

4.1.0 (2021-10-11)

Features

• provide an ESM build with and without debug (388c616)

4.0.4 (2021-01-15)

Bug Fixes

• allow integers as event names (1c220dd)

4.0.3 (2021-01-05)

4.0.2 (2020-11-25)

... (truncated)

Commits

• 5a2ccff chore(release): 4.2.1
• b5d0cb7 fix: check the format of the index of each attachment
• c7514b5 chore(release): 4.2.0
• 931f152 chore: add Node.js 16 in the test matrix
• 6c9cb27 chore: bump @​socket.io/component-emitter to version 3.1.0
• b08bc1a feat: allow the usage of custom replacer and reviver (#112)
• aed252c chore(release): 4.1.2
• 89209fa chore: bump cached-path-relative from 1.0.2 to 1.1.0 (#113)
• 0a3b556 chore: bump path-parse from 1.0.6 to 1.0.7 (#108)
• 7f6b262 fix: allow objects with a null prototype in binary packets (#114)
• Additional commits viewable in compare view

Updates socket.io from 1.7.4 to 4.5.3

Release notes

Sourced from socket.io's releases.

4.5.3

Bug Fixes

• typings: accept an HTTP2 server in the constructor (d3d0a2d)
• typings: apply types to "io.timeout(...).emit()" calls (e357daf)

Links:

• Diff: https://github.com/socketio/socket.io/compare/4.5.2...4.5.3
• Client release: 4.5.3
• engine.io version: ~6.2.0
• ws version: ~8.2.3

4.5.2

Bug Fixes

• prevent the socket from joining a room after disconnection (18f3fda)
• uws: prevent the server from crashing after upgrade (ba497ee)

Links:

• Diff: https://github.com/socketio/socket.io/compare/4.5.1...4.5.2
• Client release: 4.5.2
• engine.io version: ~6.2.0
• ws version: ~8.2.3

4.5.1

Bug Fixes

• forward the local flag to the adapter when using fetchSockets() (30430f0)
• typings: add HTTPS server to accepted types (#4351) (9b43c91)

Links:

• Diff: https://github.com/socketio/socket.io/compare/4.5.0...4.5.1
• Client release: 4.5.1
• engine.io version: ~6.2.0
• ws version: ~8.2.3

4.5.0

Bug Fixes

• typings: ensure compatibility with TypeScript 3.x (#4259) (02c87a8)

Features

• add support for catch-all listeners for outgoing packets (531104d)

This is similar to onAny(), but for outgoing packets.

... (truncated)

Changelog

Sourced from socket.io's changelog.

4.5.3 (2022-10-15)

Bug Fixes

• typings: accept an HTTP2 server in the constructor (d3d0a2d)
• typings: apply types to "io.timeout(...).emit()" calls (e357daf)

4.5.2 (2022-09-02)

Bug Fixes

• prevent the socket from joining a room after disconnection (18f3fda)
• uws: prevent the server from crashing after upgrade (ba497ee)

4.5.1 (2022-05-17)

Bug Fixes

• forward the local flag to the adapter when using fetchSockets() (30430f0)
• typings: add HTTPS server to accepted types (#4351) (9b43c91)

4.5.0 (2022-04-23)

Bug Fixes

• typings: ensure compatibility with TypeScript 3.x (#4259) (02c87a8)

Features

• add support for catch-all listeners for outgoing packets (531104d)

This is similar to onAny(), but for outgoing packets.

Syntax:

socket.onAnyOutgoing((event, ...args) => {
  console.log(event);
});
</tr></table> 

... (truncated)

Commits

• 945c84b chore(release): 4.5.3
• d3d0a2d fix(typings): accept an HTTP2 server in the constructor
• 19b225b docs(examples): update dependencies of the basic CRUD example
• 8fae95d docs: add jsdoc for each public method
• e6f6b90 docs: add deprecation notice for the allSockets() method
• 596eb88 ci: upgrade to actions/checkout@3 and actions/setup-node@3
• e357daf fix(typings): apply types to "io.timeout(...).emit()" calls
• 10fa4a2 refactor: add list of possible disconnection reasons
• 8be95b3 chore(release): 4.5.2
• ba497ee fix(uws): prevent the server from crashing after upgrade
• Additional commits viewable in compare view

Updates socket.io-client from 1.7.4 to 4.5.3

Release notes

Sourced from socket.io-client's releases.

4.5.3

Bug Fixes

• do not swallow user exceptions (2403b88)

Links:

• Diff: https://github.com/socketio/socket.io-client/compare/4.5.2...4.5.3
• Server release: 4.5.3
• engine.io-client version: ~6.2.1
• ws version: ~8.2.3

Size of the bundles:

	min	min+gzip
socket.io.min.js	42.6 KB (-)	13.6 KB (-)
socket.io.msgpack.min.js	47.7 KB (-)	14.6 KB (-)
socket.io.esm.min.js	34.5 KB (-)	11.5 KB (-)

4.5.2

Bug Fixes

• handle ill-formatted packet from server (c597023)

Links:

• Diff: https://github.com/socketio/socket.io-client/compare/4.5.1...4.5.2
• Server release: 4.5.2
• engine.io-client version: ~6.2.1 (diff)
• ws version: ~8.2.3

Size of the bundles:

	min	min+gzip
socket.io.min.js	42.6 KB (-)	13.6 KB (-)
socket.io.msgpack.min.js	47.7 KB (-)	14.6 KB (-)
socket.io.esm.min.js	34.5 KB (-)	11.5 KB (-)

4.5.1

There were some minor bug fixes on the server side, which mandate a client bump.

Links:

• Diff: https://github.com/socketio/socket.io-client/compare/4.5.0...4.5.1
• Server release: 4.5.1
• engine.io-client version: ~6.2.1 (diff)
• ws version: ~8.2.3

... (truncated)

Changelog

Sourced from socket.io-client's changelog.

4.5.3 (2022-10-15)

Bug Fixes

• do not swallow user exceptions (2403b88)

4.5.2 (2022-09-02)

Bug Fixes

• handle ill-formatted packet from server (c597023)

4.5.1 (2022-05-17)

There were some minor bug fixes on the server side, which mandate a client bump.

4.5.0 (2022-04-23)

Features

• add details to the disconnect event (b862924)

The "disconnect" event will now include additional details to help debugging if anything has gone wrong.

Example when a payload is over the maxHttpBufferSize value in HTTP long-polling mode:

socket.on("disconnect", (reason, details) => {
  console.log(reason); // "transport error"
// in that case, details is an error object
console.log(details.message); "xhr post error"
console.log(details.description); // 413 (the HTTP status of the response)
// details.context refers to the XMLHttpRequest object
console.log(details.context.status); // 413
console.log(details.context.responseText); // ""
});

• add support for catch-all listeners for outgoing packets (74e3e60)

... (truncated)

Commits

• 2eca8da chore(release): 4.5.3
• 7c05688 docs: add jsdoc for each public method
• 2403b88 fix: do not swallow user exceptions
• 1098618 ci: temporarily remove iOS 16 from the test matrix
• 2d70813 chore(release): 4.5.2
• c597023 fix: handle ill-formatted packet from server
• 8c659bc chore: regenerate lockfile
• f0350a0 chore(release): 4.5.1
• abdba07 chore(release): 4.5.0
• faf68a5 chore: update default label for bug reports
• Additional commits viewable in compare view

Updates karma from 2.0.5 to 6.4.1

Release notes

Sourced from karma's releases.

v6.4.1

6.4.1 (2022-09-19)

Bug Fixes

• pass integrity value (63d86be)

v6.4.0

6.4.0 (2022-06-14)

Features

• support SRI verification of link tags (dc51a2e)
• support SRI verification of script tags (6a54b1c)

v6.3.20

6.3.20 (2022-05-13)

Bug Fixes

• prefer IPv4 addresses when resolving domains (e17698f), closes #3730

v6.3.19

6.3.19 (2022-04-19)

Bug Fixes

• client: error out when opening a new tab fails (099b85e)

v6.3.18

6.3.18 (2022-04-13)

Bug Fixes

• deps: upgrade socket.io to v4.4.1 (52a30bb)

v6.3.17

6.3.17 (2022-02-28)

Bug Fixes

• deps: update colors to maintained version (#3763) (fca1884)

v6.3.16

... (truncated)

Changelog

Sourced from karma's changelog.

6.4.1 (2022-09-19)

Bug Fixes

• pass integrity value (63d86be)

6.4.0 (2022-06-14)

Features

• support SRI verification of link tags (dc51a2e)
• support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

• prefer IPv4 addresses when resolving domains (e17698f), closes #3730

6.3.19 (2022-04-19)

Bug Fixes

• client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes

• deps: upgrade socket.io to v4.4.1 (52a30bb)

6.3.17 (2022-02-28)

Bug Fixes

• deps: update colors to maintained version (#3763) (fca1884)

6.3.16 (2022-02-10)

Bug Fixes

• security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

... (truncated)

Commits

• 0013121 chore(release): 6.4.1 [skip ci]
• 63d86be fix: pass integrity value
• 84f7cc3 chore(release): 6.4.0 [skip ci]
• f2d0663 docs: add integrity parameter
• dc51a2e feat: support SRI verification of link tags
• 6a54b1c feat: support SRI verification of script tags
• 5e71cf5 chore(release): 6.3.20 [skip ci]
• e17698f fix: prefer IPv4 addresses when resolving domains
• 60f4f79 build: add Node 16 and 18 to the CI matrix
• 6ff5aaf chore(release): 6.3.19 [skip ci]
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mapcentia/vidi/network/alerts).

[dependabot[bot]]

Looks like these dependencies are no longer a dependency, so this is no longer needed.