Skip to content

[Snyk] Upgrade ws from 7.5.5 to 8.3.0 - #884

Merged
rfelber merged 1 commit into
mainfrom
snyk-upgrade-929ec12bbef28585bd2dcd0c2d8b6dd5
Dec 17, 2021
Merged

[Snyk] Upgrade ws from 7.5.5 to 8.3.0#884
rfelber merged 1 commit into
mainfrom
snyk-upgrade-929ec12bbef28585bd2dcd0c2d8b6dd5

Conversation

@snyk-bot

Copy link
Copy Markdown
Contributor

Snyk has created this PR to upgrade ws from 7.5.5 to 8.3.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 8 versions ahead of your current version.
  • The recommended version was released 21 days ago, on 2021-11-23.
Release notes
Package name: ws
  • 8.3.0 - 2021-11-23

    Features

    • Added ability to pause and resume a WebSocket (0a8c7a9).

    Bug fixes

    • Fixed a bug that could prevent the connection from being closed cleanly when
      using the stream API (ed2b803).
    • When following redirects, an error is now emitted and not thrown if the
      redirect URL is invalid (#1980).
  • 8.2.3 - 2021-10-02

    Bug fixes

    • When context takeover is enabled, messages are now compressed even if their size
      is below the value of the perMessageDeflate.threshold option (41ae563).
  • 8.2.2 - 2021-09-08

    Bug fixes

    • Some closing operations are now run only if needed (ec9377c).
  • 8.2.1 - 2021-08-28

    Bug fixes

    • Fixed an issue where the socket was not resumed, preventing the connection
      from being closed cleanly (869c989).
  • 8.2.0 - 2021-08-18

    Features

    • Added WebSocket.WebSocket as an alias for WebSocket and
      WebSocket.WebSocketServer as an alias for WebSocket.Server to fix name
      consistency and improve interoperability with the ES module wrapper (#1935).
  • 8.1.0 - 2021-08-11

    Features

    • Added ability to skip UTF-8 validation (#1928).

    Bug fixes

    • Fixed an issue with a breaking change in Node.js master (6a72da3).
    • Fixed a misleading error message (c95e695).
  • 8.0.0 - 2021-07-28

    Breaking changes

    • The WebSocket constructor now throws a SyntaxError if any of the
      subprotocol names are invalid or duplicated (0aecf0c).

    • The server now aborts the opening handshake if an invalid
      Sec-WebSocket-Protocol header field value is received (1877dde).

    • The protocols argument of handleProtocols hook is no longer an Array but
      a Set (1877dde).

    • The opening handshake is now aborted if the Sec-WebSocket-Extensions header
      field value is empty or it begins or ends with a white space (e814110).

    • Dropped support for Node.js < 10.0.0 (552b506).

    • The WebSocket constructor now throws a SyntaxError if the connection URL
      contains a fragment identifier or if the URL's protocol is not one of 'ws:',
      'wss:', or 'ws+unix:' (ebea038).

    • Text messages and close reasons are no longer decoded to strings. They are
      passed as Buffers to the listeners of their respective events. The listeners
      of the 'message' event now take a boolean argument specifying whether or not
      the message is binary (e173423).

      Existing code can be migrated by decoding the buffer explicitly.

      websocket.on('message', function message(data, isBinary) {
      const message = isBinary ? data : data.toString();
      // Continue as before.
      });

      websocket.on('close', function close(code, data) {
      const reason = data.toString();
      // Continue as before.
      });

    • The package now uses an ES module wrapper (78adf5f).

    • WebSocketServer.prototype.close() no longer closes existing connections
      (df7de57).

      Existing code can be migrated by closing the connections manually.

      websocketServer.close();
      for (const ws of websocketServer.clients) {
        ws.terminate();
      }
    • The callback of WebSocketServer.prototype.close() is now called with an
      error if the server is already closed (abde9cf).

    • WebSocket.prototype.addEventListener() is now a noop if the type argument
      is not one of 'close', 'error', 'message', or 'open' (9558ed1).

    • WebSocket.prototype.removeEventListener() now only removes listeners added
      with WebSocket.prototype.addEventListener() and only one at time (ea95d9c).

    • The value of the onclose, onerror, onmessage, and onopen properties is
      now null if the respective event handler is not set (6756cf5).

    • The OpenEvent class has been removed (21e6500).

    Bug fixes

    • The event listeners added via handler properties are now independent from the
      event listeners added with WebSocket.prototype.addEventListener()
      (0b21c03).
  • 7.5.6 - 2021-11-23

    Bug fixes

  • 7.5.5 - 2021-09-08

    Bug fixes

from ws GitHub release notes
Commit messages
Package name: ws

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@rfelber
rfelber merged commit eebed5a into main Dec 17, 2021
@rfelber
rfelber deleted the snyk-upgrade-929ec12bbef28585bd2dcd0c2d8b6dd5 branch December 17, 2021 19:38
@malexmave malexmave added the dependencies Pull requests that update a dependency file label Dec 21, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants