Bump ms and socket.io-client

Open dependabot[bot] opened this issue 2 years ago • 0 comments

Bumps ms to 2.0.0 and updates ancestor dependency socket.io-client. These dependencies need to be updated together.

Updates ms from 0.7.1 to 2.0.0

Release notes

2.0.0

Major Changes

Limit str to 100 to avoid ReDoS of 0.3s: #89

Patches

Ignored logs coming from npm: b1eaab752203e978492a4d540a7ae1d26e6306b1

Bumped dependencies to the latest version: bcf57157678fd5afc691383145a35e116f9704d0

Invalidated cache for slack badge: 94b995c1d6d5d13ec976a0c6849a3cca9b277e6b

Credits

Huge thanks to @karenyavine for their help!

1.0.0

Major Changes

Removed component specification: 1fbbe974cdcad96e592dcb65a7b2a8649f690420

Patches

Test on LTS version of Node: c9b1fd319f0f9198d85ecf4ba83e46cc1216be04

Removed XO: 94068ea6d518387670df277f740b1abada80ed48

Use prettier and eslint: 57b3ef8e3423cae6254f94c5564a11b4492cff43

Badge for XO removed: 389840b329436117741b2ef13a172725082695b9

Removed browser testing: e818c3581aca3119c00d81901bfe8fe653bcfda4

More suitable name for file containing tests: ee91f307a8dc3581ebdad614ec0533ddb3d8bf56

0.7.3

Patches

Mark "options" param as optional in jsdoc: #77

Lowercased text files: 5f0653ab192a30301aed8668b4588a87975b41ab

Pinned dependencies: 126d7f094a1836b991c8d0abfeb4d0ce09ac280f

Chore(package): update serve to version 5.0.1: #81

Credits

Huge thanks to @Jokero for their help!

0.7.2

Patches 💅

Added license field to package.json file: zeit/ms#42

Renamed long and short (reserved keywords): zeit/ms#53

Capitalized important files: b2d9f9d

Specified version numbers for devDependencies in package.json: abd3616

Updated license file to the latest version: 5d53ae8

Only upload important files to npm, instead of excluding certain ones: 2b2f02a

Adjusted name of repository in package.json: e84f95d

... (truncated)

Commits

9b88d15 2.0.0
94b995c Invalidated cache for slack badge
bcf5715 Bumped dependencies to the latest version
b1eaab7 Ignored logs coming from npm
caae298 Limit str to 100 to avoid ReDoS of 0.3s (#89)
b83b36d chore(package): update eslint to version 3.19.0 (#88)
3f2a4d7 chore(package): update husky to version 0.13.3 (#86)
7daf984 1.0.0
ee91f30 More suitable name for file containing tests
e818c35 Removed browser testing
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by leo, a new releaser for ms since your current version.

Updates socket.io-client from 1.7.4 to 4.7.2

Release notes

Sourced from socket.io-client's releases.

4.7.2

Some bug fixes are included from the engine.io-client package:

webtransport: add proper framing (d55c39e)

webtransport: honor the binaryType attribute (8270e00)

Links

Diff: https://github.com/socketio/socket.io-client/compare/4.7.1...4.7.2

Server release: 4.7.2

engine.io-client@~6.5.2 (diff)

ws@~8.11.0 (no change)

4.7.1

Some bug fixes are included from the engine.io-client package:

make closeOnBeforeunload default to false (a63066b)

webtransport: properly handle abruptly closed connections (cf6aa1f)

Links

Diff: https://github.com/socketio/socket.io-client/compare/4.7.0...4.7.1

Server release: 4.7.1

engine.io-client@~6.5.1 (diff)

ws@~8.11.0 (no change)

4.7.0

Bug Fixes

properly report timeout error when connecting (5bc94b5)

use same scope for setTimeout and clearTimeout calls (#1568) (f2892ab)

Features

Support for WebTransport

The Engine.IO client can now use WebTransport as the underlying transport.

WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.

References:

https://w3c.github.io/webtransport/

https://developer.mozilla.org/en-US/docs/Web/API/WebTransport

https://developer.chrome.com/articles/webtransport/

For Node.js clients: until WebTransport support lands in Node.js, you can use the @fails-components/webtransport package:
</tr></table> 

... (truncated)

Changelog

Sourced from socket.io-client's changelog.

4.7.2 (2023-08-02)

Some bug fixes are included from the engine.io-client package:

webtransport: add proper framing (d55c39e)

webtransport: honor the binaryType attribute (8270e00)

Dependencies

engine.io-client@~6.5.2 (diff)

ws@~8.11.0 (no change)

4.7.1 (2023-06-28)

Some bug fixes are included from the engine.io-client package:

make closeOnBeforeunload default to false (a63066b)

webtransport: properly handle abruptly closed connections (cf6aa1f)

Dependencies

engine.io-client@~6.5.1 (diff)

ws@~8.11.0 (no change)

4.7.0 (2023-06-22)

Bug Fixes

properly report timeout error when connecting (5bc94b5)

use same scope for setTimeout and clearTimeout calls (#1568) (f2892ab)

Features

Support for WebTransport

The Engine.IO client can now use WebTransport as the underlying transport.

WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.

References:

https://w3c.github.io/webtransport/

... (truncated)

Commits

928d76d chore(release): 4.7.2
74ca7ac chore: bump engine.io-client to version 6.5.2
0536fcc chore(release): 4.7.1
6169bb8 chore: bump dev dependencies
84ec6cf refactor: expose the ESM build with debug (bis)
630ff41 chore: bump engine.io-client to version 6.5.1
9b235ec chore(release): 4.7.0
f2892ab fix: use same scope for setTimeout and clearTimeout calls (#1568)
5bc94b5 fix: properly report timeout error when connecting
781d753 feat: expose ESM build with debug (#1585)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

Sep 22 '23 04:09 dependabot[bot]