engine.io-client - npm Package Compare versions

Comparing version 3.5.3 to 3.5.4

CHANGELOG.md

@@ -0,1 +1,9 @@
+## [3.5.4](https://github.com/socketio/engine.io-client/compare/3.5.3...3.5.4) (2024-06-18)
+
+This release contains a bump of the `ws` dependency, which includes an important [security fix](https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c).
+
+Advisory: https://github.com/advisories/GHSA-3h5v-q93c-6h6q
+
+
+
 ## [3.5.3](https://github.com/socketio/engine.io-client/compare/3.5.2...3.5.3) (2022-09-07)
@@ -2,0 +10,0 @@

package.json

@@ -5,3 +5,3 @@ {
   "license": "MIT",
-  "version": "3.5.3",
+  "version": "3.5.4",
   "main": "lib/index.js",
@@ -36,3 +36,3 @@ "homepage": "https://github.com/socketio/engine.io-client",
     "parseuri": "0.0.6",
-    "ws": "~7.4.2",
+    "ws": "~7.5.10",
     "xmlhttprequest-ssl": "~1.6.2",
@@ -39,0 +39,0 @@ "yeast": "0.1.2"

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

180871

increased by0.19%

Published versions last year

6

increased by20%

Dependency changes

• + Addedws@7.5.10(transitive)

• - Removedws@7.4.6(transitive)

• Updatedws@~7.5.10