Bump debug, socket.io, socket.io-client and mocha #11

dependabot · 2023-07-29T22:45:37Z

Bumps debug to 2.6.9 and updates ancestor dependencies debug, socket.io, socket.io-client and mocha. These dependencies need to be updated together.

Updates debug from 2.2.0 to 2.6.9

Release notes

Sourced from debug's releases.

2.6.9

Patches

Remove ReDoS regexp in %o formatter: #504

Credits

Huge thanks to @zhuangya for their help!

release 2.6.7

No release notes provided.

release 2.6.6

No release notes provided.

release 2.6.5

No release notes provided.

release 2.6.4

No release notes provided.

release 2.6.3

No release notes provided.

release 2.6.2

No release notes provided.

release 2.6.1

No release notes provided.

release 2.6.0

No release notes provided.

release 2.5.2

No release notes provided.

release 2.5.1

No release notes provided.

release 2.4.5

No release notes provided.

release 2.4.4

No release notes provided.

release 2.4.3

No release notes provided.

release 2.4.2

No release notes provided.

... (truncated)

Changelog

Sourced from debug's changelog.

2.6.9 / 2017-09-22

remove ReDoS regexp in %o formatter (#504)

2.6.8 / 2017-05-18

Fix: Check for undefined on browser globals (#462, @marbemac)

2.6.7 / 2017-05-16

Fix: Update ms to 2.0.0 to fix regular expression denial of service vulnerability (#458, @hubdotcom)

Fix: Inline extend function in node implementation (#452, @dougwilson)

Docs: Fix typo (#455, @msasad)

2.6.5 / 2017-04-27

Fix: null reference check on window.documentElement.style.WebkitAppearance (#447, @thebigredgeek)

Misc: clean up browser reference checks (#447, @thebigredgeek)

Misc: add npm-debug.log to .gitignore (@thebigredgeek)

2.6.4 / 2017-04-20

Fix: bug that would occure if process.env.DEBUG is a non-string value. (#444, @LucianBuzzo)

Chore: ignore bower.json in npm installations. (#437, @joaovieira)

Misc: update "ms" to v0.7.3 (@tootallnate)

2.6.3 / 2017-03-13

Fix: Electron reference to process.env.DEBUG (#431, @paulcbetts)

Docs: Changelog fix (@thebigredgeek)

2.6.2 / 2017-03-10

Fix: DEBUG_MAX_ARRAY_LENGTH (#420, @slavaGanzin)

Docs: Add backers and sponsors from Open Collective (#422, @piamancini)

Docs: Add Slackin invite badge (@tootallnate)

2.6.1 / 2017-02-10

Fix: Module's export default syntax fix for IE8 Expected identifier error

Fix: Whitelist DEBUG_FD for values 1 and 2 only (#415, @pi0)

... (truncated)

Commits

13abeae Release 2.6.9
f53962e remove ReDoS regexp in %o formatter (#504)
52e1f21 Release 2.6.8
2482e08 Check for undefined on browser globals (#462)
6bb07f7 release 2.6.7
15850cb Fix Regular Expression Denial of Service (ReDoS)
4a6c85c update "debug" to v1.0.0 (#454)
b68dbf8 Fix typo (#455)
1351d2f Inline extend function in node implementation (#452)
c211947 update version for component
Additional commits viewable in compare view

Updates socket.io from 1.7.4 to 4.7.1

Release notes

Sourced from socket.io's releases.

4.7.1

The client bundle contains a few fixes regarding the WebTransport support.

Links

Diff: socketio/socket.io@4.7.0...4.7.1

Client release: 4.7.1

engine.io@~6.5.0 (no change)

ws@~8.11.0 (no change)

4.7.0

Bug Fixes

remove the Partial modifier from the socket.data type (#4740) (e5c62ca)

Features

Support for WebTransport

The Socket.IO server can now use WebTransport as the underlying transport.

WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.

References:

https://w3c.github.io/webtransport/

https://developer.mozilla.org/en-US/docs/Web/API/WebTransport

https://developer.chrome.com/articles/webtransport/

Until WebTransport support lands in Node.js, you can use the @fails-components/webtransport package:
import { readFileSync } from "fs";
import { createServer } from "https";
import { Server } from "socket.io";
import { Http3Server } from "@fails-components/webtransport";
// WARNING: the total length of the validity period MUST NOT exceed two weeks (https://w3c.github.io/webtransport/#custom-certificate-requirements)
const cert = readFileSync("/path/to/my/cert.pem");
const key = readFileSync("/path/to/my/key.pem");
const httpsServer = createServer({
key,
cert
});
httpsServer.listen(3000);
const io = new Server(httpsServer, {
</tr></table>

... (truncated)

Changelog

Sourced from socket.io's changelog.

4.7.1 (2023-06-28)

The client bundle contains a few fixes regarding the WebTransport support.

Dependencies

engine.io@~6.5.0 (no change)

ws@~8.11.0 (no change)

4.7.0 (2023-06-22)

Bug Fixes

remove the Partial modifier from the socket.data type (#4740) (e5c62ca)

Features

Support for WebTransport

The Socket.IO server can now use WebTransport as the underlying transport.

WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.

References:

https://w3c.github.io/webtransport/

https://developer.mozilla.org/en-US/docs/Web/API/WebTransport

https://developer.chrome.com/articles/webtransport/

Until WebTransport support lands in Node.js, you can use the @fails-components/webtransport package:
import { readFileSync } from "fs";
import { createServer } from "https";
import { Server } from "socket.io";
import { Http3Server } from "@fails-components/webtransport";
// WARNING: the total length of the validity period MUST NOT exceed two weeks (https://w3c.github.io/webtransport/#custom-certificate-requirements)
const cert = readFileSync("/path/to/my/cert.pem");
const key = readFileSync("/path/to/my/key.pem");
const httpsServer = createServer({
key,
cert
});
</tr></table>

... (truncated)

Commits

2f6cc2f chore(release): 4.7.1
00d8ee5 chore(release): 4.7.0
2dd5fa9 ci: add Node.js 20 in the test matrix
a5dff0a docs(examples): increase httpd ProxyTimeout value (2)
3035c25 docs(examples): increase httpd ProxyTimeout value
63f181c feat: serve client bundles with CORS headers
a250e28 chore: bump engine.io to version 6.5.0
e5c62ca fix: remove the Partial modifier from the socket.data type (#4740)
01d3762 docs(changelog): update the version range of the engine.io dependency
faf914c chore(release): 4.6.2
Additional commits viewable in compare view

Updates socket.io-client from 1.7.4 to 4.7.1

Release notes

Sourced from socket.io-client's releases.

4.7.1

Some bug fixes are included from the engine.io-client package:

make closeOnBeforeunload default to false (a63066b)

webtransport: properly handle abruptly closed connections (cf6aa1f)

Links

Diff: socketio/socket.io-client@4.7.0...4.7.1

Server release: 4.7.1

engine.io-client@~6.5.1 (diff)

ws@~8.11.0 (no change)

4.7.0

Bug Fixes

properly report timeout error when connecting (5bc94b5)

use same scope for setTimeout and clearTimeout calls (#1568) (f2892ab)

Features

Support for WebTransport

The Engine.IO client can now use WebTransport as the underlying transport.

WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.

References:

https://w3c.github.io/webtransport/

https://developer.mozilla.org/en-US/docs/Web/API/WebTransport

https://developer.chrome.com/articles/webtransport/

For Node.js clients: until WebTransport support lands in Node.js, you can use the @fails-components/webtransport package:
import { WebTransport } from "@fails-components/webtransport";
global.WebTransport = WebTransport;
Added in 7195c0f.

Cookie management for the Node.js client

When setting the withCredentials option to true, the Node.js client will now include the cookies in the HTTP requests, making it easier to use it with cookie-based sticky sessions.
import { io } from "socket.io-client";
</tr></table> 

... (truncated)

Changelog

Sourced from socket.io-client's changelog.

4.7.1 (2023-06-28)

Some bug fixes are included from the engine.io-client package:

make closeOnBeforeunload default to false (a63066b)

webtransport: properly handle abruptly closed connections (cf6aa1f)

Dependencies

engine.io-client@~6.5.1 (diff)

ws@~8.11.0 (no change)

4.7.0 (2023-06-22)

Bug Fixes

properly report timeout error when connecting (5bc94b5)

use same scope for setTimeout and clearTimeout calls (#1568) (f2892ab)

Features

Support for WebTransport

The Engine.IO client can now use WebTransport as the underlying transport.

WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.

References:

https://w3c.github.io/webtransport/

https://developer.mozilla.org/en-US/docs/Web/API/WebTransport

https://developer.chrome.com/articles/webtransport/

For Node.js clients: until WebTransport support lands in Node.js, you can use the @fails-components/webtransport package:
import { WebTransport } from "@fails-components/webtransport";
global.WebTransport = WebTransport;
Added in 7195c0f.

Cookie management for the Node.js client

... (truncated)

Commits

0536fcc chore(release): 4.7.1
6169bb8 chore: bump dev dependencies
84ec6cf refactor: expose the ESM build with debug (bis)
630ff41 chore: bump engine.io-client to version 6.5.1
9b235ec chore(release): 4.7.0
f2892ab fix: use same scope for setTimeout and clearTimeout calls (#1568)
5bc94b5 fix: properly report timeout error when connecting
781d753 feat: expose ESM build with debug (#1585)
8f14b98 chore: bump engine.io-client to version 6.5.0
a04ae1b chore(release): 4.6.2
Additional commits viewable in compare view

Updates mocha from 3.5.3 to 10.2.0

Release notes

Sourced from mocha's releases.

v10.2.0

10.2.0 / 2022-12-11

🎉 Enhancements

#4945: API: add possibility to decorate ESM name before import (@j0tunn)

🐛 Fixes

#4946: Browser: color of failed test icon (@kleisauke)

📖 Documentation

#4944: Remove duplicated header (@PauloGoncalvesBH)

v10.1.0

10.1.0 / 2022-10-16

🎉 Enhancements

#4896: Browser: add support for prefers-color-scheme: dark (@greggman)

🔩 Other

#4912: Browser: increase contrast for replay buttons (@JoshuaKGoldberg)

#4905: Use standard Promise.allSettled instead of polyfill (@outsideris)

#4899: Upgrade official GitHub actions to latest (@ddzz)

#4770: Fix regex in function clean(@yetingli)

v10.0.0

10.0.0 / 2022-05-01

💥 Breaking Changes

#4845: Drop Node.js v12.x support (@juergba)

#4848: Drop Internet-Explorer-11 support (@juergba)

#4857: Drop AMD/RequireJS support (@juergba)

#4866: Drop Growl notification support (@juergba)

#4863: Rename executable bin/mocha to bin/mocha.js (@juergba)

#4865: --ignore option in Windows: upgrade Minimatch (@juergba)

#4861: Remove deprecated Runner signature (@juergba)

🔩 Other

... (truncated)

Changelog

Sourced from mocha's changelog.

10.2.0 / 2022-12-11

🎉 Enhancements

#4945: API: add possibility to decorate ESM name before import (@j0tunn)

🐛 Fixes

#4946: Browser: color of failed test icon (@kleisauke)

📖 Documentation

#4944: Remove duplicated header (@PauloGoncalvesBH)

10.1.0 / 2022-10-16

🎉 Enhancements

#4896: Browser: add support for prefers-color-scheme: dark (@greggman)

🔩 Other

#4912: Browser: increase contrast for replay buttons (@JoshuaKGoldberg)

#4905: Use standard Promise.allSettled instead of polyfill (@outsideris)

#4899: Upgrade official GitHub actions to latest (@ddzz)

#4770: Fix regex in function clean(@yetingli)

10.0.0 / 2022-05-01

💥 Breaking Changes

#4845: Drop Node.js v12.x support (@juergba)

#4848: Drop Internet-Explorer-11 support (@juergba)

#4857: Drop AMD/RequireJS support (@juergba)

#4866: Drop Growl notification support (@juergba)

#4863: Rename executable bin/mocha to bin/mocha.js (@juergba)

#4865: --ignore option in Windows: upgrade Minimatch (@juergba)

#4861: Remove deprecated Runner signature (@juergba)

🔩 Other

#4878: Update production dependencies (@juergba)

#4876: Add Node.js v18 to CI test matrix (@outsideris)

... (truncated)

Commits

202e9b8 build(v10.2.0): release
6782d6d build(v10.2.0): update CHANGELOG
73bb819 feat(esm): ability to decorate ESM module name before importing it (#4945)
fc4ac58 chore(devDeps): remove unused depedencies (#4949)
0a10ddc docs: remove duplicated header (#4944)
b0a0fb8 fix(browser): failed test icon color (#4946)
3cc9cac ci: update stale action (#4931)
8f3c37b chore(ci): workaround for firefox error (#4933)
5f96d51 build(v10.1.0): release
ed74f16 build(v10.1.0): update CHANGELOG
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by juergba, a new releaser for mocha since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [debug](https://github.com/debug-js/debug) to 2.6.9 and updates ancestor dependencies [debug](https://github.com/debug-js/debug), [socket.io](https://github.com/socketio/socket.io), [socket.io-client](https://github.com/socketio/socket.io-client) and [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together. Updates `debug` from 2.2.0 to 2.6.9 - [Release notes](https://github.com/debug-js/debug/releases) - [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md) - [Commits](debug-js/debug@2.2.0...2.6.9) Updates `socket.io` from 1.7.4 to 4.7.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](socketio/socket.io@1.7.4...4.7.1) Updates `socket.io-client` from 1.7.4 to 4.7.1 - [Release notes](https://github.com/socketio/socket.io-client/releases) - [Changelog](https://github.com/socketio/socket.io-client/blob/main/CHANGELOG.md) - [Commits](socketio/socket.io-client@1.7.4...4.7.1) Updates `mocha` from 3.5.3 to 10.2.0 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md) - [Commits](mochajs/mocha@v3.5.3...v10.2.0) --- updated-dependencies: - dependency-name: debug dependency-type: indirect - dependency-name: socket.io dependency-type: direct:production - dependency-name: socket.io-client dependency-type: direct:production - dependency-name: mocha dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>

…o-and-socket.io-client-and-mocha-2.6.9

dependabot bot added the dependencies Pull requests that update a dependency file label Jul 29, 2023

Merge branch 'master' into dependabot/npm_and_yarn/debug-and-socket.i…

4151593

…o-and-socket.io-client-and-mocha-2.6.9

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump debug, socket.io, socket.io-client and mocha #11

Bump debug, socket.io, socket.io-client and mocha #11

dependabot bot commented on behalf of github Jul 29, 2023

Bump debug, socket.io, socket.io-client and mocha #11

Are you sure you want to change the base?

Bump debug, socket.io, socket.io-client and mocha #11

Conversation

dependabot bot commented on behalf of github Jul 29, 2023

2.6.9

Patches

Credits

release 2.6.7

release 2.6.6

release 2.6.5

release 2.6.4

release 2.6.3

release 2.6.2

release 2.6.1

release 2.6.0

release 2.5.2

release 2.5.1

release 2.4.5

release 2.4.4

release 2.4.3

release 2.4.2

2.6.9 / 2017-09-22

2.6.8 / 2017-05-18

2.6.7 / 2017-05-16

2.6.5 / 2017-04-27

2.6.4 / 2017-04-20

2.6.3 / 2017-03-13

2.6.2 / 2017-03-10

2.6.1 / 2017-02-10

4.7.1

Links

4.7.0

Bug Fixes

Features

Support for WebTransport

4.7.1 (2023-06-28)

Dependencies

4.7.0 (2023-06-22)

Bug Fixes

Features

Support for WebTransport

4.7.1

Links

4.7.0

Bug Fixes

Features

Support for WebTransport

Cookie management for the Node.js client

4.7.1 (2023-06-28)

Dependencies

4.7.0 (2023-06-22)

Bug Fixes

Features

Support for WebTransport

Cookie management for the Node.js client

v10.2.0

10.2.0 / 2022-12-11

🎉 Enhancements

🐛 Fixes

📖 Documentation

v10.1.0

10.1.0 / 2022-10-16

🎉 Enhancements

🔩 Other

v10.0.0

10.0.0 / 2022-05-01

💥 Breaking Changes

🔩 Other

10.2.0 / 2022-12-11

🎉 Enhancements

🐛 Fixes

📖 Documentation

10.1.0 / 2022-10-16

🎉 Enhancements

🔩 Other

10.0.0 / 2022-05-01

💥 Breaking Changes

🔩 Other