build(deps): bump websocket-driver from 0.7.4 to 0.7.5 - #4388
build(deps): bump websocket-driver from 0.7.4 to 0.7.5#4388dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [websocket-driver](https://github.com/faye/websocket-driver-node) from 0.7.4 to 0.7.5. - [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md) - [Commits](faye/websocket-driver-node@0.7.4...0.7.5) --- updated-dependencies: - dependency-name: websocket-driver dependency-version: 0.7.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
|
1 similar comment
|
|
|
|
Dependency limit exceeded — report not shown. This pull request scan exceeded the 10,000-dependency limit applied to this scan, so the results are incomplete and may be inaccurate. To avoid reporting false positives, Socket has not posted a report. Upgrade your plan to raise the dependency limit and get complete reports, or view the partial scan in the dashboard. Socket is always free for open source. If this is a non-commercial open source project, contact us to request a free Team account. |
Up to standards ✅🟢 Issues
|
| Metric | Results |
|---|---|
| Complexity | 0 |
| Duplication | 0 |
NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.
Bumps websocket-driver from 0.7.4 to 0.7.5.
Changelog
Sourced from websocket-driver's changelog.
Commits
5d6a9aaBump version to 0.7.5c55679aFail the connection if a message is larger than the configured max length aft...5b197caClose a draft-75/76 connection if a length header grows to exceed the configu...fc93a48Test on Node v22, v24, and v262e82d34Test on recent versions of Nodee4962dbSwitch from Travis CI to GitHub Actions3f2f9b7Travis update: cache npm modules, remove sudo, run on Node 15You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Summary by cubic
Upgrade
websocket-driverfrom 0.7.4 to 0.7.5 to harden WebSocket handling. Enforces max message sizes and closes unsafe draft-75/76 connections to reduce memory abuse risk.websocket-driverto 0.7.5 (indirect;yarn.lockonly).Written for commit bafe701. Summary will update on new commits.