Skip to content

build(deps): bump websocket-driver from 0.7.3 to 0.7.5 - #33

Merged
p5hgryktp4 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/websocket-driver-0.7.5
Sep 13, 2026
Merged

p5hgryktp4 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/websocket-driver-0.7.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps websocket-driver from 0.7.3 to 0.7.5.

Changelog

Sourced from websocket-driver's changelog.

0.7.5 / 2026-06-04

  • Close a draft-75/76 connection if a length header grows to exceed the configured max length
  • Fail the connection if a message is larger than the configured max length after extension processing

0.7.4 / 2020-05-22

  • Avoid crashing if process.version does not contain any digits
  • Emit ping and pong events from the Server driver
  • Require http-parser-js >=0.5.1 which fixes the bug we addressed in 0.7.3
Commits
  • 5d6a9aa Bump version to 0.7.5
  • c55679a Fail the connection if a message is larger than the configured max length aft...
  • 5b197ca Close a draft-75/76 connection if a length header grows to exceed the configu...
  • fc93a48 Test on Node v22, v24, and v26
  • 2e82d34 Test on recent versions of Node
  • e4962db Switch from Travis CI to GitHub Actions
  • 3f2f9b7 Travis update: cache npm modules, remove sudo, run on Node 15
  • 5f711f0 Bump version to 0.7.4
  • 17cf70f Pin http-parser-js to version that fixes https://github.com/creationix/http-p...
  • 5c2a184 Add Node versions 13 and 14 on Travis
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 13, 2026
@vercel

vercel Bot commented Sep 13, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
github-code-review-notifier Ready Ready Preview Sep 13, 2026 6:17am UTC

Security fix (message/length-header handling). Applies only the
websocket-driver lockfile entry to current master; no lockfile-wide
re-resolution from the original dependabot branch.
@EnixCoda
EnixCoda force-pushed the dependabot/npm_and_yarn/websocket-driver-0.7.5 branch from 1490c5d to 21c271f Compare September 13, 2026 06:17
@p5hgryktp4
p5hgryktp4 merged commit 4a3a9f1 into master Sep 13, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/websocket-driver-0.7.5 branch September 13, 2026 06:18

This branch was successfully deployed

1 active deployment
Preview — 21c271f5 Deployed Sep 13, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants