Skip to content

Conversation

@ZeyadMNagi
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade socket.io from 4.7.2 to 4.8.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 5 versions ahead of your current version.

  • The recommended version was released 7 months ago.

Release notes
Package name: socket.io
  • 4.8.1 - 2024-10-25

    Bug Fixes

    • bundle: do not mangle the "_placeholder" attribute (ca9e994)

    Dependencies

  • 4.8.0 - 2024-09-21

    Features

    Custom transport implementations

    The transports option now accepts an array of transport implementations:

    import { io } from "socket.io-client";
    import { XHR, WebSocket } from "engine.io-client";

    const socket = io({
    transports: [XHR, WebSocket]
    });

    Here is the list of provided implementations:

    Transport Description
    Fetch HTTP long-polling based on the built-in fetch() method.
    NodeXHR HTTP long-polling based on the XMLHttpRequest object provided by the xmlhttprequest-ssl package.
    XHR HTTP long-polling based on the built-in XMLHttpRequest object.
    NodeWebSocket WebSocket transport based on the WebSocket object provided by the ws package.
    WebSocket WebSocket transport based on the built-in WebSocket object.
    WebTransport WebTransport transport based on the built-in WebTransport object.

    Usage:

    Transport browser Node.js Deno Bun
    Fetch ✅ (1)
    NodeXHR
    XHR
    NodeWebSocket
    WebSocket ✅ (2)
    WebTransport

    (1) since v18.0.0
    (2) since v21.0.0

    Added in f4d898e and b11763b.

    Test each low-level transports

    When setting the tryAllTransports option to true, if the first transport (usually, HTTP long-polling) fails, then the other transports will be tested too:

    import { io } from "socket.io-client";

    const socket = io({
    tryAllTransports: true
    });

    This feature is useful in two cases:

    • when HTTP long-polling is disabled on the server, or if CORS fails
    • when WebSocket is tested first (with transports: ["websocket", "polling"])

    The only potential downside is that the connection attempt could take more time in case of failure, as there have been reports of WebSocket connection errors taking several seconds before being detected (that's one reason for using HTTP long-polling first). That's why the option defaults to false for now.

    Added in 579b243.

    Bug Fixes

    • accept string | undefined as init argument (bis) (60c757f)
    • allow to manually stop the reconnection loop (13c6d2e)
    • close the engine upon decoding exception (04c8dd9)
    • do not send a packet on an expired connection (#5134) (8adcfbf)

    Dependencies

  • 4.7.5 - 2024-03-14
  • 4.7.4 - 2024-01-12
  • 4.7.3 - 2024-01-03
  • 4.7.2 - 2023-08-02
from socket.io GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Snyk has automatically assigned this pull request, set who gets assigned.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade socket.io from 4.7.2 to 4.8.1.

See this package in npm:
socket.io

See this project in Snyk:
https://app.snyk.io/org/zeyadnagi421/project/e6558e03-209c-4f41-bfdc-80d3fc20932c?utm_source=github&utm_medium=referral&page=upgrade-pr
@ZeyadMNagi ZeyadMNagi self-assigned this May 31, 2025
@netlify
Copy link

netlify bot commented May 31, 2025

Deploy Preview for fighter-game-ze canceled.

Name Link
🔨 Latest commit 0034ad2
🔍 Latest deploy log https://app.netlify.com/projects/fighter-game-ze/deploys/683ab67b3f814a000872224a

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants