Skip to content

chore(deps): bump websocket-driver from 0.7.4 to 0.7.5 - #2827

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/websocket-driver-0.7.5
Closed

chore(deps): bump websocket-driver from 0.7.4 to 0.7.5#2827
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/websocket-driver-0.7.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor

Bumps websocket-driver from 0.7.4 to 0.7.5.

Changelog

Sourced from websocket-driver's changelog.

0.7.5 / 2026-06-04

  • Close a draft-75/76 connection if a length header grows to exceed the configured max length
  • Fail the connection if a message is larger than the configured max length after extension processing
Commits
  • 5d6a9aa Bump version to 0.7.5
  • c55679a Fail the connection if a message is larger than the configured max length aft...
  • 5b197ca Close a draft-75/76 connection if a length header grows to exceed the configu...
  • fc93a48 Test on Node v22, v24, and v26
  • 2e82d34 Test on recent versions of Node
  • e4962db Switch from Travis CI to GitHub Actions
  • 3f2f9b7 Travis update: cache npm modules, remove sudo, run on Node 15
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/websocket-driver-0.7.5 branch 20 times, most recently from 479c31b to 21c861d Compare July 26, 2026 08:27
Bumps [websocket-driver](https://github.com/faye/websocket-driver-node) from 0.7.4 to 0.7.5.
- [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md)
- [Commits](faye/websocket-driver-node@0.7.4...0.7.5)

---
updated-dependencies:
- dependency-name: websocket-driver
  dependency-version: 0.7.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/websocket-driver-0.7.5 branch from ea962fc to d9bf5b8 Compare July 26, 2026 09:17
@HughParry

Copy link
Copy Markdown
Contributor

Superseded by #2908, which combines this bump with the other open Dependabot PRs into a single lockfile regeneration. Closing to avoid 40 rounds of package-lock.json conflict resolution and CI.

@HughParry HughParry closed this Jul 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/websocket-driver-0.7.5 branch July 27, 2026 10:52
HughParry added a commit that referenced this pull request Jul 27, 2026
Rebuilt on top of main now that the Vite 8 upgrade (#2850) has landed there —
that PR was squash-merged, so the previous merge-based branch shared no history
with main and would have conflicted against changes it already contained.

What this now adds on top of main:

  lodash                  4.17.21 -> 4.18.1  (#2903, #2901)
  webpack-dev-server      5.2.5   -> 5.2.6   (#2859, #2857)
  sharp                   0.33.5  -> 0.35.3  (#2843, #2839)
  i18next-http-middleware 3.7.4   -> 3.9.7   (#2775, #2773)
  actions/setup-node      v6      -> v7      (#2826, 14 workflows)

Transitive (lockfile only): socket.io-parser #2905, yauzl #2904, tmp #2900,
@protobufjs/utf8 #2899, @babel/plugin-transform-modules-systemjs #2898,
form-data #2883, launch-editor #2882, axios #2860, fast-uri #2844,
shell-quote #2834, websocket-driver #2827.

No longer applicable:
  - vite/vitest/mongoose bumps: superseded by #2850 and #2907, already on main.
  - flatted #2906, immutable #2842, hono #2840, tar #2835: those packages left
    the dependency tree entirely with #2850, which drops the
    integration/frameworks demos from the workspace.
  - @angular/cli #2861 is a major; dependabot.yml keeps majors standalone.

i18next-http-middleware 3.9.x still declares HandleOptions but no longer
exports it, so packages/locale derives it from the handle() signature instead.

Verified locally: npm ci clean, turbo typecheck 55/55, turbo build 54/54,
npm run lint green, biome clean.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant