Bump the npm_and_yarn group across 2 directories with 34 updates

Open

Number: #1
Type: Pull Request
State: Open

Author:

dependabot[bot]
Association: None
Comments: 0

Created: June 05, 2025 at 08:19 PM UTC
(3 months ago)

Updated: June 05, 2025 at 08:19 PM UTC
(3 months ago)

Labels:
dependencies javascript

Description:

Bumps the npm_and_yarn group with 18 updates in the /vue-socket-client directory:

Package	From	To
vue	`2.6.14`	`3.5.16`
vuex	`3.6.2`	`4.1.0`
vue-template-compiler	`2.6.14`	`2.7.16`
@babel/traverse	`7.16.7`	`7.27.4`
body-parser	`1.19.1`	`1.20.3`
express	`4.17.2`	`4.21.2`
braces	`3.0.2`	`3.0.3`
@vue/cli-plugin-babel	`4.5.15`	`5.0.8`
@vue/cli-plugin-eslint	`4.5.15`	`5.0.8`
@vue/cli-plugin-router	`4.5.15`	`5.0.8`
@vue/cli-plugin-vuex	`4.5.15`	`5.0.8`
@vue/cli-service	`4.5.15`	`5.0.8`
webpack	`4.46.0`	`5.99.9`
minimist	`1.2.5`	`1.2.8`
parseuri	`0.0.6`	`removed`
socket.io-client	`4.4.1`	`4.8.1`
semver	`5.7.1`	`5.7.2`
word-wrap	`1.2.3`	`1.2.5`

Bumps the npm_and_yarn group with 5 updates in the /vue-socket-server directory:

Package	From	To
body-parser	`1.18.3`	`1.20.3`
express	`4.16.4`	`4.21.2`
minimist	`1.2.5`	`1.2.8`
socket.io-parser	`4.0.4`	`4.2.4`
socket.io	`4.4.1`	`4.8.1`

Updates vue from 2.6.14 to 3.5.16

Release notes

Sourced from vue's releases.

v3.5.16

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.15

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.14

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.13

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.12

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.11

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.10

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.9

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.8

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.7

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.6

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.5

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.4

For stable releases, please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vue's changelog.

3.5.16 (2025-05-29)

Reverts

Revert "fix(compiler-sfc): add scoping tag to trailing universal selector" (#13406) (19f23b1), closes #13406

Revert "fix(compiler-sfc): add error handling for defineModel() without variable" (#13390) (42f879f), closes #13390

3.5.15 (2025-05-26)

Bug Fixes

compat: ensure false value on input retains value attribute (#13216) (1a66474), closes #13205

compat: should not warn COMPILER_V_BIND_OBJECT_ORDER when using v-bind together with v-for (#12993) (93949e6), closes #12992

compile-sfc: handle inline template source map in prod build (#12701) (89edc6c), closes #12682 vitejs/vite-plugin-vue#500

compiler-core: ensure mapping is added only if node source is available (#13285) (d37a2ac), closes #13261 vitejs/vite-plugin-vue#368

compiler-dom: improve HTML nesting validation to allow any child element within template tag (#13320) (163b365), closes #13318

compiler-sfc: add error handling for defineModel() without variable assignment (#13352) (00734af), closes #13280

compiler-sfc: add scoping tag to trailing universal selector (#12918) (949df80), closes #12906

compiler-sfc: improve type inference for TSTypeAliasDeclaration with better runtime type detection (#13245) (cf5a5e0), closes #13240

compiler-sfc: simulate allowArbitraryExtensions on resolving type (#13301) (f7ce5ae), closes #13295

custom-element: allow injecting values from app context in nested elements (#13219) (b991075), closes #13212

custom-element: ensure proper remount and prevent redundant slot parsing with shadowRoot false (#13201) (1d41d4d), closes #13199

custom-element: preserve appContext during update (#12455) (013749e), closes #12453

custom-element: properly resolve props for sync component defs (#12855) (a683c80), closes #12854

hydration: handle transition appear hydration edge case (#13339) (35aeae7), closes #13335

hydration: skip lazy hydration for patched components (#13283) (80055fd), closes #13255

suspense: handle edge case in patching list nodes within Suspense (#13306) (772b008), closes #13305

teleport: handle deferred teleport updates before and after mount (#13350) (d15dce3), closes #13349

types: avoid merging component instance into $props in ComponentInstance (#12870) (f44feed), closes #12751

types: exclude undefined from inferred prop types with default values (#13007) (5179d32), closes #13006

watch: update oldValue before running cb to prevent stale value (#12296) (c69c4bb), closes #12294

3.5.14 (2025-05-15)

Bug Fixes

compat: correct deprecation message for v-bind.sync usage (#13137) (466b30f), closes #13133

compiler-core: remove slot cache from parent renderCache during unmounting (#13215) (5d166f3)

compiler-sfc: fix scope handling for props destructure in function parameters and catch clauses (8e34357), closes #12790

compiler-sfc: treat the return value of useTemplateRef as a definite ref (#13197) (8ae1122)

compiler: fix spelling error in domTagConfig (#13043) (388295b)

customFormatter: properly accessing ref value during debugger (#12948) (fdbd026)

hmr/teleport: adjust static children traversal for HMR in dev mode (#12819) (5e37dd0), closes #12816

... (truncated)

Commits

See full diff in compare view

Updates vuex from 3.6.2 to 4.1.0

Release notes

Sourced from vuex's releases.

v4.0.2

Bug Fixes

devtools: fix no getters displayed on root module + better getters inspector (#1986) (bc20295)

build: cjs build failing due to __VUE_PROD_DEVTOOLS__ defined (#1991) (#1992) (7151622)

v4.0.1

Features

dx: add devtools integration (#1949)

v4.0.0

This is the official Vuex 4 release.

The focus for Vuex 4 is compatibility. Vuex 4 supports Vue 3, and it provides the exact same API as Vuex 3, so users can reuse their existing Vuex code with Vue 3.

There are a few breaking changes described in a later section, so please check them out.

You can find basic usage with both Option and Composition API in the example directory.

It's still released under next tag in NPM package as same as Vue 3. We're planning to remove next tag once Vue 3 is ready to remove it.

There have been a lot of contribution to make Vuex 4 stable. Thank you all for your very much appreciated help. It wouldn't have been possible without this wonderful Vue community!

Documentation

To check out docs, visit next.vuex.vuejs.org.

Breaking changes

Installation process has changed

To align with the new Vue 3 initialization process, the installation process of Vuex has changed.

To create a new store instance, users are now encouraged to use the newly introduced createStore function.
import { createStore } from 'vuex'
export const store = createStore({
state() {
return {
count: 1
}
}
})
Whilst this is not technically a breaking change, you may still use the new Store(...) syntax, we recommend this approach to align with Vue 3 and Vue Router 4.

... (truncated)

Changelog

Sourced from vuex's changelog.

4.1.0 (2022-10-14)

Vue Core Version Requirement Change

This release contains an important fix (#1883) that relies on the effectScope API from Vue core, which is only available in Vue 3.2+.

Bug Fixes

build: node deprecated warning in export module (#2048) (397e9fb)

getters being destroyed on component destroy (#1878) (#1883) (b2f851f)

4.0.2 (2021-06-17)

Bug Fixes

devtools: fix no getters displayed on root module + better getters inspector (#1986) (bc20295)

build: cjs build failing due to __VUE_PROD_DEVTOOLS__ defined (#1991) (#1992) (7151622)

4.0.1 (2021-05-24)

Features

dx: add devtools integration (#1949)

4.0.0 (2021-02-02)

This is the official Vuex 4 release.

The focus for Vuex 4 is compatibility. Vuex 4 supports Vue 3, and it provides the exact same API as Vuex 3, so users can reuse their existing Vuex code with Vue 3.

There are a few breaking changes described in a later section, so please check them out.

You can find basic usage with both Option and Composition API in the example directory.

It's still released under next tag in NPM package as same as Vue 3. We're planning to remove next tag once Vue 3 is ready to remove it.

There have been a lot of contribution to make Vuex 4 stable. Thank you all for your very much appreciated help. It wouldn't have been possible without this wonderful Vue community!

Documentation

To check out docs, visit next.vuex.vuejs.org.

Breaking changes

Installation process has changed

To align with the new Vue 3 initialization process, the installation process of Vuex has changed.

... (truncated)

Commits

d562224 release: v4.1.0
01f87f0 docs(zh): update zh docs from en docs (#2150)
75d20ec chore: delete unused import of shopping-cart example (#2156)
e0ea5b8 docs: add note about Pinia becoming the new default
7651d50 docs(zh): wrong link to v3 docs in zh docs (#2129)
dea4e36 docs: fix broken link to v3 docs (#2128)
747c488 chore: remove next references [ci skip]
29483f4 docs: update v3 links
a03dc6a chore: update branch references
eb52dfa docs: fix heading level (#2075)
Additional commits viewable in compare view

Updates vue-template-compiler from 2.6.14 to 2.7.16

Release notes

Sourced from vue-template-compiler's releases.

v2.7.16 "Swan Song"

This is the final release for Vue 2.

Vue 2 will reach End of Life on December 31st, 2023. For more details, please read this blog post.

Please refer to CHANGELOG.md for details.

v2.7.16-beta.2

Please refer to CHANGELOG.md for details.

v2.7.16-beta.1

Please refer to CHANGELOG.md for details.

v2.7.15

Please refer to CHANGELOG.md for details.

v2.7.14

Please refer to CHANGELOG.md for details.

v2.7.13

Please refer to CHANGELOG.md for details.

v2.7.12

Please refer to CHANGELOG.md for details.

v2.7.11

Please refer to CHANGELOG.md for details.

v2.7.10

Please refer to CHANGELOG.md for details.

v2.7.9

Please refer to CHANGELOG.md for details.

v2.7.8

Please refer to CHANGELOG.md for details.

v2.7.7

Please refer to CHANGELOG.md for details.

v2.7.6

Please refer to CHANGELOG.md for details.

v2.7.5

Please refer to CHANGELOG.md for details.

v2.7.4

Please refer to CHANGELOG.md for details.

v2.7.3

... (truncated)

Changelog

Sourced from vue-template-compiler's changelog.

2.7.16 Swan Song (2023-12-24)

Bug Fixes

lifecycle: ensure component effect scopes are disconnected (56ce7f8), closes #13134

2.7.16-beta.2 (2023-12-14)

Bug Fixes

account for nested render calls (db9c566), closes #13131

types: export more types for v3 alignment (jsx / component options) (895669f), closes #13078 #13128

2.7.16-beta.1 (2023-12-08)

Bug Fixes

compiler-sfc: check template ref usage, (#12985) (83d9535), closes #12984

compiler-sfc: fix rewriteDefault edge cases (25f97a5), closes #13060 #12892 #12906

keep-alive: fix keep-alive memory leak (2632249), closes #12827

keep-alive: fix memory leak without breaking transition tests (e0747f4)

props: should not unwrap props that are raw refs (08382f0), closes #12930

shallowReactive: should track value if already reactive when set in shallowReactive (0ad8e8d)

style: always set new styles (f5ef882), closes #12901 #12946

types: fix shallowRef's return type (#12979) (a174c29), closes #12978

types: fix type augmentation and compiler-sfc types w/moduleResolution: bundler (#13107) (de0b97b), closes #13106

types: provide types for built-in components (3650c12), closes #13002

types: type VNodeChildren should allow type number (#13067) (24fcf69), closes #12973

utils: unwrap refs when stringifying values in template (ae3e4b1), closes #12884 #12888

watch: new property addition should trigger deep watcher with getter (6d857f5), closes #12967 #12972

2.7.15 (2023-10-23)

Bug Fixes

compiler-sfc: add semicolon after defineProps statement (#12879) (51fef2c)

compiler-sfc: fix macro usage in multi-variable declaration (#12873) (d27c128)

compiler-sfc: Optimize the value of emitIdentifier (#12851) (bb59751)

compiler-sfc: Resolve object expression parsing errors in v-on (#12862) (b8c8b3f)

lifecycle: scope might changed when call hook (#13070) (74ca5a1)

... (truncated)

Commits

13f4e7d release: v2.7.16
56ce7f8 fix(lifecycle): esnure component effect scopes are disconnected
305e4ae release: v2.7.16-beta.2
3e1037e chore: bump vitest to 1.0.4
db9c566 fix: account for nested render calls
895669f fix(types): export more types for v3 alignment (jsx / component options)
73bdf14 release: v2.7.16-beta.1
e0747f4 fix(keep-alive): fix memory leak without breaking transition tests
2632249 fix(keep-alive): fix keep-alive memory leak
3650c12 fix(types): provide types for built-in components
Additional commits viewable in compare view

Updates @babel/traverse from 7.16.7 to 7.27.4

Release notes

Sourced from @babel/traverse's releases.

v7.27.4 (2025-05-30)

:eyeglasses: Spec Compliance

babel-parser, babel-plugin-proposal-explicit-resource-management

#17323 Disallow using in bare case statement (@JLHwung)

:nail_care: Polish

babel-parser

#17311 Improve parseExpression error messages (@JLHwung)

:microscope: Output optimization

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17287 Reduce regenerator size more (@liuxingbaoyu)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

#17334 Use shorter method names for regenerator context (@nicolo-ribaudo)

#17268 Reduce regenerator helper size (@liuxingbaoyu)

babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

#17238 Split regeneratorRuntime into multiple helpers (@nicolo-ribaudo)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v7.27.3 (2025-05-27)

:bug: Bug Fix

babel-generator

#17324 Improve multiline comments handling in yield/await expression (@JLHwung)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17328 Correctly set .displayName on GeneratorFunction (@nicolo-ribaudo)

babel-plugin-proposal-explicit-resource-management

#17319 fix: handle shadowed binding in for using of body (@JLHwung)

#17317 fix: support named evaluation for using declaration (@JLHwung)

babel-plugin-proposal-decorators, babel-types

#17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@magic-akari)

babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd

#17257 Preserve class id when transforming using declarations with exported class (@JLHwung)

babel-parser

#17312 fix(parser): properly handle optional markers in generator class methods (@magic-akari)

#17307 fix(parser): Terminate modifier parsing at newline (@magic-akari)

babel-generator, babel-parser

#17308 Improve import phase parsing (@JLHwung)

Committers: 7

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

Vik R (@vikr01)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.27.4 (2025-05-30)

:eyeglasses: Spec Compliance

babel-parser, babel-plugin-proposal-explicit-resource-management

#17323 Disallow using in bare case statement (@JLHwung)

:nail_care: Polish

babel-parser

#17311 Improve parseExpression error messages (@JLHwung)

:microscope: Output optimization

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17287 Reduce regenerator size more (@liuxingbaoyu)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

#17334 Use shorter method names for regenerator context (@nicolo-ribaudo)

#17268 Reduce regenerator helper size (@liuxingbaoyu)

babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

#17238 Split regeneratorRuntime into multiple helpers (@nicolo-ribaudo)

v7.27.3 (2025-05-27)

:bug: Bug Fix

babel-generator

#17324 Improve multiline comments handling in yield/await expression (@JLHwung)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17328 Correctly set .displayName on GeneratorFunction (@nicolo-ribaudo)

babel-plugin-proposal-explicit-resource-management

#17319 fix: handle shadowed binding in for using of body (@JLHwung)

#17317 fix: support named evaluation for using declaration (@JLHwung)

babel-plugin-proposal-decorators, babel-types

#17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@magic-akari)

babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd

#17257 Preserve class id when transforming using declarations with exported class (@JLHwung)

babel-parser

#17312 fix(parser): properly handle optional markers in generator class methods (@magic-akari)

#17307 fix(parser): Terminate modifier parsing at newline (@magic-akari)

babel-generator, babel-parser

#17308 Improve import phase parsing (@JLHwung)

v7.27.2 (2025-05-06)

:bug: Bug Fix

babel-parser

#17289 fix: @babel/parser/bin/index.js contains node: protocol require (@liuxingbaoyu)

#17291 fix: Private class method not found when TS and estree (@liuxingbaoyu)

babel-plugin-transform-object-rest-spread

#17281 Fix: improve object rest handling in array pattern (@JLHwung)

babel-plugin-transform-modules-commonjs, babel-template

#17284 fix(babel-template): Properly handle empty string replacements (@magic-akari)

:running_woman: Performance

babel-cli

... (truncated)

Commits

7d06930 v7.27.4
05f28c8 [Babel 8] Change scope.{references,uids} to Set (#16624)
da5e371 v7.27.3
2d0c76e Improve integrations of using declaration with other transforms (#17330)
eebd3a0 v7.27.1
62af1a6 fix: do expressions should allow early exit (#17137)
8e23272 [Babel 8] perf: Improve traverse performance (#16965)
9a40d85 [Babel 8]: Remove record and tuple syntax support (#17242)
4d39e9d Harden variable declarator validations (#17217)
6cd1c60 Reduce generated names size for the 10th-11th (#17221)
Additional commits viewable in compare view

Updates body-parser from 1.19.1 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/body-parser#522

ci: fix errors in ci github action for node 8 and 9 by @inigomarquinez in expressjs/body-parser#523

fix: pin to node@22.4.1 by @wesleytodd in expressjs/body-parser#527

deps: qs@6.12.3 by @melikhov-dev in expressjs/body-parser#521

Add OSSF Scorecard badge by @bjohansebas in expressjs/body-parser#531

Linter by @UlisesGascon in expressjs/body-parser#534

Release: 1.20.3 by @UlisesGascon in expressjs/body-parser#535

New Contributors

@inigomarquinez made their first contribution in expressjs/body-parser#522

@melikhov-dev made their first contribution in expressjs/body-parser#521

@bjohansebas made their first contribution in expressjs/body-parser#531

@UlisesGascon made their first contribution in expressjs/body-parser#534

Full Changelog: https://github.com/expressjs/body-parser/compare/1.20.2...1.20.3

1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: raw-body@2.5.2

1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

1.20.0

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: depd@2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: http-errors@2.0.0

deps: depd@2.0.0

deps: statuses@2.0.1

deps: on-finished@2.4.1

deps: qs@6.10.3

... (truncated)

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: raw-body@2.5.2

1.20.1 / 2022-10-06

deps: qs@6.11.0

perf: remove unnecessary object clone

1.20.0 / 2022-04-02

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: depd@2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: http-errors@2.0.0

deps: depd@2.0.0

deps: statuses@2.0.1

deps: on-finished@2.4.1

deps: qs@6.10.3

deps: raw-body@2.5.1

deps: http-errors@2.0.0

1.19.2 / 2022-02-15

deps: bytes@3.1.2

deps: qs@6.9.7

Fix handling of __proto__ keys

deps: raw-body@2.4.3

deps: bytes@3.1.2

Commits

1752951 1.20.3
39744cf chore: linter (#534)
b2695c4 Merge commit from fork
ade0f3f add scorecard to readme (#531)
99a1bd6 deps: qs@6.12.3 (#521)
9478591 fix: pin to node@22.4.1
83db46a ci: fix errors in ci github action for node 8 and 9 (#523)
9d4e212 chore: add support for OSSF scorecard reporting (#522)
ee91374 1.20.2
368a93a Fix strict json error message on Node.js 19+
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.

Updates express from 4.17.2 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Add funding field (v4) by @bjohansebas in expressjs/express#6065

deps: path-to-regexp@0.1.11 by @blakeembrey in expressjs/express#5956

deps: bump path-to-regexp@0.1.12 by @jonchurch in expressjs/express#6209

Release: 4.21.2 by @UlisesGascon in expressjs/express#6094

Full Changelog: https://github.com/expressjs/express/compare/4.21.1...4.21.2

4.21.1

What's Changed

Backport a fix for CVE-2024-47764 to the 4.x branch by @joshbuker in expressjs/express#6029

Release: 4.21.1 by @UlisesGascon in expressjs/express#6031

Full Changelog: https://github.com/expressjs/express/compare/4.21.0...4.21.1

4.21.0

What's Changed

Deprecate "back" magic string in redirects by @blakeembrey in expressjs/express#5935

finalhandler@1.3.1 by @wesleytodd in expressjs/express#5954

fix(deps): serve-static@1.16.2 by @wesleytodd in expressjs/express#5951

Upgraded dependency qs to 6.13.0 to match qs in body-parser by @agadzinski93 in expressjs/express#5946

New Contributors

@agadzinski93 made their first contribution in expressjs/express#5946

Full Changelog: https...
Description has been truncated

Pull Request Statistics

Commits:
1

Files Changed:
5

Additions:
+15277

Deletions:
-24089

Package Dependencies

Package:
@babel/traverse

Ecosystem:
npm

Version Change:
7.16.7 → 7.27.4

Update Type:
Minor

Package:
webpack

Ecosystem:
npm

Version Change:
4.46.0 → 5.99.9

Update Type:
Major

Package:
braces

Ecosystem:
npm

Version Change:
3.0.2 → 3.0.3

Update Type:
Patch

Package:
express

Ecosystem:
npm

Version Change:
4.17.2 → 4.21.2

Update Type:
Minor

Package:
vue

Ecosystem:
npm

Version Change:
2.6.14 → 3.5.16

Update Type:
Major

Package:
minimist

Ecosystem:
npm

Version Change:
1.2.5 → 1.2.8

Update Type:
Patch

Package:
semver

Ecosystem:
npm

Version Change:
5.7.1 → 5.7.2

Update Type:
Patch

Package:
word-wrap

Ecosystem:
npm

Version Change:
1.2.3 → 1.2.5

Update Type:
Patch

Package:
vue-template-compiler

Ecosystem:
npm

Version Change:
2.6.14 → 2.7.16

Update Type:
Minor

Package:
body-parser

Ecosystem:
npm

Version Change:
1.19.1 → 1.20.3

Update Type:
Minor

Package:
@vue/cli-service

Ecosystem:
npm

Version Change:
4.5.15 → 5.0.8

Update Type:
Major

Package:
@vue/cli-plugin-babel

Ecosystem:
npm

Version Change:
4.5.15 → 5.0.8

Update Type:
Major

Package:
@vue/cli-plugin-eslint

Ecosystem:
npm

Version Change:
4.5.15 → 5.0.8

Update Type:
Major

Package:
@vue/cli-plugin-router

Ecosystem:
npm

Version Change:
4.5.15 → 5.0.8

Update Type:
Major

Package:
parseuri

Ecosystem:
npm

Version Change:
0.0.6 → removed

Package:
socket.io-client

Ecosystem:
npm

Version Change:
4.4.1 → 4.8.1

Update Type:
Minor

Package:
vuex

Ecosystem:
npm

Version Change:
3.6.2 → 4.1.0

Update Type:
Major

Package:
@vue/cli-plugin-vuex

Ecosystem:
npm

Version Change:
4.5.15 → 5.0.8

Update Type:
Major

Security Advisories

cookie accepts cookie name, path, and domain with out of bounds characters

GHSA-pxg6-pf52-xh8x CVE-2024-47764 LOW

### Impact The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. For example, `serialize("userName=<script>alert('XSS3')</script>; Max-Age=25920...

Actions

View on GitHub View Repository All Dependabot PRs

Technical Details

ID:	`45699`
UUID:	`2571466245`
Node ID:	`PR_kwDOGphYwM6ZRXYF`
Host:	GitHub
Repository:	gonzafg2/vue-socket-nodejs
Merge State:	Unknown