-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update socket.io packages to v4 (major) #25
Open
renovate
wants to merge
1
commit into
master
Choose a base branch
from
renovate/major-socket.io-packages
base: master
Could not load branches
Branch not found: {{ refName }}
Could not load tags
Nothing to show
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
December 11, 2020 11:56
78887af
to
c8a0127
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
January 5, 2021 22:00
c8a0127
to
951aab7
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
January 23, 2021 13:00
951aab7
to
631c125
Compare
renovate
bot
changed the title
Update socket.io packages to v3 (major)
Update dependency socket.io-client to v3
Jan 23, 2021
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
February 9, 2021 05:05
631c125
to
26540e7
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
April 26, 2021 16:57
26540e7
to
4b7145e
Compare
renovate
bot
changed the title
Update dependency socket.io-client to v3
Update dependency socket.io-client to v4
Apr 26, 2021
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
2 times, most recently
from
May 15, 2021 21:03
494bd4c
to
3c4536b
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
June 6, 2021 20:19
3c4536b
to
c4c302a
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
October 18, 2021 23:35
c4c302a
to
c5c9126
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
March 7, 2022 13:44
c5c9126
to
458cabb
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
April 25, 2022 00:11
458cabb
to
6a9a885
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
June 18, 2022 22:47
6a9a885
to
db3a09a
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
September 25, 2022 16:09
db3a09a
to
17ed341
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
November 20, 2022 08:12
17ed341
to
f3bce5e
Compare
renovate
bot
changed the title
Update dependency socket.io-client to v4
Update socket.io packages to v4 (major)
Nov 20, 2022
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
March 16, 2023 11:18
f3bce5e
to
322ea69
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
May 31, 2023 10:46
322ea69
to
309117d
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
2 times, most recently
from
June 28, 2023 12:08
c3576cb
to
9d9393d
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
August 3, 2023 01:40
9d9393d
to
d3fea98
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
January 3, 2024 22:19
d3fea98
to
bd0a714
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
January 12, 2024 14:23
bd0a714
to
93a8ad7
Compare
renovate
bot
force-pushed
the
renovate/major-socket.io-packages
branch
from
March 14, 2024 17:31
93a8ad7
to
26dba2f
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
None yet
0 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^2.2.0
->^4.0.0
2.2.0
->4.7.5
Release Notes
socketio/socket.io (socket.io)
v4.7.5
Compare Source
Bug Fixes
Dependencies
engine.io@~6.5.2
(no change)ws@~8.11.0
(no change)v4.7.4
Compare Source
Bug Fixes
Dependencies
engine.io@~6.5.2
(no change)ws@~8.11.0
(no change)v4.7.3
Compare Source
Bug Fixes
Dependencies
engine.io@~6.5.2
(no change)ws@~8.11.0
(no change)v4.7.2
Compare Source
Bug Fixes
Dependencies
engine.io@~6.5.2
(diff)ws@~8.11.0
(no change)v4.7.1
Compare Source
The client bundle contains a few fixes regarding the WebTransport support.
Dependencies
engine.io@~6.5.0
(no change)ws@~8.11.0
(no change)v4.7.0
Compare Source
Bug Fixes
Features
Support for WebTransport
The Socket.IO server can now use WebTransport as the underlying transport.
WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.
References:
Until WebTransport support lands in Node.js, you can use the
@fails-components/webtransport
package:Added in 123b68c.
Client bundles with CORS headers
The bundles will now have the right
Access-Control-Allow-xxx
headers.Added in 63f181c.
Dependencies
engine.io@~6.5.0
(diff)ws@~8.11.0
(no change)v4.6.2
Compare Source
Bug Fixes
types
condition to the top (#4698) (3d44aae)Dependencies
engine.io@~6.4.2
(diff)ws@~8.11.0
(no change)v4.6.1
Compare Source
Bug Fixes
Dependencies
engine.io@~6.4.1
(diff)ws@~8.11.0
(no change)v4.6.0
Compare Source
Bug Fixes
Features
Promise-based acknowledgements
This commit adds some syntactic sugar around acknowledgements:
emitWithAck()
serverSideEmitWithAck()
Added in 184f3cf.
Connection state recovery
This feature allows a client to reconnect after a temporary disconnection and restore its state:
Usage:
Here's how it works:
id
attribute, which is public and can be freely shared)The in-memory adapter already supports this feature, and we will soon update the Postgres and MongoDB adapters. We will also create a new adapter based on Redis Streams, which will support this feature.
Added in 54d5ee0.
Compatibility (for real) with Express middlewares
This feature implements middlewares at the Engine.IO level, because Socket.IO middlewares are meant for namespace authorization and are not executed during a classic HTTP request/response cycle.
Syntax:
A workaround was possible by using the allowRequest option and the "headers" event, but this feels way cleaner and works with upgrade requests too.
Added in 24786e7.
Error details in the disconnecting and disconnect events
The
disconnect
event will now contain additional details about the disconnection reason.Added in 8aa9499.
Automatic removal of empty child namespaces
This commit adds a new option, "cleanupEmptyChildNamespaces". With this option enabled (disabled by default), when a socket disconnects from a dynamic namespace and if there are no other sockets connected to it then the namespace will be cleaned up and its adapter will be closed.
Added in 5d9220b.
A new "addTrailingSlash" option
The trailing slash which was added by default can now be disabled:
In the example above, the clients can omit the trailing slash and use
/socket.io
instead of/socket.io/
.Added in d0fd474.
Performance Improvements
Dependencies
engine.io@~6.4.0
(socketio/engine.io@6.2.1...6.4.0)ws@~8.11.0
(websockets/ws@8.2.3...8.11.0)v4.5.4
Compare Source
This release contains a bump of:
engine.io
in order to fix CVE-2022-41940socket.io-parser
in order to fix CVE-2022-2421.Dependencies
engine.io@~6.2.1
(diff)ws@~8.2.3
(no change)v4.5.3
Compare Source
Bug Fixes
Dependencies
engine.io@~6.2.0
(no change)ws@~8.2.3
(no change)v4.5.2
Compare Source
Bug Fixes
Dependencies
engine.io@~6.2.0
(no change)ws@~8.2.3
(no change)v4.5.1
Compare Source
Bug Fixes
Dependencies
engine.io@~6.2.0
(no change)ws@~8.2.3
(no change)v4.5.0
Compare Source
Bug Fixes
Features
Catch-all listeners for outgoing packets
This is similar to
onAny()
, but for outgoing packets.Syntax:
Added in 531104d.
Broadcast and expect multiple acknowledgements
Syntax:
Added in 8b20457.
maxHttpBufferSize
value negotiationA "maxPayload" field is now included in the Engine.IO handshake, so that clients in HTTP long-polling can decide how many packets they have to send to stay under the
maxHttpBufferSize
value.This is a backward compatible change which should not mandate a new major revision of the protocol (we stay in v4), as we only add a field in the JSON-encoded handshake data:
Added in 088dcb4.
Dependencies
engine.io@~6.2.0
(socketio/engine.io@6.1.0...6.2.0)ws@~8.2.3
(no change)4.4.1 (2022-01-06)
Bug Fixes
RemoteSocket.data
type safe (#4234) (770ee59)SocketData
type to custom namespaces (#4233) (f2b8de7)v4.4.1
Compare Source
Bug Fixes
RemoteSocket.data
type safe (#4234) (770ee59)SocketData
type to custom namespaces (#4233) (f2b8de7)v4.4.0
Compare Source
Bug Fixes
Features
socket.data
(#4159) (fe8730c)4.3.2 (2021-11-08)
Bug Fixes
4.3.1 (2021-10-16)
Bug Fixes
v4.3.2
Compare Source
Bug Fixes
v4.3.1
Compare Source
Bug Fixes
v4.3.0
Compare Source
Bug Fixes
Features
v4.2.0
Compare Source
Bug Fixes
Features
4.1.3 (2021-07-10)
Bug Fixes
4.1.2 (2021-05-17)
Bug Fixes
4.1.1 (2021-05-11)
Bug Fixes
v4.1.3
Compare Source
Bug Fixes
v4.1.2
Compare Source
Bug Fixes
v4.1.1
Compare Source
Bug Fixes
v4.1.0
Compare Source
Features
engine.io
)engine.io
)Performance Improvements
4.0.2 (2021-05-06)
Bug Fixes
4.0.1 (2021-03-31)
Bug Fixes
v4.0.2
Compare Source
Bug Fixes
v4.0.1
Compare Source
Bug Fixes
v4.0.0
Compare Source
Bug Fixes
Features
3.1.2 (2021-02-26)
Bug Fixes
3.1.1 (2021-02-03)
Bug Fixes
v3.1.2
Compare Source
Bug Fixes
v3.1.1
Compare Source
Bug Fixes
v3.1.0
Compare Source
Features
Bug Fixes
2.4.1 (2021-01-07)
Reverts
3.0.5 (2021-01-05)
Bug Fixes
Reverts
v3.0.5
Compare Source
Bug Fixes
Reverts
v3.0.4
Compare Source
v3.0.3
Compare Source
v3.0.2
Compare Source
Bug Fixes
v3.0.1
Compare Source
Bug Fixes
v3.0.0
Compare Source
Bug Fixes
Features
BREAKING CHANGES
the Socket#use() method is removed (see 5c73733)
Socket#join() and Socket#leave() do not accept a callback argument anymore.
Before:
After:
Before:
The 'origins' option was used in the allowRequest method, in order to
determine whether the request should pass or not. And the Engine.IO
server would implicitly add the necessary Access-Control-Allow-xxx
headers.
After:
The already existing 'allowRequest' option can be used for validation:
Socket#rooms is now a Set instead of an object
Namespace#connected is now a Map instead of an object
there is no more implicit connection to the default namespace:
This method was kept for backward-compatibility with pre-1.0 versions.
v2.5.0
Compare Source
The default value of the
maxHttpBufferSize
option has been decreased from 100 MB to 1 MB, in order to prevent attacks by denial of service.Security advisory: GHSA-j4f2-536g-r55m
Bug Fixes
Dependencies
engine.io@~3.6.0
(socketio/engine.io@3.5.0...3.6.0)ws@~7.4.2
(no change)4.5.1 (2022-05-17)
Bug Fixes
Dependencies
engine.io@~6.2.0
(no change)ws@~8.2.3
(no change)v2.4.1
Compare Source
Reverts
v2.4.0
Compare Source
Bug Fixes
3.0.4 (2020-12-07)
3.0.3 (2020-11-19)
3.0.2 (2020-11-17)
Bug Fixes
3.0.1 (2020-11-09)
Bug Fixes
v2.3.0
Compare Source
This release mainly contains a bump of the
engine.io
andws
packages, but no additional features.socketio/socket.io-client (socket.io-client)
v4.7.5
Compare Source
Bug Fixes
Dependencies
engine.io-client@~6.5.2
(no change)ws@~8.11.0
(no change)v4.7.4
Compare Source
There were some minor bug fixes on the server side, which mandate a client bump.
Dependencies
engine.io-client@~6.5.2
(no change)ws@~8.11.0
(no change)v4.7.3
Compare Source
Bug Fixes
Dependencies
engine.io-client@~6.5.2
(no change)ws@~8.11.0
(no change)v4.7.2
Compare Source
Some bug fixes are included from the
engine.io-client
package:Dependencies
engine.io-client@~6.5.2
(diff)ws@~8.11.0
(no change)v4.7.1
Compare Source
Some bug fixes are included from the
engine.io-client
package:Dependencies
engine.io-client@~6.5.1
(diff)ws@~8.11.0
(no change)v4.7.0
Compare Source
Bug Fixes
Features
Support for WebTransport
The Engine.IO client can now use WebTransport as the underlying transport.
WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.
References:
For Node.js clients: until WebTransport support lands in Node.js, you can use the
@fails-components/webtransport
package:Added in 7195c0f.
Cookie management for the Node.js client
When setting the
withCredentials
option totrue
, the Node.js client will now include the cookies in the HTTP requests, making it easier to use it with cookie-based sticky sessions.Added in 5fc88a6.
Conditional import of the ESM build with debug logs
By default, the ESM build does not include the
debug
package in the browser environments, because it increases the bundle size (see 16b6569).Which means that, unfortunately, debug logs are not available in the devtools console, even when setting the
localStorage.debug = ...
attribute.You can now import the build which includes the
debug
packages with a conditional import. Example with vite:Reference: https://v2.vitejs.dev/config/#resolve-conditions
Added in 781d753.
Dependencies
engine.io-client@~6.5.0
(diff)ws@~8.11.0
(no change)v4.6.2
Compare Source
Bug Fixes
types
condition to the top (#1580) (7ead241)Dependencies
engine.io-client@~6.4.0
(no change)ws@~8.11.0
(no change)v4.6.1
Compare Source
Bug Fixes
Dependencies
engine.io-client@~6.4.0
(no change)ws@~8.11.0
(no change)v4.6.0
Compare Source
Bug Fixes
Features
A new "addTrailingSlash" option
The trailing slash which was added by default can now be disabled:
In the example above, the request URL will be
https://example.com/socket.io
instead ofhttps://example.com/socket.io/
.Added in 21a6e12.
Promise-based acknowledgements
This commit adds some syntactic sugar around acknowledgements:
Note: environments that do not support Promises will need to add a polyfill in order to use this feature.
Added in 47b979d.
Connection state recovery
This feature allows a client to reconnect after a temporary disconnection and restore its ID and receive any packets that was missed during the disconnection gap. It must be enabled on the server side.
A new boolean attribute named
recovered
is added on thesocket
object:Added in 54d5ee0 (server) and b4e20c5 (client).
Retry mechanism
Two new options are available:
retries
: the maximum number of retries. Above the limit, the packet will be discarded.ackTimeout
: the default timeout in milliseconds used when waiting for an acknowledgement (not to be mixed up with the already existingtimeout
option, which is used by the Manager during the connection)In all examples above, "my-event" will be sent up to 4 times (1 + 3), until the server sends an acknowledgement.
Assigning a unique ID to each packet is the duty of the user, in order to allow deduplication on the server side.
Added in 655dce9.
Dependencies
engine.io-client@~6.4.0
(diff)ws@~8.11.0
(diff)v4.5.4
Compare Source
This release contains a bump of the
socket.io-parser
dependency, in order to fix CVE-2022-2421.Dependencies
engine.io-client@~6.2.3
(no change)ws@~8.2.3
(no change)v4.5.3
Compare Source
Bug Fixes
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate. View repository job log here.