Commit 6cf424e
committed
⬆️ chore(deps): upgrade all dependencies to latest versions
Ran npm-check-updates -u across the manifest. No major version bumps
were available: pg and ws are both still on major 8 upstream, so this
is the latest of everything, not a major-version migration.
- pg ^8.20.0 -> ^8.22.0 (transitively pg-protocol 1.13.0 -> 1.15.0,
pg-pool 3.13.0 -> 3.14.0, pg-connection-string 2.12.0 -> 2.14.0,
pg-cloudflare 1.3.0 -> 1.4.0)
- ws ^8.19.0 -> ^8.21.1
Clears both open Dependabot alerts, both against ws:
- high GHSA-96hv-2xvq-fx4p memory exhaustion DoS (fixed in 8.21.0)
- medium GHSA-58qx-3vcg-4xpx uninitialized memory disclosure (8.20.1)
No source changes were needed. The only APIs this repo touches are
WebSocketServer from ws and Pool/Pool.query from pg, both unchanged.
npm audit now reports 0 vulnerabilities.1 parent 890679a commit 6cf424e
2 files changed
Lines changed: 26 additions & 26 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
8 | 8 | | |
9 | 9 | | |
10 | 10 | | |
11 | | - | |
12 | | - | |
| 11 | + | |
| 12 | + | |
13 | 13 | | |
14 | 14 | | |
0 commit comments