Skip to content

Commit 6cf424e

Browse files
committed
⬆️ chore(deps): upgrade all dependencies to latest versions
Ran npm-check-updates -u across the manifest. No major version bumps were available: pg and ws are both still on major 8 upstream, so this is the latest of everything, not a major-version migration. - pg ^8.20.0 -> ^8.22.0 (transitively pg-protocol 1.13.0 -> 1.15.0, pg-pool 3.13.0 -> 3.14.0, pg-connection-string 2.12.0 -> 2.14.0, pg-cloudflare 1.3.0 -> 1.4.0) - ws ^8.19.0 -> ^8.21.1 Clears both open Dependabot alerts, both against ws: - high GHSA-96hv-2xvq-fx4p memory exhaustion DoS (fixed in 8.21.0) - medium GHSA-58qx-3vcg-4xpx uninitialized memory disclosure (8.20.1) No source changes were needed. The only APIs this repo touches are WebSocketServer from ws and Pool/Pool.query from pg, both unchanged. npm audit now reports 0 vulnerabilities.
1 parent 890679a commit 6cf424e

2 files changed

Lines changed: 26 additions & 26 deletions

File tree

package-lock.json

Lines changed: 24 additions & 24 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
"test": "node --test"
99
},
1010
"dependencies": {
11-
"pg": "^8.20.0",
12-
"ws": "^8.19.0"
11+
"pg": "^8.22.0",
12+
"ws": "^8.21.1"
1313
}
1414
}

0 commit comments

Comments
 (0)