Bump ws from 8.17.1 to 8.20.1 in the npm_and_yarn group across 1 directory by dependabot[bot] · Pull Request #7286 · dnnsoftware/Dnn.Platform

dependabot · 2026-05-21T00:25:05Z

Bumps the npm_and_yarn group with 1 update in the / directory: ws.

Updates ws from 8.17.1 to 8.20.1

Release notes

8.20.1

Bug fixes

Fixed an uninitialized memory disclosure issue in websocket.close() (c0327ec1).

Providing a TypedArray (e.g. Float32Array) as the reason argument for websocket.close(), rather than the supported string or Buffer types, caused uninitialized memory to be disclosed to the remote peer.
import { deepStrictEqual } from 'node:assert';
import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer(
{ port: 0, skipUTF8Validation: true },
function () {
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port}, {
skipUTF8Validation: true
});
ws.on('close', function (code, reason) {
  deepStrictEqual(reason, Buffer.alloc(80));
});

}
);
wss.on('connection', function (ws) {
ws.close(1000, new Float32Array(20));
});
The issue was privately reported by Nikita Skovoroda.

8.20.0

Features

Added exports for the PerMessageDeflate class and utilities for the Sec-WebSocket-Extensions and Sec-WebSocket-Protocol headers (d3503c1f).

8.19.0

Features

Added the closeTimeout option (#2308).

Bug fixes

Handled a forthcoming breaking change in Node.js core (19984854).

... (truncated)

Commits

5d9b316 [dist] 8.20.1
c0327ec [security] Fix uninitialized memory disclosure in websocket.close()
ce2a3d6 [ci] Test on node 26
58e45b8 [ci] Do not test on node 25
5f26c24 [ci] Run the lint step on node 24
8439255 [dist] 8.20.0
d3503c1 [minor] Export the PerMessageDeflate class and header utils
3ee5349 [api] Convert the isServer and maxPayload parameters to options
91707b4 [doc] Add missing space
8b55319 [pkg] Update eslint to version 10.0.1
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 1 update in the / directory: [ws](https://github.com/websockets/ws). Updates `ws` from 8.17.1 to 8.20.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.17.1...8.20.1) --- updated-dependencies: - dependency-name: ws dependency-version: 8.20.1 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2026-05-21T00:34:33Z

Test Results

1 files ±0 1 suites ±0 1m 14s ⏱️ -7s
2 583 tests ±0 2 571 ✅ ±0 12 💤 ±0 0 ❌ ±0
2 906 runs ±0 2 894 ✅ ±0 12 💤 ±0 0 ❌ ±0

Results for commit 4a8a744. ± Comparison against base commit 236dbe3.

This pull request removes 64 and adds 64 tests. Note that renamed tests count towards both.

DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_ar_JO("Bsskk41233[]#%&",-5,-13456.456d,True,05/17/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_ca_ES("Bsskk41233[]#%&",-5,-13456.456d,True,05/17/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_en_US("Bsskk41233[]#%&",-5,-13456.456d,True,05/17/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_fr_FR("Bsskk41233[]#%&",-5,-13456.456d,True,05/17/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_he_IL("Bsskk41233[]#%&",-5,-13456.456d,True,05/17/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_ru_RU("Bsskk41233[]#%&",-5,-13456.456d,True,05/17/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_tr_TR("Bsskk41233[]#%&",-5,-13456.456d,True,05/17/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_zh_CN("Bsskk41233[]#%&",-5,-13456.456d,True,05/17/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ SaveSettings_CallsUpdateModuleSetting_WithRightParameters_ar_JO("Bsskk41233[]#%&",-5,-13456.456d,True,05/17/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ SaveSettings_CallsUpdateModuleSetting_WithRightParameters_ca_ES("Bsskk41233[]#%&",-5,-13456.456d,True,05/17/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
…

DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_ar_JO("Bsskk41233[]#%&",-5,-13456.456d,True,05/20/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_ca_ES("Bsskk41233[]#%&",-5,-13456.456d,True,05/20/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_en_US("Bsskk41233[]#%&",-5,-13456.456d,True,05/20/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_fr_FR("Bsskk41233[]#%&",-5,-13456.456d,True,05/20/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_he_IL("Bsskk41233[]#%&",-5,-13456.456d,True,05/20/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_ru_RU("Bsskk41233[]#%&",-5,-13456.456d,True,05/20/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_tr_TR("Bsskk41233[]#%&",-5,-13456.456d,True,05/20/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ GetSettings_GetsValuesFrom_ModuleSettingsCollection_zh_CN("Bsskk41233[]#%&",-5,-13456.456d,True,05/20/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ SaveSettings_CallsUpdateModuleSetting_WithRightParameters_ar_JO("Bsskk41233[]#%&",-5,-13456.456d,True,05/20/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
DotNetNuke.Tests.Core.Entities.Modules.Settings.ModuleSettingsTests ‑ SaveSettings_CallsUpdateModuleSetting_WithRightParameters_ca_ES("Bsskk41233[]#%&",-5,-13456.456d,True,05/20/2026 00:00:00,1.05:06:07,Value2,DotNetNuke.Tests.Core.Entities.Modules.Settings.ComplexType)
…

dependabot Bot added javascript Pull requests that update Javascript code Type: Maintenance labels May 21, 2026

valadas added this to the 10.3.3 milestone May 21, 2026

valadas approved these changes May 21, 2026

View reviewed changes

bdukes approved these changes May 21, 2026

View reviewed changes

bdukes added this pull request to the merge queue May 21, 2026

Merged via the queue into develop with commit 95166d0 May 21, 2026
12 checks passed

bdukes deleted the dependabot/npm_and_yarn/npm_and_yarn-e5a46ec0e1 branch May 21, 2026 13:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump ws from 8.17.1 to 8.20.1 in the npm_and_yarn group across 1 directory#7286

Bump ws from 8.17.1 to 8.20.1 in the npm_and_yarn group across 1 directory#7286
bdukes merged 1 commit into
developfrom
dependabot/npm_and_yarn/npm_and_yarn-e5a46ec0e1

dependabot Bot commented on behalf of github May 21, 2026

Uh oh!

github-actions Bot commented May 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 21, 2026

8.20.1

Bug fixes

8.20.0

Features

8.19.0

Features

Bug fixes

Uh oh!

github-actions Bot commented May 21, 2026

Test Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants