Bump socket.io from 2.2.0 to 2.4.0 by dependabot[bot] · Pull Request #645 · vercel/ncc

dependabot · 2021-01-21T11:03:43Z

Bumps socket.io from 2.2.0 to 2.4.0.

Release notes

2.4.0

Related blog post: https://socket.io/blog/socket-io-2-4-0/

Features (from Engine.IO)

add support for all cookie options (19cc582)

disable perMessageDeflate by default (5ad2736)

Bug Fixes

security: do not allow all origins by default (f78a575)

properly overwrite the query sent in the handshake (d33a619)

⚠️ BREAKING CHANGE ⚠️

Previously, CORS was enabled by default, which meant that a Socket.IO server sent the necessary CORS headers (Access-Control-Allow-xxx) to any domain. This will not be the case anymore, and you now have to explicitly enable it.

Please note that you are not impacted if:

you are using Socket.IO v2 and the origins option to restrict the list of allowed domains

you are using Socket.IO v3 (disabled by default)

This commit also removes the support for '*' matchers and protocol-less URL:
io.origins('https://example.com:443'); => io.origins(['https://example.com']);
io.origins('localhost:3000');          => io.origins(['http://localhost:3000']);
io.origins('http://localhost:*');      => io.origins(['http://localhost:3000']);
io.origins('*:3000');                  => io.origins(['http://localhost:3000']);
To restore the previous behavior (please use with caution):
io.origins((_, callback) => {
  callback(null, true);
});
See also:

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS

https://socket.io/docs/v3/handling-cors/

https://socket.io/docs/v3/migrating-from-2-x-to-3-0/#CORS-handling

Thanks a lot to @ni8walk3r for the security report.

Links:

... (truncated)

Changelog

Sourced from socket.io's changelog.

2.4.0 (2021-01-04)

Bug Fixes

security: do not allow all origins by default (f78a575)

properly overwrite the query sent in the handshake (d33a619)

Commits

873fdc5 chore(release): 2.4.0
f78a575 fix(security): do not allow all origins by default
d33a619 fix: properly overwrite the query sent in the handshake
3951a79 chore: bump engine.io version
6fa026f ci: migrate to GitHub Actions
47161a6 [chore] Release 2.3.0
cf39362 [chore] Bump socket.io-parser to version 3.4.0
4d01b2c test: remove deprecated Buffer usage (#3481)
8227192 [docs] Fix the default value of the 'origins' parameter (#3464)
1150eb5 [chore] Bump engine.io to version 3.4.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [socket.io](https://github.com/socketio/socket.io) from 2.2.0 to 2.4.0. - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/2.4.0/CHANGELOG.md) - [Commits](socketio/socket.io@2.2.0...2.4.0) Signed-off-by: dependabot[bot] <[email protected]>

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@vercel/ncc](https://github.com/vercel/ncc) | [`^0.24.1` → `^0.38.0`](https://renovatebot.com/diffs/npm/@vercel%2fncc/0.24.1/0.38.4) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@vercel%2fncc/0.38.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@vercel%2fncc/0.24.1/0.38.4?slim=true) | --- ### Release Notes <details> <summary>vercel/ncc (@vercel/ncc)</summary> ### [`v0.38.4`](https://github.com/vercel/ncc/releases/tag/0.38.4) [Compare Source](vercel/ncc@0.38.3...0.38.4) ##### Bug Fixes - **cjs-build:** enable evaluating import.meta in cjs build ([#1236](vercel/ncc#1236)) ([e72d34d](vercel/ncc@e72d34d)), closes [/github.com/vercel/ncc/pull/897#discussion\_r836916315](https://github.com//github.com/vercel/ncc/pull/897/issues/discussion_r836916315) [#1019](vercel/ncc#1019) ### [`v0.38.3`](https://github.com/vercel/ncc/releases/tag/0.38.3) [Compare Source](vercel/ncc@0.38.2...0.38.3) ##### Bug Fixes - add missing `--asset-builds` to cli help message ([#1228](vercel/ncc#1228)) ([84f8c52](vercel/ncc@84f8c52)) ### [`v0.38.2`](https://github.com/vercel/ncc/releases/tag/0.38.2) [Compare Source](vercel/ncc@0.38.1...0.38.2) ##### Bug Fixes - **deps:** update webpack to v5.94.0, terser to v5.33.0 ([#1213](vercel/ncc#1213)) ([158a1fd](vercel/ncc@158a1fd)), closes [#1193](vercel/ncc#1193) [#1194](vercel/ncc#1194) [#1177](vercel/ncc#1177) [#1204](vercel/ncc#1204) [#1195](vercel/ncc#1195) Huge thanks to [@theoludwig](https://github.com/theoludwig) 🎉 ### [`v0.38.1`](https://github.com/vercel/ncc/releases/tag/0.38.1) [Compare Source](vercel/ncc@0.38.0...0.38.1) ##### Bug Fixes - sourcemap sources removes webpack path ([#1122](vercel/ncc#1122)) ([ce5984e](vercel/ncc@ce5984e)), closes [#1011](vercel/ncc#1011) [#1121](vercel/ncc#1121) ### [`v0.38.0`](https://github.com/vercel/ncc/releases/tag/0.38.0) [Compare Source](vercel/ncc@0.37.0...0.38.0) ##### Features - Log minification error when `--debug` ([#1102](vercel/ncc#1102)) ([e2779f4](vercel/ncc@e2779f4)) ### [`v0.37.0`](https://github.com/vercel/ncc/releases/tag/0.37.0) [Compare Source](vercel/ncc@0.36.1...0.37.0) ##### Features - add support for TypeScript 5.0's array extends in tsconfig ([#1105](vercel/ncc#1105)) ([f898f8e](vercel/ncc@f898f8e)) ### [`v0.36.1`](https://github.com/vercel/ncc/releases/tag/0.36.1) [Compare Source](vercel/ncc@0.36.0...0.36.1) ##### Bug Fixes - add missing pr title lint action ([#1032](vercel/ncc#1032)) ([c2d03cf](vercel/ncc@c2d03cf)) - add `ncc --version` and `ncc --help` ([#1030](vercel/ncc#1030)) ([d38b619](vercel/ncc@d38b619)) ### [`v0.36.0`](https://github.com/vercel/ncc/releases/tag/0.36.0) [Compare Source](vercel/ncc@0.34.0...0.36.0) ##### Bug Fixes - gitignore should include release.config.js ([#1016](vercel/ncc#1016)) ([44e2eac](vercel/ncc@44e2eac)) - node 18 by update source-map used by Terser to 0.7.4 ([#999](vercel/ncc#999)) ([2f69f83](vercel/ncc@2f69f83)) ##### Features - add semantic-release to autopublish ([#1015](vercel/ncc#1015)) ([be3405d](vercel/ncc@be3405d)), closes [#1000](vercel/ncc#1000) ### [`v0.34.0`](https://github.com/vercel/ncc/releases/tag/0.34.0) [Compare Source](vercel/ncc@0.33.4...0.34.0) ##### Changes Add support for TS 4.7 - Chore(deps-dev): bump ts-loader from 8.3.0 to 9.3.0: [#921](vercel/ncc#921) - Chore(deps-dev): bump express from 4.17.1 to 4.18.1: [#917](vercel/ncc#917) - Chore: add `memory-fs` to the devDependencies: [#927](vercel/ncc#927) ##### Credits Huge thanks to [@stscoundrel](https://github.com/stscoundrel) and [@shogo82148](https://github.com/shogo82148) for helping! ### [`v0.33.4`](https://github.com/vercel/ncc/releases/tag/0.33.4) [Compare Source](vercel/ncc@0.33.3...0.33.4) ##### Changes - Fix: Add missing variable declaration: [#773](vercel/ncc#773) - Chore: add windows to CI: [#896](vercel/ncc#896) - Chore: bump webpack-asset-relocator-loader to 1.7.2: [#912](vercel/ncc#912) - Chore(deps-dev): bump vm2 from 3.9.4 to 3.9.6: [#872](vercel/ncc#872) - Chore(deps): bump url-parse from 1.5.3 to 1.5.7: [#875](vercel/ncc#875) - Chore(deps): bump url-parse from 1.5.7 to 1.5.10: [#879](vercel/ncc#879) - Chore(deps-dev): bump stripe from 8.167.0 to 8.205.0: [#882](vercel/ncc#882) - Chore(deps-dev): bump typescript from 4.4.2 to 4.6.2: [#881](vercel/ncc#881) - Chore(deps-dev): bump twilio from 3.66.1 to 3.75.0: [#884](vercel/ncc#884) - Chore(deps): bump actions/setup-node from 2 to 3: [#880](vercel/ncc#880) - Chore(deps-dev): bump graphql from 15.5.1 to 15.8.0: [#885](vercel/ncc#885) - Chore: replace deprecated String.prototype.substr(): [#894](vercel/ncc#894) - Chore(deps): bump actions/checkout from 2 to 3: [#902](vercel/ncc#902) - Chore(deps-dev): bump [@azure/cosmos](https://github.com/azure/cosmos) from 3.12.3 to 3.15.1: [#905](vercel/ncc#905) - Chore(deps-dev): bump stripe from 8.205.0 to 8.214.0: [#906](vercel/ncc#906) - Chore(deps-dev): bump [@google-cloud/bigquery](https://github.com/google-cloud/bigquery) from 5.7.0 to 5.12.0: [#903](vercel/ncc#903) - Chore(deps-dev): bump tsconfig-paths from 3.10.1 to 3.14.1: [#904](vercel/ncc#904) ##### Credits Huge thanks to [@CommanderRoot](https://github.com/CommanderRoot) for helping! ### [`v0.33.3`](https://github.com/vercel/ncc/releases/tag/0.33.3) [Compare Source](vercel/ncc@0.33.2...0.33.3) ##### Patches - Fix: bump license-webpack-plugin: [#871](vercel/ncc#871) - Chore(deps): bump follow-redirects from 1.14.7 to 1.14.8: [#870](vercel/ncc#870) ### [`v0.33.2`](https://github.com/vercel/ncc/releases/tag/0.33.2) [Compare Source](vercel/ncc@0.33.1...0.33.2) ##### Patches - Fix: use `sha256` instead of deprecated `md5` for hash algorithm: [#868](vercel/ncc#868) - Fix: typo in build script: [#835](vercel/ncc#835) - Chore(test) Add Node.js 16 to CI: [#801](vercel/ncc#801) - Chore(deps): bump nodemailer from 6.5.0 to 6.7.2: [#833](vercel/ncc#833) - Chore(deps-dev): bump terser from 5.7.1 to 5.10.0: [#840](vercel/ncc#840) - Chore(deps-dev): bump passport from 0.4.1 to 0.5.2: [#839](vercel/ncc#839) - Chore(deps-dev): bump sequelize from 6.6.5 to 6.12.4: [#843](vercel/ncc#843) - Chore(deps-dev): bump analytics-node from 5.0.0 to 6.0.0: [#838](vercel/ncc#838) - Chore(deps): bump follow-redirects from 1.14.5 to 1.14.7: [#846](vercel/ncc#846) - Chore(deps): bump cached-path-relative from 1.0.2 to 1.1.0: [#854](vercel/ncc#854) - Chore(deps-dev): bump license-webpack-plugin from 2.3.20 to 4.0.1: [#859](vercel/ncc#859) - Chore(deps): bump simple-get from 3.1.0 to 3.1.1: [#864](vercel/ncc#864) - Chore(deps-dev): bump aws-sdk from 2.1024.0 to 2.1068.0: [#867](vercel/ncc#867) ##### Credits Huge thanks to [@shakefu](https://github.com/shakefu) for helping! ### [`v0.33.1`](https://github.com/vercel/ncc/releases/tag/0.33.1) [Compare Source](vercel/ncc@0.33.0...0.33.1) ##### Patches - Allow configuring mainFields for nccing browser modules: [#832](vercel/ncc#832) ### [`v0.33.0`](https://github.com/vercel/ncc/releases/tag/0.33.0) [Compare Source](vercel/ncc@0.32.0...0.33.0) ##### Minor Changes - Chore(deps-dev): bump [@vercel/webpack-asset-relocator-loader](https://github.com/vercel/webpack-asset-relocator-loader): [#826](vercel/ncc#826) - Fix: Fix source maps: [#818](vercel/ncc#818) - Feat: Allow using matches from externals for regex matching: [#825](vercel/ncc#825) ##### Patches - Chore(deps-dev): bump koa from 2.13.1 to 2.13.4: [#822](vercel/ncc#822) - Chore(deps-dev): bump mariadb from 2.5.4 to 2.5.5: [#823](vercel/ncc#823) ##### Credits Huge thanks to [@fenix20113](https://github.com/fenix20113) for helping! ### [`v0.32.0`](https://github.com/vercel/ncc/releases/tag/0.32.0) [Compare Source](vercel/ncc@0.31.1...0.32.0) ##### Changes - Feat: bump to webpack\@5.61.0: [#809](vercel/ncc#809) - Docs: add debug command description: [#800](vercel/ncc#800) - Chore(deps): bump object-path from 0.11.7 to 0.11.8: [#778](vercel/ncc#778) - Chore(deps): bump tmpl from 1.0.4 to 1.0.5: [#779](vercel/ncc#779) - Chore(deps-dev): bump vm2 from 3.9.3 to 3.9.4: [#795](vercel/ncc#795) - Chore(deps-dev): bump axios from 0.21.1 to 0.21.2: [#810](vercel/ncc#810) - Chore(deps-dev): bump aws-sdk from 2.958.0 to 2.1024.0: [#812](vercel/ncc#812) - Chore(deps-dev): bump webpack from 5.61.0 to 5.62.1: [#813](vercel/ncc#813) - Chore(deps): bump passport-oauth2 from 1.5.0 to 1.6.1: [#811](vercel/ncc#811) - Chore(deps): bump url-parse from 1.5.1 to 1.5.3: [#815](vercel/ncc#815) ##### Credits Huge thanks to [@fireairforce](https://github.com/fireairforce) and [@jesec](https://github.com/jesec) for helping! ### [`v0.31.1`](https://github.com/vercel/ncc/releases/tag/0.31.1) [Compare Source](vercel/ncc@0.31.0...0.31.1) ##### Patches - Fix `tsconfig.json` detection: [#770](vercel/ncc#770) ### [`v0.31.0`](https://github.com/vercel/ncc/releases/tag/0.31.0) [Compare Source](vercel/ncc@0.30.0...0.31.0) ##### Changes - Fix `compilerOptions` from `tsconfig.json`: [#766](vercel/ncc#766) - Bump typescript to 4.4.2: [#767](vercel/ncc#767) - Chore(deps-dev): bump graceful-fs from 4.2.6 to 4.2.8: [#761](vercel/ncc#761) - Chore(deps): bump tar from 4.4.15 to 4.4.19: [#763](vercel/ncc#763) - Chore(deps): bump object-path from 0.11.5 to 0.11.7: [#764](vercel/ncc#764) ### [`v0.30.0`](https://github.com/vercel/ncc/releases/tag/0.30.0) [Compare Source](vercel/ncc@0.29.2...0.30.0) ##### Changes - Major: Change asset builds to opt-in with new option `--asset-builds`: [#756](vercel/ncc#756) - Chore: bump typescript from 3.9.9 to 4.3.5: [#739](vercel/ncc#739) - Chore: bump codecov to 3.8.3: [#752](vercel/ncc#752) ##### Description Previous, `fs.readFile('./asset.js')` would compile `asset.js` instead of including as an asset. With this release, the default behavior has been changed to include `asset.js` as an asset only. If you want the old behavior, you can use the `--asset-builds` option. ##### Credits Huge thanks to [@guybedford](https://github.com/guybedford) for helping! ### [`v0.29.2`](https://github.com/vercel/ncc/releases/tag/0.29.2) [Compare Source](vercel/ncc@0.29.1...0.29.2) ##### Patches - Fix: ensure nested builds of `__nccwpck_require__`: [#751](vercel/ncc#751) ##### Credits Huge thanks to [@guybedford](https://github.com/guybedford) for helping! ### [`v0.29.1`](https://github.com/vercel/ncc/releases/tag/0.29.1) [Compare Source](vercel/ncc@0.29.0...0.29.1) ##### Patches - Fix: add stringify-loader: [#742](vercel/ncc#742) - Fix: package.json asset type module setting: [#733](vercel/ncc#733) - Chore(deps): update dependencies: [#736](vercel/ncc#736) - Chore(deps): bump tar from 4.4.13 to 4.4.15: [#743](vercel/ncc#743) - Chore(deps): bump path-parse from 1.0.6 to 1.0.7: [#745](vercel/ncc#745) - Chore(deps-dev): bump pdfkit from 0.12.1 to 0.12.3: [#740](vercel/ncc#740) ##### Credits Huge thanks to [@guybedford](https://github.com/guybedford), [@mmorel-35](https://github.com/mmorel-35), and [@jpcloureiro](https://github.com/jpcloureiro) for helping! ### [`v0.29.0`](https://github.com/vercel/ncc/releases/tag/0.29.0) [Compare Source](vercel/ncc@0.28.6...0.29.0) ##### Changes - Major: output ESM for `.mjs` or `type=module` builds: [#720](vercel/ncc#720) - Feat: update to webpack-asset-reloactor-loader\@1.5.0: [#718](vercel/ncc#718) - Feat: update to webpack\@5.42.0: [#723](vercel/ncc#723) - Feat: update to webpack\@5.43.0: [#724](vercel/ncc#724) - Chore: bump set-getter from 0.1.0 to 0.1.1: [#719](vercel/ncc#719) - Fix: typo in readme: [#712](vercel/ncc#712) ##### Credits Huge thanks to [@rethab](https://github.com/rethab) and [@guybedford](https://github.com/guybedford) for helping! ### [`v0.28.6`](https://github.com/vercel/ncc/releases/tag/0.28.6) [Compare Source](vercel/ncc@0.28.5...0.28.6) ##### Patches - Fix: Update to webpack\@5.36.2: [#707](vercel/ncc#707) - Fix: Update ts-loader to fix webpack warning: [#710](vercel/ncc#710) - Deps: Bump hosted-git-info from 2.8.8 to 2.8.9: [#708](vercel/ncc#708) ##### Credits Huge thanks to [@adriencohen](https://github.com/adriencohen) and [@huozhi](https://github.com/huozhi) for helping! ### [`v0.28.5`](https://github.com/vercel/ncc/releases/tag/0.28.5) [Compare Source](vercel/ncc@0.28.4...0.28.5) ##### Patches - Fix: handle terser error: [#703](vercel/ncc#703) - Fix: treat compilation.errors as a set: [#705](vercel/ncc#705) - Fix: unify `target` arg description, add `transpile-only` arg to readme: [#702](vercel/ncc#702) ##### Credits Huge thanks to [@guybedford](https://github.com/guybedford) and [@Simek](https://github.com/Simek) for helping! ### [`v0.28.4`](https://github.com/vercel/ncc/releases/tag/0.28.4) [Compare Source](vercel/ncc@0.28.3...0.28.4) ##### Patches - Fix: Adjust caching to use hashes: [#698](vercel/ncc#698) - Fix: support top-level await: [#700](vercel/ncc#700) - Fix: publish should build without cache: [#701](vercel/ncc#701) - Chore: redis from 2.8.0 to 3.1.1: [#699](vercel/ncc#699) - Chore: Bump ssri from 6.0.1 to 6.0.2: [#695](vercel/ncc#695) - Chore: rename master to main: [#694](vercel/ncc#694) ##### Credits Huge thanks to [@guybedford](https://github.com/guybedford) for helping! ### [`v0.28.3`](https://github.com/vercel/ncc/releases/tag/0.28.3) [Compare Source](vercel/ncc@0.28.2...0.28.3) ##### Patches - Fix: lock license plugin version: [#692](vercel/ncc#692) ##### Credits Huge thanks to [@huozhi](https://github.com/huozhi) for helping! ### [`v0.28.2`](https://github.com/vercel/ncc/releases/tag/0.28.2) [Compare Source](vercel/ncc@0.28.1...0.28.2) ##### Patches - Fix: unknown compiler option `incremental`: [#685](vercel/ncc#685) - Fix: replace .npmignore with "files" prop: [#688](vercel/ncc#688) ##### Credits Huge thanks to [@Songkeys](https://github.com/Songkeys) for helping! ### [`v0.28.1`](https://github.com/vercel/ncc/releases/tag/0.28.1) [Compare Source](vercel/ncc@0.28.0...0.28.1) ##### Patches - Fix: Rebuild bundle to fix [#684](vercel/ncc#684) - Deps: Bump codecov to 3.8.1: [#683](vercel/ncc#683) ### [`v0.28.0`](https://github.com/vercel/ncc/releases/tag/0.28.0) [Compare Source](vercel/ncc@0.27.0...0.28.0) ##### Minor Changes - Feat: `exports` conditions semantics: [#665](vercel/ncc#665) - Feat: `imports` support, webpack upgrade: [#672](vercel/ncc#672) - Feat: Support Regexp externals: [#654](vercel/ncc#654) - Fix: TS interop test and fix: [#671](vercel/ncc#671) - Fix: Upgrade local TS: [#674](vercel/ncc#674) - Chore: Interop test case: [#667](vercel/ncc#667) - Chore: add console output when minifying fails: [#648](vercel/ncc#648) - Chore: Add Node.js 14 to CI: [#659](vercel/ncc#659) - Docs: Fix out \[file] → out \[dir]: [#675](vercel/ncc#675) - Deps: Update to webpack\@5.30.0: [#681](vercel/ncc#681) - Deps: Update to webpack\@5.26.3: [#664](vercel/ncc#664) - Deps: Update to webpack\@5.24.4: [#658](vercel/ncc#658) - Deps: Update to webpack-asset-relocator-loader\@1.3.0: [#682](vercel/ncc#682) - Deps: Upgrade to webpack-asset-relocator-loader\@1.2.4: [#673](vercel/ncc#673) - Deps: Update to webpack-asset-relocator\@1.2.3: [#662](vercel/ncc#662) - Deps: Upgrade to terser\@5.6.1: [#669](vercel/ncc#669) - Deps: Bump socket.io from 2.2.0 to 2.4.0: [#645](vercel/ncc#645) - Deps: Bump pug from 2.0.3 to 3.0.1: [#656](vercel/ncc#656) - Deps: Bump elliptic from 6.5.3 to 6.5.4: [#657](vercel/ncc#657) - Deps: Bump msgpack5 from 4.2.1 to 4.5.1: [#660](vercel/ncc#660) - Deps: Bump y18n from 3.2.1 to 3.2.2: [#678](vercel/ncc#678) ##### Credits Huge thanks to [@guybedford](https://github.com/guybedford), [@Songkeys](https://github.com/Songkeys), [@adriencohen](https://github.com/adriencohen), and [@huozhi](https://github.com/huozhi) for helping! ### [`v0.27.0`](https://github.com/vercel/ncc/releases/tag/0.27.0) [Compare Source](vercel/ncc@0.26.2...0.27.0) ##### Changes - Feat: support customEmit ncc option: [#634](vercel/ncc#634) - Fix: correct declaration output dir: [#627](vercel/ncc#627) - Update to webpack-asset-relocator\@1.2.0: [#640](vercel/ncc#640) ##### Credits Huge thanks to [@guybedford](https://github.com/guybedford) and [@zeroooooooo](https://github.com/zeroooooooo) for helping! ### [`v0.26.2`](https://github.com/vercel/ncc/releases/tag/0.26.2) [Compare Source](vercel/ncc@0.26.1...0.26.2) ##### Patches - Enable minification for sourcemap-register.js: [#631](vercel/ncc#631) - Avoid **webpack\_require** conflicts: [#633](vercel/ncc#633) - Bump axios from 0.18.1 to 0.21.1: [#636](vercel/ncc#636) - Fix: skip typechecking on sub-builds: [#637](vercel/ncc#637) ##### Credits Huge thanks to [@xom9ikk](https://github.com/xom9ikk) and [@guybedford](https://github.com/guybedford) for helping! ### [`v0.26.1`](https://github.com/vercel/ncc/releases/tag/0.26.1) [Compare Source](vercel/ncc@0.26.0...0.26.1) ##### Patches - Ensure separate asset compilation states in subbuilds: [#630](vercel/ncc#630) ##### Credits Huge thanks to [@guybedford](https://github.com/guybedford) for helping! ### [`v0.26.0`](https://github.com/vercel/ncc/releases/tag/0.26.0) [Compare Source](vercel/ncc@0.25.1...0.26.0) ##### Changes - Asset subbundle builds: [#625](vercel/ncc#625) - Bump ini from 1.3.5 to 1.3.7: [#624](vercel/ncc#624) - Update example with missing TypeScript dependency: [#623](vercel/ncc#623) - Update readme with missing TS and ES options: [#615](vercel/ncc#615) ##### Credits Huge thanks to [@restuwahyu13](https://github.com/restuwahyu13) and [@guybedford](https://github.com/guybedford) for helping! ### [`v0.25.1`](https://github.com/vercel/ncc/releases/tag/0.25.1) [Compare Source](vercel/ncc@0.25.0...0.25.1) ##### Changes - Allow passing `target`: [#614](vercel/ncc#614) ##### Credits Huge thanks to [@ijjk](https://github.com/ijjk) for helping! ### [`v0.25.0`](https://github.com/vercel/ncc/releases/tag/0.25.0) [Compare Source](vercel/ncc@0.24.1...0.25.0) ##### Changes - Bump `webpack` from `5.0.0-beta.28` to `5.2.0`: [#602](vercel/ncc#602) - Bump `npm-user-validate` from `1.0.0` to `1.0.1`: [#604](vercel/ncc#604) - Bump `object-path` from `0.11.4` to `0.11.5`: [#607](vercel/ncc#607) - Fix `--quiet` flag on ts build: [#605](vercel/ncc#605) - Add integration test for `@slack/web-api`: [#591](vercel/ncc#591) ##### Credits Huge thanks to [@huozhi](https://github.com/huozhi) and [@ataylorme](https://github.com/ataylorme) for helping! </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  --------- Co-authored-by: Nicolas <[email protected]> Reviewed-on: https://gitea.com/gitea/runner/pulls/881 Reviewed-by: Nicolas <[email protected]> Co-authored-by: Renovate Bot <[email protected]> Co-committed-by: Renovate Bot <[email protected]>

dependabot Bot requested review from Timer and styfle as code owners January 21, 2021 11:03

dependabot Bot added the dependencies Pull requests that update a dependency file label Jan 21, 2021

styfle added the automerge Automatically merge PR once checks pass label Jan 22, 2021

styfle approved these changes Jan 22, 2021

View reviewed changes

kodiakhq Bot merged commit b6b661d into master Jan 22, 2021

kodiakhq Bot deleted the dependabot/npm_and_yarn/socket.io-2.4.0 branch January 22, 2021 00:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump socket.io from 2.2.0 to 2.4.0#645

Bump socket.io from 2.2.0 to 2.4.0#645
kodiakhq[bot] merged 1 commit intomasterfrom
dependabot/npm_and_yarn/socket.io-2.4.0

dependabot Bot commented on behalf of github Jan 21, 2021

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jan 21, 2021

2.4.0

Features (from Engine.IO)

Bug Fixes

Links:

2.4.0 (2021-01-04)

Bug Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant