Skip to content

build(deps): bump engine.io from 6.6.2 to 6.6.10 in /hotelSelection-frontend/src/angular - #121

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/hotelSelection-frontend/src/angular/engine.io-6.6.9
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/hotelSelection-frontend/src/angular/engine.io-6.6.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps engine.io from 6.6.2 to 6.6.10.

Release notes

Sourced from engine.io's releases.

engine.io@6.6.10

Bug Fixes

  • reject protocol mismatch for existing sessions (86db1fc)
  • restore compatibility with Node.js 10 (ae7fb46)
  • run the polling write callback when the client aborts a compressed response (#5540) (915a3ed)

Performance Improvements

  • optimize polling request body buffering (dcbd961)
  • stream compressed polling responses (91dd763)

Dependencies

engine.io-client@6.6.6

The ws dependency was bumped to ~8.21.0 following CVE-2026-48779.

Bug Fixes

Dependencies

engine.io@6.6.9

The ws dependency was bumped to ~8.21.0 following CVE-2026-48779.

Dependencies

engine.io-client@6.6.5

The ws dependency was bumped to ~8.20.1 following CVE-2026-45736.

Note from the ws maintainers:

Although the calculated CVSS severity is medium, the actual severity is believed to be low, as the flaw is only exploitable through misuse that is unlikely in practice.

Dependencies

... (truncated)

Commits
  • 64066c3 chore(release): engine.io@6.6.10
  • 000cba3 refactor(eio): minor hardening improvements
  • 86db1fc fix(eio): reject protocol mismatch for existing sessions
  • 915a3ed fix(eio): run the polling write callback when the client aborts a compressed ...
  • ae7fb46 fix(eio): restore compatibility with Node.js 10
  • 91dd763 perf(eio): stream compressed polling responses
  • ef02660 docs(adapter): fix link in changelog
  • 0918d89 docs(eio): fix link in changelog
  • ae7cc96 docs(parser): add changelog for 3.4.5 and 3.3.6 versions
  • 4054894 chore(release): socket.io-parser@4.2.7
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for engine.io since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
Bumps [engine.io](https://github.com/socketio/socket.io) from 6.6.2 to 6.6.10.
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/engine.io@6.6.2...engine.io@6.6.10)

---
updated-dependencies:
- dependency-name: engine.io
  dependency-version: 6.6.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump engine.io from 6.6.2 to 6.6.9 in /hotelSelection-frontend/src/angular build(deps): bump engine.io from 6.6.2 to 6.6.10 in /hotelSelection-frontend/src/angular Sep 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/hotelSelection-frontend/src/angular/engine.io-6.6.9 branch from 01f645d to 6637577 Compare September 19, 2026 08:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants