Skip to content

build(deps): bump engine.io from 6.6.4 to 6.6.10 - #6178

Merged
tdonohue merged 1 commit into
mainfrom
dependabot/npm_and_yarn/engine.io-6.6.10
Sep 8, 2026
Merged

build(deps): bump engine.io from 6.6.4 to 6.6.10#6178
tdonohue merged 1 commit into
mainfrom
dependabot/npm_and_yarn/engine.io-6.6.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps engine.io from 6.6.4 to 6.6.10.

Release notes

Sourced from engine.io's releases.

engine.io@6.6.10

Bug Fixes

  • reject protocol mismatch for existing sessions (86db1fc)
  • restore compatibility with Node.js 10 (ae7fb46)
  • run the polling write callback when the client aborts a compressed response (#5540) (915a3ed)

Performance Improvements

  • optimize polling request body buffering (dcbd961)
  • stream compressed polling responses (91dd763)

Dependencies

engine.io-client@6.6.6

The ws dependency was bumped to ~8.21.0 following CVE-2026-48779.

Bug Fixes

Dependencies

engine.io@6.6.9

The ws dependency was bumped to ~8.21.0 following CVE-2026-48779.

Dependencies

engine.io-client@6.6.5

The ws dependency was bumped to ~8.20.1 following CVE-2026-45736.

Note from the ws maintainers:

Although the calculated CVSS severity is medium, the actual severity is believed to be low, as the flaw is only exploitable through misuse that is unlikely in practice.

Dependencies

... (truncated)

Commits
  • 64066c3 chore(release): engine.io@6.6.10
  • 000cba3 refactor(eio): minor hardening improvements
  • 86db1fc fix(eio): reject protocol mismatch for existing sessions
  • 915a3ed fix(eio): run the polling write callback when the client aborts a compressed ...
  • ae7fb46 fix(eio): restore compatibility with Node.js 10
  • 91dd763 perf(eio): stream compressed polling responses
  • ef02660 docs(adapter): fix link in changelog
  • 0918d89 docs(eio): fix link in changelog
  • ae7cc96 docs(parser): add changelog for 3.4.5 and 3.3.6 versions
  • 4054894 chore(release): socket.io-parser@4.2.7
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for engine.io since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026
@tdonohue

tdonohue commented Sep 8, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [engine.io](https://github.com/socketio/socket.io) from 6.6.4 to 6.6.10.
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/engine.io@6.6.4...engine.io@6.6.10)

---
updated-dependencies:
- dependency-name: engine.io
  dependency-version: 6.6.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/engine.io-6.6.10 branch from a0620d5 to 05cfd87 Compare September 8, 2026 16:56
@tdonohue tdonohue added port to dspace-9_x This PR needs to be ported to `dspace-9_x` branch for next bug-fix release port to dspace-10_x This PR needs to be ported to `dspace-10_x` branch for next bug-fix release labels Sep 8, 2026
@tdonohue tdonohue added this to the 11.0 milestone Sep 8, 2026

@tdonohue tdonohue left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 Deployed locally & no issues found.

@github-project-automation github-project-automation Bot moved this to 👍 Reviewer Approved in DSpace 11.0 Release Sep 8, 2026
@tdonohue
tdonohue merged commit 016d982 into main Sep 8, 2026
19 checks passed
@tdonohue
tdonohue deleted the dependabot/npm_and_yarn/engine.io-6.6.10 branch September 8, 2026 21:06
@github-project-automation github-project-automation Bot moved this from 👍 Reviewer Approved to ✅ Done in DSpace 11.0 Release Sep 8, 2026
@tdonohue
tdonohue restored the dependabot/npm_and_yarn/engine.io-6.6.10 branch September 8, 2026 21:06
@dspace-bot

Copy link
Copy Markdown
Contributor

Successfully created backport PR for dspace-9_x:

@dspace-bot

Copy link
Copy Markdown
Contributor

Successfully created backport PR for dspace-10_x:

@tdonohue tdonohue removed port to dspace-9_x This PR needs to be ported to `dspace-9_x` branch for next bug-fix release port to dspace-10_x This PR needs to be ported to `dspace-10_x` branch for next bug-fix release labels Sep 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

2 participants