From 6efa30a8a6bfd5a1f444834a593eed40072c8adb Mon Sep 17 00:00:00 2001 From: polatengin Date: Mon, 26 Aug 2024 14:00:07 -0700 Subject: [PATCH 1/3] bumping ws dependency to fix component vulnerability --- src/SignalR/clients/ts/signalr/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/SignalR/clients/ts/signalr/package.json b/src/SignalR/clients/ts/signalr/package.json index 9be27b13d8b3..805aed5a9bb2 100644 --- a/src/SignalR/clients/ts/signalr/package.json +++ b/src/SignalR/clients/ts/signalr/package.json @@ -45,7 +45,7 @@ "eventsource": "^2.0.2", "fetch-cookie": "^2.0.3", "node-fetch": "^2.6.7", - "ws": "^7.4.5" + "ws": "^7.5.10" }, "overrides": { "ansi-regex": "5.0.1", From b8ee43f931a3538df039acf1ad3853d3047e11d5 Mon Sep 17 00:00:00 2001 From: Engin Polat Date: Mon, 26 Aug 2024 16:31:04 -0700 Subject: [PATCH 2/3] bumping ws npm dependency --- src/SignalR/clients/ts/signalr/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/SignalR/clients/ts/signalr/package.json b/src/SignalR/clients/ts/signalr/package.json index 805aed5a9bb2..ff0be4474a7f 100644 --- a/src/SignalR/clients/ts/signalr/package.json +++ b/src/SignalR/clients/ts/signalr/package.json @@ -45,7 +45,7 @@ "eventsource": "^2.0.2", "fetch-cookie": "^2.0.3", "node-fetch": "^2.6.7", - "ws": "^7.5.10" + "ws": "^8.17.1" }, "overrides": { "ansi-regex": "5.0.1", From cc0b5d9dc43866bc9f10b75936eaa0694fd9d447 Mon Sep 17 00:00:00 2001 From: Engin Polat Date: Mon, 26 Aug 2024 16:38:37 -0700 Subject: [PATCH 3/3] reverting last change --- src/SignalR/clients/ts/signalr/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/SignalR/clients/ts/signalr/package.json b/src/SignalR/clients/ts/signalr/package.json index ff0be4474a7f..805aed5a9bb2 100644 --- a/src/SignalR/clients/ts/signalr/package.json +++ b/src/SignalR/clients/ts/signalr/package.json @@ -45,7 +45,7 @@ "eventsource": "^2.0.2", "fetch-cookie": "^2.0.3", "node-fetch": "^2.6.7", - "ws": "^8.17.1" + "ws": "^7.5.10" }, "overrides": { "ansi-regex": "5.0.1",