Skip to content

deps(npm): bump socket.io-client from 4.8.3 to 4.8.4 in the npm-minor-and-patch group - #253

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-dbff516df9
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-dbff516df9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Superseded by #252, which includes this Socket.IO 4.8.4 update and the regenerated browser bundle together with the Python dependency updates.

The obsolete local Socket.IO decoder rewrite is removed because 4.8.4 includes the attachment bounds upstream. The existing decoder security regression tests remain and pass.

Combined head: 98afd23cf7d8bbd3973ed8716bdc90d131237e32.

Bumps the npm-minor-and-patch group with 1 update: [socket.io-client](https://github.com/socketio/socket.io).


Updates `socket.io-client` from 4.8.3 to 4.8.4
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/socket.io-client@4.8.3...socket.io-client@4.8.4)

---
updated-dependencies:
- dependency-name: socket.io-client
  dependency-version: 4.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript labels Oct 5, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript labels Oct 5, 2026
@bifrost0x bifrost0x closed this Oct 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-dbff516df9 branch October 5, 2026 06:43
@bifrost0x bifrost0x mentioned this pull request Oct 5, 2026
7 tasks done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant