Skip to content

Bump engine.io from 6.6.2 to 6.6.10 - #256

Merged
guanw88 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/engine.io-6.6.9
Sep 11, 2026
Merged

guanw88 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/engine.io-6.6.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps engine.io from 6.6.2 to 6.6.10.

Release notes

Sourced from engine.io's releases.

engine.io@6.6.10

Bug Fixes

  • reject protocol mismatch for existing sessions (86db1fc)
  • restore compatibility with Node.js 10 (ae7fb46)
  • run the polling write callback when the client aborts a compressed response (#5540) (915a3ed)

Performance Improvements

  • optimize polling request body buffering (dcbd961)
  • stream compressed polling responses (91dd763)

Dependencies

engine.io-client@6.6.6

The ws dependency was bumped to ~8.21.0 following CVE-2026-48779.

Bug Fixes

Dependencies

engine.io@6.6.9

The ws dependency was bumped to ~8.21.0 following CVE-2026-48779.

Dependencies

engine.io-client@6.6.5

The ws dependency was bumped to ~8.20.1 following CVE-2026-45736.

Note from the ws maintainers:

Although the calculated CVSS severity is medium, the actual severity is believed to be low, as the flaw is only exploitable through misuse that is unlikely in practice.

Dependencies

... (truncated)

Commits
  • 64066c3 chore(release): engine.io@6.6.10
  • 000cba3 refactor(eio): minor hardening improvements
  • 86db1fc fix(eio): reject protocol mismatch for existing sessions
  • 915a3ed fix(eio): run the polling write callback when the client aborts a compressed ...
  • ae7fb46 fix(eio): restore compatibility with Node.js 10
  • 91dd763 perf(eio): stream compressed polling responses
  • ef02660 docs(adapter): fix link in changelog
  • 0918d89 docs(eio): fix link in changelog
  • ae7cc96 docs(parser): add changelog for 3.4.5 and 3.3.6 versions
  • 4054894 chore(release): socket.io-parser@4.2.7
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for engine.io since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
@guanw88

guanw88 commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [engine.io](https://github.com/socketio/socket.io) from 6.6.2 to 6.6.10.
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/engine.io@6.6.2...engine.io@6.6.10)

---
updated-dependencies:
- dependency-name: engine.io
  dependency-version: 6.6.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump engine.io from 6.6.2 to 6.6.9 Bump engine.io from 6.6.2 to 6.6.10 Sep 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/engine.io-6.6.9 branch from c90e97a to 4b1c3e0 Compare September 11, 2026 20:20
@guanw88
guanw88 merged commit 54179e6 into master Sep 11, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/engine.io-6.6.9 branch September 11, 2026 20:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Development

Successfully merging this pull request may close these issues.

1 participant