[Snyk] Fix for 1 vulnerabilities

[Fisch80]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-ENGINEIO-3136336	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: socket.io

The new version differs by 110 commits.

• baa6804 chore(release): 2.5.0
• f223178 fix: prevent the socket from joining a room after disconnection
• 226cc16 fix: only set 'connected' to true after middleware execution
• 05e1278 fix: fix race condition in dynamic namespaces
• 22d4bdf fix: ignore packet received after disconnection
• dfded53 chore: update engine.io version to 3.6.0
• e6b8697 chore(release): 2.4.1
• a169050 revert: fix(security): do not allow all origins by default
• 873fdc5 chore(release): 2.4.0
• f78a575 fix(security): do not allow all origins by default
• d33a619 fix: properly overwrite the query sent in the handshake
• 3951a79 chore: bump engine.io version
• 6fa026f ci: migrate to GitHub Actions
• 47161a6 [chore] Release 2.3.0
• cf39362 [chore] Bump socket.io-parser to version 3.4.0
• 4d01b2c test: remove deprecated Buffer usage (#3481)
• 8227192 [docs] Fix the default value of the 'origins' parameter (#3464)
• 1150eb5 [chore] Bump engine.io to version 3.4.0
• 9c1e73c [chore] Update the license of the chat example (#3410)
• df05b73 [chore] Release 2.2.0
• b00ae50 [feat] Add cache-control header when serving the client source (#2907)
• d3c653d [docs] Add Touch Support to the whiteboard example (#3104)
• a7fbd1a [fix] Throw an error when trying to access the clients of a dynamic namespace (#3355)
• 190d22b [chore] Bump dependencies

See the full diff

Package name: testem

The new version differs by 38 commits.

• bf29853 2.2.0
• 55d0df5 Use npm lockfile
• 9429129 Merge pull request Bump eslint-plugin-ember from 11.0.5 to 11.0.6 adopted-ember-addons/ember-electron#1223 from testem/greenkeeper/socket.io-2.1.0
• ed48bb8 fix(package): update socket.io to version 2.1.0
• 1699c79 release v2.1.0 🎉
• 14d9b6f Merge pull request Bump ember-data from 4.6.0 to 4.6.1 adopted-ember-addons/ember-electron#1209 from LoicEvenium/upgrade-socketio
• fd4ce61 Merge pull request Bump portfinder from 1.0.28 to 1.0.29 adopted-ember-addons/ember-electron#1219 from arthirm/master
• 750aad2 Adding api for setting defaultOptions in testem
• 686ab88 Merge pull request Bump eslint-plugin-ember from 11.0.4 to 11.0.5 adopted-ember-addons/ember-electron#1214 from testem/greenkeeper/sinon-chai-3.0.0
• 6e84fab Merge pull request Bump sass from 1.54.1 to 1.54.2 adopted-ember-addons/ember-electron#1216 from testem/greenkeeper/execa-0.10.0
• 6d690c9 fix(package): update execa to version 0.10.0
• 735f8c9 chore(package): update sinon-chai to version 3.0.0
• fb51a34 add lock file
• 58cbaa4 update socket-io to fix "Validation TypeError" https://github.com/Node.js and Socket.io UTF8 Validation TypeError coming from ws websockets/ws#1021
• 4f60ed0 2.0.0
• af8620d Merge pull request Bump ember-source from 4.5.0 to 4.6.0 adopted-ember-addons/ember-electron#1205 from testem/fix-leaky-runners
• 6f6c7be Merge pull request Bump sass from 1.52.1 to 1.52.2 adopted-ember-addons/ember-electron#1170 from smottt/master
• 184de4e [BUGFIX] Prevent leaked runners/sub processes.
• 1950ca9 Merge pull request Bump eslint-plugin-ember from 10.6.1 to 11.0.0 adopted-ember-addons/ember-electron#1199 from ajlomagno/rename-npmignore
• 19a24d1 Renamed .npmingore to .npmignore
• 208b5d5 Merge pull request Bump eslint-plugin-qunit from 7.3.0 to 7.3.1 adopted-ember-addons/ember-electron#1193 from tjgq/report-failed-hook-error-message
• e7bc3dd Display error message correctly when a hook fails to run.
• a87d79b Merge pull request Bump sass from 1.52.3 to 1.53.0 adopted-ember-addons/ember-electron#1182 from jlogsdon/fix/browser_args-by-mode
• bd9a1b1 Merge pull request Bump eslint-plugin-prettier from 4.0.0 to 4.1.0 adopted-ember-addons/ember-electron#1185 from rlivsey/fix-cycle-depth

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)