Update socketio-group to v4.3 (major) #88

properly parse the CONNECT packet in v2 compatibility mode (6f4bd7f)
typings: add return types and general-case overload signatures (#3776) (9e8f288)
typings: update the types of "query", "auth" and "headers" (4f2e9a7)

`v3.1.2`

Compare Source

Bug Fixes

ignore packets received after disconnection (494c64e)

`v3.1.1`

Compare Source

Bug Fixes

properly parse the CONNECT packet in v2 compatibility mode (6f4bd7f)
typings: add return types and general-case overload signatures (#3776) (9e8f288)
typings: update the types of "query", "auth" and "headers" (4f2e9a7)

`v3.1.0`

Compare Source

Features

confirm a weak but matching ETag (#3485) (161091d)
esm: export the Namespace and Socket class (#3699) (233650c)
add support for Socket.IO v2 clients (9925746)
add room events (155fa63)

Bug Fixes

allow integers as event names (1c220dd)

3.0.5 (2021-01-05)

Bug Fixes

properly clear timeout on connection failure (170b739)

Reverts

restore the socket middleware functionality (bf54327)

3.0.4 (2020-12-07)

3.0.3 (2020-11-19)

3.0.2 (2020-11-17)

Bug Fixes

merge Engine.IO options (43705d7)

3.0.1 (2020-11-09)

Bug Fixes

export ServerOptions and Namespace types (#3684) (f62f180)
typings: update the signature of the emit method (50671d9)

`v3.0.5`

Compare Source

Bug Fixes

properly clear timeout on connection failure (170b739)

Reverts

restore the socket middleware functionality (bf54327)

Bug Fixes

merge Engine.IO options (43705d7)

`v3.0.1`

Compare Source

Bug Fixes

export ServerOptions and Namespace types (#3684) (f62f180)
typings: update the signature of the emit method (50671d9)

`v3.0.0`

Compare Source

Bug Fixes

close clients with no namespace (91cd255)

Features

emit an Error object upon middleware error (54bf4a4)
serve msgpack bundle (aa7574f)
add support for catch-all listeners (5c73733)
make Socket#join() and Socket#leave() synchronous (129c641)
remove prod dependency to socket.io-client (7603da7)
move binary detection back to the parser (669592d)
add ES6 module export (8b6b100)
do not reuse the Engine.IO id (2875d2c)
remove Server#set() method (029f478)
remove Socket#rooms object (1507b41)
remove the 'origins' option (a8c0600)
remove the implicit connection to the default namespace (3289f7e)
throw upon reserved event names (4bd5b23)

BREAKING CHANGES

the Socket#use() method is removed (see 5c73733)
Socket#join() and Socket#leave() do not accept a callback argument anymore.

Before:

socket.join("room1", () => {
 io.to("room1").emit("hello");
});

After:

socket.join("room1");
io.to("room1").emit("hello");
// or await socket.join("room1"); for custom adapters

the "connected" map is renamed to "sockets"
the Socket#binary() method is removed, as this use case is now covered by the ability to provide your own parser.
the 'origins' option is removed

Before:

new Server(3000, {
  origins: ["https://example.com"]
});

The 'origins' option was used in the allowRequest method, in order to
determine whether the request should pass or not. And the Engine.IO
server would implicitly add the necessary Access-Control-Allow-xxx
headers.

After:

new Server(3000, {
  cors: {
    origin: "https://example.com",
    methods: ["GET", "POST"],
    allowedHeaders: ["content-type"]
  }
});

The already existing 'allowRequest' option can be used for validation:

new Server(3000, {
  allowRequest: (req, callback) => {
    callback(null, req.headers.referer.startsWith("https://example.com"));
  }
});

Socket#rooms is now a Set instead of an object
Namespace#connected is now a Map instead of an object
there is no more implicit connection to the default namespace:

// client-side
const socket = io("/admin");

// server-side
io.on("connect", socket => {
  // not triggered anymore
})

io.use((socket, next) => {
  // not triggered anymore
});

io.of("/admin").use((socket, next) => {
  // triggered
});

the Server#set() method was removed

This method was kept for backward-compatibility with pre-1.0 versions.

`v2.4.1`

Compare Source

This release reverts the breaking change introduced in 2.4.0 (socketio/socket.io@f78a575).

If you are using Socket.IO v2, you should explicitly allow/disallow cross-origin requests:

without CORS (server and client are served from the same domain):

const io = require("socket.io")(httpServer, {
  allowRequest: (req, callback) => {
    callback(null, req.headers.origin === undefined); // cross-origin requests will not be allowed
  }
});

with CORS (server and client are served from distinct domains):

io.origins(["http://localhost:3000"]); // for local development
io.origins(["https://example.com"]);

In any case, please consider upgrading to Socket.IO v3, where this security issue is now fixed (CORS is disabled by default).

Reverts

fix(security): do not allow all origins by default (a169050)

Links:

Diff: socketio/socket.io@2.4.0...2.4.1
Client release: -
engine.io version: ~3.5.0
ws version: ~7.4.2

`v2.4.0`

Compare Source

Related blog post: https://socket.io/blog/socket-io-2-4-0/

Features (from Engine.IO)

add support for all cookie options (19cc582)
disable perMessageDeflate by default (5ad2736)

Bug Fixes

security: do not allow all origins by default (f78a575)
properly overwrite the query sent in the handshake (d33a619)

⚠️ BREAKING CHANGE ⚠️

Previously, CORS was enabled by default, which meant that a Socket.IO server sent the necessary CORS headers (Access-Control-Allow-xxx) to any domain. This will not be the case anymore, and you now have to explicitly enable it.

Please note that you are not impacted if:

you are using Socket.IO v2 and the origins option to restrict the list of allowed domains
you are using Socket.IO v3 (disabled by default)

This commit also removes the support for '*' matchers and protocol-less URL:

io.origins('https://example.com:443'); => io.origins(['https://example.com']);
io.origins('localhost:3000');          => io.origins(['http://localhost:3000']);
io.origins('http://localhost:*');      => io.origins(['http://localhost:3000']);
io.origins('*:3000');                  => io.origins(['http://localhost:3000']);

To restore the previous behavior (please use with caution):

io.origins((_, callback) => {
  callback(null, true);
});

Links:

Milestone: 2.4.0
Diff: socketio/socket.io@2.3.0...2.4.0
Client release: 2.4.0
engine.io version: ~3.5.0
ws version: ~7.4.2

`v2.3.0`

Compare Source

This release mainly contains a bump of the engine.io and ws packages, but no additional features.

Links:

Milestone: 2.3.0
Diff: socketio/socket.io@2.2.0...2.3.0
Client release: 2.3.0
engine.io version: ~3.4.0 (diff: socketio/engine.io@3.3.1...3.4.2)
ws version: ^7.1.2 (diff: websockets/ws@6.1.2...7.3.1)

`v2.2.0`

Compare Source

Features

add cache-control header when serving the client source (#2907)

Bug fixes

throw an error when trying to access the clients of a dynamic namespace (#3355)

Links

Milestone: 2.2.0
Diff: socketio/socket.io@2.1.1...2.2.0
Client release: 2.2.0
engine.io version: ~3.3.1 (diff: socketio/engine.io@3.2.0...3.3.1)
ws version: ~6.1.0 (diff: websockets/ws@3.3.1...6.1.2)

`v2.1.1`

Compare Source

Features

add local flag to the socket object (add local flag to the socket object socketio/socket.io#3219)

socket.local.to('room101').emit(/* */);

Bug fixes

(client) fire an error event on middleware failure for non-root namespace (socketio/socket.io-client#1202)

Links:

Milestone: 2.1.1
Diff: socketio/socket.io@2.1.0...2.1.1
Client release: 2.1.1
engine.io version: ~3.2.0
ws version: ~3.3.1

`v2.1.0`

Compare Source

Features

add a 'binary' flag (#3185)

// by default, the object is recursively scanned to check whether it contains some binary data
// in the following example, the check is skipped in order to improve performance
socket.binary(false).emit('plain-object', object);

// it also works at the namespace level
io.binary(false).emit('plain-object', object);

add support for dynamic namespaces (#3195)

io.of(/^\/dynamic-\d+$/).on('connect', (socket) => {
  // socket.nsp.name = '/dynamic-101'
});

// client-side
const client = require('socket.io-client')('/dynamic-101');

Bug fixes

properly emit 'connect' when using a custom namespace (#3197)
include the protocol in the origins check (#3198)

Important note ⚠️ from Engine.IO 3.2.0 release

There are two non-breaking changes that are somehow quite important:

ws was reverted as the default wsEngine ([chore] Revert to ws as default wsEngine socketio/engine.io#550), as there was several blocking issues with uws. You can still use uws by running npm install uws --save in your project and using the wsEngine option:

var engine = require('engine.io');
var server = engine.listen(3000, {
  wsEngine: 'uws'
});

pingTimeout now defaults to 5 seconds (instead of 60 seconds): [chore] Update default value of pingTimeout socketio/engine.io#551

Links:

Milestone: 2.1.0
Diff: socketio/socket.io@2.0.4...2.1.0
Client release: 2.1.0
engine.io version: ~3.2.0 (diff: socketio/engine.io@3.1.0...3.2.0)
ws version: ~3.3.1 (diff: websockets/ws@2.3.1...3.3.1)

`v2.0.4`

Compare Source

Bug fixes

do not throw when receiving an unhandled error packet (#3038)
reset rooms object before broadcasting from namespace (#3039)

Links:

Milestone: 2.0.4
Diff: 2.0.3...2.0.4
Client release: 2.0.4
Diff engine.io: -
Diff ws: -

`v2.0.3`

Compare Source

Bug fixes

reset rooms object before broadcasting (#2970)
fix middleware initialization (#2969)

Links:

Milestone: 2.0.3
Diff: 2.0.2...2.0.3
Client release: 2.0.3
Diff engine.io: -
Diff ws: -

`v2.0.2`

Compare Source

Bug fixes

fix timing issues with middleware (#2948)

Links:

Milestone: 2.0.2
Diff: 2.0.1...2.0.2
Client release: 2.0.2
Diff engine.io: -
Diff ws: -

`v2.0.1`

Compare Source

Bug fixes

- update path of client file (#2934)

Links:

Milestone: 2.0.1
Diff: 2.0.0...2.0.1
Client release: 2.0.1
Diff engine.io: -
Diff ws: -

socketio/socket.io-client

`v4.3.2`

Compare Source

Bug Fixes

restore the default export (bis) (6780f29)

`v4.3.1`

Compare Source

Bug Fixes

restore the default export (f0aae84)
restore the namespace export (8737d0a)

`v4.3.0`

Compare Source

An ESM bundle is now provided:

<script type="module">
  import { io } from "https://cdn.socket.io/4.3.0/socket.io.esm.min.js";

  const socket = io();

  socket.emit("hello", "world");
</script>

Features

typings: add missing types for some emitter methods (#1502) (a9e5b85)
provide an ESM build with and without debug (16b6569)
migrate to rollup (0661564)

`v4.2.0`

Compare Source

Bug Fixes

typings: allow async listener in typed events (66e00b7)
allow to set randomizationFactor to 0 (#1447) (dfb46b5)

Features

add an option to use native timer functions (#1479) (4e1b656)

4.1.3 (2021-07-10)

4.1.2 (2021-05-17)

Bug Fixes

typings: add missing closeOnBeforeunload option (#1469) (35d27df)
typings: add missing requestTimeout option (#1467) (c8dfbb1)

4.1.1 (2021-05-11)

There were some minor bug fixes on the server side, which mandate a client bump.

`v4.1.3`

Compare Source

`v4.1.2`

Compare Source

Bug Fixes

typings: add missing closeOnBeforeunload option (#1469) (35d27df)
typings: add missing requestTimeout option (#1467) (c8dfbb1)

`v4.1.1`

Compare Source

There were some minor bug fixes on the server side, which mandate a client bump.

`v4.1.0`

Compare Source

Features

add the "closeOnBeforeunload" option (dcb85e9, from engine.io-client)

4.0.2 (2021-05-06)

Bug Fixes

typings: add fallback to untyped event listener (5394669)
ensure buffered events are sent in order (34f822f)
ensure connections are properly multiplexed (dd2a8fc)
properly export the Socket class (e20d487)

4.0.1 (2021-03-31)

Bug Fixes

typings: make auth property public (#1455) (c150223)
typings: update definition to match wrapper.mjs (#1456) (48f573f)

`v4.0.2`

Compare Source

Bug Fixes

typings: add fallback to untyped event listener (5394669)
ensure buffered events are sent in order (34f822f)
ensure connections are properly multiplexed (dd2a8fc)
properly export the Socket class (e20d487)

`v4.0.1`

Compare Source

Bug Fixes

typings: make auth property public (#1455) (c150223)
typings: update definition to match wrapper.mjs (#1456) (48f573f)

`v4.0.0`

Compare Source

The major bump is due to some breaking changes on the server side.

Bug Fixes

bundle: restore support for JS modules (43613d1)

Features

add autoUnref option (6abfa1f)
add support for typed events (5902365)

3.1.2 (2021-02-26)

Bug Fixes

restore support for web workers (13b32b3)
silently close the transport in the beforeunload hook (ed48b5d, from engine.io-client)

3.1.1 (2021-02-03)

Bug Fixes

include the path in the manager ID (7a0c2b5)
remove polyfill for process in the bundle (61afc5d)
typings: add return types and general-case overload signatures (#1440) (47f917a)
typings: fix the type of the "query" option (#1439) (f02ab3b)

`v3.1.3`

Compare Source

Bug Fixes

bundle: restore support for JS modules (afa7953)

Links:

Diff: socketio/socket.io-client@3.1.2...3.1.3
Server release: -
engine.io-client version: ~4.1.0
ws version: ~7.4.2
Build size
- socket.io.min.js: 60.3 KB (=)
- socket.io.msgpack.min.js: 61.3 KB (=)

`v3.1.2`

Compare Source

Bug Fixes

restore support for web workers (13b32b3)
silently close the transport in the beforeunload hook (ed48b5d, from engine.io-client)

`v3.1.1`

Compare Source

Bug Fixes

include the path in the manager ID (7a0c2b5)
remove polyfill for process in the bundle (61afc5d)
typings: add return types and general-case overload signatures (#1440) (47f917a)
typings: fix the type of the "query" option (#1439) (f02ab3b)

`v3.1.0`

Compare Source

Bug Fixes

typings: make Manager#opts public (#1437) (fe97243)
allow integers as event names (1c220dd)

3.0.5 (2021-01-05)

Bug Fixes

emit a connect_error event upon connection failure (53c7374)
typings: make sendBuffer and receiveBuffer public (b83f89c)

3.0.4 (2020-12-07)

Bug Fixes

emit an error when reaching a v2.x server (ec1f8c3), closes /github.com/socketio/engine.io-protocol#difference-between-v3-and-v4 /github.com/socketio/socket.io-protocol#difference-between-v5-and-v4
keep track of active sockets (f8f60fc)
typings: export extraHeaders option (#1410) (b3de861)

3.0.3 (2020-11-19)

Bug Fixes

properly export io in ES modules wrapper (bec1524)

3.0.2 (2020-11-17)

Bug Fixes

typings: export withCredentials option (7193078)
typings: export ManagerOptions (#1398) (96cd2c9)
add io as named exports (7b3ec9f)

3.0.1 (2020-11-09)

Bug Fixes

typings: export Socket and SocketOptions types (#1394) (19ab1e9)

`v3.0.5`

Compare Source

Bug Fixes

emit a connect_error event upon connection failure (53c7374)
typings: make sendBuffer and receiveBuffer public (b83f89c)

`v3.0.4`

Compare Source

Bug Fixes

emit an error when reaching a v2.x server (ec1f8c3), closes /github.com/socketio/engine.io-protocol#difference-between-v3-and-v4 /github.com/socketio/socket.io-protocol#difference-between-v5-and-v4
keep track of active sockets (f8f60fc)
typings: export extraHeaders option (#1410) (b3de861)

`v3.0.3`

Compare Source

Bug Fixes

properly export io in ES modules wrapper (bec1524)

`v3.0.2`

Compare Source

Bug Fixes

typings: export withCredentials option (7193078)
typings: export ManagerOptions (#1398) (96cd2c9)
add io as named exports (7b3ec9f)

`v3.0.1`

Compare Source

Bug Fixes

typings: export Socket and SocketOptions types (#1394) (19ab1e9)

`v3.0.0`

Compare Source

Code Refactoring

rename ERROR to CONNECT_ERROR (13e1db7)

Features

emit an Error object upon middleware error (0939395)
add bundle with msgpack parser (71d6048)
add support for catch-all listeners (55f464f)
add volatile events (7ddad2c)
move binary detection back to the parser (1789094)
add ES6 module export (cbabb03)
do not reuse the Engine.IO id (bbe94ad)
remove the implicit connection to the default namespace (249e0be)
split the events of the Manager and Socket (132f8ec)
throw upon reserved event names (6494f61)

BREAKING CHANGES

the Socket instance will now emit a "connect_error" event instead of "error" (which is not a reserved event anymore)

// before
socket.on("error", () => {});

// after
socket.on("connect_error", () => {});

the Socket#binary() method is removed, as this use case is now covered by the ability to provide your own parser.
the Socket instance will no longer forward the events of its Manager

Those events can still be accessed on the Manager instance though:

socket.io.on("reconnect", () => {
  // ...
});

`v2.4.0`

Compare Source

The minor bump is matching the bump of the server, but there is no new feature in this release.

Links:

Milestone: -
Diff: socketio/socket.io-client@2.3.1...2.4.0
Server release: 2.4.0
engine.io-client version: ~3.5.0
ws version: ~7.4.2

`v2.3.1`

Compare Source

The debug dependency has been reverted to ~3.1.0, as the newer versions contains ES6 syntax which breaks in IE
browsers.

Please note that this only applied to users that bundle the Socket.IO client in their application, with webpack for
example, as the "official" bundles (in the dist/ folder) were already transpiled with babel.

For webpack users, you can also take a look at the webpack-remove-debug
plugin.

Bug Fixes

fix reconnection after opening socket asynchronously (#1253) (050108b)

`v2.3.0`

Compare Source

Links:

Milestone: -
Diff: socketio/socket.io-client@2.2.0...2.3.0
Server release: 2.3.0
engine.io-client version: ~3.4.0 (diff: socketio/engine.io-client@3.3.1...3.4.0)
ws version: ~6.1.0
Build size
- socket.io.js:
  - min: 67.0 KB (+ 6.0 KB)
  - min+gzip: 20.5 KB (+ 1.0 KB)
- socket.io.slim.js:
  - min: 52.2 KB (+ 0.4 KB)
  - min+gzip: 16.4 KB (+ 0.1 KB)
CDN
- https://cdnjs.cloudflare.com/ajax/libs/socket.io/2.3.0/socket.io.slim.js
- https://cdn.socket.io/socket.io-2.3.0.slim.js

`v2.2.0`

Compare Source

Bug fixes

remove any reference to the global variable (related: [bug] global is not defined socketio/socket.io-client#1166)

Links:

Milestone: 2.2.0
Diff: socketio/socket.io-client@2.1.1...2.2.0
Server release: 2.2.0
engine.io-client version: ~3.3.1 (diff: socketio/engine.io-client@3.2.0...3.3.1)
ws version: ~6.1.0 (diff: websockets/ws@3.3.1...6.1.2)
Build size
- socket.io.js:
  - min: 61.0 KB (=)
  - min+gzip: 19.5 KB (- 0.1 KB)
- socket.io.slim.js:
  - min: 51.8 KB (=)
  - min+gzip: 16.3 KB (=)
CDN
- https://cdnjs.cloudflare.com/ajax/libs/socket.io/2.2.0/socket.io.slim.js
- https://cdn.socket.io/socket.io-2.2.0.slim.js

`v2.1.1`

Compare Source

Bug fixes

fire an error event on middleware failure for non-root namespace (#1202)

Links:

Milestone: 2.1.1
Diff: socketio/socket.io-client@2.1.0...2.1.1
Server release: 2.1.1
engine.io-client version: ~3.2.0
ws version: ~3.3.1
Build size
- socket.io.js:
  - min: 61.0 KB (+ 0.1 KB)
  - min+gzip: 19.6 KB (=)
- socket.io.slim.js:
  - min: 51.8 KB (=)
  - min+gzip: 16.3 KB (=)
CDN
- https://cdnjs.cloudflare.com/ajax/libs/socket.io/2.1.1/socket.io.slim.js
- https://cdn.socket.io/socket.io-2.1.1.slim.js

`v2.1.0`

Compare Source

Matching Socket.IO 2.1.0 release notes

Features

add a 'binary' flag (#1194)

// by default, the object is recursively scanned to check whether it contains some binary data
// in the following example, the check is skipped in order to improve performance
socket.binary(false).emit('plain-object', object);

Links:

Milestone: 2.1.0
Diff: 2.0.4...2.1.0
Server release: 2.1.0
Diff engine.io-client from ~3.1.0 to ~3.2.0: socketio/engine.io-client@3.1.0...3.2.0
Diff ws from ~2.3.1 to ~3.3.1: https://github.com/websocke

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Renovate Bot.

Update socketio-group to v4.3

8a45597

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update socketio-group to v4.3 (major) #88

Update socketio-group to v4.3 (major) #88

ccopsey commented Dec 7, 2021

Update socketio-group to v4.3 (major) #88

Are you sure you want to change the base?

Update socketio-group to v4.3 (major) #88

Conversation

ccopsey commented Dec 7, 2021

Release Notes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

4.1.3 (2021-07-10)

Bug Fixes

4.1.2 (2021-05-17)

Bug Fixes

4.1.1 (2021-05-11)

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Performance Improvements

4.0.2 (2021-05-06)

Bug Fixes

4.0.1 (2021-03-31)

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

3.1.2 (2021-02-26)

Bug Fixes

3.1.1 (2021-02-03)

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

3.0.5 (2021-01-05)

Bug Fixes

Reverts

3.0.4 (2020-12-07)

3.0.3 (2020-11-19)

3.0.2 (2020-11-17)

Bug Fixes

3.0.1 (2020-11-09)

Bug Fixes

Bug Fixes

Reverts

Bug Fixes

Bug Fixes

Bug Fixes

Features

BREAKING CHANGES

Reverts

Links:

Features (from Engine.IO)

Bug Fixes

Links:

Links:

Features

Bug fixes

Links

Features

Bug fixes

Links:

Features

Bug fixes

Important note ⚠️ from Engine.IO 3.2.0 release

Links:

Bug fixes

Links:

Bug fixes

Links:

Bug fixes

Links:

Bug fixes

Links:

Bug Fixes