Skip to content

chore(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /webview-ui in the security-updates group across 1 directory - #24

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webview-ui/security-updates-cd62b4b37a
Open

chore(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /webview-ui in the security-updates group across 1 directory#24
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webview-ui/security-updates-cd62b4b37a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the security-updates group with 1 update in the /webview-ui directory: websocket-driver.

Updates websocket-driver from 0.7.4 to 0.7.5

Changelog

Sourced from websocket-driver's changelog.

0.7.5 / 2026-06-04

  • Close a draft-75/76 connection if a length header grows to exceed the configured max length
  • Fail the connection if a message is larger than the configured max length after extension processing
Commits
  • 5d6a9aa Bump version to 0.7.5
  • c55679a Fail the connection if a message is larger than the configured max length aft...
  • 5b197ca Close a draft-75/76 connection if a length header grows to exceed the configu...
  • fc93a48 Test on Node v22, v24, and v26
  • 2e82d34 Test on recent versions of Node
  • e4962db Switch from Travis CI to GitHub Actions
  • 3f2f9b7 Travis update: cache npm modules, remove sudo, run on Node 15
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Dependency updates security Security webview Webview UI labels Jul 15, 2026
@dependabot
dependabot Bot requested a review from CardSorting as a code owner July 15, 2026 22:21
@dependabot dependabot Bot added security Security dependencies Dependency updates webview Webview UI labels Jul 15, 2026
@github-actions

Copy link
Copy Markdown

Thanks for your first pull request to LUMI!

Please read CONTRIBUTING.md and ensure:

  • PR title uses Conventional Commits (feat:, fix:, docs:, …) — Dependabot PRs are exempt
  • CI is green (Tests, E2E, CodeQL)
  • Governed-execution changes preserve projection invariants (see PR template)

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webview-ui/security-updates-cd62b4b37a branch 4 times, most recently from 65a523a to 1bf380b Compare July 26, 2026 04:27
Bumps the security-updates group with 1 update in the /webview-ui directory: [websocket-driver](https://github.com/faye/websocket-driver-node).


Updates `websocket-driver` from 0.7.4 to 0.7.5
- [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md)
- [Commits](faye/websocket-driver-node@0.7.4...0.7.5)

---
updated-dependencies:
- dependency-name: websocket-driver
  dependency-version: 0.7.5
  dependency-type: indirect
  dependency-group: security-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webview-ui/security-updates-cd62b4b37a branch from 1bf380b to 028b0ea Compare July 26, 2026 04:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates security Security size/size/XS webview Webview UI

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants