Skip to content

chore(deps): bump ws from 8.21.0 to 8.21.3 - #1057

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ws-8.21.1
Closed

chore(deps): bump ws from 8.21.0 to 8.21.3#1057
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ws-8.21.1

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps ws from 8.21.0 to 8.21.3.

Release notes

Sourced from ws's releases.

8.21.3

Bug fixes

  • The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

8.21.2

Bug fixes

  • Fixed a test for CITGM (2eb3be0b).

8.21.1

Bug fixes

  • Empty fragments are now counted toward the limit (a2f4e7c0).
  • The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).
Commits
  • c791e70 [dist] 8.21.3
  • e97a20e [fix] Reject offers with client_max_window_bits below config
  • 787ebf2 [dist] 8.21.2
  • b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
  • e4bb883 [security] Use GitHub PVR as main reporting channel
  • 2eb3be0 [test] Skip test on Node.js versions where it does not apply
  • ae1de54 [dist] 8.21.1
  • 8e9511b [ci] Trust Coveralls Homebrew tap
  • f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
  • 8df8265 [ci] Update actions/checkout action to v7
  • Additional commits viewable in compare view

@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 31, 2026

@claudeclaudeBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review for a one-time review, or @claude review always to subscribe this PR to a review on every future push.

Tip: disable this comment in your organization's Code Review settings.

@github-actions

Copy link
Copy Markdown

This PR doesn't fully meet our contributing guidelines and PR template.

What needs to be fixed:

  • PR description is missing required template sections. Please use the PR template.

Please edit this PR description to address the above within 2 hours, or it will be automatically closed.

If you believe this was flagged incorrectly, please let a maintainer know.

@github-actions

Copy link
Copy Markdown

Thanks for your contribution!

This PR doesn't have a linked issue. All PRs must reference an existing issue.

Please:

  1. Open an issue describing the bug/feature (if one doesn't exist)
  2. Add Fixes #<number> or Closes #<number> to this PR description

See CONTRIBUTING.md for details.

Bumps [ws](https://github.com/websockets/ws) from 8.21.0 to 8.21.3.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.3)
---
updated-dependencies:
- dependency-name: ws
dependency-version: 8.21.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot changed the title chore(deps): bump ws from 8.21.0 to 8.21.1chore(deps): bump ws from 8.21.0 to 8.21.3Aug 14, 2026
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/ws-8.21.1 branch from c2961c1 to 4e130cbCompareAugust 14, 2026 09:13
@dependabot@github

dependabotBot commented on behalf of githubAug 14, 2026

Copy link
Copy Markdown
ContributorAuthor

Superseded by #1106.

@dependabotdependabotBot closed this Aug 14, 2026
@dependabot
dependabotBot deleted the dependabot/npm_and_yarn/ws-8.21.1 branch August 14, 2026 16:49
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

contributordependenciesPull requests that update a dependency filejavascriptPull requests that update javascript codeneeds:complianceneeds:issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants