Dependency update: ws (due to ReDOS)

[Tobias Hernstig]

See https://www.npmjs.com/advisories/1748

[Tobias Hernstig]

Or maybe no update is needed, since https://github.com/socketio/engine.io-client/blob/master/package.json shows "ws": "~7.4.2"?

[Jakesterwars]

Or maybe no update is needed, since https://github.com/socketio/engine.io-client/blob/master/package.json shows "ws": "~7.4.2"?

There is already a dependabot PR related to this here: #666

[Tobias Hernstig]

Thanks @Jakesterwars, closing.

[Damien Arrachequesne]

Or maybe no update is needed, since https://github.com/socketio/engine.io-client/blob/master/package.json shows "ws": "~7.4.2"?

@thernstig yes, running npm audit fix (or npm update --depth 9999 ws) should fix the issue, since we use the ~ operator.

@Jakesterwars please note that the PR only applies to the package-lock.json file of the project, which is not published.