Skip to content

Bump ws from 7.5.9 to 7.5.13 - #6

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ws-7.5.12
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ws-7.5.12

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor

Bumps ws from 7.5.9 to 7.5.13.

Release notes

Sourced from ws's releases.

7.5.13

Bug fixes

  • Fixed a bug introduced in version 7.5.12 that prevented the fragment counter from resetting (18bcb11a).

7.5.12

Bug fixes

  • Backported a2f4e7c0 and f197ac65 to the v7.x release line (fb8a1935, deec2114).

7.5.11

Bug fixes

  • Backported 2b2abd45 to the 7.x release line (e14c4586).

7.5.10

Bug fixes

  • Backported e55e5106 to the 7.x release line (22c28763).
Commits
  • 1680801 [dist] 7.5.13
  • 18bcb11 [fix] Reset the fragment counter when the message is complete
  • 98fce81 [dist] 7.5.12
  • deec211 [fix] Lower default values of maxBufferedChunks and maxFragments
  • fb8a193 [fix] Count empty fragments toward the limit (#2329)
  • fd36cd8 [dist] 7.5.11
  • e14c458 [security] Limit retained message parts
  • d962d70 [dist] 7.5.10
  • 22c2876 [security] Fix crash when the Upgrade header cannot be read (#2231)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Dependency updates and supply-chain maintenance. javascript Pull requests that update javascript code labels Jul 15, 2026
Bumps [ws](https://github.com/websockets/ws) from 7.5.9 to 7.5.13.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.9...7.5.13)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 7.5.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump ws from 7.4.6 to 7.5.12 Bump ws from 7.5.9 to 7.5.13 Jul 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ws-7.5.12 branch from 0f32f37 to 26680d4 Compare July 29, 2026 14:22
@ipicoinrepo
ipicoinrepo force-pushed the dependabot/npm_and_yarn/ws-7.5.12 branch from 26680d4 to 69c8937 Compare August 8, 2026 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates and supply-chain maintenance. javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants