chore(deps): update socket.io packages to v4 (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
socket.io-client	^3.1.3 -> ^4.7.5
socket.io-client-v2	^2.4.0 -> ^4.7.5

---

Release Notes

socketio/socket.io-client (socket.io-client)

v4.7.5

Compare Source

Bug Fixes

• discard acknowledgements upon disconnection (34cbfbb)

Dependencies

• engine.io-client@~6.5.2 (no change)
• ws@~8.11.0 (no change)

v4.7.4

Compare Source

There were some minor bug fixes on the server side, which mandate a client bump.

Dependencies

• engine.io-client@~6.5.2 (no change)
• ws@~8.11.0 (no change)

v4.7.3

Compare Source

Bug Fixes

• improve compatibility with node16 module resolution (#​1595) (605de78)
• typings: accept string | undefined as init argument (5a3eafe)
• typings: fix the type of the socket#id attribute (f9c16f2)

Dependencies

• engine.io-client@~6.5.2 (no change)
• ws@~8.11.0 (no change)

v4.7.2

Compare Source

Some bug fixes are included from the engine.io-client package:

• webtransport: add proper framing (d55c39e)
• webtransport: honor the binaryType attribute (8270e00)

Dependencies

• engine.io-client@~6.5.2 (diff)
• ws@~8.11.0 (no change)

v4.7.1

Compare Source

Some bug fixes are included from the engine.io-client package:

• make closeOnBeforeunload default to false (a63066b)
• webtransport: properly handle abruptly closed connections (cf6aa1f)

Dependencies

• engine.io-client@~6.5.1 (diff)
• ws@~8.11.0 (no change)

v4.7.0

Compare Source

Bug Fixes

• properly report timeout error when connecting (5bc94b5)
• use same scope for setTimeout and clearTimeout calls (#​1568) (f2892ab)

Features

Support for WebTransport

The Engine.IO client can now use WebTransport as the underlying transport.

WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.

References:

• https://w3c.github.io/webtransport/
• https://developer.mozilla.org/en-US/docs/Web/API/WebTransport
• https://developer.chrome.com/articles/webtransport/

For Node.js clients: until WebTransport support lands in Node.js, you can use the @fails-components/webtransport package:

import { WebTransport } from "@​fails-components/webtransport";

global.WebTransport = WebTransport;

Added in 7195c0f.

Cookie management for the Node.js client

When setting the withCredentials option to true, the Node.js client will now include the cookies in the HTTP requests, making it easier to use it with cookie-based sticky sessions.

import { io } from "socket.io-client";

const socket = io("https://example.com", {
  withCredentials: true
});

Added in 5fc88a6.

Conditional import of the ESM build with debug logs

By default, the ESM build does not include the debug package in the browser environments, because it increases the bundle size (see 16b6569).

Which means that, unfortunately, debug logs are not available in the devtools console, even when setting the localStorage.debug = ... attribute.

You can now import the build which includes the debug packages with a conditional import. Example with vite:

import { defineConfig } from 'vite'
import react from '@​vitejs/plugin-react'

export default defineConfig({
  plugins: [react()],
  server: {
    port: 4000
  },
  resolve: {
    conditions: ["development"]
  }
})

Reference: https://v2.vitejs.dev/config/#resolve-conditions

Added in 781d753.

Dependencies

• engine.io-client@~6.5.0 (diff)
• ws@~8.11.0 (no change)

v4.6.2

Compare Source

Bug Fixes

• exports: move types condition to the top (#​1580) (7ead241)

Dependencies

• engine.io-client@~6.4.0 (no change)
• ws@~8.11.0 (no change)

v4.6.1

Compare Source

Bug Fixes

• do not drain the queue while the socket is offline (4996f9e)
• prevent duplicate connections when multiplexing (46213a6)

Dependencies

• engine.io-client@~6.4.0 (no change)
• ws@~8.11.0 (no change)

v4.6.0

Compare Source

Bug Fixes

• typings: do not expose browser-specific types (4d6d95e)
• ensure manager.socket() returns an active socket (b7dd891)
• typings: properly type emits with timeout (#​1570) (33e4172)

Features

A new "addTrailingSlash" option

The trailing slash which was added by default can now be disabled:

import { io } from "socket.io-client";

const socket = io("https://example.com", {
  addTrailingSlash: false
});

In the example above, the request URL will be https://example.com/socket.io instead of https://example.com/socket.io/.

Added in 21a6e12.

Promise-based acknowledgements

This commit adds some syntactic sugar around acknowledgements:

// without timeout
const response = await socket.emitWithAck("hello", "world");

// with a specific timeout
try {
  const response = await socket.timeout(1000).emitWithAck("hello", "world");
} catch (err) {
  // the server did not acknowledge the event in the given delay
}

Note: environments that do not support Promises will need to add a polyfill in order to use this feature.

Added in 47b979d.

Connection state recovery

This feature allows a client to reconnect after a temporary disconnection and restore its ID and receive any packets that was missed during the disconnection gap. It must be enabled on the server side.

A new boolean attribute named recovered is added on the socket object:

socket.on("connect", () => {
  console.log(socket.recovered); // whether the recovery was successful
});

Added in 54d5ee0 (server) and b4e20c5 (client).

Retry mechanism

Two new options are available:

• retries: the maximum number of retries. Above the limit, the packet will be discarded.
• ackTimeout: the default timeout in milliseconds used when waiting for an acknowledgement (not to be mixed up with the already existing timeout option, which is used by the Manager during the connection)

const socket = io({
  retries: 3,
  ackTimeout: 10000
});

// implicit ack
socket.emit("my-event");

// explicit ack
socket.emit("my-event", (err, val) => { /* ... */ });

// custom timeout (in that case the ackTimeout is optional)
socket.timeout(5000).emit("my-event", (err, val) => { /* ... */ });

In all examples above, "my-event" will be sent up to 4 times (1 + 3), until the server sends an acknowledgement.

Assigning a unique ID to each packet is the duty of the user, in order to allow deduplication on the server side.

Added in 655dce9.

Dependencies

• engine.io-client@~6.4.0 (diff)
• ws@~8.11.0 (diff)

v4.5.4

Compare Source

This release contains a bump of the socket.io-parser dependency, in order to fix CVE-2022-2421.

Dependencies

• engine.io-client@~6.2.3 (no change)
• ws@~8.2.3 (no change)

v4.5.3

Compare Source

Bug Fixes

• do not swallow user exceptions (2403b88)

Dependencies

• engine.io-client@~6.2.3 (socketio/engine.io-client@6.2.1...6.2.3)
• ws@~8.2.3 (no change)

v4.5.2

Compare Source

Bug Fixes

• handle ill-formatted packet from server (c597023)

Dependencies

• engine.io-client@~6.2.1 (no change)
• ws@~8.2.3 (no change)

v4.5.1

Compare Source

There were some minor bug fixes on the server side, which mandate a client bump.

Dependencies

• engine.io-client@~6.2.1 (no change)
• ws@~8.2.3 (no change)

v4.5.0

Compare Source

Features

Additional details for the disconnect event

The "disconnect" event will now include additional details to help debugging if anything has gone wrong.

Example when a payload is over the maxHttpBufferSize value in HTTP long-polling mode:

socket.on("disconnect", (reason, details) => {
  console.log(reason); // "transport error"

  // in that case, details is an error object
  console.log(details.message); "xhr post error"
  console.log(details.description); // 413 (the HTTP status of the response)

  // details.context refers to the XMLHttpRequest object
  console.log(details.context.status); // 413
  console.log(details.context.responseText); // ""
});

Added in b862924.

Catch-all listeners for outgoing packets

This is similar to onAny(), but for outgoing packets.

Syntax:

socket.onAnyOutgoing((event, ...args) => {
  console.log(event);
});

Added in 74e3e60.

Slice write buffer according to the maxPayload value

The server will now include a "maxPayload" field in the handshake details, allowing the clients to decide how many packets they have to send to stay under the maxHttpBufferSize value.

Added in 46fdc2f.

Dependencies

• engine.io-client@~6.2.1 (socketio/engine.io-client@6.1.1...6.2.1)
• ws@~8.2.3 (no change)

4.4.1 (2022-01-06)

v4.4.1

Compare Source

v4.4.0

Compare Source

Bug Fixes

• add package name in nested package.json (53d8fca), closes socketio/socket.io-client#1513
• fix socket.disconnect().connect() usage (99c2cb8)
• prevent socket from reconnecting after middleware failure (d54d12c)

Features

• add timeout feature (ccf7998)

socket.timeout(5000).emit("my-event", (err) => {
  if (err) {
    // the server did not acknowledge the event in the given delay
  }
});

4.3.2 (2021-10-16)

Bug Fixes

• restore the default export (bis) (6780f29)

4.3.1 (2021-10-15)

Bug Fixes

• restore the default export (f0aae84)
• restore the namespace export (8737d0a)

v4.3.2

Compare Source

Bug Fixes

• restore the default export (bis) (6780f29)

v4.3.1

Compare Source

Bug Fixes

• restore the default export (f0aae84)
• restore the namespace export (8737d0a)

v4.3.0

Compare Source

An ESM bundle is now provided:

<script type="module">
  import { io } from "https://cdn.socket.io/4.3.0/socket.io.esm.min.js";

  const socket = io();

  socket.emit("hello", "world");
</script>

Features

• typings: add missing types for some emitter methods (#​1502) (a9e5b85)
• provide an ESM build with and without debug (16b6569)
• migrate to rollup (0661564)

v4.2.0

Compare Source

Bug Fixes

• typings: allow async listener in typed events (66e00b7)
• allow to set randomizationFactor to 0 (#​1447) (dfb46b5)

Features

• add an option to use native timer functions (#​1479) (4e1b656)

4.1.3 (2021-07-10)

4.1.2 (2021-05-17)

Bug Fixes

• typings: add missing closeOnBeforeunload option (#​1469) (35d27df)
• typings: add missing requestTimeout option (#​1467) (c8dfbb1)

4.1.1 (2021-05-11)

There were some minor bug fixes on the server side, which mandate a client bump.

v4.1.3

Compare Source

v4.1.2

Compare Source

Bug Fixes

• typings: add missing closeOnBeforeunload option (#​1469) (35d27df)
• typings: add missing requestTimeout option (#​1467) (c8dfbb1)

v4.1.1

Compare Source

There were some minor bug fixes on the server side, which mandate a client bump.

v4.1.0

Compare Source

Features

• add the "closeOnBeforeunload" option (dcb85e9, from engine.io-client)

4.0.2 (2021-05-06)

Bug Fixes

• typings: add fallback to untyped event listener (5394669)
• ensure buffered events are sent in order (34f822f)
• ensure connections are properly multiplexed (dd2a8fc)
• properly export the Socket class (e20d487)

4.0.1 (2021-03-31)

Bug Fixes

• typings: make auth property public (#​1455) (c150223)
• typings: update definition to match wrapper.mjs (#​1456) (48f573f)

3.1.3 (2021-03-12)

Bug Fixes

• bundle: restore support for JS modules (afa7953)

v4.0.2

Compare Source

Bug Fixes

• typings: add fallback to untyped event listener (5394669)
• ensure buffered events are sent in order (34f822f)
• ensure connections are properly multiplexed (dd2a8fc)
• properly export the Socket class (e20d487)

v4.0.1

Compare Source

Bug Fixes

• typings: make auth property public (#​1455) (c150223)
• typings: update definition to match wrapper.mjs (#​1456) (48f573f)

v4.0.0

Compare Source

The major bump is due to some breaking changes on the server side.

Bug Fixes

• bundle: restore support for JS modules (43613d1)

Features

• add autoUnref option (6abfa1f)
• add support for typed events (5902365)

3.1.2 (2021-02-26)

Bug Fixes

• restore support for web workers (13b32b3)
• silently close the transport in the beforeunload hook (ed48b5d, from engine.io-client)

3.1.1 (2021-02-03)

Bug Fixes

• include the path in the manager ID (7a0c2b5)
• remove polyfill for process in the bundle (61afc5d)
• typings: add return types and general-case overload signatures (#​1440) (47f917a)
• typings: fix the type of the "query" option (#​1439) (f02ab3b)

---

Configuration

📅 Schedule: Branch creation - "before 4am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.