Bump ws, engine.io and socket.io-adapter in /eShopOnContainers/src/Web/WebSPA

[dependabot]

Bumps ws, engine.io and socket.io-adapter. These dependencies needed to be updated together.
Updates ws from 6.2.2 to 6.2.4

Release notes

Sourced from ws's releases.

6.2.4

Bug fixes

• Backported 2b2abd45 to the 6.x release line (a76e2111).

6.2.3

Bug fixes

• Backported e55e5106 to the 6.x release line (eeb76d31).

Commits

• 86d3e8a [dist] 6.2.4
• a76e211 [security] Limit retained message parts
• d87f3b6 [dist] 6.2.3
• eeb76d3 [security] Fix crash when the Upgrade header cannot be read (#2231)
• See full diff in compare view

Updates ws from 8.18.2 to 8.21.0

Release notes

Sourced from ws's releases.

6.2.4

Bug fixes

• Backported 2b2abd45 to the 6.x release line (a76e2111).

6.2.3

Bug fixes

• Backported e55e5106 to the 6.x release line (eeb76d31).

Commits

• 86d3e8a [dist] 6.2.4
• a76e211 [security] Limit retained message parts
• d87f3b6 [dist] 6.2.3
• eeb76d3 [security] Fix crash when the Upgrade header cannot be read (#2231)
• See full diff in compare view

Updates engine.io from 6.6.2 to 6.6.8

Release notes

Sourced from engine.io's releases.

engine.io@6.6.8

The ws dependency was bumped to ~8.20.1 following CVE-2026-45736.

Note from the ws maintainers:

Although the calculated CVSS severity is medium, the actual severity is believed to be low, as the flaw is only exploitable through misuse that is unlikely in practice.

Bug Fixes

• clean up resources upon WebTransport handshake failure (f86b95f)

Dependencies

• ws@~8.20.1 (diff)

engine.io@6.6.7

Bug Fixes

• close HTTP requests with invalid content type (fc11285)
• handle invalid packets when upgrading to WebTransport (1fa1f46)
• prevent WebTransport connections when a middleware is registered (d1f5aa9)

Dependencies

• ws@~8.18.3 (no change)

engine.io@6.6.6

Bug Fixes

• add @types/ws as dependency (#5458) (07cbe15)
• uws: emit initial_headers and headers events in uServer (#5460) (44ed73f)

Dependencies

• ws@~8.18.3 (no change)

engine.io-client@6.6.4

This release contains a bump of:

• ws from ~8.17.1 to ~8.18.3
• debug from ~4.3.1 to ~4.4.1

Bug Fixes

• properly handle port option (#5241) (1da9cdd)

... (truncated)

Commits

• ffe51e2 chore(release): engine.io@6.6.8
• f86b95f fix(eio): clean up resources upon WebTransport handshake failure
• 4276e59 refactor(eio): fix typo in the cookie option
• 5257ef9 chore(deps): upgrade to ws@8.20.1 (#5439)
• 439a8f6 chore(release): engine.io@6.6.7
• fc11285 fix(eio): close HTTP requests with invalid content type
• b059af6 refactor(eio): use plain IncomingMessage in the public API
• 4e85378 docs: fix various typos in test and documentation (#5481)
• d1f5aa9 fix(eio): prevent WebTransport connections when a middleware is registered
• b785377 docs: fix typos in the release notes
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for engine.io since your current version.

Updates socket.io-adapter from 2.5.2 to 2.5.7

Release notes

Sourced from socket.io-adapter's releases.

socket.io-adapter@2.5.7

The ws dependency was bumped to ~8.20.1 following CVE-2026-45736.

Note from the ws maintainers:

Although the calculated CVSS severity is medium, the actual severity is believed to be low, as the flaw is only exploitable through misuse that is unlikely in practice.

Bug Fixes

• do not skip local broadcast when publishAndReturnOffset throws (#5457) (f630158)

socket.io-adapter@2.5.6

This release contains a bump of:

• ws from ~8.17.1 to ~8.18.3
• debug from ~4.3.1 to ~4.4.1

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for socket.io-adapter since your current version.