Skip to content

Update websocket-driver to patched version#176

Merged
adamdriscoll merged 1 commit into
mainfrom
adamdriscoll-fix-websocket-driver-alert
Jul 21, 2026
Merged

Update websocket-driver to patched version#176
adamdriscoll merged 1 commit into
mainfrom
adamdriscoll-fix-websocket-driver-alert

Conversation

@adamdriscoll

Copy link
Copy Markdown
Member

Dependabot flagged the VS Code extension lockfile because json-rpc2 resolves websocket-driver through faye-websocket at vulnerable version 0.7.4.

This updates the locked transitive websocket-driver package to 0.7.5, preserving the existing dependency graph while resolving the advisory.

Validation: npm audit no longer reports a websocket-driver vulnerability.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@adamdriscoll
adamdriscoll merged commit f940564 into main Jul 21, 2026
1 check passed
@adamdriscoll
adamdriscoll deleted the adamdriscoll-fix-websocket-driver-alert branch July 21, 2026 23:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant