chore(deps-dev): bump ws from 8.19.0 to 8.20.1

[dependabot]

Bumps ws from 8.19.0 to 8.20.1.

Release notes

Sourced from ws's releases.

8.20.1

Bug fixes

• Fixed an uninitialized memory disclosure issue in websocket.close() (c0327ec1).

Providing a TypedArray (e.g. Float32Array) as the reason argument for websocket.close(), rather than the supported string or Buffer types, caused uninitialized memory to be disclosed to the remote peer.

import { deepStrictEqual } from 'node:assert';
import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer(
{ port: 0, skipUTF8Validation: true },
function () {
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port}, {
skipUTF8Validation: true
});
ws.on('close', function (code, reason) {
  deepStrictEqual(reason, Buffer.alloc(80));
});

}
);
wss.on('connection', function (ws) {
ws.close(1000, new Float32Array(20));
});

The issue was privately reported by Nikita Skovoroda.

8.20.0

Features

• Added exports for the PerMessageDeflate class and utilities for the Sec-WebSocket-Extensions and Sec-WebSocket-Protocol headers (d3503c1f).

Commits

• 5d9b316 [dist] 8.20.1
• c0327ec [security] Fix uninitialized memory disclosure in websocket.close()
• ce2a3d6 [ci] Test on node 26
• 58e45b8 [ci] Do not test on node 25
• 5f26c24 [ci] Run the lint step on node 24
• 8439255 [dist] 8.20.0
• d3503c1 [minor] Export the PerMessageDeflate class and header utils
• 3ee5349 [api] Convert the isServer and maxPayload parameters to options
• 91707b4 [doc] Add missing space
• 8b55319 [pkg] Update eslint to version 10.0.1
• Additional commits viewable in compare view

[cloudflare-workers-and-pages]

Deploying orpc with    Cloudflare Pages

Latest commit:	eceb3d8
Status:	✅  Deploy successful!
Preview URL:	https://9a908615.orpc-4zt.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-ws-8.orpc-4zt.pages.dev

View logs

[pkg-pr-new]

More templates

• @orpc/astro-playground
• @orpc/browser-extension-playground
• @orpc/bun-websocket-otel-playground
• @orpc/cloudflare-worker-playground
• @orpc/contract-first-playground
• @orpc/electron-playground
• @orpc/nest-playground
• @orpc/next-playground
• @orpc/nuxt-playground
• @orpc/solid-start-playground
• @orpc/svelte-kit-playground
• @orpc/tanstack-start-playground

@orpc/ai-sdk

npm i https://pkg.pr.new/@orpc/ai-sdk@1566

@orpc/arktype

npm i https://pkg.pr.new/@orpc/arktype@1566

@orpc/client

npm i https://pkg.pr.new/@orpc/client@1566

@orpc/contract

npm i https://pkg.pr.new/@orpc/contract@1566

@orpc/experimental-durable-iterator

npm i https://pkg.pr.new/@orpc/experimental-durable-iterator@1566

@orpc/hey-api

npm i https://pkg.pr.new/@orpc/hey-api@1566

@orpc/interop

npm i https://pkg.pr.new/@orpc/interop@1566

@orpc/json-schema

npm i https://pkg.pr.new/@orpc/json-schema@1566

@orpc/nest

npm i https://pkg.pr.new/@orpc/nest@1566

@orpc/openapi

npm i https://pkg.pr.new/@orpc/openapi@1566

@orpc/openapi-client

npm i https://pkg.pr.new/@orpc/openapi-client@1566

@orpc/otel

npm i https://pkg.pr.new/@orpc/otel@1566

@orpc/experimental-pino

npm i https://pkg.pr.new/@orpc/experimental-pino@1566

@orpc/experimental-publisher

npm i https://pkg.pr.new/@orpc/experimental-publisher@1566

@orpc/experimental-publisher-durable-object

npm i https://pkg.pr.new/@orpc/experimental-publisher-durable-object@1566

@orpc/experimental-ratelimit

npm i https://pkg.pr.new/@orpc/experimental-ratelimit@1566

@orpc/react

npm i https://pkg.pr.new/@orpc/react@1566

@orpc/react-query

npm i https://pkg.pr.new/@orpc/react-query@1566

@orpc/experimental-react-swr

npm i https://pkg.pr.new/@orpc/experimental-react-swr@1566

@orpc/server

npm i https://pkg.pr.new/@orpc/server@1566

@orpc/shared

npm i https://pkg.pr.new/@orpc/shared@1566

@orpc/solid-query

npm i https://pkg.pr.new/@orpc/solid-query@1566

@orpc/standard-server

npm i https://pkg.pr.new/@orpc/standard-server@1566

@orpc/standard-server-aws-lambda

npm i https://pkg.pr.new/@orpc/standard-server-aws-lambda@1566

@orpc/standard-server-fastify

npm i https://pkg.pr.new/@orpc/standard-server-fastify@1566

@orpc/standard-server-fetch

npm i https://pkg.pr.new/@orpc/standard-server-fetch@1566

@orpc/standard-server-node

npm i https://pkg.pr.new/@orpc/standard-server-node@1566

@orpc/standard-server-peer

npm i https://pkg.pr.new/@orpc/standard-server-peer@1566

@orpc/svelte-query

npm i https://pkg.pr.new/@orpc/svelte-query@1566

@orpc/tanstack-query

npm i https://pkg.pr.new/@orpc/tanstack-query@1566

@orpc/trpc

npm i https://pkg.pr.new/@orpc/trpc@1566

@orpc/valibot

npm i https://pkg.pr.new/@orpc/valibot@1566

@orpc/vue-colada

npm i https://pkg.pr.new/@orpc/vue-colada@1566

@orpc/vue-query

npm i https://pkg.pr.new/@orpc/vue-query@1566

@orpc/zod

npm i https://pkg.pr.new/@orpc/zod@1566

commit: c925d01

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!