mirror of
https://github.com/yu-i-i/overleaf-cep.git
synced 2026-11-12 21:23:45 +01:00
5dccf3b62c
* bump socket.io-client to overleaf fork 0.9.17-overleaf-6 Fixes GHSA-96hv-2xvq-fx4p (ws memory exhaustion DoS) by bumping the overleaf/socket.io-client fork to a version that declares ws@^8.21.0 instead of ws@^1.1.5. The existing ws@npm:^8 resolution pins it to 8.21.0, removing ws@1.1.5 from yarn.lock entirely. Depends on overleaf/socket.io-client#6. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * use 0.9.17-overleaf-6 tag for socket.io-client Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * use the socket.io-client-0.9.17-overleaf-6 release * provide ws module for real-time acceptance tests --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: Brian Gough <briangough@users.noreply.github.com> Co-authored-by: Brian Gough <brian.gough@overleaf.com> GitOrigin-RevId: 2d9a42f90bcf95a3a8f053df4c0092c4fbc26422