Merge pull request mqttjs#1307 from mqttjs/security-update

Yoseph Maguire · web-flow · commit 689d89b7c403 · 2021-08-02T09:32:36.000-07:00
fix: security vulnerability in ws stream
diff --git a/package.json b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "mqtt",
   "description": "A library for the MQTT protocol",
-  "version": "2.18.8",
+  "version": "2.18.9",
   "contributors": [
     "Adam Rudd <adamvrr@gmail.com>",
     "Matteo Collina <matteo.collina@gmail.com> (https://github.com/mcollina)"
@@ -33,10 +33,6 @@
     "sauce-test": "zuul --server test/browser/server.js --tunnel ngrok -- test/browser/test.js",
     "ci": "npm run tslint && npm run typescript-test && npm run test && codecov"
   },
-  "pre-commit": [
-    "test",
-    "tslint"
-  ],
   "bin": {
     "mqtt_pub": "./bin/pub.js",
     "mqtt_sub": "./bin/sub.js",
@@ -75,7 +71,7 @@
     "readable-stream": "^2.3.6",
     "reinterval": "^1.1.0",
     "split2": "^2.1.1",
-    "websocket-stream": "^5.1.2",
+    "websocket-stream": "~5.2.0",
     "xtend": "^4.0.1"
   },
   "devDependencies": {
