Merge pull request #14069 from pabloaguilarmartinez/engineio-cookie-v…

…ulnerability-update

build(socket.io): update engine.io dependencies for cookie vulnerability

package.json

@@ -72,7 +72,7 @@
     "path-to-regexp": "3.2.0",
     "reflect-metadata": "0.2.2",
     "rxjs": "7.8.1",
-    "socket.io": "4.7.5",
+    "socket.io": "4.8.0",
     "tslib": "2.7.0",
     "uid": "2.0.2",
     "uuid": "10.0.0"
@@ -124,7 +124,7 @@
     "core-js": "3.38.1",
     "coveralls": "3.1.1",
     "delete-empty": "3.0.0",
-    "engine.io-client": "6.6.0",
+    "engine.io-client": "6.6.1",
     "eslint": "8.57.1",
     "eslint-config-prettier": "9.1.0",
     "eslint-plugin-import": "2.29.1",
@@ -163,7 +163,7 @@
     "rxjs-compat": "6.6.7",
     "sinon": "19.0.2",
     "sinon-chai": "3.7.0",
-    "socket.io-client": "4.7.5",
+    "socket.io-client": "4.8.0",
     "subscriptions-transport-ws": "0.11.0",
     "supertest": "7.0.0",
     "ts-morph": "23.0.0",

packages/platform-socket.io/package.json

@@ -18,7 +18,7 @@
     "access": "public"
   },
   "dependencies": {
-    "socket.io": "4.7.5",
+    "socket.io": "4.8.0",
     "tslib": "2.7.0"
   },
   "peerDependencies": {