Upgrade socket.io version to 4.7.0 in package.json and package-lock.json

[sumansaurabh]

User description

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• server/package.json
• server/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Denial of Service (DoS) SNYK-JS-WS-7266574	768
	Uncaught Exception SNYK-JS-SOCKETIO-7278048	721

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Uncaught Exception

---

Description

• Updated socket.io version from 4.6.0 to 4.7.0 in both package.json and package-lock.json
• Updated other dependencies versions in package-lock.json

---

Changes walkthrough 📝

Relevant files

Enhancement

package-lock.json Updated dependencies versions in package-lock.json              server/package-lock.json ['Updated socket.io version from 4.6.0 to 4.7.0 in node_modules', 'Updated @socket.io/component-emitter version to 3.1.2', 'Updated @types/cors version to 2.8.17', 'Updated @types/node version to 20.14.6 with added dependency undici-types'] +84/-37  package.json Updated socket.io version in package.json                                server/package.json ['Updated socket.io version from 4.6.0 to 4.7.0'] +1/-1

[penify-dev]

PR Review 🔍

⏱️ Estimated effort to review [1-5]	2, because the PR simply upgrades the socket.io version in package.json and package-lock.json, which is a straightforward task.
🧪 Relevant tests	No
⚡ Possible issues	No
🔒 Security concerns	No

[penify-dev]

PR Code Suggestions ✨

Category	Suggestion	Score
Best practice	Update the 'socket.io' dependency version to 4.7.0 Consider updating the 'socket.io' dependency version to 4.7.0 in the package.json file. server/package.json [5] +"socket.io": "^4.7.0", - Suggestion importance[1-10]: 8 Why: Updating the 'socket.io' dependency to version 4.7.0 aligns with best practices and ensures compatibility with the latest features and fixes.	8