Update socket.io dependency version to 4.7.0 in package.json and package-lock.json

[sumansaurabh]

User description

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• server/package.json
• server/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Denial of Service (DoS) SNYK-JS-WS-7266574	768
	Uncaught Exception SNYK-JS-SOCKETIO-7278048	721

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Uncaught Exception

---

Description

• Updated socket.io dependency version from 4.6.0 to 4.7.0 in both package.json and package-lock.json.
• Updated other related dependencies to compatible versions.

---

Changes walkthrough 📝

Relevant files

Bug fix

package-lock.json Updated dependencies versions in package-lock.json              server/package-lock.json ['Updated socket.io dependency version from 4.6.0 to 4.7.0', 'Updated @socket.io/component-emitter version to 3.1.2', 'Updated @types/cors version to 2.8.17', 'Updated @types/node version to 20.14.6'] +84/-37  package.json Update socket.io dependency version in package.json            server/package.json ['Updated socket.io dependency version from 4.6.0 to 4.7.0'] +1/-1

[penify-dev]

PR Review 🔍

⏱️ Estimated effort to review [1-5]	2, because the PR mainly involves updating the socket.io dependency version in package.json and package-lock.json, which is a straightforward task.
🧪 Relevant tests	No
⚡ Possible issues	No
🔒 Security concerns	No

[penify-dev]

PR Code Suggestions ✨

Category	Suggestion	Score
Best practice	Update the 'socket.io' dependency version to '4.7.0' without using the caret symbol Consider updating the 'socket.io' dependency version directly to '4.7.0' in the 'package.json' file to ensure consistency and clarity. server/package.json [5] -"socket.io": "^4.7.0", +"socket.io": "4.7.0", Suggestion importance[1-10]: 8 Why: Updating the 'socket.io' dependency version to '4.7.0' without using the caret symbol is a good practice for consistency and clarity in the dependencies.	8