Update socket.io dependency version from 4.6.0 to 4.7.0 in package.json and package-lock.json

[sumansaurabh]

User description

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• server/package.json
• server/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Uncaught Exception SNYK-JS-SOCKETIO-7278048	721
	Denial of Service (DoS) SNYK-JS-WS-7266574	696

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Uncaught Exception

---

Description

• Updated socket.io dependency from version 4.6.0 to 4.7.0 in both package.json and package-lock.json
• Updated other dependencies in package-lock.json to their latest versions

---

Changes walkthrough 📝

Relevant files

Bug fix

package-lock.json Updated dependencies versions in package-lock.json              server/package-lock.json ['Updated socket.io dependency from version 4.6.0 to 4.7.0 in node_modules', 'Updated @socket.io/component-emitter to version 3.1.2', 'Updated @types/cors to version 2.8.17', 'Updated @types/node to version 20.14.6'] +84/-37  package.json Update socket.io dependency version in package.json            server/package.json ['Updated socket.io dependency from version 4.6.0 to 4.7.0'] +1/-1

[penify-dev]

PR Review 🔍

⏱️ Estimated effort to review [1-5]	2, because the PR mainly involves updating the socket.io dependency version in package.json and package-lock.json, which is a straightforward task.
🧪 Relevant tests	No
⚡ Possible issues	No
🔒 Security concerns	No

[penify-dev]

PR Code Suggestions ✨

Category	Suggestion	Score
Best practice	Update the 'socket.io' dependency version to '4.7.0' without the caret (^) symbol Consider updating the 'socket.io' dependency version directly to '4.7.0' without the caret (^) symbol to ensure a fixed version. server/package.json [5] -"socket.io": "^4.7.0", +"socket.io": "4.7.0", Suggestion importance[1-10]: 8 Why: Removing the caret (^) symbol ensures a fixed version of the 'socket.io' dependency, which is a good practice to avoid unexpected updates.	8