[Snyk] Upgrade nats.ws from 1.2.0 to 1.5.0 #19
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade nats.ws from 1.2.0 to 1.5.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: nats.ws
This release updates NBC to 1.4.0, there are a couple of small fixes and enhancements. Please see https://github.com/nats-io/nats.deno/releases/tag/v1.4.0 for a complete list of changes.
What's Changed
[UPDATE] nbc to 1.4.0
Full Changelog: v1.4.1...v1.5.0
What's Changed
[UPDATE] nbc to v1.3.1 the base library has a few small fixes and adds additional JetStream functionality. See https://github.com/nats-io/nats.deno/releases/tag/v1.3.0 and https://github.com/nats-io/nats.deno/releases/tag/v1.3.0 for more information
[CHORE] set node NODE_EXTRA_CA_CERTS to point to the cert to prevent rejection in #109
[FIX] changed check on peek to insure we got data before processing connect from the server #114
Full Changelog: v1.3.0...v1.4.1
What's Changed
[UPDATE] nbc to v1.3.0 the base library has a few small fixes and adds additional JetStream functionality. See https://github.com/nats-io/nats.deno/releases/tag/v1.3.0 for more information
Full Changelog: v1.3.0...v1.4.0
v1.4.0-1
BREAKING CHANGES
This release contains a set of changes that are API-breaking for JetStream. Since the JetStream APIs on the JavaScript clients are Preview, only the minor version of the client has been bumped. Because of these changes, you should carefully read the Breaking Changes section to ensure you are not affected.
JetStream Push Consumers In Queue Groups
The Push Consumer Queue feature has changed. A new nats-server (2.4.0) is in the works that modifies how this feature works.
The new JavaScript clients have been modified to work with the new server and will fail to work with an existing server using push consumers with queue groups.
Previously it was possible to create a push consumer and properly get it working in a queue group with a regular
NatsConnection#subscribe
orNatsConnection#jetstream()#subscribe()
if all queue subscriptions used the same queue name and no plain (non-queue) subscriptions were used.If the mix of subscriptions and queues referenced the same consumer but provided different queue names or no queue names, the delivery of messages was incorrect and could create conditions where some messages were seen in duplicate or have unexpected side effects.
The new nats-server changes will make an old consumer configuration with a queue group a noop - the server will not send messages to the client. To enable a queue group to work on a consumer:
deliver_group
matching the queue group name.The nats client for JavaScript on 1.2.0 and beyond, enforces the above rules, so an Error is thrown from
NatsConnection#jetstream().subscribe()
for configurations that try to use the queue group incorrectly.Because an old server will not report
deliver_group
for the consumer, anyjetstream#subscribe()
that attempts to specify a queue group will fail the validation.If you are creating nats your own nats subscription to handle the consumer, and have an old server, you may continue to do that until you upgrade the server, at which point the nets-server will stop delivering messages to your client. Please do ensure that you don't use the consumer from different queue groups in the meanwhile.
JetStreamManager#streams#getMessage(number)
This API has been removed (it was deprecated and printing console messages). To retrieve a message by its sequence,
replace with
JetStreamManager#streams#getMessage({seq: number})
.JetStream
SequencePair
was renamedSequenceInfo
This matches changes in the server. These types are referenced from
ConsumerInfo
.Other Changes
[FEAT] Added
DeliveryPolicy#LastPerSubject
which allows a consumer to get the last message for each subject in a stream.[FEAT]
PubAck
now reports adomain
field representing the JetStream domain if set or returning an empty string. This feature requires a newer server.[FIX]
ConsumerConfig
now have fieldsdeliver_group
,description
.This release sports a number of updates enhancing the JavaScript JetStream functionality.
For a complete list of changes, see https://github.com/nats-io/nats.deno/releases/tag/v1.1.0.
Commit messages
Package name: nats.ws
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs