Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade nats.ws from 1.2.0 to 1.5.0 #19

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade nats.ws from 1.2.0 to 1.5.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 9 versions ahead of your current version.
  • The recommended version was released a month ago, on 2021-11-11.
Release notes
Package name: nats.ws
  • 1.5.0 - 2021-11-11

    This release updates NBC to 1.4.0, there are a couple of small fixes and enhancements. Please see https://github.com/nats-io/nats.deno/releases/tag/v1.4.0 for a complete list of changes.

    What's Changed

    [UPDATE] nbc to 1.4.0

    Full Changelog: v1.4.1...v1.5.0

  • 1.4.2-1 - 2021-11-04
  • 1.4.1 - 2021-11-02

    What's Changed

    [UPDATE] nbc to v1.3.1 the base library has a few small fixes and adds additional JetStream functionality. See https://github.com/nats-io/nats.deno/releases/tag/v1.3.0 and https://github.com/nats-io/nats.deno/releases/tag/v1.3.0 for more information
    [CHORE] set node NODE_EXTRA_CA_CERTS to point to the cert to prevent rejection in #109
    [FIX] changed check on peek to insure we got data before processing connect from the server #114

    Full Changelog: v1.3.0...v1.4.1

  • 1.4.0 - 2021-11-01

    What's Changed

    [UPDATE] nbc to v1.3.0 the base library has a few small fixes and adds additional JetStream functionality. See https://github.com/nats-io/nats.deno/releases/tag/v1.3.0 for more information

    Full Changelog: v1.3.0...v1.4.0

  • 1.4.0-1 - 2021-11-01

    v1.4.0-1

  • 1.3.1-3 - 2021-10-19
  • 1.3.1-2 - 2021-10-01
  • 1.3.1-1 - 2021-10-01
  • 1.3.0 - 2021-08-25

    BREAKING CHANGES

    This release contains a set of changes that are API-breaking for JetStream. Since the JetStream APIs on the JavaScript clients are Preview, only the minor version of the client has been bumped. Because of these changes, you should carefully read the Breaking Changes section to ensure you are not affected.

    JetStream Push Consumers In Queue Groups

    The Push Consumer Queue feature has changed. A new nats-server (2.4.0) is in the works that modifies how this feature works.
    The new JavaScript clients have been modified to work with the new server and will fail to work with an existing server using push consumers with queue groups.

    Previously it was possible to create a push consumer and properly get it working in a queue group with a regular NatsConnection#subscribe or NatsConnection#jetstream()#subscribe() if all queue subscriptions used the same queue name and no plain (non-queue) subscriptions were used.

    If the mix of subscriptions and queues referenced the same consumer but provided different queue names or no queue names, the delivery of messages was incorrect and could create conditions where some messages were seen in duplicate or have unexpected side effects.

    The new nats-server changes will make an old consumer configuration with a queue group a noop - the server will not send messages to the client. To enable a queue group to work on a consumer:

    • The consumer configuration must specify a deliver_group matching the queue group name.
    • Configurations that use the consumer with a non-matching queue group will be invalid.
    • Configurations that use a queue group consumer without a queue group will be invalid.

    The nats client for JavaScript on 1.2.0 and beyond, enforces the above rules, so an Error is thrown from NatsConnection#jetstream().subscribe() for configurations that try to use the queue group incorrectly.

    Because an old server will not report deliver_group for the consumer, any jetstream#subscribe() that attempts to specify a queue group will fail the validation.

    If you are creating nats your own nats subscription to handle the consumer, and have an old server, you may continue to do that until you upgrade the server, at which point the nets-server will stop delivering messages to your client. Please do ensure that you don't use the consumer from different queue groups in the meanwhile.

    JetStreamManager#streams#getMessage(number)

    This API has been removed (it was deprecated and printing console messages). To retrieve a message by its sequence,
    replace with JetStreamManager#streams#getMessage({seq: number}).

    JetStream SequencePair was renamed SequenceInfo

    This matches changes in the server. These types are referenced from ConsumerInfo.

    Other Changes

    • [FEAT] Added DeliveryPolicy#LastPerSubject which allows a consumer to get the last message for each subject in a stream.

    • [FEAT] PubAck now reports a domain field representing the JetStream domain if set or returning an empty string. This feature requires a newer server.

    • [FIX] ConsumerConfig now have fields deliver_group, description.

  • 1.2.0 - 2021-07-02

    This release sports a number of updates enhancing the JavaScript JetStream functionality.
    For a complete list of changes, see https://github.com/nats-io/nats.deno/releases/tag/v1.1.0.

from nats.ws GitHub release notes
Commit messages
Package name: nats.ws
  • 4d7eeff [UPDATE] nbc to 1.4.0 (#121)
  • e9130ac [CHORE] referencing nbc main (#120)
  • 8f580e3 nbc handling of request exception rejecting rather than throwing (#119)
  • df205e6 1.4.0 (#118)
  • 62c113c Preparing for release (#117)
  • 9c0d3ba fixed check of protocol message on peek to insure that we didn't get an empty string. (#114)
  • 5e496bb set node NODE_EXTRA_CA_CERTS to point to the cert to prevent rejection (#109)
  • 02c6c69 preparing for 1.3.0 (#108)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant