6.0.0

This major release contains three important changes:

• the codebase was migrated to TypeScript (7245b80)
• rollup is now used instead of webpack to create the bundles (27de300)
• code that provided support for ancient browsers (think IE8) was removed (c656192 and b2c7381)

There is now three distinct builds (in the build/ directory):

• CommonJS
• ESM with debug
• ESM without debug (rationale here: 00d7e7d)

And three bundles (in the dist/ directory) :

• engine.io.js: unminified UMD bundle
• engine.io.min.js: minified UMD bundle
• engine.io.esm.min.js: ESM bundle

Please note that the communication protocol was not updated, so a v5 client will be able to reach a v6 server (and vice-versa).

Reference: https://github.com/socketio/engine.io-protocol

Features

• provide an ESM build without debug (00d7e7d)

BREAKING CHANGES

• the enableXDR option is removed (c656192)
• the jsonp and forceJSONP options are removed (b2c7381)

Links

• Diff: 5.2.0...6.0.0
• Server release: 6.0.0
• ws version: ~8.2.3 (diff)

5.2.0

Features

• add an option to use native timer functions (#672) (5d1d5be)

Links

• Diff: 5.1.2...5.2.0
• Server release: 5.2.0
• ws version: ~7.4.2

3.3.3

Bug Fixes

• bump xmlhttprequest-ssl to fix CVE-2021-31597 (d529e86)

Links

• Diff: 3.3.2...3.3.3
• Server release: -
• ws version: ~6.1.0

1.8.6

Bug Fixes

• bump xmlhttprequest-ssl to fix CVE-2021-31597 (#671)

Links

• Diff: 1.8.5...1.8.6
• Server release: -
• ws version: ~1.1.5

5.1.2

Bug Fixes

• emit ping when receiving a ping from the server (589d3ad)
• websocket: fix timer blocking writes (#670) (f30a10b)

Links

• Diff: 5.1.1...5.1.2
• Server release: -
• ws version: ~7.4.2

5.1.1

Bug Fixes

• fix JSONP transport on IE9 (bddd992)

Links

• Diff: 5.1.0...5.1.1
• Server release: -
• ws version: ~7.4.2

4.1.4

This release only contains a bump of xmlhttprequest-ssl, in order to fix the following vulnerability: https://www.npmjs.com/advisories/1665.

Please note that engine.io-client was not directly impacted by this vulnerability, since we are always using async: true.

Links

• Diff: 4.1.3...4.1.4
• Server release: -
• ws version: ~7.4.2

3.5.2

This release only contains a bump of xmlhttprequest-ssl, in order to fix the following vulnerability: https://www.npmjs.com/advisories/1665.

Please note that engine.io-client was not directly impacted by this vulnerability, since we are always using async: true.

Links

• Diff: 3.5.1...3.5.2
• Server release: -
• ws version: ~7.4.2

5.1.0

Features

• add the "closeOnBeforeunload" option (dcb85e9)

Links

• Diff: 5.0.1...5.1.0
• Server release: 5.1.0
• ws version: ~7.4.2

5.0.1

Bug Fixes

• ignore packets when the transport is silently closed (d291a4c)

Links

• Diff: 5.0.0...5.0.1
• Server release: -
• ws version: ~7.4.2