Vulnerable dependency: ws via jsdom

[lsim]

Check for duplicates

• I have searched for similar issues before opening a new one.

Description

Please see following snyk report: https://security.snyk.io/vuln/SNYK-JS-WS-7266574

Looks like your jsdom is lagging behind a fair bit.

Reproduction steps

Stack trace

No response

Screenshots

Browsers

No response

[BeksOmega]

Thanks for reporting this @lsim!

For team folks: It looks like we held v23 of jsdom until v11 of Blockly because it dropped node 16 support (relevant PR). Since v24 of jsdom doesn't do that, I think we can release a new version of Blockly with the updated jsdom whenever.

[gonfunko]

jsdom and ws have both been updated in Blockly 11.2. ws is now at 8.18.0, which is out of the vulnerable range. Thanks for flagging!