[Snyk] Upgrade mqtt from 4.2.6 to 4.2.8

[snyk-bot]

Snyk has created this PR to upgrade mqtt from 4.2.6 to 4.2.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2021-06-21.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	265/1000 Why? CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mqtt

• 4.2.8 - 2021-06-21
  

  release: 4.2.8

• 4.2.7 - 2021-06-21
  

  release: 4.2.7

• 4.2.6 - 2020-11-25
  

  This release is a patch update to rollback buggy changes from an earlier release.

  📚 PR:
  fix(websockets): revert URL WHATWG changes (#1217)

from mqtt GitHub release notes

Commit messages

Package name: mqtt

• 9be3e3d 4.2.8
• 4c15f31 Merge pull request ⚡ Add filters to all get:All operations #1292 from mqttjs/fix-ws-vulnerability
• 9979443 fix: websocket and typescript
• cc82753 Merge pull request ⚡Fetch observable data types from TheHive API #1291 from mqttjs/release_6_21_2021
• e6fc579 release: 4.2.7
• 6d817af Merge pull request ⚡ Add label field to persons, organizations and deals #1209 from nosovk/patch-3
• 185307e Merge pull request Add E-goi Node #1224 from cameronelliott/master
• c8cebbf Merge pull request Different results when executing single node vs full workflow (HTML extraction issue?) #1256 from nmggithub/master
• f3401a7 Update client-options.d.ts
• 6308dea Merge branch 'master' into master
• be17dd7 Merge pull request Add credentials documentation link #1236 from ogis-yamazaki/fix_multi_protocol_test_mechanism
• 949e22a remove 10.x from gate
• 71dae75 Merge pull request Added includeEmptyCells to Spreadsheet node #1249 from bkp7/bkp7-typescript-changes
• 59d257a Merge pull request Feature/slack node extended #1239 from ogis-yamazaki/fix_close_websocket_stream
• 0725798 Merge pull request ⚡ Add task:getAll and subtask:create #1266 from simnalamburt/duplexify
• acb6117 Merge branch 'master' into duplexify
• a9d269b Merge pull request Amqp connection parameters #1289 from LaurentGoderre/fix-production-vulnerability
• 8ef5ffc Fix production vulnerability
• 845561e Add missing 'duplexify' dependency
• d93c193 The stream's _writableState may still be false when the WebSocket close event occurs.
• 51c5c02 improved type definition for 'wsOptions'
• 61bcbe6 fix missing event types
• 2203585 reverse out changes to client.d.ts
• 063aa31 change reference to mqtt-packet v6.8.0

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[janober]

Got updated with bf6ef3b