Got version 9.6.0 introduces subtle but important updates compared to its predecessor, 9.5.1. Primarily, developers will notice changes within the devDependencies section, showcasing an evolution in the tooling used for development and testing. The ava testing framework is upgraded from version 1.0.1 to 1.1.0, potentially bringing improved testing capabilities and bug fixes. Furthermore, xo, a linter, sees an upgrade from version 0.23.0 to 0.24.0, suggesting enhanced code quality enforcement and adherence to modern JavaScript standards. Crucially, tough-cookie, a dependency used for managing HTTP cookies, moves from version 2.4.3 to version 3.0.0, indicating potentially breaking changes in cookie handling, improved security features, and adherence to the latest cookie specifications that developers should be aware about. From the dependencies section there are no major changes.
The dist object reveals that version 9.6.0 has unpackedSize of 85411, slightly larger than 9.5.1 with 83728,suggesting minor additions or modifications to the codebase. Finally, developers benefit from an updated release date, meaning they are using the latest improvements and bug fixes available, and may benefit from enhanced security features . Overall, these updates suggest a continued commitment to code quality, stability, security and adherence to modern development practices.
All the vulnerabilities related to the version 9.6.0 of the package
Got allows a redirect to a UNIX socket
The got package before 11.8.5 and 12.1.0 for Node.js allows a redirect to a UNIX socket.