fix(deps): update dependency webtorrent to v2

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
webtorrent (source)	1.9.7 -> 2.5.0

---

Release Notes

webtorrent/webtorrent (webtorrent)

v2.5.0

Compare Source

Features

• drop IDB (#​2851) (dc26aa6)

2.4.15 (2024-08-03)

Bug Fixes

• custom length file buffer (#​2843) (5d40ad1)

2.4.14 (2024-07-28)

Bug Fixes

• deps: update dependency debug to ^4.3.6 (c6dde2c)

2.4.13 (2024-07-28)

Bug Fixes

• deps: update webtorrent (9eb656f)

2.4.12 (2024-07-17)

Bug Fixes

• deps: update dependency @​thaunknown/simple-peer to ^10.0.10 (09d7ea0)

2.4.11 (2024-06-29)

Bug Fixes

• revert "fix: drop IDB chunk store (#​2553)" (#​2828) (348fba5)

2.4.10 (2024-06-29)

Bug Fixes

• force streamx version (#​2826) (1f96952)

2.4.9 (2024-06-29)

Bug Fixes

• deps: update dependency @​thaunknown/simple-peer to ^10.0.9 (fc54e8e)

2.4.8 (2024-06-29)

Bug Fixes

• drop IDB chunk store (#​2553) (18a4683)

2.4.7 (2024-06-29)

Bug Fixes

• deps: update dependency parse-torrent to ^11.0.17 (72f4abc)

2.4.6 (2024-06-29)

Bug Fixes

• revert streamx to 2.17 (#​2819) (f4465d0)

2.4.5 (2024-06-29)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.13 (d596da6)

2.4.4 (2024-06-28)

Bug Fixes

• deps: update dependency streamx to ^2.18.0 (#​2798) (20e18b3)

2.4.3 (2024-06-28)

Bug Fixes

• deps: update dependency @​thaunknown/simple-peer to ^10.0.8 (27e34e5)
• deps: update dependency hybrid-chunk-store to ^1.2.6 (#​2818) (478c691)

2.4.2 (2024-06-22)

Bug Fixes

• allow client level default trackers to be set (#​2815) (a0e056d)

2.4.1 (2024-06-13)

v2.4.15

Compare Source

Bug Fixes

• custom length file buffer (#​2843) (5d40ad1)

v2.4.14

Compare Source

Bug Fixes

• deps: update dependency debug to ^4.3.6 (c6dde2c)

v2.4.13

Compare Source

Bug Fixes

• deps: update webtorrent (9eb656f)

v2.4.12

Compare Source

Bug Fixes

• deps: update dependency @​thaunknown/simple-peer to ^10.0.10 (09d7ea0)

v2.4.11

Compare Source

Bug Fixes

• revert "fix: drop IDB chunk store (#​2553)" (#​2828) (348fba5)

v2.4.10

Compare Source

Bug Fixes

• force streamx version (#​2826) (1f96952)

v2.4.9

Compare Source

Bug Fixes

• deps: update dependency @​thaunknown/simple-peer to ^10.0.9 (fc54e8e)

v2.4.8

Compare Source

Bug Fixes

• drop IDB chunk store (#​2553) (18a4683)

v2.4.7

Compare Source

Bug Fixes

• deps: update dependency parse-torrent to ^11.0.17 (72f4abc)

v2.4.6

Compare Source

Bug Fixes

• revert streamx to 2.17 (#​2819) (f4465d0)

v2.4.5

Compare Source

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.13 (d596da6)

v2.4.4

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.18.0 (#​2798) (20e18b3)

v2.4.3

Compare Source

Bug Fixes

• deps: update dependency @​thaunknown/simple-peer to ^10.0.8 (27e34e5)
• deps: update dependency hybrid-chunk-store to ^1.2.6 (#​2818) (478c691)

v2.4.2

Compare Source

Bug Fixes

• allow client level default trackers to be set (#​2815) (a0e056d)

v2.4.1

Compare Source

Bug Fixes

• custom length file buffer (#​2843) (5d40ad1)

v2.4.0

Compare Source

Features

• add opts.seedOutgoingConnections to allow controlling outbound connections for seeding. (#​2803) (d40616f)

2.3.6 (2024-06-02)

Bug Fixes

• deps: update webtorrent to ^11.0.6 (63061c6)

2.3.5 (2024-06-01)

Bug Fixes

• deps: update dependency torrent-discovery to ^11.0.5 (4742c01)

2.3.4 (2024-06-01)

Bug Fixes

• deps: update webtorrent (6ff995f)

2.3.3 (2024-06-01)

Bug Fixes

• deps: update dependency debug to ^4.3.5 (4a47201)

2.3.2 (2024-05-25)

Bug Fixes

• deps: update dependency bitfield to ^4.2.0 (#​2730) (867e4f2)

2.3.1 (2024-05-23)

Bug Fixes

• deps: update dependency uint8-util to ^2.2.5 (#​2784) (3c3993f)

v2.3.6

Compare Source

Bug Fixes

• deps: update webtorrent to ^11.0.6 (63061c6)

v2.3.5

Compare Source

Bug Fixes

• deps: update dependency torrent-discovery to ^11.0.5 (4742c01)

v2.3.4

Compare Source

Bug Fixes

• deps: update webtorrent (6ff995f)

v2.3.3

Compare Source

Bug Fixes

• deps: update dependency debug to ^4.3.5 (4a47201)

v2.3.2

Compare Source

Bug Fixes

• deps: update dependency bitfield to ^4.2.0 (#​2730) (867e4f2)

v2.3.1

Compare Source

Bug Fixes

• deps: update dependency uint8-util to ^2.2.5 (#​2784) (3c3993f)

v2.3.0

Compare Source

Features

• Built-in-webrtc (#​2786) (c693f9e)

2.2.2 (2024-05-23)

Bug Fixes

• deps: update dependency torrent-discovery to ^11.0.4 (9841d3d)

2.2.1 (2024-03-26)

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.4 (#​2764) (9ce6188)

v2.2.2

Compare Source

Bug Fixes

• deps: update dependency torrent-discovery to ^11.0.4 (9841d3d)

v2.2.1

Compare Source

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.4 (#​2764) (9ce6188)

v2.2.0

Compare Source

Features

• Refactor selections with non-overlapping data structure (#​2757) (467f30c)

2.1.37 (2024-03-04)

Bug Fixes

• deps: update dependency streamx to ^2.16.1 (#​2752) (33e87e2)

2.1.36 (2024-02-09)

Bug Fixes

• deps: update dependency create-torrent to ^6.0.17 (54f6add)

2.1.35 (2024-02-04)

Bug Fixes

• deps: update dependency streamx to ^2.15.7 (#​2748) (13b135f)

2.1.34 (2024-01-16)

Bug Fixes

• deps: update webtorrent (0585322)

2.1.33 (2024-01-12)

Bug Fixes

• malformed debug ID (#​2733) (2453316)

2.1.32 (2023-12-12)

Bug Fixes

• deps: update dependency create-torrent to ^6.0.16 (97c0af1)

2.1.31 (2023-12-11)

Bug Fixes

• deps: update dependency streamx to ^2.15.6 (#​2715) (3f4a80f)

2.1.30 (2023-11-30)

Bug Fixes

• deps: update dependency streamx to ^2.15.5 (#​2695) (262e1e5)

2.1.29 (2023-11-12)

Bug Fixes

• chromeapp build (#​2704) (ed9f368)

2.1.28 (2023-11-09)

Bug Fixes

• deps: update dependency torrent-discovery to v11 (#​2702) (62ff1bf)

2.1.27 (2023-10-03)

Bug Fixes

• deps: update dependency uint8-util to ^2.2.4 (#​2653) (26ab5d3)

2.1.26 (2023-10-02)

Bug Fixes

• incorrect File.stream() object this reference (#​2672) (8577a47)

2.1.25 (2023-08-11)

Bug Fixes

• deps: update webtorrent (1639c0e)

2.1.24 (2023-08-11)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.11 (701280f)

2.1.23 (2023-08-10)

Bug Fixes

• deps: update dependency create-torrent to ^6.0.14 (d7e81ea)

2.1.22 (2023-08-10)

Bug Fixes

• deps: update webtorrent (d447f8c)

2.1.21 (2023-08-10)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.10 (0c60f65)

2.1.20 (2023-08-10)

Bug Fixes

• deps: update dependency ut_metadata to ^4.0.3 (c62044a)

2.1.19 (2023-08-10)

Bug Fixes

• deps: update webtorrent (4a60108)

2.1.18 (2023-08-09)

Bug Fixes

• deps: update dependency streamx to ^2.15.1 (#​2593) (260fca8)

2.1.17 (2023-08-06)

Bug Fixes

• deps: update webtorrent (9ad7e9b)

2.1.16 (2023-07-30)

Bug Fixes

• deps: update dependency uint8-util to ^2.2.2 (#​2633) (8478be4)

2.1.15 (2023-07-24)

Bug Fixes

• deps: update webtorrent (f9b34d6)

2.1.14 (2023-07-23)

Bug Fixes

• deps: update dependency torrent-piece to v3 (#​2623) (7fb7afa)

2.1.13 (2023-07-19)

Bug Fixes

• deps: update dependency @​silentbot1/nat-api to ^0.4.7 (#​2619) (a44286c)

2.1.12 (2023-07-05)

Bug Fixes

• perf: faster stream resolution (#​2607) (e692270)

2.1.11 (2023-06-17)

Performance Improvements

• drop buffer (#​2596) (7679994)

2.1.10 (2023-06-17)

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.2 (#​2595) (b04cc7a)

2.1.9 (2023-06-17)

Bug Fixes

• deps: update webtorrent (#​2592) (0c62c36)

2.1.8 (2023-06-16)

Performance Improvements

• use peer/lite (#​2591) (4e853f0)

2.1.7 (2023-06-16)

Bug Fixes

• deps: update webtorrent (#​2590) (01865c0)

2.1.6 (2023-06-16)

Performance Improvements

• use path-esm as polyfill for path (#​2587) (6e08b00)

2.1.5 (2023-06-16)

Bug Fixes

• deps: update dependency @​thaunknown/simple-peer to ^9.12.1 (#​2588) (9ea487b)

2.1.4 (2023-06-16)

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.1 (#​2589) (f482419)

2.1.3 (2023-06-16)

Bug Fixes

• deps: update dependency streamx to ^2.14.3 (#​2583) (d68ea94)

2.1.2 (2023-06-16)

Bug Fixes

• deps: update dependency fs-chunk-store to ^4.1.0 (c9103bf)

2.1.1 (2023-06-15)

Bug Fixes

• Revert "fix: correctly destroy piped streams in server" (#​2585) (e3c9269), closes #​2565

v2.1.37

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.16.1 (#​2752) (33e87e2)

v2.1.36

Compare Source

Bug Fixes

• deps: update dependency create-torrent to ^6.0.17 (54f6add)

v2.1.35

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.15.7 (#​2748) (13b135f)

v2.1.34

Compare Source

Bug Fixes

• deps: update webtorrent (0585322)

v2.1.33

Compare Source

Bug Fixes

• malformed debug ID (#​2733) (2453316)

v2.1.32

Compare Source

Bug Fixes

• deps: update dependency create-torrent to ^6.0.16 (97c0af1)

v2.1.31

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.15.6 (#​2715) (3f4a80f)

v2.1.30

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.15.5 (#​2695) (262e1e5)

v2.1.29

Compare Source

Bug Fixes

• chromeapp build (#​2704) (ed9f368)

v2.1.28

Compare Source

Bug Fixes

• deps: update dependency torrent-discovery to v11 (#​2702) (62ff1bf)

v2.1.27

Compare Source

Bug Fixes

• deps: update dependency uint8-util to ^2.2.4 (#​2653) (26ab5d3)

v2.1.26

Compare Source

Bug Fixes

• incorrect File.stream() object this reference (#​2672) (8577a47)

v2.1.25

Compare Source

Bug Fixes

• deps: update webtorrent (1639c0e)

v2.1.24

Compare Source

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.11 (701280f)

v2.1.23

Compare Source

Bug Fixes

• deps: update dependency create-torrent to ^6.0.14 (d7e81ea)

v2.1.22

Compare Source

Bug Fixes

• deps: update webtorrent (d447f8c)

v2.1.21

Compare Source

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.10 (0c60f65)

v2.1.20

Compare Source

Bug Fixes

• deps: update dependency ut_metadata to ^4.0.3 (c62044a)

v2.1.19

Compare Source

Bug Fixes

• deps: update webtorrent (4a60108)

v2.1.18

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.15.1 (#​2593) (260fca8)

v2.1.17

Compare Source

Bug Fixes

• deps: update webtorrent (9ad7e9b)

v2.1.16

Compare Source

Bug Fixes

• deps: update dependency uint8-util to ^2.2.2 (#​2633) (8478be4)

v2.1.15

Compare Source

Bug Fixes

• deps: update webtorrent (f9b34d6)

v2.1.14

Compare Source

Bug Fixes

• deps: update dependency torrent-piece to v3 (#​2623) (7fb7afa)

v2.1.13

Compare Source

Bug Fixes

• deps: update dependency @​silentbot1/nat-api to ^0.4.7 (#​2619) (a44286c)

v2.1.12

Compare Source

Bug Fixes

• perf: faster stream resolution (#​2607) (e692270)

v2.1.11

Compare Source

Performance Improvements

• drop buffer (#​2596) (7679994)

v2.1.10

Compare Source

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.2 (#​2595) (b04cc7a)

v2.1.9

Compare Source

Bug Fixes

• deps: update webtorrent (#​2592) (0c62c36)

v2.1.8

Compare Source

Performance Improvements

• use peer/lite (#​2591) (4e853f0)

v2.1.7

Compare Source

Bug Fixes

• deps: update webtorrent (#​2590) (01865c0)

v2.1.6

Compare Source

Performance Improvements

• use path-esm as polyfill for path (#​2587) (6e08b00)

v2.1.5

Compare Source

Bug Fixes

• deps: update dependency @​thaunknown/simple-peer to ^9.12.1 (#​2588) (9ea487b)

v2.1.4

Compare Source

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.1 (#​2589) (f482419)

v2.1.3

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.16.1 (#​2752) (33e87e2)

v2.1.2

Compare Source

Bug Fixes

• chromeapp build (#​2704) (ed9f368)

v2.1.1

Compare Source

Bug Fixes

• deps: update webtorrent (4a60108)

v2.1.0

Compare Source

Features

• update dependency streamx to ^2.14.1 (#​2580) (92df3a9)

2.0.37 (2023-06-08)

Bug Fixes

• dont encode url path (#​2573) (13ad0fb)

2.0.36 (2023-06-08)

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.11 (9415322)

2.0.35 (2023-06-07)

Bug Fixes

• deps: update dependency semantic-release to v21 (#​2510) (e74b843)

2.0.34 (2023-06-05)

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.10 (#​2569) (31796f8)

2.0.33 (2023-06-05)

Bug Fixes

• deps: update dependency streamx to ^2.14.0 (#​2568) (29f412a)

2.0.32 (2023-06-05)

Bug Fixes

• deps: update dependency streamx to ^2.13.3 (#​2562) (11f86db)

2.0.31 (2023-06-05)

Bug Fixes

• correctly destroy piped streams in server (#​2565) (86eda0a)

2.0.30 (2023-06-05)

Bug Fixes

• utp support bundlers and preprocessors (#​2564) (8b13937)

2.0.29 (2023-06-04)

Bug Fixes

• utp (#​2561) (e4b2e34)

2.0.28 (2023-06-03)

Bug Fixes

• attempt to fix saucelabs CI (#​2557) (c89c27d)

2.0.27 (2023-05-31)

Bug Fixes

• deps: update dependency lt_donthave to v2 (#​2555) (21e5007)

2.0.26 (2023-05-31)

Bug Fixes

• deps: update dependency parse-torrent to ^11.0.12 (2766f6f)

2.0.25 (2023-05-30)

Bug Fixes

• drop simple-concat (#​2552) (1243a76)

2.0.24 (2023-05-30)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.7 (#​2551) (da87d38)

2.0.23 (2023-05-28)

Bug Fixes

• drop randombytes (#​2546) (06b6548)

2.0.22 (2023-05-27)

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.9 (#​2545) (e28a7ba)

2.0.21 (2023-05-27)

Performance Improvements

• reduce the impact of request idle callback (#​2542) (36a3e36)

2.0.20 (2023-05-27)

Bug Fixes

• replace simple-peer with maintained one (#​2540) (2994641)

2.0.19 (2023-05-27)

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.8 (714535b)

2.0.18 (2023-05-07)

Bug Fixes

• deps: update dependency @​webtorrent/semantic-release-config to v1.0.9 (#​2528) (19d26f0)

2.0.17 (2023-05-04)

Bug Fixes

• http rejections handling (#​2525) (6232ea0)

2.0.16 (2023-04-03)

Bug Fixes

• deps: update webtorrent (7a7838c)

2.0.15 (2023-03-20)

Bug Fixes

• Replace setting blob 'mimeType' property with 'type' (#​2502) (869bdcd)

2.0.14 (2023-02-22)

Bug Fixes

• deps: update dependency create-torrent to ^6.0.10 (d9e6784)

2.0.13 (2023-02-13)

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.0 (#​2482) (792876b)

2.0.12 (2023-02-06)

Bug Fixes

• deps: update dependency uint8-util to ^2.1.9 (#​2480) (d9efb5d)

2.0.11 (2023-02-01)

Bug Fixes

• deps: update dependency cross-fetch-ponyfill to ^1.0.3 (#​2477) (970d937)

2.0.10 (2023-02-01)

Bug Fixes

• deps: update dependency cross-fetch-ponyfill to ^1.0.3 (#​2475) (63eeed1)

2.0.9 (2023-02-01)

Bug Fixes

• deps: update webtorrent (#​2474) (bfbf36b), closes #​2476

2.0.8 (2023-01-31)

Bug Fixes

• deps: update dependency uint8-util to ^2.1.7 (#​2473) (9a6edff)

2.0.7 (2023-01-31)

Bug Fixes

• deps: update dependency parse-torrent to ^11.0.5 (#​2470) (9447cd6)

2.0.6 (2023-01-30)

Performance Improvements

• drop simple-get (#​2448) (b3c8376)

2.0.5 (2023-01-30)

Bug Fixes

• deps: update dependency parse-torrent to v11 (#​2459) (4cb909d), closes #​2461

2.0.4 (2023-01-28)

Bug Fixes

• make server index pages return links with absolute urls (#​2455) (f2687e2), closes #​2454

2.0.3 (2023-01-28)

Bug Fixes

• deps: update dependency fs-chunk-store to ^4.0.1 (#​2463) (bb7c640)

2.0.2 (2023-01-28)

Performance Improvements

• drop streamx (#​2462) (cde79ed)

2.0.1 (2023-01-25)

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.1.3 (2b7c435)

v2.0.37

[Compare Source](https://github.com/webtorrent/webtor

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source	CI
Install scripts	npm/[email protected]	Install script: install Source: prebuild-install -r napi || (npm install --ignore-scripts --production=false && npm run _prebuild)	package-lock.json package.json	🚫

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore npm/[email protected]

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected]	filesystem, network Transitive: environment, shell	+171	28.3 MB	webtorrent-bot

🚮 Removed packages: npm/[email protected]

View full report↗︎