Skip to content

chore(deps): bump the node-opcua group with 3 updates - #2272

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/node-opcua-207322c1af
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/node-opcua-207322c1af

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the node-opcua group with 3 updates: node-opcua-certificate-manager, node-opcua-client and node-opcua-server.

Updates node-opcua-certificate-manager from 2.187.16 to 2.187.19

Release notes

Sourced from node-opcua-certificate-manager's releases.

v2.215.0

What's Changed

🐛 Bug Fixes

  • [4094e30d49] Addressed vulnerabilities in packages/node-opcua-local-discovery-server/Dockerfile to enhance security (Details).
  • [c3fee4fc97] Reduced vulnerabilities in dockertest/Dockerfile through necessary upgrades (Vulnerability Details).
  • [bf630e0272] Corrected issues with pnpm@8 version to ensure compatibility and stability.

✨ Enhancements

  • [df134da7e1] Exposed ServerCapabilities_MinSupportedSampleRate and ServerCapabilities_MaxMonitoredItemsQueueSize for improved server capability reporting.
  • [d854585f90] [a4600e047f] Finalized deprecation of node-opcua-client-crawler and introduced the professional module @sterfive/crawler for NodeOPCUA Subscription members.

🛠 Maintenance and Refactoring

  • [94a27fdd69] Refactored readNamespaceArray and resolveNodeId usage to optimize operations.
  • [c7d0c6d937] Updated address space to use new form resolveNodeId.
  • [afd5b1e133] Refactored recreateSubscriptionAndMonitoredItem to an async method for better performance.
  • [b53036581f]Added useful exports innode-opcua-client` to enhance module usability.
  • [1047d7fa20] Refactored tests to use withSessionAsync for improved test efficiency.
  • [7e0a73bcdd] Refactored perform operation on client session in test-helper for enhanced testing capabilities.
  • [966393d5f8] Optimized readNamespaceArray to use cache, reducing processing time.

🚀 New Features

  • [60175137ff] Implemented NodeId.toString({namespace}) to produce 'nsu=someuri;i=1223' form nodeid string, enhancing node identification clarity.

🔧 Deprecated

  • [4ad343fc7b] Deprecated unused callback method OPCUAClient.withSession as part of ongoing API cleanup.
  • node-opcua-client-crawler module is now deprecated and will not be published anymore, @​sterfive/crawler private module shall be used instead. this module is available for NodeOPCUA Support Member (https://support.sterfive.com)

📦 Updates

  • [ba4729496b] Updated packages to the latest versions to ensure security and performance improvements.

Security Enhancements

  • Addressed multiple security issues identified by Snyk, significantly improving the overall security posture of the software components.

Full Changelog: node-opcua/node-opcua@v2.124.0...v2.125.0

Commits
  • 25a8589 v2.187.19
  • 64982f7 fix(variant): bound the decoded array length by the remaining bytes
  • 7b9b1df v2.187.18
  • 7a3a994 fix(service-filter): evaluate each ContentFilter element once per event
  • 41b5b4c fix(server): answer a refused ActivateSession once the session is back on its...
  • b05b569 fix(address-space): write promoteToLimitAlarm limits with setOwnProperty
  • 5234e2e feat(address-space): promoteToLimitAlarm for limit alarms from a nodeset
  • 41b5a44 v2.187.17
  • d214ce7 fix(address-space): a RoleId namespace is an export dependency
  • 55b1b86 feat(check-test-ports): scan the workspace root's own test directories
  • See full diff in compare view

Updates node-opcua-client from 2.187.18 to 2.187.21

Release notes

Sourced from node-opcua-client's releases.

v2.215.0

What's Changed

🐛 Bug Fixes

  • [4094e30d49] Addressed vulnerabilities in packages/node-opcua-local-discovery-server/Dockerfile to enhance security (Details).
  • [c3fee4fc97] Reduced vulnerabilities in dockertest/Dockerfile through necessary upgrades (Vulnerability Details).
  • [bf630e0272] Corrected issues with pnpm@8 version to ensure compatibility and stability.

✨ Enhancements

  • [df134da7e1] Exposed ServerCapabilities_MinSupportedSampleRate and ServerCapabilities_MaxMonitoredItemsQueueSize for improved server capability reporting.
  • [d854585f90] [a4600e047f] Finalized deprecation of node-opcua-client-crawler and introduced the professional module @sterfive/crawler for NodeOPCUA Subscription members.

🛠 Maintenance and Refactoring

  • [94a27fdd69] Refactored readNamespaceArray and resolveNodeId usage to optimize operations.
  • [c7d0c6d937] Updated address space to use new form resolveNodeId.
  • [afd5b1e133] Refactored recreateSubscriptionAndMonitoredItem to an async method for better performance.
  • [b53036581f]Added useful exports innode-opcua-client` to enhance module usability.
  • [1047d7fa20] Refactored tests to use withSessionAsync for improved test efficiency.
  • [7e0a73bcdd] Refactored perform operation on client session in test-helper for enhanced testing capabilities.
  • [966393d5f8] Optimized readNamespaceArray to use cache, reducing processing time.

🚀 New Features

  • [60175137ff] Implemented NodeId.toString({namespace}) to produce 'nsu=someuri;i=1223' form nodeid string, enhancing node identification clarity.

🔧 Deprecated

  • [4ad343fc7b] Deprecated unused callback method OPCUAClient.withSession as part of ongoing API cleanup.
  • node-opcua-client-crawler module is now deprecated and will not be published anymore, @​sterfive/crawler private module shall be used instead. this module is available for NodeOPCUA Support Member (https://support.sterfive.com)

📦 Updates

  • [ba4729496b] Updated packages to the latest versions to ensure security and performance improvements.

Security Enhancements

  • Addressed multiple security issues identified by Snyk, significantly improving the overall security posture of the software components.

Full Changelog: node-opcua/node-opcua@v2.124.0...v2.125.0

Commits
  • 3fc9d3a v2.187.21
  • 31d7d65 test(ZAA6): clientCertificate undefined, not null (tsc: ByteString | undefined)
  • baa41b0 fix(server): reclaim a connection slot held by a created-but-unactivated session
  • 2a894ea fix(file-transfer): add a limit on open file handles for the server
  • cd3c2c3 v2.187.20
  • c1f52bf fix(file-transfer): apply Writable, maxSize and a handle limit per session
  • d21095e fix(server): queue overflow no longer asserts on a non-Good value
  • 25a8589 v2.187.19
  • 64982f7 fix(variant): bound the decoded array length by the remaining bytes
  • See full diff in compare view

Updates node-opcua-server from 2.187.18 to 2.187.22

Release notes

Sourced from node-opcua-server's releases.

v2.215.0

What's Changed

🐛 Bug Fixes

  • [4094e30d49] Addressed vulnerabilities in packages/node-opcua-local-discovery-server/Dockerfile to enhance security (Details).
  • [c3fee4fc97] Reduced vulnerabilities in dockertest/Dockerfile through necessary upgrades (Vulnerability Details).
  • [bf630e0272] Corrected issues with pnpm@8 version to ensure compatibility and stability.

✨ Enhancements

  • [df134da7e1] Exposed ServerCapabilities_MinSupportedSampleRate and ServerCapabilities_MaxMonitoredItemsQueueSize for improved server capability reporting.
  • [d854585f90] [a4600e047f] Finalized deprecation of node-opcua-client-crawler and introduced the professional module @sterfive/crawler for NodeOPCUA Subscription members.

🛠 Maintenance and Refactoring

  • [94a27fdd69] Refactored readNamespaceArray and resolveNodeId usage to optimize operations.
  • [c7d0c6d937] Updated address space to use new form resolveNodeId.
  • [afd5b1e133] Refactored recreateSubscriptionAndMonitoredItem to an async method for better performance.
  • [b53036581f]Added useful exports innode-opcua-client` to enhance module usability.
  • [1047d7fa20] Refactored tests to use withSessionAsync for improved test efficiency.
  • [7e0a73bcdd] Refactored perform operation on client session in test-helper for enhanced testing capabilities.
  • [966393d5f8] Optimized readNamespaceArray to use cache, reducing processing time.

🚀 New Features

  • [60175137ff] Implemented NodeId.toString({namespace}) to produce 'nsu=someuri;i=1223' form nodeid string, enhancing node identification clarity.

🔧 Deprecated

  • [4ad343fc7b] Deprecated unused callback method OPCUAClient.withSession as part of ongoing API cleanup.
  • node-opcua-client-crawler module is now deprecated and will not be published anymore, @​sterfive/crawler private module shall be used instead. this module is available for NodeOPCUA Support Member (https://support.sterfive.com)

📦 Updates

  • [ba4729496b] Updated packages to the latest versions to ensure security and performance improvements.

Security Enhancements

  • Addressed multiple security issues identified by Snyk, significantly improving the overall security posture of the software components.

Full Changelog: node-opcua/node-opcua@v2.124.0...v2.125.0

Commits
  • 6c27525 v2.187.22
  • 9c741a9 fix(server): an unchanged StatusCode value no longer throws in _enqueue_value
  • 3fc9d3a v2.187.21
  • 31d7d65 test(ZAA6): clientCertificate undefined, not null (tsc: ByteString | undefined)
  • baa41b0 fix(server): reclaim a connection slot held by a created-but-unactivated session
  • 2a894ea fix(file-transfer): add a limit on open file handles for the server
  • cd3c2c3 v2.187.20
  • c1f52bf fix(file-transfer): apply Writable, maxSize and a handle limit per session
  • d21095e fix(server): queue overflow no longer asserts on a non-Good value
  • 25a8589 v2.187.19
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the node-opcua group with 3 updates: [node-opcua-certificate-manager](https://github.com/node-opcua/node-opcua), [node-opcua-client](https://github.com/node-opcua/node-opcua) and [node-opcua-server](https://github.com/node-opcua/node-opcua).


Updates `node-opcua-certificate-manager` from 2.187.16 to 2.187.19
- [Release notes](https://github.com/node-opcua/node-opcua/releases)
- [Changelog](https://github.com/node-opcua/node-opcua/blob/master/RELEASE_NOTES.md)
- [Commits](node-opcua/node-opcua@v2.187.16...v2.187.19)

Updates `node-opcua-client` from 2.187.18 to 2.187.21
- [Release notes](https://github.com/node-opcua/node-opcua/releases)
- [Changelog](https://github.com/node-opcua/node-opcua/blob/master/RELEASE_NOTES.md)
- [Commits](node-opcua/node-opcua@v2.187.18...v2.187.21)

Updates `node-opcua-server` from 2.187.18 to 2.187.22
- [Release notes](https://github.com/node-opcua/node-opcua/releases)
- [Changelog](https://github.com/node-opcua/node-opcua/blob/master/RELEASE_NOTES.md)
- [Commits](node-opcua/node-opcua@v2.187.18...v2.187.22)

---
updated-dependencies:
- dependency-name: node-opcua-certificate-manager
  dependency-version: 2.187.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-opcua
- dependency-name: node-opcua-client
  dependency-version: 2.187.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-opcua
- dependency-name: node-opcua-server
  dependency-version: 2.187.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: node-opcua
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency version updates label Nov 9, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​node-opcua-certificate-manager@​2.187.16 ⏵ 2.187.19100 +11007096 +1100
Updatednpm/​node-opcua-server@​2.187.18 ⏵ 2.187.229710090 +196 +1100
Updatednpm/​node-opcua-client@​2.187.18 ⏵ 2.187.21981009896 +1100

View full report

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency version updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants