fix(deps): update dependency webtorrent to v2 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
webtorrent (source)	^1.3.2 -> ^2.0.0

---

Release Notes

webtorrent/webtorrent (webtorrent)

v2.3.4

Compare Source

Bug Fixes

• deps: update webtorrent (6ff995f)

v2.3.3

Compare Source

Bug Fixes

• deps: update dependency debug to ^4.3.5 (4a47201)

v2.3.2

Compare Source

Bug Fixes

• deps: update dependency bitfield to ^4.2.0 (#​2730) (867e4f2)

v2.3.1

Compare Source

Bug Fixes

• deps: update dependency uint8-util to ^2.2.5 (#​2784) (3c3993f)

v2.3.0

Compare Source

Features

• Built-in-webrtc (#​2786) (c693f9e)

2.2.2 (2024-05-23)

Bug Fixes

• deps: update dependency torrent-discovery to ^11.0.4 (9841d3d)

2.2.1 (2024-03-26)

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.4 (#​2764) (9ce6188)

v2.2.2

Compare Source

Bug Fixes

• deps: update dependency torrent-discovery to ^11.0.4 (9841d3d)

v2.2.1

Compare Source

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.4 (#​2764) (9ce6188)

v2.2.0

Compare Source

Features

• Refactor selections with non-overlapping data structure (#​2757) (467f30c)

2.1.37 (2024-03-04)

Bug Fixes

• deps: update dependency streamx to ^2.16.1 (#​2752) (33e87e2)

2.1.36 (2024-02-09)

Bug Fixes

• deps: update dependency create-torrent to ^6.0.17 (54f6add)

2.1.35 (2024-02-04)

Bug Fixes

• deps: update dependency streamx to ^2.15.7 (#​2748) (13b135f)

2.1.34 (2024-01-16)

Bug Fixes

• deps: update webtorrent (0585322)

2.1.33 (2024-01-12)

Bug Fixes

• malformed debug ID (#​2733) (2453316)

2.1.32 (2023-12-12)

Bug Fixes

• deps: update dependency create-torrent to ^6.0.16 (97c0af1)

2.1.31 (2023-12-11)

Bug Fixes

• deps: update dependency streamx to ^2.15.6 (#​2715) (3f4a80f)

2.1.30 (2023-11-30)

Bug Fixes

• deps: update dependency streamx to ^2.15.5 (#​2695) (262e1e5)

2.1.29 (2023-11-12)

Bug Fixes

• chromeapp build (#​2704) (ed9f368)

2.1.28 (2023-11-09)

Bug Fixes

• deps: update dependency torrent-discovery to v11 (#​2702) (62ff1bf)

2.1.27 (2023-10-03)

Bug Fixes

• deps: update dependency uint8-util to ^2.2.4 (#​2653) (26ab5d3)

2.1.26 (2023-10-02)

Bug Fixes

• incorrect File.stream() object this reference (#​2672) (8577a47)

2.1.25 (2023-08-11)

Bug Fixes

• deps: update webtorrent (1639c0e)

2.1.24 (2023-08-11)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.11 (701280f)

2.1.23 (2023-08-10)

Bug Fixes

• deps: update dependency create-torrent to ^6.0.14 (d7e81ea)

2.1.22 (2023-08-10)

Bug Fixes

• deps: update webtorrent (d447f8c)

2.1.21 (2023-08-10)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.10 (0c60f65)

2.1.20 (2023-08-10)

Bug Fixes

• deps: update dependency ut_metadata to ^4.0.3 (c62044a)

2.1.19 (2023-08-10)

Bug Fixes

• deps: update webtorrent (4a60108)

2.1.18 (2023-08-09)

Bug Fixes

• deps: update dependency streamx to ^2.15.1 (#​2593) (260fca8)

2.1.17 (2023-08-06)

Bug Fixes

• deps: update webtorrent (9ad7e9b)

2.1.16 (2023-07-30)

Bug Fixes

• deps: update dependency uint8-util to ^2.2.2 (#​2633) (8478be4)

2.1.15 (2023-07-24)

Bug Fixes

• deps: update webtorrent (f9b34d6)

2.1.14 (2023-07-23)

Bug Fixes

• deps: update dependency torrent-piece to v3 (#​2623) (7fb7afa)

2.1.13 (2023-07-19)

Bug Fixes

• deps: update dependency @​silentbot1/nat-api to ^0.4.7 (#​2619) (a44286c)

2.1.12 (2023-07-05)

Bug Fixes

• perf: faster stream resolution (#​2607) (e692270)

2.1.11 (2023-06-17)

Performance Improvements

• drop buffer (#​2596) (7679994)

2.1.10 (2023-06-17)

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.2 (#​2595) (b04cc7a)

2.1.9 (2023-06-17)

Bug Fixes

• deps: update webtorrent (#​2592) (0c62c36)

2.1.8 (2023-06-16)

Performance Improvements

• use peer/lite (#​2591) (4e853f0)

2.1.7 (2023-06-16)

Bug Fixes

• deps: update webtorrent (#​2590) (01865c0)

2.1.6 (2023-06-16)

Performance Improvements

• use path-esm as polyfill for path (#​2587) (6e08b00)

2.1.5 (2023-06-16)

Bug Fixes

• deps: update dependency @​thaunknown/simple-peer to ^9.12.1 (#​2588) (9ea487b)

2.1.4 (2023-06-16)

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.1 (#​2589) (f482419)

2.1.3 (2023-06-16)

Bug Fixes

• deps: update dependency streamx to ^2.14.3 (#​2583) (d68ea94)

2.1.2 (2023-06-16)

Bug Fixes

• deps: update dependency fs-chunk-store to ^4.1.0 (c9103bf)

2.1.1 (2023-06-15)

Bug Fixes

• Revert "fix: correctly destroy piped streams in server" (#​2585) (e3c9269), closes #​2565

v2.1.37

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.16.1 (#​2752) (33e87e2)

v2.1.36

Compare Source

Bug Fixes

• deps: update dependency create-torrent to ^6.0.17 (54f6add)

v2.1.35

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.15.7 (#​2748) (13b135f)

v2.1.34

Compare Source

Bug Fixes

• deps: update webtorrent (0585322)

v2.1.33

Compare Source

Bug Fixes

• malformed debug ID (#​2733) (2453316)

v2.1.32

Compare Source

Bug Fixes

• deps: update dependency create-torrent to ^6.0.16 (97c0af1)

v2.1.31

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.15.6 (#​2715) (3f4a80f)

v2.1.30

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.15.5 (#​2695) (262e1e5)

v2.1.29

Compare Source

Bug Fixes

• chromeapp build (#​2704) (ed9f368)

v2.1.28

Compare Source

Bug Fixes

• deps: update dependency torrent-discovery to v11 (#​2702) (62ff1bf)

v2.1.27

Compare Source

Bug Fixes

• deps: update dependency uint8-util to ^2.2.4 (#​2653) (26ab5d3)

v2.1.26

Compare Source

Bug Fixes

• incorrect File.stream() object this reference (#​2672) (8577a47)

v2.1.25

Compare Source

Bug Fixes

• deps: update webtorrent (1639c0e)

v2.1.24

Compare Source

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.11 (701280f)

v2.1.23

Compare Source

Bug Fixes

• deps: update dependency create-torrent to ^6.0.14 (d7e81ea)

v2.1.22

Compare Source

Bug Fixes

• deps: update webtorrent (d447f8c)

v2.1.21

Compare Source

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.10 (0c60f65)

v2.1.20

Compare Source

Bug Fixes

• deps: update dependency ut_metadata to ^4.0.3 (c62044a)

v2.1.19

Compare Source

Bug Fixes

• deps: update webtorrent (4a60108)

v2.1.18

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.15.1 (#​2593) (260fca8)

v2.1.17

Compare Source

Bug Fixes

• deps: update webtorrent (9ad7e9b)

v2.1.16

Compare Source

Bug Fixes

• deps: update dependency uint8-util to ^2.2.2 (#​2633) (8478be4)

v2.1.15

Compare Source

Bug Fixes

• deps: update webtorrent (f9b34d6)

v2.1.14

Compare Source

Bug Fixes

• deps: update dependency torrent-piece to v3 (#​2623) (7fb7afa)

v2.1.13

Compare Source

Bug Fixes

• deps: update dependency @​silentbot1/nat-api to ^0.4.7 (#​2619) (a44286c)

v2.1.12

Compare Source

Bug Fixes

• perf: faster stream resolution (#​2607) (e692270)

v2.1.11

Compare Source

Performance Improvements

• drop buffer (#​2596) (7679994)

v2.1.10

Compare Source

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.2 (#​2595) (b04cc7a)

v2.1.9

Compare Source

Bug Fixes

• deps: update webtorrent (#​2592) (0c62c36)

v2.1.8

Compare Source

Performance Improvements

• use peer/lite (#​2591) (4e853f0)

v2.1.7

Compare Source

Bug Fixes

• deps: update webtorrent (#​2590) (01865c0)

v2.1.6

Compare Source

Performance Improvements

• use path-esm as polyfill for path (#​2587) (6e08b00)

v2.1.5

Compare Source

Bug Fixes

• deps: update dependency @​thaunknown/simple-peer to ^9.12.1 (#​2588) (9ea487b)

v2.1.4

Compare Source

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.1 (#​2589) (f482419)

v2.1.3

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.16.1 (#​2752) (33e87e2)

v2.1.2

Compare Source

Bug Fixes

• chromeapp build (#​2704) (ed9f368)

v2.1.1

Compare Source

Bug Fixes

• deps: update webtorrent (4a60108)

v2.1.0

Compare Source

Features

• update dependency streamx to ^2.14.1 (#​2580) (92df3a9)

2.0.37 (2023-06-08)

Bug Fixes

• dont encode url path (#​2573) (13ad0fb)

2.0.36 (2023-06-08)

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.11 (9415322)

2.0.35 (2023-06-07)

Bug Fixes

• deps: update dependency semantic-release to v21 (#​2510) (e74b843)

2.0.34 (2023-06-05)

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.10 (#​2569) (31796f8)

2.0.33 (2023-06-05)

Bug Fixes

• deps: update dependency streamx to ^2.14.0 (#​2568) (29f412a)

2.0.32 (2023-06-05)

Bug Fixes

• deps: update dependency streamx to ^2.13.3 (#​2562) (11f86db)

2.0.31 (2023-06-05)

Bug Fixes

• correctly destroy piped streams in server (#​2565) (86eda0a)

2.0.30 (2023-06-05)

Bug Fixes

• utp support bundlers and preprocessors (#​2564) (8b13937)

2.0.29 (2023-06-04)

Bug Fixes

• utp (#​2561) (e4b2e34)

2.0.28 (2023-06-03)

Bug Fixes

• attempt to fix saucelabs CI (#​2557) (c89c27d)

2.0.27 (2023-05-31)

Bug Fixes

• deps: update dependency lt_donthave to v2 (#​2555) (21e5007)

2.0.26 (2023-05-31)

Bug Fixes

• deps: update dependency parse-torrent to ^11.0.12 (2766f6f)

2.0.25 (2023-05-30)

Bug Fixes

• drop simple-concat (#​2552) (1243a76)

2.0.24 (2023-05-30)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.7 (#​2551) (da87d38)

2.0.23 (2023-05-28)

Bug Fixes

• drop randombytes (#​2546) (06b6548)

2.0.22 (2023-05-27)

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.9 (#​2545) (e28a7ba)

2.0.21 (2023-05-27)

Performance Improvements

• reduce the impact of request idle callback (#​2542) (36a3e36)

2.0.20 (2023-05-27)

Bug Fixes

• replace simple-peer with maintained one (#​2540) (2994641)

2.0.19 (2023-05-27)

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.8 (714535b)

2.0.18 (2023-05-07)

Bug Fixes

• deps: update dependency @​webtorrent/semantic-release-config to v1.0.9 (#​2528) (19d26f0)

2.0.17 (2023-05-04)

Bug Fixes

• http rejections handling (#​2525) (6232ea0)

2.0.16 (2023-04-03)

Bug Fixes

• deps: update webtorrent (7a7838c)

2.0.15 (2023-03-20)

Bug Fixes

• Replace setting blob 'mimeType' property with 'type' (#​2502) (869bdcd)

2.0.14 (2023-02-22)

Bug Fixes

• deps: update dependency create-torrent to ^6.0.10 (d9e6784)

2.0.13 (2023-02-13)

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.0 (#​2482) (792876b)

2.0.12 (2023-02-06)

Bug Fixes

• deps: update dependency uint8-util to ^2.1.9 (#​2480) (d9efb5d)

2.0.11 (2023-02-01)

Bug Fixes

• deps: update dependency cross-fetch-ponyfill to ^1.0.3 (#​2477) (970d937)

2.0.10 (2023-02-01)

Bug Fixes

• deps: update dependency cross-fetch-ponyfill to ^1.0.3 (#​2475) (63eeed1)

2.0.9 (2023-02-01)

Bug Fixes

• deps: update webtorrent (#​2474) (bfbf36b), closes #​2476

2.0.8 (2023-01-31)

Bug Fixes

• deps: update dependency uint8-util to ^2.1.7 (#​2473) (9a6edff)

2.0.7 (2023-01-31)

Bug Fixes

• deps: update dependency parse-torrent to ^11.0.5 (#​2470) (9447cd6)

2.0.6 (2023-01-30)

Performance Improvements

• drop simple-get (#​2448) (b3c8376)

2.0.5 (2023-01-30)

Bug Fixes

• deps: update dependency parse-torrent to v11 (#​2459) (4cb909d), closes #​2461

2.0.4 (2023-01-28)

Bug Fixes

• make server index pages return links with absolute urls (#​2455) (f2687e2), closes #​2454

2.0.3 (2023-01-28)

Bug Fixes

• deps: update dependency fs-chunk-store to ^4.0.1 (#​2463) (bb7c640)

2.0.2 (2023-01-28)

Performance Improvements

• drop streamx (#​2462) (cde79ed)

2.0.1 (2023-01-25)

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.1.3 (2b7c435)

v2.0.37

Compare Source

Bug Fixes

• dont encode url path (#​2573) (13ad0fb)

v2.0.36

Compare Source

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.11 (9415322)

v2.0.35

Compare Source

Bug Fixes

• deps: update dependency semantic-release to v21 (#​2510) (e74b843)

v2.0.34

Compare Source

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.10 (#​2569) (31796f8)

v2.0.33

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.14.0 (#​2568) (29f412a)

v2.0.32

Compare Source

Bug Fixes

• deps: update dependency streamx to ^2.13.3 (#​2562) (11f86db)

v2.0.31

Compare Source

Bug Fixes

• correctly destroy piped streams in server (#​2565) (86eda0a)

v2.0.30

Compare Source

Bug Fixes

• utp support bundlers and preprocessors (#​2564) (8b13937)

v2.0.29

Compare Source

Bug Fixes

• utp (#​2561) (e4b2e34)

v2.0.28

Compare Source

Bug Fixes

• attempt to fix saucelabs CI (#​2557) (c89c27d)

v2.0.27

Compare Source

Bug Fixes

• deps: update dependency lt_donthave to v2 (#​2555) (21e5007)

v2.0.26

Compare Source

Bug Fixes

• deps: update dependency parse-torrent to ^11.0.12 (2766f6f)

v2.0.25

Compare Source

Bug Fixes

• drop simple-concat (#​2552) (1243a76)

v2.0.24

Compare Source

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.7 (#​2551) (da87d38)

v2.0.23

Compare Source

Bug Fixes

• drop randombytes (#​2546) (06b6548)

v2.0.22

Compare Source

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.9 (#​2545) (e28a7ba)

v2.0.21

Compare Source

Performance Improvements

• reduce the impact of request idle callback (#​2542) (36a3e36)

v2.0.20

Compare Source

Bug Fixes

• replace simple-peer with maintained one (#​2540) (2994641)

v2.0.19

Compare Source

Bug Fixes

• deps: update dependency torrent-discovery to ^10.0.8 (714535b)

v2.0.18

Compare Source

Bug Fixes

• deps: update dependency @​webtorrent/semantic-release-config to v1.0.9 (#​2528) (19d26f0)

v2.0.17

Compare Source

Bug Fixes

• http rejections handling (#​2525) (6232ea0)

v2.0.16

Compare Source

Bug Fixes

• deps: update webtorrent (7a7838c)

v2.0.15

Compare Source

Bug Fixes

• Replace setting blob 'mimeType' property with 'type' (#​2502) (869bdcd)

v2.0.14

Compare Source

Bug Fixes

• deps: update dependency create-torrent to ^6.0.10 (d9e6784)

v2.0.13

Compare Source

Bug Fixes

• deps: update dependency hybrid-chunk-store to ^1.2.0 (#​2482) (792876b)

v2.0.12

Compare Source

Bug Fixes

• deps: update dependency uint8-util to ^2.1.9 (#​2480) (d9efb5d)

v2.0.11

Compare Source

Bug Fixes

• deps: update dependency cross-fetch-ponyfill to ^1.0.3 (#​2477) (970d937)

v2.0.10

Compare Source

Bug Fixes

• deps: update dependency cross-fetch-ponyfill to ^1.0.3 (#​2475) (63eeed1)

v2.0.9

Compare Source

Bug Fixes

• deps: update webtorrent (#​2474) (bfbf36b), closes #​2476

v2.0.8

Compare Source

Bug Fixes

• deps: update dependency uint8-util to ^2.1.7 (#​2473) (9a6edff)

v2.0.7

Compare Source

Bug Fixes

• deps: update dependency parse-torrent to ^11.0.5 (#​2470) (9447cd6)

v2.0.6

Compare Source

Performance Improvements

• drop simple-get (#​2448) (b3c8376)

v2.0.5

Compare Source

Bug Fixes

• deps: update dependency parse-torrent to v11 (#​2459) (4cb909d), closes #​2461

v2.0.4

Compare Source

Bug Fixes

• make server index pages return links with absolute urls (#​2455) (f2687e2), closes #​2454

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source
Native code	npm/fs-native-extensions@1.2.7	Location: Package overview	package.json

View full report↗︎

Next steps

What's wrong with native code?

Contains native code which could be a vector to obscure malicious code, and generally decrease the likelihood of reproducible or reliable installs.

Ensure that native code bindings are expected. Consumers may consider pure JS and functionally similar alternatives to avoid the challenges and risks associated with native code bindings.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore npm/fs-native-extensions@1.2.7

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/webtorrent@2.1.36	filesystem, network Transitive: environment, shell	+143	25.5 MB	webtorrent-bot

🚮 Removed packages: npm/webtorrent@1.9.7

View full report↗︎