Packages

socket.io

4.8.4 · 25 Sep 2026MIT16.6M / weekRepositoryHomepagenpmAtom feed

Upgrading socket.io from 2.4.0 to 4.8.4

44 releases in betweennotes for 32

Other targets from 2.4.0Newest 2.x, Clears its advisory2.5.1
3.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
1+
change to make
1
advisory fixed
30+
new
45+
fixes

Counted from 32 of 44 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • deprecated4.8.2

Security

Fixes 1 advisory affecting 2.4.0

Release by release

  1. 4.8.4

    25 Sep 20265 fixes
    • fixed

      Cleanup pending acks on timeout to prevent memory leak

    • fixed

      Prevent uWebSockets.js from serving missing client files

    • fixed

      Reject stateful regexps for dynamic namespaces

    • fixed

      types: allow emitWithAck() for events with void callbacks

    • fixed

      types: properly import http module

  2. 4.8.3

    23 Dec 20251 fix
    • fixed

      Do not throw when calling io.close() on a stopped server

  3. 4.8.2

    22 Dec 20252 fixes
    • fixed

      Call adapter.init() when creating each namespace

    • fixed

      Improve io.close() function

  4. 4.8.1nothing new or fixed in the note

  5. 4.8.0

    21 Sep 20243 fixes
    • fixed

      Allow to join a room in a middleware (uws)

    • fixed

      Correctly await async close on adapters

    • fixed

      Expose type of default engine

  6. 4.7.5

    14 Mar 20242 fixes
    • fixed

      Close the adapters when the server is closed

    • fixed

      Remove duplicate pipeline when serving bundle

  7. 4.7.4

    12 Jan 20241 fix
    • fixed

      typings: calling io.emit with no arguments incorrectly errored (cb6d2e0), closes #4914

  8. 4.7.3

    3 Jan 20242 fixes
    • fixed

      Return the first response when broadcasting to a single socket

    • fixed

      typings: allow to bind to a non-secure Http2Server

41 internal lines (docs, tests, tooling) left out.