Skip to content

Conversation

@mend-for-github-com
Copy link

This PR contains the following updates:

Package Type Update Change
tmi.js dependencies minor 1.7.1 -> 1.8.3

By merging this PR, the issue #2 will be automatically resolved and closed:

Severity CVSS Score Vulnerability Reachability
High High 7.5 CVE-2024-37890
Medium Medium 5.3 CVE-2021-32640

Release Notes

tmijs/tmi.js (tmi.js)

v1.8.3: tmi.js v1.8.3

Compare Source

v1.8.3

v1.8.2: tmi.js v1.8.2

Compare Source

v1.8.2 [Deprecated]
  • 826e105 Remove async/await code from client._updateEmoteset. #​463
v1.8.1
  • 28be1a7 Revert class and destructuring syntax.

v1.8.1

Compare Source

v1.8.0: tmi.js v1.8.0

Compare Source

v1.8.0
  • f9a5b3a The option connection.reconnect is now true by default.
  • 43900a9 Added option options.skipMembership (false by default) to not receive JOIN/PART messages for other users. This can reduce a lot of the spammy data that's getting blasted at the client.
const client = new tmi.Client({ options: { skipMembership: true } });
  • c74c2bb
    • Added option options.skipUpdatingEmotesets (false by default) to skip calling the emoticon_images API which can be a lot of data. The emotesets event will still be called but the second argument will just be an empty object.
    • Added option options.updateEmotesetsTimer (60000 (ms) by default) to change how often the emoticon_images API will be recalled. Set to 0 or a negative number (or false) to disable the timer entirely.
const client = new tmi.Client({ options: { skipUpdatingEmotesets: true, updateEmotesetsTimer: 0 } });
  • 33c15c7 The Client has been converted to a class style.

  • ff341d2 Client.prototype.api will now warn on use as it's deprecated and will be removed by the next minor version, 1.9.0. It's not intended to be a great choice for API requests. Either directly use fetch/node-fetch, another request library, or a Twitch-specific library like twitch on npm.

  • 76edfc8 dea8eed 5ea712f f689bc5 Remove various util functions.

  • 8f3a849 Fixed possible case fallthrough bug.

  • efc6cdb Add eslint (and many more commits related to facelifting the repo)

v1.7.5
  • 9d8ca1c Add "sub" alias for "subscription" event

v1.7.5

Compare Source

v1.7.4

Compare Source

v1.7.3: tmi.js v1.7.3

Compare Source

v1.7.3
  • 3e46332 Added the event "globaluserstate". See the Twitch docs on the tags for the GLOBALUSERSTATE IRC command. These tags have always been available via client.globaluserstate after the command but hasn't been emitted.
client.on('globaluserstate', tags => {
    console.log('Hello, I am', tags['display-name']); // Hello, I am Alca
});
  • #​461 Fixed a rare issue when a tag that is to be IRC unescaped is not a string.
  • 989bdad Updated dependencies (package-lock)

v1.7.2: tmi.js v1.7.2

Compare Source

v1.7.2
  • #​456 Add Accept header to Kraken emoticon_images request.
  • #​458 Assume connection success on MOTD end, not MOTD line.
  • e85809b Upgrade dependencies.

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Aug 4, 2025
@mend-for-github-com
Copy link
Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant