Sourced from pusher-js's releases.

v8.5.0

8.5.0

• [ADDED] New switchCluster method on Pusher instances to switch cluster/app without losing channel subscriptions (PR #773)
• [FIXED] Persist previous options when switching cluster so custom handlers and other settings are retained (PR #783)
• [FIXED] Refactored AuthOptionsT to a discriminated union (InternalAuthOptions | CustomAuthOptions) for improved type safety
• [FIXED] Integration tests now run HTTP tests before HTTPS to avoid browser Strict-Transport-Security downgrade issues

v8.4.3

8.4.3

• [FIXED] Pin additional transitive dependencies to patched versions to resolve known vulnerabilities (express, qs, body-parser, lodash, minimatch, browserstack-local)
• [FIXED] Bump integration_tests_server express dependency to resolve CVEs

v8.4.2

8.4.2

• [CHANGED] Modernise release workflow: update action versions, replace deprecated flood-io/is-published-on-npm action with inline npm registry check

v8.4.1

8.4.1

• [FIXED] Pin transitive dependencies to patched versions to resolve known vulnerabilities (cipher-base, pbkdf2, sha.js, node-forge, js-yaml, compression, on-headers, tmp)

Sourced from pusher-js's changelog.

8.5.0

• [ADDED] New switchCluster method on Pusher instances to switch cluster/app without losing channel subscriptions (PR #773)
• [FIXED] Persist previous options when switching cluster so custom handlers and other settings are retained (PR #783)
• [FIXED] Refactored AuthOptionsT to a discriminated union (InternalAuthOptions | CustomAuthOptions) for improved type safety
• [FIXED] Integration tests now run HTTP tests before HTTPS to avoid browser Strict-Transport-Security downgrade issues

8.4.3

• [FIXED] Pin additional transitive dependencies to patched versions to resolve known vulnerabilities (express, qs, body-parser, lodash, minimatch, browserstack-local)
• [FIXED] Bump integration_tests_server express dependency to resolve CVEs

8.4.2

• [CHANGED] Modernise release workflow: update action versions, replace deprecated flood-io/is-published-on-npm action with inline npm registry check

8.4.1

• [FIXED] Pin transitive dependencies to patched versions to resolve known vulnerabilities (cipher-base, pbkdf2, sha.js, node-forge, js-yaml, compression, on-headers, tmp)

• 0b6fdc2 Merge pull request #926 from pusher/release/v8.5.0
• 82d69c0 Bump version to 8.5.0, update changelog, rebuild dist
• 13e473e npm run format
• 68450a5 fix(typing): fix misleading authorizer typing
• b04bf0c fix: persist previous options
• bfd4aee Fix integration tests by running HTTP tests before HTTPS
• c652fa0 test: cover the new logic with unit tests
• 895ccae feat: expose a way to switch from one cluster/app to the other
• 5ed3338 Merge pull request #925 from pusher/security/consolidate-dependabot-v8.4.4
• 0c496f3 Add overrides for ws, json5; bump path-to-regexp in integration_tests_server
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)