fix(deps): update dependency opentok to ^2.23.2 (main) by mend-for-github-com[bot] · Pull Request #399 · opentok/opentok-node

mend-for-github-com · 2026-07-12T14:54:57Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
opentok	`^2.3.2` → `^2.23.2`

This PR resolves the vulnerabilities described in Issue #379

Version 2.23.1

Risk Change	Critical	High	Medium	Low
N/A	2	2	1	1

Version 2.23.2

Risk Change	Critical	High	Medium	Low
-7%	2 (--)	0 (-2 )	0 (-1 )	2 (+1)

Mend ensures you have the greatest risk reduction ("Recommended Fix"-highlighted in green) by removing as many vulnerabilities as possible. Click to see how we calculate risk reduction.

Release Notes

opentok/opentok-node (opentok)

`v2.23.2`

Compare Source

What's Changed

build(deps): bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in #375
chore: deps update for MINOR.PATCH updates by @dragonmantank in #391
fix: Update release workflow by @dragonmantank in #393
chore: Version bump to 2.23.2 for release by @dragonmantank in #394

Full Changelog: v2.23.1...v2.23.2

`v2.23.1`

Compare Source

What's Changed

chore(deps): update dependency body-parser to ~1.20.3 (main) by @mend-for-github-com[bot] in #360
fix: Fix issue with archives ignoring hasVideo and hasAudio falsy flags by @dragonmantank in #374

Full Changelog: v2.23.0...v2.23.1

`v2.23.0`

Compare Source

What's Changed

Devx 10652 sip streams being ignored by @dragonmantank in #367

Full Changelog: v2.22.0...v2.23.0

`v2.22.0`

Compare Source

What's Changed

docs: clearify README.md by @manchuck in #354
feat: added quantization parameter by @manchuck in #355
chore(deps): update dependency express to ~4.21.1 (main) by @mend-for-github-com[bot] in #359
feat: Add bidirectional flag in websocket connect [VIDMC-1226] by @rafayhameed in #358

New Contributors

@rafayhameed made their first contribution in #358

Full Changelog: 2.21.1...v2.22.0

`v2.21.2`

Compare Source

`v2.21.1`

Compare Source

What's Changed

Adding docs for generateT1Token option by @jeffswartz in #350
Transcription duration by @dragonmantank in #353

Full Changelog: 2.21.0...2.21.1

`v2.21.0`

Compare Source

What's Changed

test: removeing jasmine testing by @manchuck in #347
refactor: common API caller by @manchuck in #348
feat: added vonage video shim by @manchuck in #349

Full Changelog: v2.20.0...2.21.0

`v2.20.0`

Compare Source

What's Changed

Added additional archiving tests by @dragonmantank in #346
Swapped to JWT tokens by @dragonmantank in #345

Full Changelog: v2.18.1...v2.20.0

`v2.19.0`

Compare Source

`v2.18.1`

Compare Source

What's Changed

Added maxbitrate to archives by @dragonmantank in #342

`v2.18.0`

Compare Source

What's Changed

fix: post encoding for client by @manchuck in #318
fix: double decoding of json by @manchuck in #319
fix: map error when items is not defined for list streams by @manchuck in #322
Added Publisher Only role by @dragonmantank in #313

Full Changelog: v2.17.0...v2.18.0

What's Changed

fix: Bad request on callback deletion by @TheOptimisticFactory in #289
feat: audio streamer by @manchuck in #302
docs: e2ee added to create session by @manchuck in #300
docs: adding auto archive documentation by @manchuck in #305
fix: removing dependency for node-requests by @manchuck in #311

New Contributors

@TheOptimisticFactory made their first contribution in #289

Full Changelog: v2.16.0...v2.17.0

`v2.16.0`

Compare Source

`v2.15.2`

Compare Source

`v2.15.1`

Compare Source

Added

N/A

Changed

N/A

Fixed

Updating a broadcast now properly checks for a 204 response instead of a 200 response

`v2.15.0`

Compare Source

This release adds video archiving along with experience composer functionality. The SDK now requires the latest LTS versions of Node (14.x, 16.x and 18.x)

What's Changed

Adding GitHub actions by @manchuck in #282
Added multiArchiveTag to startArchive by @manchuck in #280
Experience Composer API enhancements by @manchuck in #283
fix: strict engine by @manchuck in #284

New Contributors

@manchuck made their first contribution in #282

Full Changelog: v2.14.3...v2.15.0

`v2.14.3`: Fix patch response http code

Compare Source

What's Changed

patch response to 204 by @moficodes in #270

Full Changelog: v2.14.2...v2.14.3

`v2.14.2`: Fix JS issues / increase error usefulness

Compare Source

What's Changed

Fix JS issues / increase error usefulness by @woodja in #268

New Contributors

@woodja made their first contribution in #268

Full Changelog: v2.14.1...v2.14.2

`v2.14.1`: Add streammode to archiving post body

Compare Source

`v2.14.0`: Support for DVR and low-latency HLS broadcasts

Compare Source

See the DVR and lowLatency options for Opentok.startBroadcast() method.

... Also other docs corrections.

`v2.13.0`: Force mute and selective stream archive/broadcast API additions

Compare Source

`v2.12.1`: Node module updates, minor edits to the DTMF docs

Compare Source

`v2.12.0`: Add support for SIP video and DTMF for SIP

Compare Source

`v2.11.0`: Adds screen-sharing layout enhancements for archives and broadcasts

Compare Source

Adds support for new screen-sharing layout enhancements for archives and broadcasts (see this documentation).
Fixes error reporting on client for startBroadcast and setStreamClassLists
Updates lodash version

`v2.10.0`

Compare Source

Adds a timeout config variable in order to allow users with slow networks to increase request timeouts.

`v2.9.2`

Compare Source

Updates node modules(fixes #216)
Docs corrections
Don't wrap the same request instance with defaults (fixes #212)

`v2.9.1`

Compare Source

Fixes vulnerability issues
Updates lodash dependency
Drops support for Node 3 &4 which have been deprecated by the Node team

`v2.9.0`

Compare Source

Adds List Broadcasts API
Updates Docs to share support for RTMPS
Adds testing against Node 8, 9, 10.

`v2.8.1`

Compare Source

Allow from property to be used for SIP Dial #197
Minor README edits
Improve Broadcast sample

`v2.8.0`

Compare Source

Add Broadcast functionalities & documentation #189
Add Broadcast sample application

Thanks @jeffswartz!!

`v2.7.0`

Compare Source

Added getStream
Added listStreams
Added setArchiveLayout
Added setStreamClassLists
Fixed linting errors
Doc corrections & sample improvements

Thanks @jeffswartz

`v2.6.2`

Compare Source

5d1d01a Update dependencies and add lock files (#175)
86a5c30 Use Buffer.from when available (#174)
1044554 Add Composed Archiving resolution parameter on creation (#173)

`v2.6.1`

Compare Source

Updated version of ejs in sample projects due to a vulnerability (#170)
Fix SipError to correctly extend Error (#168 Thanks @synthmusic!)

`v2.6.0`

Compare Source

Feature: Callbacks API (#156)
Feature: Moderation API (#160)
Feature: Signal API (#161)
Feature: List archives by session ID (#149 Thanks @CatGuardian)
Feature: initialLayoutClassList for layout control of broadcasts and composed archives (#155)

And also:

Update our test matrix to test against Node 4-7 (#158 Thanks @westy92)
Update JS samples to use latest Client SDK API (#154, #164)

`v2.5.1`

Compare Source

Updating jsonwebtoken dependency which updates ms package (#153)
ms@0.7.3 is vulnerable to a ReDoS attack: https://snyk.io/vuln/npm:ms:20170412

`v2.5.0`

Compare Source

`v2.4.0`

Compare Source

New feature: Added SIP Interconnect support. Thanks @davemun!
Updated dependencies: #133. Thanks @westy92!

If you want to rebase/retry this PR, check this box

fix(deps): update dependency opentok to ^2.23.2

0757458

mend-for-github-com Bot added the security fix Security fix generated by Mend label Jul 12, 2026

Navigation Menu

Uh oh!

fix(deps): update dependency opentok to ^2.23.2 (main) - #399

fix(deps): update dependency opentok to ^2.23.2 (main)#399
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/main-opentok-2.x

mend-for-github-com Bot commented Jul 12, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

mend-for-github-com Bot commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

This PR resolves the vulnerabilities described in Issue #379

Mend ensures you have the greatest risk reduction ("Recommended Fix"-highlighted in green) by removing as many vulnerabilities as possible. Click to see how we calculate risk reduction.

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

Added

Changed

Fixed

What's Changed

New Contributors

v2.14.3: Fix patch response http code

What's Changed

v2.14.2: Fix JS issues / increase error usefulness

What's Changed

New Contributors

v2.14.1: Add streammode to archiving post body

v2.14.0: Support for DVR and low-latency HLS broadcasts

v2.13.0: Force mute and selective stream archive/broadcast API additions

v2.12.1: Node module updates, minor edits to the DTMF docs

v2.12.0: Add support for SIP video and DTMF for SIP

v2.11.0: Adds screen-sharing layout enhancements for archives and broadcasts

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

mend-for-github-com Bot commented Jul 12, 2026 •

edited

Loading

`v2.14.3`: Fix patch response http code

`v2.14.2`: Fix JS issues / increase error usefulness

`v2.14.1`: Add streammode to archiving post body

`v2.14.0`: Support for DVR and low-latency HLS broadcasts

`v2.13.0`: Force mute and selective stream archive/broadcast API additions

`v2.12.1`: Node module updates, minor edits to the DTMF docs

`v2.12.0`: Add support for SIP video and DTMF for SIP

`v2.11.0`: Adds screen-sharing layout enhancements for archives and broadcasts