[Snyk] Security upgrade ws from 8.18.0 to 8.21.0

[anandgupta42]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Asymmetric Resource Consumption (Amplification) SNYK-JS-WS-17344547

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

---

Note

Low Risk
Patch-level dependency-only change with no application code edits; typical low risk for a minor ws security release within the same major line.

Overview
Bumps the direct ws dependency from 8.18.0 to 8.21.0 in package.json and refreshes package-lock.json (including resolved tarball metadata for node_modules/ws).

This is a Snyk-driven patch to address SNYK-JS-WS-17344547 (high severity asymmetric resource consumption / amplification). No extension or webview source files are modified.

^{Reviewed by Cursor Bugbot for commit 88c87e2. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: cf76e0dd-3b78-4e31-ac19-1c21193ead50

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch snyk-fix-d2c9fa9ea342c1183c8a8b5db3b7e95e

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Bundle Size Report

darwin-arm64: 75.6 MB

Category	Size	Compressed	Files
Native: altimate-core	43.1 MB	15.4 MB	1
Webview JS bundles	36.1 MB	12.3 MB	346
Media assets	29.6 MB	25.8 MB	91
Native: zeromq	20.5 MB	8.2 MB	15
Webview images	15.3 MB	12.2 MB	18
Extension backend (JS)	2.8 MB	0.6 MB	1
Python packages	2.0 MB	0.5 MB	95
Native: other node_modules	1.0 MB	0.2 MB	139
Webview CSS	0.8 MB	0.1 MB	2
Webview other	0.5 MB	0.1 MB	5
Other	0.1 MB	26 KB	15
Total	151.7 MB	75.5 MB	728

linux-x64: 77.5 MB

Category	Size	Compressed	Files
Native: altimate-core	50.7 MB	16.8 MB	1
Webview JS bundles	36.1 MB	12.3 MB	346
Media assets	29.6 MB	25.8 MB	91
Native: zeromq	21.9 MB	8.7 MB	16
Webview images	15.3 MB	12.2 MB	18
Extension backend (JS)	2.8 MB	0.6 MB	1
Python packages	2.0 MB	0.5 MB	95
Native: other node_modules	1.0 MB	0.2 MB	139
Webview CSS	0.8 MB	0.1 MB	2
Webview other	0.5 MB	0.1 MB	5
Other	0.1 MB	26 KB	15
Total	160.7 MB	77.4 MB	729

win32-x64: 77.9 MB

Category	Size	Compressed	Files
Native: altimate-core	55.9 MB	17.4 MB	1
Webview JS bundles	36.1 MB	12.3 MB	346
Media assets	29.6 MB	25.8 MB	91
Native: zeromq	20.0 MB	8.1 MB	15
Webview images	15.3 MB	12.2 MB	18
Extension backend (JS)	2.8 MB	0.6 MB	1
Native: other node_modules	2.3 MB	0.7 MB	147
Python packages	2.0 MB	0.5 MB	95
Webview CSS	0.8 MB	0.1 MB	2
Webview other	0.5 MB	0.1 MB	5
Other	0.1 MB	26 KB	15
Total	165.3 MB	77.8 MB	736

[dev-punia-altimate]

✅ Tests — All Passed

cc @anandgupta42

[dev-punia-altimate]

🤖 Code Review — OpenCodeReview (Gemini) — No Issues Found

No supported files changed.