chore(deps): [security] bump sockjs from 0.3.19 to 0.3.21

[dependabot-preview]

Bumps sockjs from 0.3.19 to 0.3.21. This update includes a security fix.

Vulnerabilities fixed

Sourced from The GitHub Security Advisory Database.

Improper Input Validation in SocksJS-Node Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

Affected versions: < 0.3.20

Release notes

Sourced from sockjs's releases.

0.3.21

• Update faye-websocket and websocket-driver to address DDoS vulnerability #275

0.3.20

• Updated node-uuid and coffeescript
• Exclude examples, tests, and Makefile from npm package
• Update examples to use latest jQuery and sockjs-client #271
• Don't call res.end in writeHead #266
• Pin websocket-driver as later versions cause some tests from sockjs-protocol to fail

Changelog

Sourced from sockjs's changelog.

0.3.21

• Update faye-websocket and websocket-driver to address DDoS vulnerability #275

0.3.20

• Updated node-uuid and coffeescript
• Exclude examples, tests, and Makefile from npm package
• Update examples to use latest jQuery and sockjs-client #271
• Don't call res.end in writeHead #266
• Pin websocket-driver as later versions cause some tests from sockjs-protocol to fail

Commits

• a8fca8e 0.3.21
• 0efb3c9 Update faye-websocket and websocket-driver to fix security issue
• a0f6afb 0.3.20
• b989e9b Pin websocket-driver version to prevent test failures
• b4f1672 Add Makefile to .npmignore
• b97cd64 Update coffeescript to latest v1 and uuid to latest v3
• ac7bfeb Exclude examples and tests from npm
• 78a6aeb Update sockjs_url to latest v1
• dd7e642 Merge pull request #266 from cakoose/backport-writeHead-fix
• 68e8fd7 Merge pull request #271 from daniel-seitz/v0.3.20
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}