chore(deps)(deps-dev): bump pusher-js from 8.4.0 to 8.4.3

[dependabot]

Bumps pusher-js from 8.4.0 to 8.4.3.

Release notes

Sourced from pusher-js's releases.

v8.4.3

8.4.3

• [FIXED] Pin additional transitive dependencies to patched versions to resolve known vulnerabilities (express, qs, body-parser, lodash, minimatch, browserstack-local)
• [FIXED] Bump integration_tests_server express dependency to resolve CVEs

v8.4.2

8.4.2

• [CHANGED] Modernise release workflow: update action versions, replace deprecated flood-io/is-published-on-npm action with inline npm registry check

v8.4.1

8.4.1

• [FIXED] Pin transitive dependencies to patched versions to resolve known vulnerabilities (cipher-base, pbkdf2, sha.js, node-forge, js-yaml, compression, on-headers, tmp)

Changelog

Sourced from pusher-js's changelog.

8.4.3

• [FIXED] Pin additional transitive dependencies to patched versions to resolve known vulnerabilities (express, qs, body-parser, lodash, minimatch, browserstack-local)
• [FIXED] Bump integration_tests_server express dependency to resolve CVEs

8.4.2

• [CHANGED] Modernise release workflow: update action versions, replace deprecated flood-io/is-published-on-npm action with inline npm registry check

8.4.1

• [FIXED] Pin transitive dependencies to patched versions to resolve known vulnerabilities (cipher-base, pbkdf2, sha.js, node-forge, js-yaml, compression, on-headers, tmp)

Commits

• cd9a22d Merge pull request #913 from pusher/security/cve-qs-express-fixes
• e187caf Fix Firefox CI test failures: xhr_polling with forceTLS=false
• 054bd72 Remove BrowserStack Safari dependency from CI
• f103608 Fix Chrome CI test failures: xhr_streaming/xhr_polling with forceTLS=false
• b19d431 Pin additional transitive dependencies to resolve CVEs (v8.4.3)
• d4f84b9 Merge pull request #912 from pusher/fix/modernise-release-workflow
• 1dc7a87 Modernise GitHub release workflow
• f71058c Merge pull request #905 from pusher/security/consolidate-dependabot-updates
• 251a696 fix: pin transitive security dependencies to patched versions
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.