node-red-contrib-web-worldmap 5.8.0 → 5.8.1

package/CHANGELOG.md

@@ -1,5 +1,6 @@
 ### Change Log for Node-RED Worldmap
 
+ - v5.8.1 - Fix draggable event
  - v5.8.0 - Stop double click on icons zooming in. Bump uuid lib.
  - v5.7.2 - Bump express libs
  - v5.7.0 - Add events for openPopup and closePopup actions, small popup fixups. Add showdialog command.

package/README.md

@@ -10,6 +10,7 @@ A <a href="https://nodered.org" target="mapinfo">Node-RED</a> node to provide a
 
 ### Updates
 
+- v5.8.1 - Fix draggable event
 - v5.8.0 - Stop double click on icons zooming in. Bump uuid lib.
 - v5.7.2 - Bump express libs.
 - v5.7.0 - Add events for openPopup and closePopup, small popup fixups. Add showdialog command.

package/node_modules/hasown/CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [v2.0.4](https://github.com/inspect-js/hasOwn/compare/v2.0.3...v2.0.4) - 2026-05-28
+
+### Commits
+
+- [types] drop the dead key-narrowing overload [`fdab00e`](https://github.com/inspect-js/hasOwn/commit/fdab00e2703e65411424e19bf86a7e72a8f10da9)
+- [Dev Deps] update `@ljharb/eslint-config`, `auto-changelog`, `eslint` [`91f6247`](https://github.com/inspect-js/hasOwn/commit/91f624768dd0f7db0d019b89d4d86bd66e20ec30)
+
 ## [v2.0.3](https://github.com/inspect-js/hasOwn/compare/v2.0.2...v2.0.3) - 2026-04-17
 
 ### Commits

package/node_modules/hasown/index.d.ts

@@ -1,4 +1,3 @@
-declare function hasOwn<O, K extends PropertyKey>(o: O, p: K): p is K & keyof O;
 declare function hasOwn<O, K extends PropertyKey, V = unknown>(o: O, p: K): o is O & Record<K, V>;
 
 export = hasOwn;

package/node_modules/hasown/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "hasown",
-	"version": "2.0.3",
+	"version": "2.0.4",
 	"description": "A robust, ES3 compatible, \"has own property\" predicate.",
 	"main": "index.js",
 	"exports": {
@@ -52,13 +52,12 @@
 	},
 	"devDependencies": {
 		"@arethetypeswrong/cli": "^0.18.2",
-		"@ljharb/eslint-config": "^22.2.2",
+		"@ljharb/eslint-config": "^22.2.3",
 		"@ljharb/tsconfig": "^0.3.2",
 		"@types/function-bind": "^1.1.10",
 		"@types/tape": "^5.8.1",
-		"auto-changelog": "^2.5.0",
-		"encoding": "^0.1.13",
-		"eslint": "^10.2.0",
+		"auto-changelog": "^2.5.1",
+		"eslint": "^10.4.0",
 		"evalmd": "^0.0.19",
 		"in-publish": "^2.0.1",
 		"jiti": "^0.0.0",

package/node_modules/side-channel/CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [v1.1.1](https://github.com/ljharb/side-channel/compare/v1.1.0...v1.1.1) - 2026-06-08
+
+### Commits
+
+- [Fix] `assert`: do not observably access object keys when throwing [`fc17361`](https://github.com/ljharb/side-channel/commit/fc173615136e6a6c3194656e6088afbc0bd6f9b8)
+- [actions] update workflows [`35b18c0`](https://github.com/ljharb/side-channel/commit/35b18c0bced5769d59226cd44a7e4003ad0aee81)
+- [Dev Deps] update `@arethetypeswrong/cli`, `@ljharb/eslint-config`, `@ljharb/tsconfig`, `@types/tape`, `auto-changelog`, `eslint`, `npmignore` [`b456a01`](https://github.com/ljharb/side-channel/commit/b456a01396cfdd028e5d39ea84885fe9178a72cf)
+- [Deps] update `object-inspect`, `side-channel-list` [`accf1a1`](https://github.com/ljharb/side-channel/commit/accf1a1a2767a22b1f5eeb5769a1db4c35a78090)
+- [readme] replace runkit CI badge with shields.io check-runs badge [`7e0c956`](https://github.com/ljharb/side-channel/commit/7e0c956411cc29267197a49a155a3d9bd01bacac)
+
 ## [v1.1.0](https://github.com/ljharb/side-channel/compare/v1.0.6...v1.1.0) - 2024-12-11
 
 ### Commits

package/node_modules/side-channel/README.md

@@ -57,5 +57,5 @@ Clone the repo, `npm install`, and run `npm test`
 [downloads-url]: https://npm-stat.com/charts.html?package=side-channel
 [codecov-image]: https://codecov.io/gh/ljharb/side-channel/branch/main/graphs/badge.svg
 [codecov-url]: https://app.codecov.io/gh/ljharb/side-channel/
-[actions-image]: https://img.shields.io/endpoint?url=https://github-actions-badge-u3jn4tfpocch.runkit.sh/ljharb/side-channel
+[actions-image]: https://img.shields.io/github/check-runs/ljharb/side-channel/main
 [actions-url]: https://github.com/ljharb/side-channel/actions

package/node_modules/side-channel/index.js

@@ -18,7 +18,10 @@ module.exports = function getSideChannel() {
 	var channel = {
 		assert: function (key) {
 			if (!channel.has(key)) {
-				throw new $TypeError('Side channel does not contain ' + inspect(key));
+				var keyDesc = key && Object(key) === key
+					? 'the given object key'
+					: inspect(key);
+				throw new $TypeError('Side channel does not contain ' + keyDesc);
 			}
 		},
 		'delete': function (key) {
@@ -38,6 +41,6 @@ module.exports = function getSideChannel() {
 			$channelData.set(key, value);
 		}
 	};
-	// @ts-expect-error TODO: figure out why this is erroring
+
 	return channel;
 };

package/node_modules/side-channel/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "side-channel",
-	"version": "1.1.0",
+	"version": "1.1.1",
 	"description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
 	"main": "index.js",
 	"exports": {
@@ -44,23 +44,23 @@
 	"homepage": "https://github.com/ljharb/side-channel#readme",
 	"dependencies": {
 		"es-errors": "^1.3.0",
-		"object-inspect": "^1.13.3",
-		"side-channel-list": "^1.0.0",
+		"object-inspect": "^1.13.4",
+		"side-channel-list": "^1.0.1",
 		"side-channel-map": "^1.0.1",
 		"side-channel-weakmap": "^1.0.2"
 	},
 	"devDependencies": {
-		"@arethetypeswrong/cli": "^0.17.1",
-		"@ljharb/eslint-config": "^21.1.1",
-		"@ljharb/tsconfig": "^0.2.2",
+		"@arethetypeswrong/cli": "^0.18.3",
+		"@ljharb/eslint-config": "^22.2.3",
+		"@ljharb/tsconfig": "^0.3.2",
 		"@types/object-inspect": "^1.13.0",
-		"@types/tape": "^5.6.5",
-		"auto-changelog": "^2.5.0",
+		"@types/tape": "^5.8.1",
+		"auto-changelog": "^2.6.0",
 		"eclint": "^2.8.1",
 		"encoding": "^0.1.13",
-		"eslint": "=8.8.0",
+		"eslint": "^8.57.1",
 		"in-publish": "^2.0.1",
-		"npmignore": "^0.3.1",
+		"npmignore": "^0.3.5",
 		"nyc": "^10.3.2",
 		"safe-publish-latest": "^2.0.0",
 		"tape": "^5.9.0",

package/node_modules/side-channel/test/index.js

@@ -28,6 +28,22 @@ test('getSideChannel', function (t) {
 		channel.set(o, 'data');
 		st.doesNotThrow(function () { channel.assert(o); }, 'existent value noops');
 
+		var accessed = false;
+		var trap = {};
+		Object.defineProperty(trap, 'foo', {
+			enumerable: true,
+			get: function () {
+				accessed = true;
+				return 1;
+			}
+		});
+		st['throws'](
+			function () { channel.assert(trap); },
+			TypeError,
+			'missing object key throws'
+		);
+		st.equal(accessed, false, 'a missing object key is not observably accessed');
+
 		st.end();
 	});
 

package/node_modules/websocket-driver/LICENSE.md

@@ -1,4 +1,4 @@
-Copyright 2010-2020 James Coglan
+Copyright 2010-2026 James Coglan
 
 Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 this file except in compliance with the License. You may obtain a copy of the

package/node_modules/websocket-driver/README.md

@@ -1,4 +1,4 @@
-# websocket-driver [![Build Status](https://travis-ci.org/faye/websocket-driver-node.svg)](https://travis-ci.org/faye/websocket-driver-node)
+# websocket-driver
 
 This module provides a complete implementation of the WebSocket protocols that
 can be hooked up to any I/O stream. It aims to simplify things by decoupling the

package/node_modules/websocket-driver/lib/websocket/driver/draft75.js

@@ -44,6 +44,7 @@ var instance = {
 
         case 1:
           this._length = (octet & 0x7F) + 128 * this._length;
+          if (this._length > this._maxLength) return this.close();
 
           if (this._closing && this._length === 0) {
             return this.close();

package/node_modules/websocket-driver/lib/websocket/driver/hybi.js

@@ -452,7 +452,12 @@ var instance = {
       if (error) return this._fail('extension_error', error.message);
 
       var payload = message.data;
-      if (message.opcode === this.OPCODES.text) payload = this._encode(payload);
+
+      if (payload.length > this._maxLength)
+        return this._fail('too_large', 'WebSocket frame length too large');
+
+      if (message.opcode === this.OPCODES.text)
+        payload = this._encode(payload);
 
       if (payload === null)
         return this._fail('encoding_error', 'Could not decode a text frame as UTF-8');

package/node_modules/websocket-driver/package.json

@@ -7,7 +7,7 @@
                     "websocket"
           ],
           "license": "Apache-2.0",
-          "version": "0.7.4",
+          "version": "0.7.5",
           "engines": {
                     "node": ">=0.8.0"
           },

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "node-red-contrib-web-worldmap",
-    "version": "5.8.0",
+    "version": "5.8.1",
     "description": "A Node-RED node to provide a web page of a world map for plotting things on.",
     "dependencies": {
         "@turf/bezier-spline": "7.3.5",

package/worldmap/worldmap.js

@@ -2455,7 +2455,9 @@ function setMarker(data) {
         });
         marker.on('dragend', function (e) {
             var l = marker.getLatLng().toString().replace('LatLng(','lat, lon : ').replace(')','')
-            marker.setPopupContent(marker.getPopup().getContent().split("lat, lon")[0] + l);
+            if (marker.getPopup() != undefined) {
+                marker.setPopupContent(marker.getPopup().getContent().split("lat, lon")[0] + l);
+            }
             // var b = marker.getPopup().getContent().split("heading : ");
             // if (b.length === 2) { b = parseFloat(b[1].split("<br")[0]); }
             // else { b = undefined; }

package/node_modules/websocket-driver/CHANGELOG.md

@@ -1,142 +0,0 @@
-### 0.7.4 / 2020-05-22
-
-- Avoid crashing if `process.version` does not contain any digits
-- Emit `ping` and `pong` events from the `Server` driver
-- Require http-parser-js >=0.5.1 which fixes the bug we addressed in 0.7.3
-
-### 0.7.3 / 2019-06-13
-
-- Cap version of http-parser-js below 0.4.11, which introduced a bug that
-  prevents us from handling messages that are part of the same input buffer as
-  the handshake response if chunked encoding is specified
-
-### 0.7.2 / 2019-06-13
-
-(This version was pulled due to an error when publishing)
-
-### 0.7.1 / 2019-06-10
-
-- Catch any exceptions produced while generating a handshake response and send a
-  `400 Bad Request` response to the client
-- Pick the RFC-6455 protocol version if the request contains any of the headers
-  used by that version
-- Use the `Buffer.alloc()` and `Buffer.from()` functions instead of the unsafe
-  `Buffer()` constructor
-- Handle errors encountered while handling malformed draft-76 requests
-- Change license from MIT to Apache 2.0
-
-### 0.7.0 / 2017-09-11
-
-- Add `ping` and `pong` to the set of events users can listen to
-- Replace the bindings to Node's HTTP parser with `http-parser-js`
-
-### 0.6.5 / 2016-05-20
-
-- Don't mutate buffers passed in by the application when masking
-
-### 0.6.4 / 2016-01-07
-
-- If a number is given as input for a frame payload, send it as a string
-
-### 0.6.3 / 2015-11-06
-
-- Reject draft-76 handshakes if their Sec-WebSocket-Key headers are invalid
-- Throw a more helpful error if a client is created with an invalid URL
-
-### 0.6.2 / 2015-07-18
-
-- When the peer sends a close frame with no error code, emit 1000
-
-### 0.6.1 / 2015-07-13
-
-- Use the `buffer.{read,write}UInt{16,32}BE` methods for reading/writing numbers
-  to buffers rather than including duplicate logic for this
-
-### 0.6.0 / 2015-07-08
-
-- Allow the parser to recover cleanly if event listeners raise an error
-- Add a `pong` method for sending unsolicited pong frames
-
-### 0.5.4 / 2015-03-29
-
-- Don't emit extra close frames if we receive a close frame after we already
-  sent one
-- Fail the connection when the driver receives an invalid
-  `Sec-WebSocket-Extensions` header
-
-### 0.5.3 / 2015-02-22
-
-- Don't treat incoming data as WebSocket frames if a client driver is closed
-  before receiving the server handshake
-
-### 0.5.2 / 2015-02-19
-
-- Fix compatibility with the HTTP parser on io.js
-- Use `websocket-extensions` to make sure messages and close frames are kept in
-  order
-- Don't emit multiple `error` events
-
-### 0.5.1 / 2014-12-18
-
-- Don't allow drivers to be created with unrecognized options
-
-### 0.5.0 / 2014-12-13
-
-- Support protocol extensions via the websocket-extensions module
-
-### 0.4.0 / 2014-11-08
-
-- Support connection via HTTP proxies using `CONNECT`
-
-### 0.3.6 / 2014-10-04
-
-- It is now possible to call `close()` before `start()` and close the driver
-
-### 0.3.5 / 2014-07-06
-
-- Don't hold references to frame buffers after a message has been emitted
-- Make sure that `protocol` and `version` are exposed properly by the TCP driver
-
-### 0.3.4 / 2014-05-08
-
-- Don't hold memory-leaking references to I/O buffers after they have been
-  parsed
-
-### 0.3.3 / 2014-04-24
-
-- Correct the draft-76 status line reason phrase
-
-### 0.3.2 / 2013-12-29
-
-- Expand `maxLength` to cover sequences of continuation frames and
-  `draft-{75,76}`
-- Decrease default maximum frame buffer size to 64MB
-- Stop parsing when the protocol enters a failure mode, to save CPU cycles
-
-### 0.3.1 / 2013-12-03
-
-- Add a `maxLength` option to limit allowed frame size
-- Don't pre-allocate a message buffer until the whole frame has arrived
-- Fix compatibility with Node v0.11 `HTTPParser`
-
-### 0.3.0 / 2013-09-09
-
-- Support client URLs with Basic Auth credentials
-
-### 0.2.2 / 2013-07-05
-
-- No functional changes, just updates to package.json
-
-### 0.2.1 / 2013-05-17
-
-- Export the isSecureRequest() method since faye-websocket relies on it
-- Queue sent messages in the client's initial state
-
-### 0.2.0 / 2013-05-12
-
-- Add API for setting and reading headers
-- Add Driver.server() method for getting a driver for TCP servers
-
-### 0.1.0 / 2013-05-04
-
-- First stable release