deps: upgrade form-data to 4.0.4 for vulnerability fix (#468)

mohitpubnub · Mohit Tejani · pubnub-release-bot · web-flow · commit 1f99c8e955a0 · 2025-07-28T14:58:35.000+05:30
* deps: upgrade form-data to 4.0.4 for vulnerability fix

* docs-syntax: resolve name conflic issue by adding dummy scope for examples

* codacy: applied lint suggestions

* PubNub SDK v9.8.2 release.

---------

Co-authored-by: Mohit Tejani &lt;mohit.tejani@Mohits-MacBook-Pro.local&gt;
Co-authored-by: PubNub Release Bot &lt;120067856+pubnub-release-bot@users.noreply.github.com&gt;
diff --git a/.pubnub.yml b/.pubnub.yml
@@ -1,5 +1,10 @@
 ---
 changelog:
+  - date: 2025-07-28
+    version: v9.8.2
+    changes:
+      - type: improvement
+        text: "Upgraded `form-data` dependency to version 4.0.4 to address potential vulnerability issue."
   - date: 2025-07-15
     version: v9.8.1
     changes:
@@ -1298,7 +1303,7 @@ supported-platforms:
       - 'Ubuntu 14.04 and up'
       - 'Windows 7 and up'
     version: 'Pubnub Javascript for Node'
-version: '9.8.1'
+version: '9.8.2'
 sdks:
   - full-name: PubNub Javascript SDK
     short-name: Javascript
@@ -1314,7 +1319,7 @@ sdks:
           - distribution-type: source
             distribution-repository: GitHub release
             package-name: pubnub.js
-            location: https://github.com/pubnub/javascript/archive/refs/tags/v9.8.1.zip
+            location: https://github.com/pubnub/javascript/archive/refs/tags/v9.8.2.zip
             requires:
               - name: 'agentkeepalive'
                 min-version: '3.5.2'
@@ -1985,7 +1990,7 @@ sdks:
           - distribution-type: library
             distribution-repository: GitHub release
             package-name: pubnub.js
-            location: https://github.com/pubnub/javascript/releases/download/v9.8.1/pubnub.9.8.1.js
+            location: https://github.com/pubnub/javascript/releases/download/v9.8.2/pubnub.9.8.2.js
             requires:
               - name: 'agentkeepalive'
                 min-version: '3.5.2'
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,9 @@
+## v9.8.2
+July 28 2025
+
+#### Modified
+- Upgraded `form-data` dependency to version 4.0.4 to address potential vulnerability issue.
+
 ## v9.8.1
 July 15 2025
 
diff --git a/README.md b/README.md
@@ -27,8 +27,8 @@ Watch [Getting Started with PubNub JS SDK](https://app.dashcam.io/replay/64ee0d2
      npm install pubnub
      ```
    * or download one of our builds from our CDN: 
-     * https://cdn.pubnub.com/sdk/javascript/pubnub.9.8.1.js
-     * https://cdn.pubnub.com/sdk/javascript/pubnub.9.8.1.min.js
+     * https://cdn.pubnub.com/sdk/javascript/pubnub.9.8.2.js
+     * https://cdn.pubnub.com/sdk/javascript/pubnub.9.8.2.min.js
 
 2. Configure your keys:
 
diff --git a/dist/web/pubnub.js b/dist/web/pubnub.js
@@ -5333,7 +5333,7 @@
 	            return base.PubNubFile;
 	        },
 	        get version() {
-	            return '9.8.1';
+	            return '9.8.2';
 	        },
 	        getVersion() {
 	            return this.version;
diff --git a/dist/web/pubnub.min.js b/dist/web/pubnub.min.js
diff --git a/docs-snippets/publish-subscribe.ts b/docs-snippets/publish-subscribe.ts
@@ -219,24 +219,24 @@ pubnub.unsubscribe({
   subscriptionSet.subscribe();
   // snippet.end
 }
+{
+  // snippet.SubscriptionSetFrom2Sets
+  // create a subscription set with multiple channels
+  const subscriptionSet1 = pubnub.subscriptionSet({ channels: ['ch1', 'ch2'] });
+
+  // create another subscription set with multiple channels and options
+  const subscriptionSet2 = pubnub.subscriptionSet({
+    channels: ['ch3', 'ch4'],
+    subscriptionOptions: { receivePresenceEvents: true },
+  });
 
-// snippet.SubscriptionSetFrom2Sets
-// create a subscription set with multiple channels
-const subscriptionSet1 = pubnub.subscriptionSet({ channels: ['ch1', 'ch2'] });
-
-// create another subscription set with multiple channels and options
-const subscriptionSet2 = pubnub.subscriptionSet({
-  channels: ['ch3', 'ch4'],
-  subscriptionOptions: { receivePresenceEvents: true },
-});
-
-// add a subscription set to another subscription set
-subscriptionSet1.addSubscriptionSet(subscriptionSet2);
-
-// remove a subscription set from another subscription set
-subscriptionSet1.removeSubscriptionSet(subscriptionSet2);
-// snippet.end
+  // add a subscription set to another subscription set
+  subscriptionSet1.addSubscriptionSet(subscriptionSet2);
 
+  // remove a subscription set from another subscription set
+  subscriptionSet1.removeSubscriptionSet(subscriptionSet2);
+  // snippet.end
+}
 // snippet.AddToExistingSubscriptionSet
 // create a subscription set with multiple channels
 const subscriptionSet1 = pubnub.subscriptionSet({ channels: ['ch1', 'ch2'] });
diff --git a/lib/core/components/configuration.js b/lib/core/components/configuration.js
@@ -164,7 +164,7 @@ const makeConfiguration = (base, setupCryptoModule) => {
             return base.PubNubFile;
         },
         get version() {
-            return '9.8.1';
+            return '9.8.2';
         },
         getVersion() {
             return this.version;
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "pubnub",
-  "version": "9.8.1",
+  "version": "9.8.2",
   "author": "PubNub <support@pubnub.com>",
   "description": "Publish & Subscribe Real-time Messaging with PubNub",
   "scripts": {
@@ -61,7 +61,7 @@
     "cbor-js": "^0.1.0",
     "cbor-sync": "^1.0.4",
     "fflate": "^0.8.2",
-    "form-data": "^4.0.0",
+    "form-data": "^4.0.4",
     "lil-uuid": "^0.1.1",
     "node-fetch": "^2.7.0",
     "proxy-agent": "^6.3.0",
diff --git a/src/core/components/configuration.ts b/src/core/components/configuration.ts
@@ -232,7 +232,7 @@ export const makeConfiguration = (
       return base.PubNubFile;
     },
     get version(): string {
-      return '9.8.1';
+      return '9.8.2';
     },
     getVersion(): string {
       return this.version;
