[Snyk] Upgrade amqplib from 0.8.0 to 0.10.4

[debarghyab]

Snyk has created this PR to upgrade amqplib from 0.8.0 to 0.10.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 7 versions ahead of your current version.

• The recommended version was released on 5 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Improper Input Validation SNYK-JS-URLPARSE-2407770	372	Proof of Concept
	Open Redirect SNYK-JS-URLPARSE-1533425	372	Proof of Concept
	Access Restriction Bypass SNYK-JS-URLPARSE-2401205	372	Proof of Concept
	Authorization Bypass SNYK-JS-URLPARSE-2407759	372	Proof of Concept
	Authorization Bypass Through User-Controlled Key SNYK-JS-URLPARSE-2412697	372	Proof of Concept
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	372	Proof of Concept

Release notes

Package name: amqplib

• 0.10.4 - 2024-04-11
  

  0.10.4

• 0.10.3 - 2022-09-01
  

  0.10.3

• 0.10.2 - 2022-08-07
  

  0.10.2

• 0.10.1 - 2022-07-26
  

  0.10.1

• 0.10.0 - 2022-06-02
  

  0.10.0

• 0.9.1 - 2022-05-22
• 0.9.0 - 2022-05-09
  

  0.9.0

• 0.8.0 - 2021-05-19
  

  ⚠️ This release drops support for NodeJS < v10 ⚠️. This version of amqplib still works with NodeJS v0.6 through v16, but future versions will not be tested for compatibility with NodeJS < v10.

  This is to unlock other improvements that can now be made, like

  • using the built-in Promise object
  • updating or switching libraries that previously couldn't be updated, because they had dropped support for older NodeJS
  • removing code that is now covered in the standard library, e.g., checking whether a number is an integer

  This release also includes an improvement to TLS connections for people using an AMQP server behind a load balancer. amqplib will now copy the hostname of the connection URL or object to the server name indication field.

from amqplib GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs