Resource exhaustion in engine.io dependency from npm audit

[zachleat]

Report at GHSA-j4f2-536g-r55m

https://www.npmjs.com/package/socket.io is currently at 4.4.x but this package is using 2.4.x

browser-sync/packages/browser-sync/package.json

Line 63 in a7c14c8

"socket.io": "2.4.0",

[ludofischer]

According to the migration guides, it would be possible to upgrade the server to 4 while maintaining compatibility with 2.x clients, so keeping the same supported browsers as before. Don't know if that's worth attempting as they mention only dropping support for IE 8.

[lachieh]

Duplicate issue. See #1850 for original.