fix(deps): update dependency webtorrent to v3

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
webtorrent (source)	1.9.7 → 3.0.21

---

Release Notes

webtorrent/webtorrent (webtorrent)

v3.0.21

Compare Source

Bug Fixes

• deps: update dependency streamx to v2.28.0 (#​3062) (4df7cda)

v3.0.20

Compare Source

Bug Fixes

• deps: update dependency bittorrent-protocol to ^5.0.9 (#​3097) (6d5c5ce)

v3.0.19

Compare Source

Bug Fixes

• deps: update dependency range-parser to ^1.3.0 (#​3080) (a310780)

v3.0.18

Compare Source

Bug Fixes

• deps: update webtorrent (#​3094) (1f0753f)

v3.0.17

Compare Source

Bug Fixes

• deps: update dependency uint8-util to ^2.3.2 (#​3093) (aeb7dc5)
• deps: update webtorrent (#​3090) (8810191)

v3.0.16

Compare Source

Bug Fixes

• perf: utp speed (#​3068) (668ccdd)

v3.0.15

Compare Source

Bug Fixes

• server path2 (#​3067) (6498e62)

v3.0.14

Compare Source

Bug Fixes

• http server encoding (#​3064) (9c5b70d)

v3.0.13

Compare Source

Bug Fixes

• deps: update dependency bittorrent-protocol to ^5.0.6 (#​3061) (f64f8a0)

v3.0.12

Compare Source

Bug Fixes

• pe tests (#​3060) (bc76c3d)

v3.0.11

Compare Source

Bug Fixes

• deps: update dependency ut_pex to v5 (#​3058) (47d3b7b)

v3.0.10

Compare Source

Bug Fixes

• deps: update dependency torrent-piece to ^4.0.1 (#​3059) (f734c27)

v3.0.9

Compare Source

Bug Fixes

• deps: update dependency load-ip-set to ^3.0.2 (#​3056) (5bdf3a3)
• deps: update dependency torrent-piece to v4 (#​3057) (12297b7)

v3.0.8

Compare Source

Bug Fixes

• deps: update dependency bittorrent-protocol to ^5.0.4 (#​3055) (0f48969)

v3.0.7

Compare Source

Bug Fixes

• pe/mse (#​3047) (2476dab)

v3.0.6

Compare Source

Bug Fixes

• deps: update webtorrent (#​3052) (9539a5c)

v3.0.5

Compare Source

Bug Fixes

• deps: update dependency create-torrent to ^6.1.2 (#​3051) (397028a)

v3.0.4

Compare Source

Bug Fixes

• deps: update webtorrent (#​3050) (21e2950)

v3.0.3

Compare Source

Bug Fixes

• ci: permissions to release (3a5fa92)
• deps: update dependency bitfield to v5 (#​3028) (64cf6c3)
• deps: update dependency bittorrent-protocol to v5 (#​3021) (91351a5)
• deps: update dependency debug to ^4.4.3 (#​2993) (7909a3e)
• deps: update dependency pump to ^3.0.3 (#​2963) (efadcdd)
• deps: update dependency streamx to v2.25.0 (#​3024) (2343c88)
• deps: update dependency uint8-util to ^2.2.6 (#​3023) (79c6cdb)
• deps: update dependency ut_metadata to v5 (#​3026) (cf40b0f)
• deps: update webtorrent (#​3025) (ceeca15)
• port and connection exhaustion (#​3019) (6fb0c21)
• setting throttleDownload as a float causes error (#​2994) (52ef175)
• simplify service worker documentation (#​2996) (40c1381)
• webpack: update import assertion for package.json (143e5cb)

chore

• bump minimum Node to 22+ (3449fc5), closes #​3043 #​3044

Features

• allow specifying UA (#​3020) (0937dcf)

Performance Improvements

• dont spam downloadSpeed, calculate requests correctly for webseeds (#​3001) (fd8f39e)

BREAKING CHANGES

• Node 22+
• webpack: Requires Node 22+

2.8.5 (2025-11-30)

Bug Fixes

• deps: update dependency @​silentbot1/nat-api to ^0.4.9 (#​2992) (15923e5)

2.8.4 (2025-08-14)

Bug Fixes

• connect count (#​2979) (ec009c8)

2.8.3 (2025-08-09)

Bug Fixes

• connect event name typo (#​2975) (30b535a)

2.8.2 (2025-08-05)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.20 (#​2974) (6618b21)

2.8.1 (2025-08-05)

Bug Fixes

• deps: update dependency throughput to ^1.0.2 (#​2973) (55ae332)

v3.0.2

Compare Source

Features

• add an option to store the bitfield in the file system (#​2878) (e29a474)

2.5.19 (2025-02-05)

Bug Fixes

• deps: update dependency streamx to v2.22.0 (#​2921) (f06ac81)

2.5.18 (2025-02-02)

2.5.17 (2025-01-30)

Bug Fixes

• deps: update dependency torrent-piece to ^3.0.1 (#​2920) (86d7980)

2.5.16 (2025-01-29)

Bug Fixes

• deps: update dependency streamx to v2.21.1 (#​2898) (7727845)

2.5.15 (2025-01-29)

Bug Fixes

• bad done and select behavior and documentation (#​2916) (8237d5f)

2.5.14 (2025-01-21)

Bug Fixes

• noPeers not working correctly (#​2915) (62b4118)

2.5.13 (2025-01-20)

Bug Fixes

• deps: update webtorrent (#​2914) (e4f237d)

2.5.12 (2025-01-04)

Bug Fixes

• deps: update webtorrent (#​2910) (53049b6)

2.5.11 (2024-12-28)

Bug Fixes

• deps: update dependency torrent-discovery to ^11.0.14 (#​2908) (85e1d8a)

2.5.10 (2024-12-07)

Bug Fixes

• deps: update dependency torrent-discovery to ^11.0.13 (#​2901) (03f7021)

2.5.9 (2024-12-07)

Bug Fixes

• deps: update webtorrent (#​2900) (2b45a14)

2.5.8 (2024-12-07)

Bug Fixes

• deps: update dependency debug to ^4.4.0 (#​2899) (1dd3c1a)

2.5.7 (2024-11-23)

Bug Fixes

• deps: update dependency streamx to v2.20.2 (#​2888) (4b00a0e)

2.5.6 (2024-11-17)

Bug Fixes

• uTP error on setup (#​2892) (283fd76)

2.5.5 (2024-11-06)

Bug Fixes

• deps: update dependency streamx to v2.20.1 (#​2855) (6618cee)

2.5.4 (2024-11-06)

Bug Fixes

• deps: update dependency pump to ^3.0.2 (#​2864) (019f115)

2.5.3 (2024-11-05)

Bug Fixes

• deps: update webtorrent (c5eed32)

2.5.2 (2024-11-05)

Bug Fixes

• parse host even if this.client.blocked is false, to allow line 868 to pass correctly and default to utp. (#​2805) (beef270)

2.5.1 (2024-09-07)

Bug Fixes

• deps: update dependency debug to ^4.3.7 (69c1441)

v3.0.1

Compare Source

Features

• add an option to store the bitfield in the file system (#​2878) (e29a474)

2.5.19 (2025-02-05)

Bug Fixes

• deps: update dependency streamx to v2.22.0 (#​2921) (f06ac81)

2.5.18 (2025-02-02)

2.5.17 (2025-01-30)

Bug Fixes

• deps: update dependency torrent-piece to ^3.0.1 (#​2920) (86d7980)

2.5.16 (2025-01-29)

Bug Fixes

• deps: update dependency streamx to v2.21.1 (#​2898) (7727845)

2.5.15 (2025-01-29)

Bug Fixes

• bad done and select behavior and documentation (#​2916) (8237d5f)

2.5.14 (2025-01-21)

Bug Fixes

• noPeers not working correctly (#​2915) (62b4118)

2.5.13 (2025-01-20)

Bug Fixes

• deps: update webtorrent (#​2914) (e4f237d)

2.5.12 (2025-01-04)

Bug Fixes

• deps: update webtorrent (#​2910) (53049b6)

2.5.11 (2024-12-28)

Bug Fixes

• deps: update dependency torrent-discovery to ^11.0.14 (#​2908) (85e1d8a)

2.5.10 (2024-12-07)

Bug Fixes

• deps: update dependency torrent-discovery to ^11.0.13 (#​2901) (03f7021)

2.5.9 (2024-12-07)

Bug Fixes

• deps: update webtorrent (#​2900) (2b45a14)

2.5.8 (2024-12-07)

Bug Fixes

• deps: update dependency debug to ^4.4.0 (#​2899) (1dd3c1a)

2.5.7 (2024-11-23)

Bug Fixes

• deps: update dependency streamx to v2.20.2 (#​2888) (4b00a0e)

2.5.6 (2024-11-17)

Bug Fixes

• uTP error on setup (#​2892) (283fd76)

2.5.5 (2024-11-06)

Bug Fixes

• deps: update dependency streamx to v2.20.1 (#​2855) (6618cee)

2.5.4 (2024-11-06)

Bug Fixes

• deps: update dependency pump to ^3.0.2 (#​2864) (019f115)

2.5.3 (2024-11-05)

Bug Fixes

• deps: update webtorrent (c5eed32)

2.5.2 (2024-11-05)

Bug Fixes

• parse host even if this.client.blocked is false, to allow line 868 to pass correctly and default to utp. (#​2805) (beef270)

2.5.1 (2024-09-07)

Bug Fixes

• deps: update dependency debug to ^4.3.7 (69c1441)

v3.0.0

Compare Source

Bug Fixes

• ci: permissions to release (3a5fa92)
• deps: update dependency bitfield to v5 (#​3028) (64cf6c3)
• deps: update dependency bittorrent-protocol to v5 (#​3021) (91351a5)
• deps: update dependency debug to ^4.4.3 (#​2993) (7909a3e)
• deps: update dependency pump to ^3.0.3 (#​2963) (efadcdd)
• deps: update dependency streamx to v2.25.0 (#​3024) (2343c88)
• deps: update dependency uint8-util to ^2.2.6 (#​3023) (79c6cdb)
• deps: update dependency ut_metadata to v5 (#​3026) (cf40b0f)
• deps: update webtorrent (#​3025) (ceeca15)
• port and connection exhaustion (#​3019) (6fb0c21)
• setting throttleDownload as a float causes error (#​2994) (52ef175)
• simplify service worker documentation (#​2996) (40c1381)
• webpack: update import assertion for package.json (143e5cb)

chore

• bump minimum Node to 22+ (3449fc5), closes #​3043 #​3044

Features

• allow specifying UA (#​3020) (0937dcf)

Performance Improvements

• dont spam downloadSpeed, calculate requests correctly for webseeds (#​3001) (fd8f39e)

BREAKING CHANGES

• Node 22+
• webpack: Requires Node 22+

2.8.5 (2025-11-30)

Bug Fixes

• deps: update dependency @​silentbot1/nat-api to ^0.4.9 (#​2992) (15923e5)

2.8.4 (2025-08-14)

Bug Fixes

• connect count (#​2979) (ec009c8)

2.8.3 (2025-08-09)

Bug Fixes

• connect event name typo (#​2975) (30b535a)

2.8.2 (2025-08-05)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.20 (#​2974) (6618b21)

2.8.1 (2025-08-05)

Bug Fixes

• deps: update dependency throughput to ^1.0.2 (#​2973) (55ae332)

v2.8.5

Compare Source

Bug Fixes

• ci: permissions to release (3a5fa92)
• deps: update dependency bitfield to v5 (#​3028) (64cf6c3)
• deps: update dependency bittorrent-protocol to v5 (#​3021) (91351a5)
• deps: update dependency debug to ^4.4.3 (#​2993) (7909a3e)
• deps: update dependency pump to ^3.0.3 (#​2963) (efadcdd)
• deps: update dependency streamx to v2.25.0 (#​3024) (2343c88)
• deps: update dependency uint8-util to ^2.2.6 (#​3023) (79c6cdb)
• deps: update dependency ut_metadata to v5 (#​3026) (cf40b0f)
• deps: update webtorrent (#​3025) (ceeca15)
• port and connection exhaustion (#​3019) (6fb0c21)
• setting throttleDownload as a float causes error (#​2994) (52ef175)
• simplify service worker documentation (#​2996) (40c1381)
• webpack: update import assertion for package.json (143e5cb)

chore

• bump minimum Node to 22+ (3449fc5), closes #​3043 #​3044

Features

• allow specifying UA (#​3020) (0937dcf)

Performance Improvements

• dont spam downloadSpeed, calculate requests correctly for webseeds (#​3001) (fd8f39e)

BREAKING CHANGES

• Node 22+
• webpack: Requires Node 22+

2.8.5 (2025-11-30)

Bug Fixes

• deps: update dependency @​silentbot1/nat-api to ^0.4.9 (#​2992) (15923e5)

2.8.4 (2025-08-14)

Bug Fixes

• connect count (#​2979) (ec009c8)

2.8.3 (2025-08-09)

Bug Fixes

• connect event name typo (#​2975) (30b535a)

2.8.2 (2025-08-05)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.20 (#​2974) (6618b21)

2.8.1 (2025-08-05)

Bug Fixes

• deps: update dependency throughput to ^1.0.2 (#​2973) (55ae332)

v2.8.4

Compare Source

Bug Fixes

• ci: permissions to release (3a5fa92)
• deps: update dependency bitfield to v5 (#​3028) (64cf6c3)
• deps: update dependency bittorrent-protocol to v5 (#​3021) (91351a5)
• deps: update dependency debug to ^4.4.3 (#​2993) (7909a3e)
• deps: update dependency pump to ^3.0.3 (#​2963) (efadcdd)
• deps: update dependency streamx to v2.25.0 (#​3024) (2343c88)
• deps: update dependency uint8-util to ^2.2.6 (#​3023) (79c6cdb)
• deps: update dependency ut_metadata to v5 (#​3026) (cf40b0f)
• deps: update webtorrent (#​3025) (ceeca15)
• port and connection exhaustion (#​3019) (6fb0c21)
• setting throttleDownload as a float causes error (#​2994) (52ef175)
• simplify service worker documentation (#​2996) (40c1381)
• webpack: update import assertion for package.json (143e5cb)

chore

• bump minimum Node to 22+ (3449fc5), closes #​3043 #​3044

Features

• allow specifying UA (#​3020) (0937dcf)

Performance Improvements

• dont spam downloadSpeed, calculate requests correctly for webseeds (#​3001) (fd8f39e)

BREAKING CHANGES

• Node 22+
• webpack: Requires Node 22+

2.8.5 (2025-11-30)

Bug Fixes

• deps: update dependency @​silentbot1/nat-api to ^0.4.9 (#​2992) (15923e5)

2.8.4 (2025-08-14)

Bug Fixes

• connect count (#​2979) (ec009c8)

2.8.3 (2025-08-09)

Bug Fixes

• connect event name typo (#​2975) (30b535a)

2.8.2 (2025-08-05)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.20 (#​2974) (6618b21)

2.8.1 (2025-08-05)

Bug Fixes

• deps: update dependency throughput to ^1.0.2 (#​2973) (55ae332)

v2.8.3

Compare Source

Bug Fixes

• ci: permissions to release (3a5fa92)
• deps: update dependency bitfield to v5 (#​3028) (64cf6c3)
• deps: update dependency bittorrent-protocol to v5 (#​3021) (91351a5)
• deps: update dependency debug to ^4.4.3 (#​2993) (7909a3e)
• deps: update dependency pump to ^3.0.3 (#​2963) (efadcdd)
• deps: update dependency streamx to v2.25.0 (#​3024) (2343c88)
• deps: update dependency uint8-util to ^2.2.6 (#​3023) (79c6cdb)
• deps: update dependency ut_metadata to v5 (#​3026) (cf40b0f)
• deps: update webtorrent (#​3025) (ceeca15)
• port and connection exhaustion (#​3019) (6fb0c21)
• setting throttleDownload as a float causes error (#​2994) (52ef175)
• simplify service worker documentation (#​2996) (40c1381)
• webpack: update import assertion for package.json (143e5cb)

chore

• bump minimum Node to 22+ (3449fc5), closes #​3043 #​3044

Features

• allow specifying UA (#​3020) (0937dcf)

Performance Improvements

• dont spam downloadSpeed, calculate requests correctly for webseeds (#​3001) (fd8f39e)

BREAKING CHANGES

• Node 22+
• webpack: Requires Node 22+

2.8.5 (2025-11-30)

Bug Fixes

• deps: update dependency @​silentbot1/nat-api to ^0.4.9 (#​2992) (15923e5)

2.8.4 (2025-08-14)

Bug Fixes

• connect count (#​2979) (ec009c8)

2.8.3 (2025-08-09)

Bug Fixes

• connect event name typo (#​2975) (30b535a)

2.8.2 (2025-08-05)

Bug Fixes

• deps: update dependency bittorrent-protocol to ^4.1.20 (#​2974) (6618b21)

2.8.1 (2025-08-05)

Bug Fixes

• deps: update dependency throughput to ^1.0.2 (#​2973) (55ae332)

v2.8.2

Compare Source

Bug Fixes

• ci: permissions to release (3a5fa92)
• deps: update dependency bitfield to v5 (#​3028) (64cf6c3)
• deps: update dependency bittorrent-protocol to v5 (#​3021) (91351a5)
• deps: update dependency debug to ^4.4.3 (#​2993) (7909a3e)
• deps: update dependency pump to ^3.0.3 (#​2963) (efadcdd)
• deps: update dependency streamx to v2.25.0 (#​3024) (2343c88)
• deps: update dependency uint8-util to ^2.2.6 (#​3023) (79c6cdb)
• deps: update dependency ut_metadata to v5 (#​3026) (cf40b0f)
• deps: update webtorrent (#​3025) (ceeca15)
• port and connection exhaustion (#​3019) (6fb0c21)
• setting throttleDownload as a float causes error (#​2994) (52ef175)
• simplify service worker documentation (#​2996) (40c1381)
• webpack: update import assertion for package.json (143e5cb)

chore

• bump minimum Node to 22+ (3449fc5), closes #​3043 #​3044

Features

• allow specifying UA (#​3020) (0937dcf)

Performance Improvements

• dont spam downloadSpeed, calculate requests correctly for webseeds (#​3001) (fd8f39e)

BREAKING CHANGES

• Node 22+
• webpack: Requires Node 22+

2.8.5 (2025-11-30)

Bug Fixes

• deps: update dependency @​silentbot1/nat-api to ^0.4.9 (#​2992) (15923e5)

2.8.4 (2025-08-14)

Bug Fixes

• connect count (#​2979) (ec009c8)

[2.8.3](https://

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	webtorrent@​1.9.7 ⏵ 3.0.21				+1

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report