Bump ws and jsdom

[dependabot]

Bumps ws to 5.2.4 and updates ancestor dependency jsdom. These dependencies need to be updated together.

Updates ws from 4.0.0 to 5.2.4

Release notes

Sourced from ws's releases.

5.2.4

Bug fixes

• Backported e55e5106 to the 5.x release line (4abd8f6d).

5.2.3

Bug fixes

• Backported 00c425ec to the 5.x release line (76d47c14).

5.2.2

Bug fixes

• Fixed a use after invalidation bug introduced in 6046a28 (8aba871).

5.2.1

Bug fixes

• Fixed a bug that could prevent buffered data from being processed under certain circumstances (6046a28).

5.2.0

Features

• Added ability to specify custom headers when rejecting the handshake (#1379).

5.1.1

Bug fixes

• Fixed a regression introduced in 9e152f9 (#1347).

5.1.0

Features

• The address argument of the WebSocket constructor can now be a URL instance (#1329).
• The options argument of the WebSocket constructor now accepts any TLS option that is also accepted by https.request() (#1332).

5.0.0

Breaking changes

• Dropped support for Node.js < 4.5.0 (#1313).
• The connection is no longer closed if the server does not agree to any of the client's requested subprotocols (#1312).
• net.Socket errors are no longer re-emitted (a4050db).

... (truncated)

Commits

• aa8fe0a [dist] 5.2.4
• 4abd8f6 [security] Fix crash when the Upgrade header cannot be read (#2231)
• 36a3f4d [lint] Add space before function parentheses
• 6dd88e7 [dist] 5.2.3
• 76d47c1 [security] Fix ReDoS vulnerability
• 5d55e52 [dist] 5.2.2
• 8aba871 [fix] Fix use after invalidation bug
• 175ce46 [dist] 5.2.1
• 307be7a [fix] Remove the 'data' listener when the receiver emits an error
• 6046a28 [fix] Do not prematurely remove the listener of the 'data' event
• Additional commits viewable in compare view

Updates jsdom from 11.6.2 to 11.12.0

Changelog

Sourced from jsdom's changelog.

11.12.0

• Added window.localStorage, window.sessionStorage, and StorageEvent support. These are currently only stored in-memory; file an issue if you need persistent (on-disk) storage capability so we can discuss adding that. This feature includes the new storageQuota option for controlling how much can be stored.
• Added element.closest(). (caub)
• Changed hashchange and popstate events to no longer bubble, per a specification update.
• Fixed the old API in Node.js v10 to not throw, when given input that is not a valid file path (such as a typical HTML string).
• Upgraded cssstyle to v1.0.0, bringing along various fixes to our CSS parser and object model. (eddies)
• Upgraded nwsapi to v2.0.7, bringing along various fixes to our selector engine.

11.11.0

• Added node.getRootNode(). (FrecksterGIT)
• Added label.control. (FrecksterGIT)
• Added el.labels for form control elements. (FrecksterGIT)
• Fixed the contentType of Documents created through <iframe>s.
• Fixed the contentType and origin of Documents created through document.implementation.createDocument().
• Fixed sourceEl.srcset to return the value of the srcset="" attribute, instead of the cite="" attribute.
• Fixed node.normalize() to not modify non-Text nodes. (lddubeau)
• Upgraded cssstyle to v0.3.1, bringing along various fixes to our CSS parser and object model. (jsakas)
• Upgraded whatwg-url to v6.4.1, fixing the interaction of URL's href and searchParams properties.
• Upgraded our selector matching engine from nwsmatcher to nwsapi, bringing along extensive fixes, performance improvements, and additional selector support.

11.10.0

• Added event.srcElement and event.returnValue.
• Fixed XMLHttpRequest to correctly set the User-Agent header, and set it on CORS preflight requests. (BehindTheMath)

11.9.0

• Added node.lookupPrefix(), node.lookupNamespaceURI() and node.isDefaultNamespace().
• Fixed the cloning of Documents; previously it would not clone all of the appropriate state, and would sometimes add an extra document type node.
• Fixed various edge cases in the textContent and nodeValue properties.
• Fixed canvas.toBlob() to properly pass through the JPEG quality argument, instead of always passing zero to node-canvas. (challakoushik)

11.8.0

• Added the full constraint validation API, i.e. willValidate, validity, validationMessage, checkValidity(), reportValidity(), and setCustomValidity(), on HTMLButtonElement, HTMLFieldSetElement, HTMLFormElement, HTMLInputElement, HTMLObjectElement, HTMLOutputElement, HTMLSelectElement, and HTMLTextAreaElement. (kontomondo)
• Added getElementById() to DocumentFragment.

11.7.0

• Added the boolean return value to DOMTokenList's replace() method, per the recent spec addition.
• Added FileReader's readAsBinaryString() method, as it has been added back to the specification.
• Fixed event handlers to be own properties of each Window, instead of on Window.prototype. (Fetz)
• Fixed an exception that would sometimes get raised when removing an <img> element's src="" attribute. (atsikov)
• Fixed abort events on AbortSignals to have their isTrusted set to true.
• Fixed some argument conversions in XMLHttpRequest's open() method.
• Improved MIME type and data: URL parsing throughout jsdom, by using the new whatwg-mimetype and data-urls packages.
• Removed some unnecessary .webidl files that were included in the npm package.

Commits

• 4d26c67 Version 11.12.0
• d6688e5 Implement Element.prototype.closest()
• 9191218 Upgrade NWSAPI to v2.0.7
• 500a209 Change storageQuota to operate on code units, not bytes
• 23d67eb Add the storageQuota option
• b4db242 Remove unused form-data-symbols.js file
• 70fd739 Fix a few entries in the changelog
• eae1062 Upgrades cssstyle dependency to ^1.0.0
• 022c204 Update hosts in Travis configuration
• 2761d3c HashChangeEvent and PopStateEvent should no longer bubble
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.