npm / @microsoft/signalr
@microsoft/signalr
What changed in @microsoft/signalr 8 to 10, from its official release notes, upgrade guides and advisories. Also covers @microsoft/signalr-protocol-msgpack. Sources checked 2026-10-27.
1 breaking1 security1 behavior and defaults4 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli init@microsoft/signalr 102 changes
Behavior and default changes 1
Improves the Blazor reconnection experience after the server is restarted.
Fixes and other changes 1
Methods are detached when disconnection is confirmed.
@microsoft/signalr 92 changes
Security 1
An npm override requires lodash >=4.18.0 to address a CVE.
Fixes and other changes 1
TestHost content root discovery now has a .slnx fallback.
@microsoft/signalr 83 changes
Breaking changes 1
Cookie authentication now rejects return URLs containing ASCII control characters.
Fixes and other changes 2
The log severity for an unknown proxy is reverted.
A WINDOWS_UPDATE received on a half-closed or closed stream is now lowered to stream abortion.