Update dependency mqtt to v5

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
mqtt	^4.3.7 → ^5.0.0

---

Release Notes

mqttjs/MQTT.js (mqtt)

v5.14.1

Compare Source

Bug Fixes

• connect/ws: ensure proxy stream is writable (#​2024) (fe45405), closes #​1914
• isWebWorkerEnv check for Deno environment (#​2023) (a6e74ad)

v5.14.0

Compare Source

5.13.2 (2025-07-07)

Bug Fixes

• move back @​types/ws from dev to deps (#​2008) (959b132), closes #​1991

5.13.1 (2025-06-03)

v5.13.3

Compare Source

5.13.2 (2025-07-07)

Bug Fixes

• move back @​types/ws from dev to deps (#​2008) (959b132), closes #​1991

5.13.1 (2025-06-03)

v5.13.2

Compare Source

5.13.2 (2025-07-07)

Bug Fixes

• move back @​types/ws from dev to deps (#​2008) (959b132), closes #​1991

5.13.1 (2025-06-03)

v5.13.1

Compare Source

5.13.2 (2025-07-07)

Bug Fixes

• move back @​types/ws from dev to deps (#​2008) (959b132), closes #​1991

5.13.1 (2025-06-03)

v5.13.0

Compare Source

5.13.2 (2025-07-07)

Bug Fixes

• move back @​types/ws from dev to deps (#​2008) (959b132), closes #​1991

5.13.1 (2025-06-03)

v5.12.1

Compare Source

Features

• add subscribeBatchSize option to split subscribe packets for AWS IoT Core (#​1995) (6b719c8)

5.12.1 (2025-05-06)

Bug Fixes

• add @typescript-eslint/consistent-type-imports rule and normalised all imports (640cd3b)

v5.12.0

Compare Source

Features

• add subscribeBatchSize option to split subscribe packets for AWS IoT Core (#​1995) (6b719c8)

5.12.1 (2025-05-06)

Bug Fixes

• add @typescript-eslint/consistent-type-imports rule and normalised all imports (640cd3b)

v5.11.1

Compare Source

Features

• exports: add react-native entry point to package.json (#​1988) (622d3d8)

5.11.1 (2025-04-23)

Bug Fixes

• deps: removed unused 'reinterval' dependency and move two @​type/ dependencies to devDependencies. (bb8c694)

v5.11.0

Compare Source

Features

• exports: add react-native entry point to package.json (#​1988) (622d3d8)

5.11.1 (2025-04-23)

Bug Fixes

• deps: removed unused 'reinterval' dependency and move two @​type/ dependencies to devDependencies. (bb8c694)

v5.10.4

Compare Source

Bug Fixes

• correct return type of validateTopis to include null (#​1979) (935784a)

Features

• add intrinsic support for SOCKS proxies (#​1966) (ee0fcce)

5.10.4 (2025-02-26)

Bug Fixes

• browser: bump readable-stream@​4.7.0 to fix BigInt issues (#​1963) (9749891)
• browser: prevent error stream.push() after EOF (#​1932) (df2e8fe)
• electron-test: webdriver session not created (#​1972) (57691cf)
• move protocol "clean" after merge of parsedOptions (#​1965) (1c19ca0)

5.10.3 (2024-11-26)

Bug Fixes

• add option to reconnect if connack has an error code (#​1948) (fa19586)

5.10.2 (2024-11-13)

Features

• electron-test: move third hosted broker to self hosted broker (#​1926) (1ca3f9e)

5.10.1 (2024-08-28)

Bug Fixes

• browser: handle Blob payloads (#​1930) (86b7959)

v5.10.3

Compare Source

Bug Fixes

• correct return type of validateTopis to include null (#​1979) (935784a)

Features

• add intrinsic support for SOCKS proxies (#​1966) (ee0fcce)

5.10.4 (2025-02-26)

Bug Fixes

• browser: bump readable-stream@​4.7.0 to fix BigInt issues (#​1963) (9749891)
• browser: prevent error stream.push() after EOF (#​1932) (df2e8fe)
• electron-test: webdriver session not created (#​1972) (57691cf)
• move protocol "clean" after merge of parsedOptions (#​1965) (1c19ca0)

5.10.3 (2024-11-26)

Bug Fixes

• add option to reconnect if connack has an error code (#​1948) (fa19586)

5.10.2 (2024-11-13)

Features

• electron-test: move third hosted broker to self hosted broker (#​1926) (1ca3f9e)

5.10.1 (2024-08-28)

Bug Fixes

• browser: handle Blob payloads (#​1930) (86b7959)

v5.10.2

Compare Source

Bug Fixes

• correct return type of validateTopis to include null (#​1979) (935784a)

Features

• add intrinsic support for SOCKS proxies (#​1966) (ee0fcce)

5.10.4 (2025-02-26)

Bug Fixes

• browser: bump readable-stream@​4.7.0 to fix BigInt issues (#​1963) (9749891)
• browser: prevent error stream.push() after EOF (#​1932) (df2e8fe)
• electron-test: webdriver session not created (#​1972) (57691cf)
• move protocol "clean" after merge of parsedOptions (#​1965) (1c19ca0)

5.10.3 (2024-11-26)

Bug Fixes

• add option to reconnect if connack has an error code (#​1948) (fa19586)

5.10.2 (2024-11-13)

Features

• electron-test: move third hosted broker to self hosted broker (#​1926) (1ca3f9e)

5.10.1 (2024-08-28)

Bug Fixes

• browser: handle Blob payloads (#​1930) (86b7959)

v5.10.1

Compare Source

Bug Fixes

• correct return type of validateTopis to include null (#​1979) (935784a)

Features

• add intrinsic support for SOCKS proxies (#​1966) (ee0fcce)

5.10.4 (2025-02-26)

Bug Fixes

• browser: bump readable-stream@​4.7.0 to fix BigInt issues (#​1963) (9749891)
• browser: prevent error stream.push() after EOF (#​1932) (df2e8fe)
• electron-test: webdriver session not created (#​1972) (57691cf)
• move protocol "clean" after merge of parsedOptions (#​1965) (1c19ca0)

5.10.3 (2024-11-26)

Bug Fixes

• add option to reconnect if connack has an error code (#​1948) (fa19586)

5.10.2 (2024-11-13)

Features

• electron-test: move third hosted broker to self hosted broker (#​1926) (1ca3f9e)

5.10.1 (2024-08-28)

Bug Fixes

• browser: handle Blob payloads (#​1930) (86b7959)

v5.10.0

Compare Source

Bug Fixes

• correct return type of validateTopis to include null (#​1979) (935784a)

Features

• add intrinsic support for SOCKS proxies (#​1966) (ee0fcce)

5.10.4 (2025-02-26)

Bug Fixes

• browser: bump readable-stream@​4.7.0 to fix BigInt issues (#​1963) (9749891)
• browser: prevent error stream.push() after EOF (#​1932) (df2e8fe)
• electron-test: webdriver session not created (#​1972) (57691cf)
• move protocol "clean" after merge of parsedOptions (#​1965) (1c19ca0)

5.10.3 (2024-11-26)

Bug Fixes

• add option to reconnect if connack has an error code (#​1948) (fa19586)

5.10.2 (2024-11-13)

Features

• electron-test: move third hosted broker to self hosted broker (#​1926) (1ca3f9e)

5.10.1 (2024-08-28)

Bug Fixes

• browser: handle Blob payloads (#​1930) (86b7959)

v5.9.1

Compare Source

Bug Fixes

• test: close all open connections in abstract_client test (#​1917) (661c30a)
• types: unsubscribe options type (#​1921) (18a357c)

Features

• add suback packet to subscribe callback (#​1923) (93f4482)
• add unsubscribe ack packet to the unsubscribe callback (#​1922) (8bcf304)

5.9.1 (2024-08-01)

Bug Fixes

• browser: ensure proxy is defined (ffc9805)
• browser: prevent error stream.push() after EOF (#​1915) (b5cc835), closes #​1914
• test: close open connections (#​1911) (053a7be)

v5.9.0

Compare Source

Bug Fixes

• test: close all open connections in abstract_client test (#​1917) (661c30a)
• types: unsubscribe options type (#​1921) (18a357c)

Features

• add suback packet to subscribe callback (#​1923) (93f4482)
• add unsubscribe ack packet to the unsubscribe callback (#​1922) (8bcf304)

5.9.1 (2024-08-01)

Bug Fixes

• browser: ensure proxy is defined (ffc9805)
• browser: prevent error stream.push() after EOF (#​1915) (b5cc835), closes #​1914
• test: close open connections (#​1911) (053a7be)

v5.8.1

Compare Source

Bug Fixes

• tets hang up (#​1906) (c462530)
• types: add connectAsync overload signature with allowRetries (#​1909) (6b278dc)

Features

• add forceNativeWebSocket client option (#​1910) (103d172), closes #​1796 #​1895

5.8.1 (2024-07-18)

Bug Fixes

• connect after client.end not working (#​1902) (fbe5294)
• reschedule pings problem (#​1904) (8e14d3e)

v5.8.0

Compare Source

Bug Fixes

• tets hang up (#​1906) (c462530)
• types: add connectAsync overload signature with allowRetries (#​1909) (6b278dc)

Features

• add forceNativeWebSocket client option (#​1910) (103d172), closes #​1796 #​1895

5.8.1 (2024-07-18)

Bug Fixes

• connect after client.end not working (#​1902) (fbe5294)
• reschedule pings problem (#​1904) (8e14d3e)

v5.7.3

Compare Source

Features

• add compatibility with txiki.js (#​1895) (37b08c9)
• allow to pass custom timer for keepalive manager (#​1896) (ee81184)

5.7.3 (2024-06-26)

Bug Fixes

• wechat: do not ignore path with wx protocol (#​1894) (300c0b4), closes #​1892

5.7.2 (2024-06-19)

Bug Fixes

• security: bump ws@​8.17.1 and other audit issues (#​1891) (096baaa)

5.7.1 (2024-06-18)

Bug Fixes

• suback Error Codes Handling (#​1887) (2a98e5e)

v5.7.2

Compare Source

Features

• add compatibility with txiki.js (#​1895) (37b08c9)
• allow to pass custom timer for keepalive manager (#​1896) (ee81184)

5.7.3 (2024-06-26)

Bug Fixes

• wechat: do not ignore path with wx protocol (#​1894) (300c0b4), closes #​1892

5.7.2 (2024-06-19)

Bug Fixes

• security: bump ws@​8.17.1 and other audit issues (#​1891) (096baaa)

5.7.1 (2024-06-18)

Bug Fixes

• suback Error Codes Handling (#​1887) (2a98e5e)

v5.7.1

Compare Source

Features

• add compatibility with txiki.js (#​1895) (37b08c9)
• allow to pass custom timer for keepalive manager (#​1896) (ee81184)

5.7.3 (2024-06-26)

Bug Fixes

• wechat: do not ignore path with wx protocol (#​1894) (300c0b4), closes #​1892

5.7.2 (2024-06-19)

Bug Fixes

• security: bump ws@​8.17.1 and other audit issues (#​1891) (096baaa)

5.7.1 (2024-06-18)

Bug Fixes

• suback Error Codes Handling (#​1887) (2a98e5e)

v5.7.0

Compare Source

Features

• add compatibility with txiki.js (#​1895) (37b08c9)
• allow to pass custom timer for keepalive manager (#​1896) (ee81184)

5.7.3 (2024-06-26)

Bug Fixes

• wechat: do not ignore path with wx protocol (#​1894) (300c0b4), closes #​1892

5.7.2 (2024-06-19)

Bug Fixes

• security: bump ws@​8.17.1 and other audit issues (#​1891) (096baaa)

5.7.1 (2024-06-18)

Bug Fixes

• suback Error Codes Handling (#​1887) (2a98e5e)

v5.6.2

Compare Source

Features

• add unixSocket option and +unix suffix support to protocol (#​1874) (1004c78)

5.6.2 (2024-05-23)

Bug Fixes

• prevent url.parse to set path option (#​1871) (de0174f), closes #​1870

5.6.1 (2024-05-17)

Bug Fixes

• update is-browser.ts to account undefined navigator (#​1868) (0111a7a), closes /github.com/mqttjs/MQTT.js/commit/6a03d29b86dc4fe8eae04eaf0f9fc661f1c3d1ea#commitcomment-142114121 /github.com/mqttjs/MQTT.js/pull/1868#pullrequestreview-2062507553

v5.6.1

Compare Source

Features

• add unixSocket option and +unix suffix support to protocol (#​1874) (1004c78)

5.6.2 (2024-05-23)

Bug Fixes

• prevent url.parse to set path option (#​1871) (de0174f), closes #​1870

5.6.1 (2024-05-17)

Bug Fixes

• update is-browser.ts to account undefined navigator (#​1868) (0111a7a), closes /github.com/mqttjs/MQTT.js/commit/6a03d29b86dc4fe8eae04eaf0f9fc661f1c3d1ea#commitcomment-142114121 /github.com/mqttjs/MQTT.js/pull/1868#pullrequestreview-2062507553

v5.6.0

Compare Source

Features

• add unixSocket option and +unix suffix support to protocol (#​1874) (1004c78)

5.6.2 (2024-05-23)

Bug Fixes

• prevent url.parse to set path option (#​1871) (de0174f), closes #​1870

5.6.1 (2024-05-17)

Bug Fixes

• update is-browser.ts to account undefined navigator (#​1868) (0111a7a), closes /github.com/mqttjs/MQTT.js/commit/6a03d29b86dc4fe8eae04eaf0f9fc661f1c3d1ea#commitcomment-142114121 /github.com/mqttjs/MQTT.js/pull/1868#pullrequestreview-2062507553

v5.5.6

Compare Source

Features

• keepalive manager (#​1865) (bad160a)

5.5.6 (2024-05-13)

Bug Fixes

• do not shift pings on 'publish' packets (#​1866) (e4d4663), closes #​1863 #​1861
• electron: detect electron context (#​1856) (6a03d29)
• ws: ignored host option and default hostname in browser (c6580a6), closes #​1730

5.5.5 (2024-04-30)

Bug Fixes

• keepalive issues (#​1855) (4f242f4)

5.5.4 (2024-04-26)

Bug Fixes

• allow to use unix sockets in connect (#​1852) (22c97b5), closes #​1040
• react-native: process.nextTick is not a function error (#​1849) (f62e207)

5.5.3 (2024-04-19)

Bug Fixes

• possible race condition in ping timer (#​1848) (0b7d687), closes #​1845
• wrong mqttjs version printed (#​1847) (a24cf14)

5.5.2 (2024-04-12)

Bug Fixes

• react-native: error Cannot create URL for blob (#​1840) (fc8fafb)

5.5.1 (2024-04-10)

Bug Fixes

• browser: uncaught error when stream is destroyed with error (380f286), closes #​1839

v5.5.5

Compare Source

Features

• keepalive manager (#​1865) (bad160a)

5.5.6 (2024-05-13)

Bug Fixes

• do not shift pings on 'publish' packets (#​1866) (e4d4663), closes #​1863 #​1861
• electron: detect electron context (#​1856) (6a03d29)
• ws: ignored host option and default hostname in browser (c6580a6), closes #​1730

5.5.5 (2024-04-30)

Bug Fixes

• keepalive issues (#​1855) (4f242f4)

5.5.4 (2024-04-26)

Bug Fixes

• allow to use unix sockets in connect (#​1852) (22c97b5), closes #​1040
• react-native: process.nextTick is not a function error (#​1849) (f62e207)

5.5.3 (2024-04-19)

Bug Fixes

• possible race condition in ping timer (#​1848) (0b7d687), closes #​1845
• wrong mqttjs version printed (#​1847) (a24cf14)

5.5.2 (2024-04-12)

Bug Fixes

• react-native: error Cannot create URL for blob (#​1840) (fc8fafb)

5.5.1 (2024-04-10)

Bug Fixes

• browser: uncaught error when stream is destroyed with error (380f286), closes #​1839

v5.5.4

Compare Source

Features

• keepalive manager (#​1865) (bad160a)

5.5.6 (2024-05-13)

Bug Fixes

• do not shift pings on 'publish' packets (#​1866) (e4d4663), closes #​1863 #​1861
• electron: detect electron context (#​1856) (6a03d29)
• ws: ignored host option and default hostname in browser (c6580a6), closes #​1730

5.5.5 (2024-04-30)

Bug Fixes

• keepalive issues (#​1855) (4f242f4)

5.5.4 (2024-04-26)

Bug Fixes

• allow to use unix sockets in connect (#​1852) (22c97b5), closes #​1040
• react-native: process.nextTick is not a function error (#​1849) (f62e207)

5.5.3 (2024-04-19)

Bug Fixes

• possible race condition in ping timer (#​1848) (0b7d687), closes #​1845
• wrong mqttjs version printed (#​1847) (a24cf14)

5.5.2 (2024-04-12)

Bug Fixes

• react-native: error Cannot create URL for blob (#​1840) (fc8fafb)

5.5.1 (2024-04-10)

Bug Fixes

• browser: uncaught error when stream is destroyed with error (380f286), closes #​1839

v5.5.3

Compare Source

Features

• keepalive manager (#​1865) (bad160a)

5.5.6 (2024-05-13)

Bug Fixes

• do not shift pings on 'publish' packets (#​1866) (e4d4663), closes #​1863 #​1861
• electron: detect electron context (#​1856) (6a03d29)
• ws: ignored host option and default hostname in browser (c6580a6), closes #​1730

5.5.5 (2024-04-30)

Bug Fixes

• keepalive issues (#​1855) (4f242f4)

5.5.4 (2024-04-26)

Bug Fixes

• allow to use unix sockets in connect (#​1852) (22c97b5), closes #​1040
• react-native: process.nextTick is not a function error (#​1849) (f62e207)

5.5.3 (2024-04-19)

Bug Fixes

• possible race condition in ping timer (#​1848) (0b7d687), closes #​1845
• wrong mqttjs version printed (#​1847) (a24cf14)

5.5.2 (2024-04-12)

Bug Fixes

• react-native: error Cannot create URL for blob (#​1840) (fc8fafb)

5.5.1 (2024-04-10)

Bug Fixes

• browser: uncaught error when stream is destroyed with error (380f286), closes #​1839

v5.5.2

Compare Source

Features

• keepalive manager (#​1865) (bad160a)

5.5.6 (2024-05-13)

Bug Fixes

• do not shift pings on 'publish' packets (#​1866) (e4d4663), closes #​1863 #​1861
• electron: detect electron context (#​1856) (6a03d29)
• ws: ignored host option and default hostname in browser (c6580a6), closes #​1730

5.5.5 (2024-04-30)

Bug Fixes

• keepalive issues (#​1855) (4f242f4)

5.5.4 (2024-04-26)

Bug Fixes

• allow to use unix sockets in connect (#​1852) ([22c97b5](https://redirect.github.com/mqttjs/MQTT.js/commit/22c97b5f7536e3e36317c3b28dc0d70557b820

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sentry]

Bug: The mqtt package was upgraded to v5, which requires using the new keyword with connect. The current code calls connect(link) without new, which will cause a runtime error.
_{Severity: CRITICAL}

Suggested Fix

The mqtt.js v5 library requires instantiation with the new keyword. Update the client connection logic in src/bundles/communication/src/MqttController.ts from this.client = connect(link); to correctly instantiate the client according to the v5 API. The import might also need to be adjusted.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: src/bundles/communication/package.json#L6

Potential issue: The `mqtt` dependency was upgraded from v4.3.7 to v5.x. This major
version upgrade introduced a breaking change where creating an `MqttClient` instance now
requires the `new` keyword. The code in
`src/bundles/communication/src/MqttController.ts` at line 45 calls `this.client =
connect(link)` without the `new` keyword. This will result in a runtime error when the
`connectClient()` method is invoked, preventing any MQTT connection from being
established and breaking all communication functionality for that bundle.

_{Did we get this right? 👍 / 👎 to inform future reviews.}