chore(deps): Bump engine.io from 6.6.4 to 6.6.7

[dependabot]

Bumps engine.io from 6.6.4 to 6.6.7.

Release notes

Sourced from engine.io's releases.

engine.io@6.6.7

Bug Fixes

• close HTTP requests with invalid content type (fc11285)
• handle invalid packets when upgrading to WebTransport (1fa1f46)
• prevent WebTransport connections when a middleware is registered (d1f5aa9)

Dependencies

• ws@~8.18.3 (no change)

engine.io@6.6.6

Bug Fixes

• add @types/ws as dependency (#5458) (07cbe15)
• uws: emit initial_headers and headers events in uServer (#5460) (44ed73f)

Dependencies

• ws@~8.18.3 (no change)

Commits

• 439a8f6 chore(release): engine.io@6.6.7
• fc11285 fix(eio): close HTTP requests with invalid content type
• b059af6 refactor(eio): use plain IncomingMessage in the public API
• 4e85378 docs: fix various typos in test and documentation (#5481)
• d1f5aa9 fix(eio): prevent WebTransport connections when a middleware is registered
• b785377 docs: fix typos in the release notes
• 25d877c docs: fix links in the release notes
• d4bc787 refactor(eio): use hasOwn() method everywhere
• 1fa1f46 fix(eio): handle invalid packets when upgrading to WebTransport
• 4f7edb4 ci: enable caching of npm modules
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for engine.io since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

Summary by cubic

Upgrade engine.io to 6.6.7 to harden transport handling and validate HTTP/WebTransport requests. Reduces invalid or unintended connections; no app code changes.

• Bug Fixes

  • Close HTTP requests with invalid content type.
  • Validate packets on WebTransport upgrade and block WebTransport when middleware is present.

• Dependencies

  • Adds @types/ws; ws remains at ~8.18.3.

^{Written for commit d66cc1e. Summary will update on new commits.}