New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency jszip to v3.10.1 #423

Open

mend-for-github-com wants to merge 1 commit into master from whitesource-remediate/jszip-3.x

mend-for-github-com bot commented Feb 28, 2024

This PR contains the following updates:

Package	Update	Change
jszip (source)	minor	`3.1.3` -> `3.10.1`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

Stuk/jszip (jszip)

`v3.10.1`

Add sponsorship files.
- If you appreciate the time spent maintaining JSZip then I would really appreciate your sponsorship.
Consolidate metadata types and expose OnUpdateCallback #851 and #852
use const instead var in example from README.markdown #828
Switch manual download link to HTTPS #839

Internals:

Replace jshint with eslint #842
Add performance tests #834

`v3.10.0`

Change setimmediate dependency to more efficient one. Fixes https://github.com/Stuk/jszip/issues/617 (see #829)
Update types of currentFile metadata to include null (see #826)

`v3.9.1`

Fix recursive definition of InputFileFormat introduced in 3.9.0.

`v3.9.0`

Update types JSZip#loadAsync to accept a promise for data, and remove arguments from new JSZip() (see #752)
Update types for compressionOptions to JSZipFileOptions and JSZipGeneratorOptions (see #722)
Add types for generateInternalStream (see #774)

`v3.8.0`

Santize filenames when files are loaded with loadAsync, to avoid "zip slip" attacks. The original filename is available on each zip entry as unsafeOriginalName. See the documentation. Many thanks to McCaulay Hudson for reporting.

`v3.7.1`

Fix build of dist files.
- Note: this version ensures the changes from 3.7.0 are actually included in the dist files. Thanks to Evan W for reporting.

`v3.7.0`

Fix: Use a null prototype object for this.files (see #766)
- This change might break existing code if it uses prototype methods on the .files property of a zip object, for example zip.files.toString(). This approach is taken to prevent files in the zip overriding object methods that would exist on a normal object.

`v3.6.0`

Fix: redirect main to dist on browsers (see #742)
Fix duplicate require DataLengthProbe, utils (see #734)
Fix small error in read_zip.md (see #703)

`v3.5.0`

Fix 'End of data reached' error when file extra field is invalid (see #544).
Typescript definitions: Add null to return types of functions that may return null (see #669).
Typescript definitions: Correct nodeStream's type (see #682)
Typescript definitions: Add string output type (see #666)

`v3.4.0`

Add Typescript type definitions (see #601).

`v3.3.0`

Change browser module resolution to support Angular packager (see #614).

`v3.2.2`

No public changes, but a number of testing dependencies have been updated.
Tested browsers are now: Internet Explorer 11, Chrome (most recent) and Firefox (most recent). Other browsers (specifically Safari) are still supported however testing them on Saucelabs is broken and so they were removed from the test matrix.

`v3.2.1`

Corrected built dist files

`v3.2.0`

Update dependencies to reduce bundle size (see #532).
Fix deprecated Buffer constructor usage and add safeguards (see #506).

`v3.1.5`

Fix IE11 memory leak (see #429).
Handle 2 nodejs deprecations (see #459).
Improve the "unsupported format" error message (see #461).
Improve webworker compatibility (see #468).
Fix nodejs 0.10 compatibility (see #480).
Improve the error without type in async() (see #481).

`v3.1.4`

consistently use our own utils object for inheritance (see #395).
lower the memory consumption in generate* with a lot of files (see #449).

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box


          Update dependency jszip to v3.10.1

7a6ca2a

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment