GateNLP / gate-core

The GATE Embedded core API and GATE Developer application
GNU Lesser General Public License v3.0
75 stars 29 forks source link

Bump metadata-extractor from 2.15.0 to 2.18.0 #161

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps metadata-extractor from 2.15.0 to 2.18.0.

Release notes

Sourced from metadata-extractor's releases.

v2.18.0

What's Changed

  • Fix integer addition overflow. by @​cniles in drewnoakes/metadata-extractor#570
  • Significant MP4 and QuickTime refactoring
  • Fixed issues identified by fuzzing in #561
  • Better RIFF error reporting
  • Improved Rational value presentation in some cases
  • Support more Sony lens models
  • Improve HEIF/HEIC rotation description
  • Validate Metadata.addDirectory not passed null

New Contributors

Full Changelog: https://github.com/drewnoakes/metadata-extractor/compare/2.17.0...2.18.0

v2.17.0

What's Changed

New Contributors

Full Changelog: https://github.com/drewnoakes/metadata-extractor/compare/2.16.0...2.17.0

v2.16.0

  • Detect 3gp5 as MP4 (0fafa2f02d168079700e1783d67a609e3dabde42)
  • Treat "ftyp" with unknown 4CC as QuickTime (9ab28c0261989efcc4b84767403728bd1b06bd98)
  • Only allocate string when "ftyp" present (24efd338c36cf0aaa15cb295414a85c4df15f628)
  • Bump com.adobe.xmpcore to 6.1.11 (#514)
  • Added KeyValuePair.toString() (#523)
  • Added Schema.PHOTOSHOP_PROPERTIES (#522)
  • Overflowing a short length so it goes negative and screws up the byte read pointer (#524)
  • fixing the MP4 rotation angle value (#533)
  • Avoid reading unused bytes from PNG streams (#535)
Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/GateNLP/gate-core/network/alerts).
ianroberts commented 1 year ago

@dependabot rebase

github-actions[bot] commented 1 year ago

Test Results

108 tests  ±0   108 :heavy_check_mark: ±0   18s :stopwatch: +9s   27 suites ±0       0 :zzz: ±0    27 files   ±0       0 :x: ±0 

Results for commit 344eed61. ± Comparison against base commit 689b3eb3.