[Snyk] Upgrade sirv-cli from 1.0.11 to 1.0.14

[snyk-bot]

Snyk has created this PR to upgrade sirv-cli from 1.0.11 to 1.0.14.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.
• The recommended version was released a month ago, on 2021-08-14.

Release notes

Package name: sirv-cli

• 1.0.14 - 2021-08-14
  

  Chores

  • (sirv): Bump @ polka/url to take advantage of this fix
• 1.0.13 - 2021-08-13
  

  Patches

  • (sirv) Only use req.path if has req._decoded flag exists (#82):

    The req._decoded check was added & should have always been in there, since this was sirv's way of preventing duplicate decodeURIComponent calls. However, this was only true when it received a request from a polka@next app, since Polka was previously writing the decoded value to req.path – this changed with polka@v1.0.0-next.16

    Now that the latest polka@next (and Express) doesn't decode automatically anymore, req.path isn't trustworthy on its own. It needs req._decoded to be there too in order to trust it.

    This combo-check is backwards compatible for polka@next users who don't upgrade and will unblock Express users for the first time, who have always had a "raw" req.path value set.

• 1.0.12 - 2021-05-24
  

  Patches

  • (sirv-cli): Ensure boolean options are parsed as booleans (#97): 8ebca7c
  • (sirv): Bump @ polka/url dependency version: 7c5162a

  Chores

  • Adjust GitHub Action env setup (#109): f2ae0f5
  • Update Github Action image(s) and Node versions: 9334dfc, cf2de81, c7e0a20
  • Add test for filename with space (#102): ede9189
    Thank you @ samccone!
• 1.0.11 - 2021-01-30
  

  Patches

  • (sirv) Add Vary header when gzip or brotli is in use (#95): 86e6733
    Thank you @ istarkov~!

from sirv-cli GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs