Update dependency sirv to v1.0.18 - autoclosed

[renovate[bot]]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
sirv	1.0.12 -> 1.0.18

---

Release Notes

lukeed/sirv

### [`v1.0.18`](https://togithub.com/lukeed/sirv/releases/v1.0.18) [Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.17...v1.0.18) #### Patches - (sirv): Append `charset=utf-8` to HTML content-type ([#​106](https://togithub.com/lukeed/sirv/issues/106), [#​122](https://togithub.com/lukeed/sirv/issues/122)): [`d1b8ba6`](https://togithub.com/lukeed/sirv/commit/d1b8ba6) *Thank you [@​aleclarson](https://togithub.com/aleclarson)~!* *** > **Full Changelog**: https://github.com/lukeed/sirv/compare/v1.0.17...v1.0.18 ### [`v1.0.17`](https://togithub.com/lukeed/sirv/compare/v1.0.16...v1.0.17) [Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.16...v1.0.17) ### [`v1.0.16`](https://togithub.com/lukeed/sirv/compare/v1.0.15...v1.0.16) [Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.15...v1.0.16) ### [`v1.0.15`](https://togithub.com/lukeed/sirv/compare/v1.0.14...v1.0.15) [Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.14...v1.0.15) ### [`v1.0.14`](https://togithub.com/lukeed/sirv/releases/v1.0.14) [Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.13...v1.0.14) #### Chores - (`sirv`): Bump `@polka/url` to take advantage of [this fix](https://togithub.com/lukeed/polka/releases/tag/v1.0.0-next.17) ### [`v1.0.13`](https://togithub.com/lukeed/sirv/releases/v1.0.13) [Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.12...v1.0.13) #### Patches - (`sirv`) Only use `req.path` if has `req._decoded` flag exists ([#​82](https://togithub.com/lukeed/sirv/issues/82)): *The `req._decoded` check was added & should have always been in there, since this was `sirv`'s way of preventing duplicate `decodeURIComponent` calls. However, this was only true when it received a request from a `polka@next` app, since Polka was previously writing the decoded value to `req.path` – this changed with `polka@v1.0.0-next.16`* *Now that the latest `polka@next` (and Express) doesn't decode automatically anymore, `req.path` isn't trustworthy on its own. It needs `req._decoded` to be there too in order to trust it.* *This combo-check is backwards compatible for `polka@next` users who don't upgrade and will unblock Express users for the first time, who have always had a "raw" `req.path` value set.*

---

Configuration

📅 Schedule: "before 3am on the first day of the month" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.