Bump phpoffice/phpspreadsheet from 1.29.1 to 1.29.4

dependabot[bot] commented 1 week ago

Bumps phpoffice/phpspreadsheet from 1.29.1 to 1.29.4.

Release notes

Sourced from phpoffice/phpspreadsheet's releases.

1.29.4 - 2024-11-10

Fixed

1.29.3 omitted

Backported security patches.

Write ignoredErrors Tag Before Drawings. Backport of [PR #4212](PHPOffice/PhpSpreadsheet#4212) intended for 3.4.0.

Changes to ROUNDDOWN/ROUNDUP/TRUNC. Backport of [PR #4214](PHPOffice/PhpSpreadsheet#4214) intended for 3.4.0.

Replace str_starts_with in Drawing. [Issue #4215](PHPOffice/PhpSpreadsheet#4215)

Added

Method to Test Whether Csv Will Be Affected by Php9. Backport of [PR #4189](PHPOffice/PhpSpreadsheet#4189) intended for 3.4.0.

1.29.2 - 2024-09-29

Fixed

Backported security patches.

Support for Php8.4.

Change to Csv Reader (see below under Deprecated). Backport of PR #4162 intended for 3.0.0. [Issue #4161](PHPOffice/PhpSpreadsheet#4161)

Tweaks to ROUNDUP, ROUNDDOWN, TRUNC, AMORDEGRC (results had been different under 8.4).

Changed

Images will not be added to spreadsheet if they cannot be validated as images.

Changelog

Sourced from phpoffice/phpspreadsheet's changelog.

1.29.4 - 2024-11-10

Fixed

1.29.3 omitted

Backported security patches.

Write ignoredErrors Tag Before Drawings. Backport of [PR #4212](PHPOffice/PhpSpreadsheet#4212) intended for 3.4.0.

Changes to ROUNDDOWN/ROUNDUP/TRUNC. Backport of [PR #4214](PHPOffice/PhpSpreadsheet#4214) intended for 3.4.0.

Replace str_starts_with in Drawing. [Issue #4215](PHPOffice/PhpSpreadsheet#4215)

Added

Method to Test Whether Csv Will Be Affected by Php9. Backport of [PR #4189](PHPOffice/PhpSpreadsheet#4189) intended for 3.4.0.

1.29.2 - 2024-09-29

Fixed

Backported security patches.

Support for Php8.4.

Change to Csv Reader (see below under Deprecated). Backport of PR #4162 intended for 3.0.0. [Issue #4161](PHPOffice/PhpSpreadsheet#4161)

Tweaks to ROUNDUP, ROUNDDOWN, TRUNC, AMORDEGRC (results had been different under 8.4).

Changed

Images will not be added to spreadsheet if they cannot be validated as images.

Deprecated

Php8.4 will deprecate the escape parameter of fgetcsv. Csv Reader is affected by this; code is changed to be unaffected, but this will mean a breaking change is coming with Php9. Any code which uses the default escape value of backslash will fail in Php9. It is recommended to explicitly set the escape value to null string before then.

Commits

7ca7e32 Fix Changelog - Wrong Tag Was Applied
31d7f79 Backport Security Patch
15e028f Backport PR #4189 Csv Method
3a5a818 Update Changelog
f0219ff Restore 2 Disabled Tests
d95bc29 Backport Security Patch
9c90ed6 Used Named Parameter but Still Need to Support Php7.4
8b9b378 Html Writer Validate Hyperlink Protocols
fa657fd More Tests
ec0d4af AMORDEGRC and Csv Reader
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/portabilis/i-educar/network/alerts).