vaizard / glued-archived

1 stars 3 forks source link

Bump phpoffice/phpspreadsheet from 1.6.0 to 1.8.0 #134

Closed dependabot[bot] closed 4 years ago

dependabot[bot] commented 4 years ago

Bumps phpoffice/phpspreadsheet from 1.6.0 to 1.8.0.

Release notes *Sourced from [phpoffice/phpspreadsheet's releases](https://github.com/PHPOffice/PhpSpreadsheet/releases).* > ## 1.8.0 > ### Security Fix (CVE-2019-12331) > > - Detect double-encoded xml in the Security scanner, and reject as suspicious. > - This change also broadens the scope of the `libxml_disable_entity_loader` setting when reading XML-based formats, so that it is enabled while the xml is being parsed and not simply while it is loaded. > On some versions of PHP, this can cause problems because it is not thread-safe, and can affect other PHP scripts running on the same server. This flag is set to true when instantiating a loader, and back to its original setting when the Reader is no longer in scope, or manually unset. > - Provide a check to identify whether libxml_disable_entity_loader is thread-safe or not. > > `XmlScanner::threadSafeLibxmlDisableEntityLoaderAvailability()` > - Provide an option to disable the libxml_disable_entity_loader call through settings. This is not recommended as it reduces the security of the XML-based readers, and should only be used if you understand the consequences and have no other choice. > > ### Added > > - Added support for the SWITCH function - [#963](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/963) and [#983](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/983) > - Add accounting number format style [#974](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/974) > > ### Fixed > > - Whitelist `tsv` extension when opening CSV files [#429](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/429) > - Fix a SUMIF warning with some versions of PHP when having different length of arrays provided as input [#873](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/873) > - Fix incorrectly handled backslash-escaped space characters in number format > > ## 1.7.0 > ### Added > > - Added support for inline styles in Html reader (borders, alignment, width, height) > - QuotedText cells no longer treated as formulae if the content begins with a `=` > - Clean handling for DDE in formulae > > ### Fixed > > - Fix handling for escaped enclosures and new lines in CSV Separator Inference > - Fix MATCH an error was appearing when comparing strings against 0 (always true) > - Fix wrong calculation of highest column with specified row [#700](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/700) > - Fix VLOOKUP > - Fix return type hint
Changelog *Sourced from [phpoffice/phpspreadsheet's changelog](https://github.com/PHPOffice/PhpSpreadsheet/blob/master/CHANGELOG.PHPExcel.md).* > ## [1.8.0] - 2014-03-02 > > ### Bugfixes > > - Undefined variable: fileHandle in CSV Reader - [@​MarkBaker](https://github.com/MarkBaker) [CodePlex [#19830](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/19830)](https://phpexcel.codeplex.com/workitem/19830) > - Out of memory in style/supervisor.php - [@​MarkBaker](https://github.com/MarkBaker) [CodePlex [#19968](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/19968)](https://phpexcel.codeplex.com/workitem/19968) > - Style error with merged cells in PDF Writer - [@​MarkBaker](https://github.com/MarkBaker) > - Problem with cloning worksheets - [@​MarkBaker](https://github.com/MarkBaker) > - Bug fix reading Open Office files - [@​tavoarcila](https://github.com/tavoarcila) [#259](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/259) > - Serious bug in absolute cell reference used in shared formula - [@​MarkBaker](https://github.com/MarkBaker) [CodePlex [#20397](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/20397)](https://phpexcel.codeplex.com/workitem/20397) > - Would also have affected insert/delete column/row- CHOOSE() returns "#VALUE!" if the 1st entry is chosen - [@​RomanSyroeshko](https://github.com/RomanSyroeshko) [#267](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/267) > - When duplicating styles, styles shifted by one column to the right - [@​Gemorroj](https://github.com/Gemorroj) [#268](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/268) > - Fix also applied to duplicating conditional styles- Fix for formulae that reference a sheet whose name begins with a digit: - [@​IndrekHaav](https://github.com/IndrekHaav) [#212](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/212) > - these were erroneously identified as numeric values, causing the parser to throw an undefined variable error.- Fixed undefined variable error due to $styleArray being used before it's initialised - [@​IndrekHaav](https://github.com/IndrekHaav) [CodePlex [#16208](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/16208)](https://phpexcel.codeplex.com/workitem/16208) > - ISTEXT() return wrong result if referencing an empty but formatted cell - [@​PowerKiKi](https://github.com/PowerKiKi) [#273](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/273) > - Binary comparison of strings are case insensitive - [@​PowerKiKi](https://github.com/PowerKiKi) [#270](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/270), [#31](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/31) > - Insert New Row/Column Before is not correctly updating formula references - [@​MarkBaker](https://github.com/MarkBaker) [#275](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/275) > - Passing an array of cells to _generateRow() in the HTML/PDF Writer causes caching problems with last cell in the range - [@​MarkBaker](https://github.com/MarkBaker) [#257](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/257) > - Fix to empty worksheet garbage collection when using cell caching - [@​MarkBaker](https://github.com/MarkBaker) [#193](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/193) > - Excel2007 does not correctly mark rows as hidden - [@​Jazzo](https://github.com/Jazzo) [#248](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/248) > - Fixed typo in Chart/Layout set/getYMode() - [@​Roy](https://github.com/Roy) Shahbazian [#299](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/299) > - Fatal error: Call to a member function cellExists() line: 3327 in calculation.php if referenced worksheet doesn't exist - [@​EliuFlorez](https://github.com/EliuFlorez) [#279](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/279) > - AdvancedValueBinder "Division by zero"-error - [@​MarkBaker](https://github.com/MarkBaker) [#290](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/290) > - Adding Sheet to Workbook Bug - [@​MarkBaker](https://github.com/MarkBaker) [CodePlex [#20604](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/20604)](https://phpexcel.codeplex.com/workitem/20604) > - Calculation engine incorrectly evaluates empty cells as #VALUE - [@​MarkBaker](https://github.com/MarkBaker) [CodePlex [#20703](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/20703)](https://phpexcel.codeplex.com/workitem/20703) > - Formula references to cell on another sheet in ODS files - [@​MarkBaker](https://github.com/MarkBaker) [CodePlex [#20760](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/20760)](https://phpexcel.codeplex.com/workitem/20760) > > ### Features > > - LibreOffice created XLSX files results in an empty file. - [@​MarkBaker](https://github.com/MarkBaker) [#321](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/321), [#158](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/158), [CodePlex [#17824](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/17824)](https://phpexcel.codeplex.com/workitem/17824) > - Implementation of the Excel HLOOKUP() function - [@​amerov](https://github.com/amerov) > - Added "Quote Prefix" to style settings (Excel2007 Reader and Writer only) - [@​MarkBaker](https://github.com/MarkBaker) > - Added Horizontal FILL alignment for Excel5 and Excel2007 Readers/Writers, and Horizontal DISTRIBUTED alignment for Excel2007 Reader/Writer - [@​MarkBaker](https://github.com/MarkBaker) > - Add support for reading protected (RC4 encrypted) .xls files - [@​trvrnrth](https://github.com/trvrnrth) [#261](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/261) > > ### General > > - Adding support for macros, Ribbon in Excel 2007 - [@​LWol](https://github.com/LWol) [#252](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/252) > - Remove array_shift in ReferenceHelper::insertNewBefore improves column or row delete speed - [@​cdhutch](https://github.com/cdhutch) [CodePlex [#20055](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/20055)](https://phpexcel.codeplex.com/workitem/20055) > - Improve stock chart handling and rendering, with help from Swashata Ghosh - [@​MarkBaker](https://github.com/MarkBaker) > - Fix to calculation properties for Excel2007 so that the opening application will only recalculate on load if it's actually required - [@​MarkBaker](https://github.com/MarkBaker) > - Modified Excel2007 Writer to default preCalculateFormulas to false - [@​MarkBaker](https://github.com/MarkBaker) > - Note that autosize columns will still recalculate affected formulae internally- Functionality to getHighestRow() for a specified column, and getHighestColumn() for a specified row - [@​dresenhista](https://github.com/dresenhista) [#242](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/242) > - Modify PHPExcel_Reader_Excel2007 to use zipClass from PHPExcel_Settings::getZipClass() - [@​adamriyadi](https://github.com/adamriyadi) [#247](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/247) > - This allows the use of PCLZip when reading for people that don't have access to ZipArchive > ### Security > > - Convert properties to string in OOCalc reader - [@​infojunkie](https://github.com/infojunkie) [#276](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/276) > - Disable libxml external entity loading by default. - [@​maartenba](https://github.com/maartenba) [#322](https://github-redirect.dependabot.com/PHPOffice/PHPExcel/issues/322) > - This is to prevent XML External Entity Processing (XXE) injection attacks (see https://websec.io/2012/08/27/Preventing-XEE-in-PHP.html for an explanation of XXE injection). > ... (truncated)
Commits - [`0e6238c`](https://github.com/PHPOffice/PhpSpreadsheet/commit/0e6238c69e863b58aeece61e48ea032696c6dccd) CVE-2019-12331 ([#1041](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/1041)) - [`1e71154`](https://github.com/PHPOffice/PhpSpreadsheet/commit/1e711541f19b51b586eedd350073426e86b38e12) Refactoring xlsx reader ([#1033](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/1033)) - [`e884271`](https://github.com/PHPOffice/PhpSpreadsheet/commit/e884271dc2900461a3eedf39961cd0f250cfbe07) Scrutinizer resolutions ([#1032](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/1032)) - [`591f1e0`](https://github.com/PHPOffice/PhpSpreadsheet/commit/591f1e0c70b270287a7e74e9636361fa9660968f) Scrutinizer resolutions ([#1031](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/1031)) - [`14e9806`](https://github.com/PHPOffice/PhpSpreadsheet/commit/14e980625fa28c930faa817fd2297e8c67b2fc25) Yet more minor improvements ([#1030](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/1030)) - [`1b00fac`](https://github.com/PHPOffice/PhpSpreadsheet/commit/1b00fac6ad866eeb619d9effec7d86de82383075) Minor improvements ([#1029](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/1029)) - [`2adaad3`](https://github.com/PHPOffice/PhpSpreadsheet/commit/2adaad3b0136d43f1ed8c37e8da9a852e03e19d9) Minor improvements ([#1028](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/1028)) - [`ca56fd2`](https://github.com/PHPOffice/PhpSpreadsheet/commit/ca56fd258c4ef2c5a0e3bc8cb0a9fe954ef6e410) Typo ([#1007](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/1007)) - [`71f3631`](https://github.com/PHPOffice/PhpSpreadsheet/commit/71f3631cfb84bfee37943c799c6a8a9cad23b889) Rectorification ([#1010](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/1010)) - [`5fd954d`](https://github.com/PHPOffice/PhpSpreadsheet/commit/5fd954d2c213903b3507a36673f0e3bf67db2a7a) Improve test code ([#1003](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/1003)) - Additional commits viewable in [compare view](https://github.com/PHPOffice/PhpSpreadsheet/compare/1.6.0...1.8.0)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/vaizard/glued/network/alerts).