webtorrent / instant.io

🚀 Streaming file transfer over WebTorrent (torrents on the web)
https://instant.io
MIT License
3.43k stars 436 forks source link

fix(deps): update dependency jszip to v3.10.0 #344

Closed renovate[bot] closed 2 years ago

renovate[bot] commented 2 years ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
jszip 3.7.1 -> 3.10.0 age adoption passing confidence

Release Notes

Stuk/jszip ### [`v3.10.0`](https://togithub.com/Stuk/jszip/blob/HEAD/CHANGES.md#v3100-2022-05-20) [Compare Source](https://togithub.com/Stuk/jszip/compare/v3.9.1...v3.10.0) - Change setimmediate dependency to more efficient one. Fixes [https://github.com/Stuk/jszip/issues/617](https://togithub.com/Stuk/jszip/issues/617) (see [#​829](https://togithub.com/Stuk/jszip/pull/829)) - Update types of `currentFile` metadata to include `null` (see [#​826](https://togithub.com/Stuk/jszip/pull/826)) ### [`v3.9.1`](https://togithub.com/Stuk/jszip/blob/HEAD/CHANGES.md#v391-2022-04-06) [Compare Source](https://togithub.com/Stuk/jszip/compare/v3.9.0...v3.9.1) - Fix recursive definition of `InputFileFormat` introduced in 3.9.0. ### [`v3.9.0`](https://togithub.com/Stuk/jszip/blob/HEAD/CHANGES.md#v390-2022-04-04) [Compare Source](https://togithub.com/Stuk/jszip/compare/v3.8.0...v3.9.0) - Update types JSZip#loadAsync to accept a promise for data, and remove arguments from `new JSZip()` (see [#​752](https://togithub.com/Stuk/jszip/pull/752)) - Update types for `compressionOptions` to JSZipFileOptions and JSZipGeneratorOptions (see [#​722](https://togithub.com/Stuk/jszip/pull/722)) - Add types for `generateInternalStream` (see [#​774](https://togithub.com/Stuk/jszip/pull/774)) ### [`v3.8.0`](https://togithub.com/Stuk/jszip/blob/HEAD/CHANGES.md#v380-2022-03-30) [Compare Source](https://togithub.com/Stuk/jszip/compare/v3.7.1...v3.8.0) - Santize filenames when files are loaded with `loadAsync`, to avoid ["zip slip" attacks](https://snyk.io/research/zip-slip-vulnerability). The original filename is available on each zip entry as `unsafeOriginalName`. See the [documentation](https://stuk.github.io/jszip/documentation/api_jszip/load_async.html). Many thanks to McCaulay Hudson for reporting.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.