socket-security[bot]
commented
4 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/music-metadata@7.14.0 | filesystem Transitive: eval | +7 |
602 kB | borewit |
🚮 Removed packages: npm/music-metadata@7.13.4
This PR contains the following updates:
7.13.4->7.14.0Release Notes
borewit/music-metadata (music-metadata)
### [`v7.14.0`](https://togithub.com/Borewit/music-metadata/releases/tag/v7.14.0) [Compare Source](https://togithub.com/borewit/music-metadata/compare/v7.13.5...v7.14.0) #### Changes - Add Mermaid dependency diagram [@Borewit](https://togithub.com/Borewit) ([#1894](https://togithub.com/borewit/music-metadata/issues/1894)) #### 🚀 Enhancements - Add support for Vorbis Comment `RATING` tag [@Borewit](https://togithub.com/Borewit) ([#1899](https://togithub.com/borewit/music-metadata/issues/1899)) - Add support for MP4 (M4A) rating support [@Borewit](https://togithub.com/Borewit) ([#1900](https://togithub.com/borewit/music-metadata/issues/1900)) #### ⬆️ Dependencies - Bump file-type from 18.5.0 to 18.6.0 [@dependabot](https://togithub.com/dependabot) ([#1896](https://togithub.com/borewit/music-metadata/issues/1896)) #### NPM release NPM release: [music-metadata@7.14.0](https://www.npmjs.com/package/music-metadata/v/7.14.0) ### [`v7.13.5`](https://togithub.com/Borewit/music-metadata/releases/tag/v7.13.5) [Compare Source](https://togithub.com/borewit/music-metadata/compare/v7.13.4...v7.13.5) #### Changes - Release Date tag support [@certuna](https://togithub.com/certuna) ([#1648](https://togithub.com/borewit/music-metadata/issues/1648)) - Include Node.js version 20 in CI tests [@Borewit](https://togithub.com/Borewit) ([#1877](https://togithub.com/borewit/music-metadata/issues/1877)) #### 🎨 Improvements - MP4 parser: calculate duration using time-to-sample-table [@Borewit](https://togithub.com/Borewit) ([#1861](https://togithub.com/borewit/music-metadata/issues/1861)) #### ⬆️ Dependencies - Bump file-type from 18.2.1 to 18.5.0 [@dependabot](https://togithub.com/dependabot) ([#1740](https://togithub.com/borewit/music-metadata/issues/1740)) #### NPM release NPM release: [music-metadata@7.13.5](https://www.npmjs.com/package/music-metadata/v/7.13.5)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.