Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency jszip to v3.7.0 #38

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
jszip 3.2.2 -> 3.7.0 age adoption passing confidence

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Medium Medium 5.3 CVE-2021-23413

Release Notes

Stuk/jszip

v3.7.0

Compare Source

  • Fix: Use a null prototype object for this.files (see #​766)
    • This change might break existing code if it uses prototype methods on the .files property of a zip object, for example zip.files.toString(). This approach is taken to prevent files in the zip overriding object methods that would exist on a normal object.

v3.6.0

Compare Source

  • Fix: redirect main to dist on browsers (see #​742)
  • Fix duplicate require DataLengthProbe, utils (see #​734)
  • Fix small error in read_zip.md (see #​703)

v3.5.0

Compare Source

  • Fix 'End of data reached' error when file extra field is invalid (see #​544).
  • Typescript definitions: Add null to return types of functions that may return null (see #​669).
  • Typescript definitions: Correct nodeStream's type (see #​682)
  • Typescript definitions: Add string output type (see #​666)

v3.4.0

Compare Source

  • Add Typescript type definitions (see #​601).

v3.3.0

Compare Source

  • Change browser module resolution to support Angular packager (see #​614).

  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Feb 3, 2022
@mend-for-github-com
Copy link
Contributor Author

mend-for-github-com bot commented Oct 19, 2022

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants