chore(deps): update dependency adm-zip to ^0.6.0 - #254
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^0.5.16→^0.6.0Release Notes
cthackers/adm-zip (adm-zip)
v0.6.0Compare Source
==================
Security
Buffer.alloc(memory exhaustion / DoS) before any validation. Allocation is now bounded by the data actually present — STORED output is sized from the real bytes, DEFLATED output is grown by the inflater and capped at the declared size (#568)__proto__previously resolved toObject.prototype, crashingaddFileand hiding the entry fromgetEntry/readFile. The table is now prototype-lessBug fixes
extractAllTo/extractAllToAsyncnot restoring directory permissions withkeepOriginalPermission; directory modes are applied after their contents are written, deepest path first, and no longer lock the extractor out of a restrictive directory (#530)addLocalFolderwhen a folder contains a symlink pointing back to an ancestor (e.g. workspacenode_modules); the walk now tracks resolved real paths and skips already-visited directories (#541)ERR_INVALID_ARG_TYPE) that crashed the process whenwriteFileToAsynccould not open the target file (bad permissions, invalid filename, exhausted file descriptors); write failures are now reported through the callback and write errors are no longer silently swallowed (#470, #459, #402)name(e.g.a/b/c/now returnsc) (#466)extractEntryToflattening subdirectories whenmaintainEntryPathis false; the structure below the extracted directory is now preserved instead of collapsing (and overwriting) files by basename (#306)utimesaborting extraction; setting the modification time is now best-effort and never fails extraction of already-written content (#379)test()always returning false for any archive containing a file (it indexed the entries array with an entry object instead of reading the entry); it now correctly verifies each entry's CRCPerformance
Added
types.d.ts), so@types/adm-zipis no longer requiredNotes
extractEntryTo(dir, target, /* maintainEntryPath */ false)now preserves subdirectories beneath the extracted directory rather than flattening themv0.5.18Compare Source
What's Changed
New Contributors
Full Changelog: cthackers/adm-zip@v0.5.17...v0.5.18
v0.5.17Compare Source
What's Changed
New Contributors
Full Changelog: cthackers/adm-zip@v0.5.16...v0.5.17
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.