Skip to content
This repository was archived by the owner on Nov 4, 2021. It is now read-only.

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Apr 1, 2021

Bumps adm-zip from 0.4.16 to 0.5.5.

Changelog

Sourced from adm-zip's changelog.

0.5.4 / 2021-03-08

  • Fixed relative paths
  • Added zipcrypto encryption
  • Lower verMade for macOS when generating zip file

0.5.3 / 2021-02-07

  • Fixed filemode when unzipping

0.5.2 / 2021-01-27

  • Fixed path traversal issue (GHSL-2020-198)

0.5.1 / 2020-11-27

  • Incremented version (cthackers)
  • Fixed outFileName (cthackers)

0.5.0 / 2020-11-19

  • Added extra parameter to extractEntryTo so target filename can be renamed (cthackers)
  • Updated dev dependency (cthackers)
  • modified addLocalFolder method (5saviahv)
  • modified addLocalFile method (5saviahv)
  • Deflate needs min V2.0 (5saviahv)
  • Node v6 (5saviahv)
  • Added ZipCrypto decrypting ability (5saviahv)
  • LICENSE filename in package.json (5saviahv)
  • add multibyte-encoded comment with byte length instead of character length (Kosuke Suzuki)
  • Bump lodash from 4.17.15 to 4.17.19 (dependabot[bot])
  • now it works in browser (Emiliano Necciari)
Commits
  • 9a1ca46 Incremented build version
  • 75e1c56 Merge branch 'master' of github.com:cthackers/adm-zip
  • 57bed1a Updateded dev dependency to fix y18n vulnerability
  • 0516d97 addFile would update old file, instead of adding new file (#363)
  • bcacd10 Merge pull request #357 from Salketer/patch-1
  • 1b0f840 Use Buffer.from instead of allocating with length
  • 3d8bfc7 Increment version number
  • d71ea50 Merge pull request #352 from timqian/master
  • 96794b0 Merge pull request #353 from 5saviahv/options
  • fc6f4a5 Merge pull request #354 from 5saviahv/zipcrypto
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 1, 2021
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Sep 13, 2021

Superseded by #47.

@dependabot dependabot bot closed this Sep 13, 2021
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/adm-zip-0.5.5 branch September 13, 2021 00:08
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant