Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump jszip and read-excel-file #5

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github May 9, 2023

Bumps jszip to 3.10.1 and updates ancestor dependency read-excel-file. These dependencies need to be updated together.

Updates jszip from 3.1.5 to 3.10.1

Changelog

Sourced from jszip's changelog.

v3.10.1 2022-08-02

  • Add sponsorship files.
    • If you appreciate the time spent maintaining JSZip then I would really appreciate your sponsorship.
  • Consolidate metadata types and expose OnUpdateCallback #851 and #852
  • use const instead var in example from README.markdown #828
  • Switch manual download link to HTTPS #839

Internals:

  • Replace jshint with eslint #842
  • Add performance tests #834

v3.10.0 2022-05-20

  • Change setimmediate dependency to more efficient one. Fixes Stuk/jszip#617 (see #829)
  • Update types of currentFile metadata to include null (see #826)

v3.9.1 2022-04-06

  • Fix recursive definition of InputFileFormat introduced in 3.9.0.

v3.9.0 2022-04-04

  • Update types JSZip#loadAsync to accept a promise for data, and remove arguments from new JSZip() (see #752)
  • Update types for compressionOptions to JSZipFileOptions and JSZipGeneratorOptions (see #722)
  • Add types for generateInternalStream (see #774)

v3.8.0 2022-03-30

  • Santize filenames when files are loaded with loadAsync, to avoid "zip slip" attacks. The original filename is available on each zip entry as unsafeOriginalName. See the documentation. Many thanks to McCaulay Hudson for reporting.

v3.7.1 2021-08-05

  • Fix build of dist files.
    • Note: this version ensures the changes from 3.7.0 are actually included in the dist files. Thanks to Evan W for reporting.

v3.7.0 2021-07-23

  • Fix: Use a null prototype object for this.files (see #766)
    • This change might break existing code if it uses prototype methods on the .files property of a zip object, for example zip.files.toString(). This approach is taken to prevent files in the zip overriding object methods that would exist on a normal object.

v3.6.0 2021-02-09

  • Fix: redirect main to dist on browsers (see #742)
  • Fix duplicate require DataLengthProbe, utils (see #734)
  • Fix small error in read_zip.md (see #703)

v3.5.0 2020-05-31

... (truncated)

Commits

Updates read-excel-file from 4.0.6 to 4.1.0

Changelog

Sourced from read-excel-file's changelog.

4.1.0 / 09.11.2020

  • Renamed schema entry parse() function: now it's called type. This way, type could be both a built-in type and a custom type.

  • Changed the built-in "Integer", "URL" and "Email" types: now they're exported functions again instead of strings. Strings still work.

  • Added map parameter: similar to schema but doesn't perform any parsing or validation. Can be used to map an Excel file to an array of objects that could be parsed/validated using yup.

  • type of a schema entry is no longer required: if no type is specified, then the cell value is returned "as is" (string, or number, or boolean, or Date).

4.0.8 / 08.11.2020

4.0.0 / 25.05.2019

  • (breaking change) Turned out that sheetId is not the file name of the sheet. Instead, the filename of the sheet is looked up by r:id (or ns:id) in the xl/_rels/workbook.xml.rels file. That means that reading Excel file sheets by their numeric sheet ID is no longer supported in readXlsxFile() and if sheet option is specified then it means either "sheet index" (starting from 1) or "sheet name". Also, removed the old deprecated way of passing sheet option directly as readXlsxFile(file, sheet) instead of readXlsxFile(file, { sheet }).

3.0.1 / 13.05.2019

  • Fixed IE 11 error "XPathResult is undefined" by including a polyfill for XPath. This resulted in the browser bundle becoming larger in size by 100 kilobytes.

3.0.0 / 30.06.2018

  • (breaking change) Calling this library with getSheets: true option now returns an array of objects of shape { name } rather than an object of shape { [id]: 'name' }. Same's for calling this library with properties: true option.

  • (breaking change) Previous versions returned empty data in case of an error. Now if there're any errors they're thrown as-is and not suppressed.

  • (unlikely breaking change) Previous versions read the sheet having ID 1 by default. It was discovered that this could lead to unintuitive behavior in some Excel editors when sheets order is changed by a user: in some editors a sheet with ID 1 could be moved to, for example, the second position, and would still have the ID 1 so for such Excel files by default the library would read the second sheet instead of the first one which would result in confusing behavior. In any case, numerical sheet IDs are inherently internal to the Excel file structure and shouldn't be externalized in any way (in this case, in the code reading such files) so the library now still accepts the numerical sheet parameter but rather than being interpreted as a numerical sheet ID it's now interpreted as a numerical sheet index (starting from 1). If your code passes a numerical sheet ID parameter to the library then it will most likely behave the same way with the new version because in most cases a numerical sheet ID is the same as a numerical sheet index. This change is very unlikely to break anyone's code, but just to conform with the SEMVER specification this change is released as a "breaking change" because theoretically there could exist some very rare users affected by the change.

  • (very unlikely breaking change) Removed legacy support for numerical sheet IDs passed not as numbers but as strings. For example, sheet: "2" instead of sheet: 2. A string sheet parameter is now always treated as a sheet name.

2.0.1 / 26.06.2018

  • Fixed NaNs appearing in the input instead of nulls (and empty columns not being trimmed).

  • Added "smart date parser" which autodetects and parses most date formats.

2.0.0 / 09.06.2018

  • (breaking change) If using readXlsx() without schema parameter it now parses boolean cell values as true/false and numerical cell values are now parsed as numbers, and also date cell values are parsed as dates in some cases (numbers otherwise). If using readXlsx() with schema parameter then there are no breaking changes.

  • Added dateFormat parameter (e.g. mm/dd/yyyy) for parsing dates automatically when using readXlsx() without schema parameter.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [jszip](https://github.com/Stuk/jszip) to 3.10.1 and updates ancestor dependency [read-excel-file](https://gitlab.com/catamphetamine/read-excel-file). These dependencies need to be updated together.


Updates `jszip` from 3.1.5 to 3.10.1
- [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md)
- [Commits](Stuk/jszip@v3.1.5...v3.10.1)

Updates `read-excel-file` from 4.0.6 to 4.1.0
- [Changelog](https://gitlab.com/catamphetamine/read-excel-file/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/catamphetamine/read-excel-file/commits/v4.1.0)

---
updated-dependencies:
- dependency-name: jszip
  dependency-type: indirect
- dependency-name: read-excel-file
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants