![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4)
Bumps [jszip](https://github.com/Stuk/jszip) from 3.1.5 to 3.10.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Stuk/jszip/blob/main/CHANGES.md">jszip's changelog</a>.</em></p> <blockquote> <h3>v3.10.1 2022-08-02</h3> <ul> <li>Add sponsorship files. <ul> <li>If you appreciate the time spent maintaining JSZip then I would really appreciate <a href="https://github.com/sponsors/Stuk">your sponsorship</a>.</li> </ul> </li> <li>Consolidate metadata types and expose OnUpdateCallback <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/851">#851</a> and <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/852">#852</a></li> <li>use <code>const</code> instead <code>var</code> in example from README.markdown <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/828">#828</a></li> <li>Switch manual download link to HTTPS <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/839">#839</a></li> </ul> <p>Internals:</p> <ul> <li>Replace jshint with eslint <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/842">#842</a></li> <li>Add performance tests <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/834">#834</a></li> </ul> <h3>v3.10.0 2022-05-20</h3> <ul> <li>Change setimmediate dependency to more efficient one. Fixes <a href="https://github-redirect.dependabot.com/Stuk/jszip/issues/617">Stuk/jszip#617</a> (see <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/829">#829</a>)</li> <li>Update types of <code>currentFile</code> metadata to include <code>null</code> (see <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/826">#826</a>)</li> </ul> <h3>v3.9.1 2022-04-06</h3> <ul> <li>Fix recursive definition of <code>InputFileFormat</code> introduced in 3.9.0.</li> </ul> <h3>v3.9.0 2022-04-04</h3> <ul> <li>Update types JSZip#loadAsync to accept a promise for data, and remove arguments from <code>new JSZip()</code> (see <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/752">#752</a>)</li> <li>Update types for <code>compressionOptions</code> to JSZipFileOptions and JSZipGeneratorOptions (see <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/722">#722</a>)</li> <li>Add types for <code>generateInternalStream</code> (see <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/774">#774</a>)</li> </ul> <h3>v3.8.0 2022-03-30</h3> <ul> <li>Santize filenames when files are loaded with <code>loadAsync</code>, to avoid <a href="https://snyk.io/research/zip-slip-vulnerability">"zip slip" attacks</a>. The original filename is available on each zip entry as <code>unsafeOriginalName</code>. See the <a href="https://stuk.github.io/jszip/documentation/api_jszip/load_async.html">documentation</a>. Many thanks to McCaulay Hudson for reporting.</li> </ul> <h3>v3.7.1 2021-08-05</h3> <ul> <li>Fix build of <code>dist</code> files. <ul> <li>Note: this version ensures the changes from 3.7.0 are actually included in the <code>dist</code> files. Thanks to Evan W for reporting.</li> </ul> </li> </ul> <h3>v3.7.0 2021-07-23</h3> <ul> <li>Fix: Use a null prototype object for this.files (see <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/766">#766</a>) <ul> <li>This change might break existing code if it uses prototype methods on the <code>.files</code> property of a zip object, for example <code>zip.files.toString()</code>. This approach is taken to prevent files in the zip overriding object methods that would exist on a normal object.</li> </ul> </li> </ul> <h3>v3.6.0 2021-02-09</h3> <ul> <li>Fix: redirect main to dist on browsers (see <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/742">#742</a>)</li> <li>Fix duplicate require DataLengthProbe, utils (see <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/734">#734</a>)</li> <li>Fix small error in read_zip.md (see <a href="https://github-redirect.dependabot.com/Stuk/jszip/pull/703">#703</a>)</li> </ul> <h3>v3.5.0 2020-05-31</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Stuk/jszip/commit/0f2f1e4d0509514417db83fe5b86bde90e0ffe8d"><code>0f2f1e4</code></a> 3.10.1</li> <li><a href="https://github.com/Stuk/jszip/commit/cae55105f5e8bd37c270cdb76eab2cf40388dfd9"><code>cae5510</code></a> Updates for v3.10.1</li> <li><a href="https://github.com/Stuk/jszip/commit/179c9a0340477985b82734f1b09560411adb5b94"><code>179c9a0</code></a> Update changelog for 3.10.1</li> <li><a href="https://github.com/Stuk/jszip/commit/61e1df58dac54eec1e9733649638518b79896731"><code>61e1df5</code></a> Add Jekyll files to gitignore</li> <li><a href="https://github.com/Stuk/jszip/commit/f299cce9b8d9e2be11db997919cf1777167902b7"><code>f299cce</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/Stuk/jszip/issues/852">#852</a> from Stuk/metadata-ts</li> <li><a href="https://github.com/Stuk/jszip/commit/852887aa9483c552cd88e4eb8c298a475c0f9269"><code>852887a</code></a> Consolidate metadata types and expose OnUpdateCallback</li> <li><a href="https://github.com/Stuk/jszip/commit/5be00dfd0cc86c948420901e911e2b0fb286f19a"><code>5be00df</code></a> Add sponsorship files</li> <li><a href="https://github.com/Stuk/jszip/commit/dabe86445ce60705936ad15830c817ccb182e649"><code>dabe864</code></a> Update package-lock for benchmark</li> <li><a href="https://github.com/Stuk/jszip/commit/cc554dae51d306fe0f188891f33e16cb6d81372d"><code>cc554da</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/Stuk/jszip/issues/841">#841</a> from stevennyman/patch-2</li> <li><a href="https://github.com/Stuk/jszip/commit/caefbc082d4bed536207fe473819fc91041d4f65"><code>caefbc0</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/Stuk/jszip/issues/834">#834</a> from Stuk/benchmark</li> <li>Additional commits viewable in <a href="https://github.com/Stuk/jszip/compare/v3.1.5...v3.10.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/sureshsundar86/UI/network/alerts). </details>
AI Analysis
This issue appears to be discussing a feature request or bug report related to the repository. Based on the content, it seems to be still under discussion. The issue was opened by dependabot[bot] and has received 0 comments.
Add a comment
Comment form would go here