Skip to content

build(deps): bump adm-zip from 0.5.12 to 0.5.13#289

Merged
dawidd6 merged 1 commit into
masterfrom
dependabot-npm_and_yarn-adm-zip-0.5.13
Jun 3, 2024
Merged

build(deps): bump adm-zip from 0.5.12 to 0.5.13#289
dawidd6 merged 1 commit into
masterfrom
dependabot-npm_and_yarn-adm-zip-0.5.13

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 3, 2024

Copy link
Copy Markdown
Contributor

Bumps adm-zip from 0.5.12 to 0.5.13.

Release notes

Sourced from adm-zip's releases.

v0.5.13

  • Fixed extractAllToAsync callback @​5saviahv
  • Fixed issue with "toAsyncBuffer" where after that command all entries are gone @​5saviahv
  • Minor fixes (tests, typos etc) @​5saviahv
  • Added a an option to specificy the maximum expectedLength of the file to protect against zip bombs or limit memory usage @​undefined-moe
  • Add check for invalid large disk entries @​criyle
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [adm-zip](https://github.com/cthackers/adm-zip) from 0.5.12 to 0.5.13.
- [Release notes](https://github.com/cthackers/adm-zip/releases)
- [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md)
- [Commits](cthackers/adm-zip@v0.5.12...v0.5.13)

---
updated-dependencies:
- dependency-name: adm-zip
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 3, 2024
@dawidd6 dawidd6 merged commit 436c9d3 into master Jun 3, 2024
@dawidd6 dawidd6 deleted the dependabot-npm_and_yarn-adm-zip-0.5.13 branch June 3, 2024 05:45
kodiakhq Bot referenced this pull request in cloudquery/plugin-sdk Jun 13, 2024
)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [dawidd6/action-download-artifact](https://togithub.com/dawidd6/action-download-artifact) | action | major | `v3` -> `v6` |

---

### Release Notes

<details>
<summary>dawidd6/action-download-artifact (dawidd6/action-download-artifact)</summary>

### [`v6`](https://togithub.com/dawidd6/action-download-artifact/releases/tag/v6)

[Compare Source](https://togithub.com/dawidd6/action-download-artifact/compare/v5...v6)

**Full Changelog**: dawidd6/action-download-artifact@v5...v6

### [`v5`](https://togithub.com/dawidd6/action-download-artifact/releases/tag/v5)

[Compare Source](https://togithub.com/dawidd6/action-download-artifact/compare/v4...v5)

**Full Changelog**: dawidd6/action-download-artifact@v4...v5

### [`v4`](https://togithub.com/dawidd6/action-download-artifact/releases/tag/v4)

[Compare Source](https://togithub.com/dawidd6/action-download-artifact/compare/v3...v4)

#### What's Changed

-   **VERSIONING CHANGE**: now there will only be major releases of this action, e.g. v5, v6 and so on
-   build(deps): bump undici from 5.28.3 to 5.28.4 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dawidd6/action-download-artifact/pull/284](https://togithub.com/dawidd6/action-download-artifact/pull/284)
-   build(deps): bump [@&#8203;actions/artifact](https://togithub.com/actions/artifact) from 2.1.4 to 2.1.5 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dawidd6/action-download-artifact/pull/285](https://togithub.com/dawidd6/action-download-artifact/pull/285)
-   build(deps): bump [@&#8203;actions/artifact](https://togithub.com/actions/artifact) from 2.1.5 to 2.1.7 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dawidd6/action-download-artifact/pull/287](https://togithub.com/dawidd6/action-download-artifact/pull/287)
-   build(deps): bump adm-zip from 0.5.12 to 0.5.13 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dawidd6/action-download-artifact/pull/289](https://togithub.com/dawidd6/action-download-artifact/pull/289)
-   Set allow_forks to false by default by [@&#8203;timweri](https://togithub.com/timweri) in [https://github.com/dawidd6/action-download-artifact/pull/290](https://togithub.com/dawidd6/action-download-artifact/pull/290)

#### New Contributors

-   [@&#8203;timweri](https://togithub.com/timweri) made their first contribution in [https://github.com/dawidd6/action-download-artifact/pull/290](https://togithub.com/dawidd6/action-download-artifact/pull/290)

**Full Changelog**: dawidd6/action-download-artifact@v3...v4

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MDcuMSIsInVwZGF0ZWRJblZlciI6IjM3LjQwNy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
charithe referenced this pull request in cerbos/cerbos Jul 1, 2024
)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[dawidd6/action-download-artifact](https://togithub.com/dawidd6/action-download-artifact)
| action | major | `v3` -> `v4` |

---

### Release Notes

<details>
<summary>dawidd6/action-download-artifact
(dawidd6/action-download-artifact)</summary>

###
[`v4`](https://togithub.com/dawidd6/action-download-artifact/releases/tag/v4)

[Compare
Source](https://togithub.com/dawidd6/action-download-artifact/compare/v3...v4)

##### What's Changed

- **VERSIONING CHANGE**: now there will only be major releases of this
action, e.g. v5, v6 and so on
- build(deps): bump undici from 5.28.3 to 5.28.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/dawidd6/action-download-artifact/pull/284](https://togithub.com/dawidd6/action-download-artifact/pull/284)
- build(deps): bump
[@&#8203;actions/artifact](https://togithub.com/actions/artifact) from
2.1.4 to 2.1.5 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/dawidd6/action-download-artifact/pull/285](https://togithub.com/dawidd6/action-download-artifact/pull/285)
- build(deps): bump
[@&#8203;actions/artifact](https://togithub.com/actions/artifact) from
2.1.5 to 2.1.7 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/dawidd6/action-download-artifact/pull/287](https://togithub.com/dawidd6/action-download-artifact/pull/287)
- build(deps): bump adm-zip from 0.5.12 to 0.5.13 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/dawidd6/action-download-artifact/pull/289](https://togithub.com/dawidd6/action-download-artifact/pull/289)
- Set allow_forks to false by default by
[@&#8203;timweri](https://togithub.com/timweri) in
[https://github.com/dawidd6/action-download-artifact/pull/290](https://togithub.com/dawidd6/action-download-artifact/pull/290)

##### New Contributors

- [@&#8203;timweri](https://togithub.com/timweri) made their first
contribution in
[https://github.com/dawidd6/action-download-artifact/pull/290](https://togithub.com/dawidd6/action-download-artifact/pull/290)

**Full Changelog**:
dawidd6/action-download-artifact@v3...v4

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/cerbos/cerbos).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjEuMCIsInVwZGF0ZWRJblZlciI6IjM3LjQyMS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhcmVhL2RlcGVuZGVuY2llcyIsImJvdHMiLCJraW5kL2Nob3JlIl19-->

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Ma-ve pushed a commit to Ma-ve/action-download-artifact-with-retry that referenced this pull request Jun 24, 2025
Bumps [adm-zip](https://github.com/cthackers/adm-zip) from 0.5.12 to 0.5.13.
- [Release notes](https://github.com/cthackers/adm-zip/releases)
- [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md)
- [Commits](cthackers/adm-zip@v0.5.12...v0.5.13)

---
updated-dependencies:
- dependency-name: adm-zip
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant