- From: dependabot[bot] via GitHub <sysbot+gh@w3.org>
- Date: Fri, 19 Aug 2022 02:16:52 +0000
- To: public-shex-dev@w3.org
dependabot[bot] has just labeled a pull request from dependabot[bot] for https://github.com/shexSpec/shexTest as "dependencies": == Bump xlsx from 0.8.8 to 0.17.0 == Bumps [xlsx](https://github.com/SheetJS/sheetjs) from 0.8.8 to 0.17.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/SheetJS/sheetjs/blob/master/CHANGELOG.md">xlsx's changelog</a>.</em></p> <blockquote> <h2>0.17.0:</h2> <ul> <li>mini build includes ODS parse/write support</li> <li>DBF explicitly cap worksheet to 1<<20 rows</li> <li>XLS throw errors on truncated records</li> </ul> <h2>v0.16.2</h2> <ul> <li>Disabled <code>PRN</code> parsing by default (better support for CSV without delimeters)</li> </ul> <h2>v0.16.1</h2> <ul> <li>skip empty custom property tags if data is absent (fixes DocSecurity issue)</li> <li>HTML output add raw value, type, number format</li> <li>DOM parse look for <code>v</code> / <code>t</code> / <code>z</code> attributes when determining value</li> <li>double quotes in properties escaped using <code>_x0022_</code></li> <li>changed AMD structure for NetSuite and other RequireJS implementations</li> </ul> <ul> <li><code>encode_cell</code> and <code>decode_cell</code> do not rely on <code>encode_col</code> / <code>decode_col</code></li> </ul> <h2>v0.16.0</h2> <ul> <li>Date handling changed</li> <li>XLML certain tag tests are now case insensitive</li> <li>Fixed potentially vulnerable regular expressions</li> </ul> <h2>v0.15.6</h2> <ul> <li>CFB prevent infinite loop</li> <li>ODS empty cells marked as stub (type "z")</li> <li><code>cellStyles</code> option implies <code>sheetStubs</code></li> </ul> <h2>v0.15.5</h2> <ul> <li><code>sheets</code> parse option to specify which sheets to parse</li> </ul> <h2>v0.15.4</h2> <ul> <li>AOA utilities properly preserve number formats</li> <li>Number formats captured in stub cells</li> </ul> <h2>v0.15.3</h2> <ul> <li>Properties and Custom Properties properly XML-encoded</li> </ul> <h2>v0.15.2</h2> <ul> <li><code>sheet_get_cell</code> utility function</li> <li><code>sheet_to_json</code> explicitly support <code>null</code> as alias for default behavior</li> <li><code>encode_col</code> throw on negative column index</li> <li>HTML properly handle whitespace around tags in a run</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/SheetJS/sheetjs/commit/3542d62fffc155dd505a23230ba182c4402a0e2c"><code>3542d62</code></a> version bump 0.17.0</li> <li><a href="https://github.com/SheetJS/sheetjs/commit/6c5db3663c834655c5bcd71dc98aa77b825996fc"><code>6c5db36</code></a> AWS Lambda Binary Media Types</li> <li><a href="https://github.com/SheetJS/sheetjs/commit/59b3dae1a13e43670732bad205228bb604b110d5"><code>59b3dae</code></a> Tested the MongoDB scripts and fixed them</li> <li><a href="https://github.com/SheetJS/sheetjs/commit/e958dbf18e6c21986c74692d71a1a4205e81a061"><code>e958dbf</code></a> Refresh server demos</li> <li><a href="https://github.com/SheetJS/sheetjs/commit/1d7aff45c820105fc7d007c5f64c97f592345320"><code>1d7aff4</code></a> suppress modified test files</li> <li><a href="https://github.com/SheetJS/sheetjs/commit/f8c0a865814246181c9b62080f8c7c928391ccb8"><code>f8c0a86</code></a> [Tests] migrate tests to Github Actions</li> <li><a href="https://github.com/SheetJS/sheetjs/commit/58e59dcfd5455a36b9b6dede939ddea7d4d60e54"><code>58e59dc</code></a> updates to react demo</li> <li><a href="https://github.com/SheetJS/sheetjs/commit/333deae63fbe13d1ff2db42e599211a062001c32"><code>333deae</code></a> write and parse ods in mini build (<a href="https://github-redirect.dependabot.com/SheetJS/sheetjs/issues/2197">#2197</a>)</li> <li><a href="https://github.com/SheetJS/sheetjs/commit/20212e1cc222b047d7414d21428c611508c33a67"><code>20212e1</code></a> version bump 0.16.9: utf-8 codenames</li> <li><a href="https://github.com/SheetJS/sheetjs/commit/f7835d67b21ca269650dcb2d3250ee1c7d3f5b5b"><code>f7835d6</code></a> Add support for outline configuration</li> <li>Additional commits viewable in <a href="https://github.com/SheetJS/sheetjs/compare/v0.8.8...v0.17.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~sheetjs">sheetjs</a>, a new releaser for xlsx since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/shexSpec/shexTest/network/alerts). </details> See https://github.com/shexSpec/shexTest/pull/55 -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Friday, 19 August 2022 02:16:54 UTC