chore(deps): bump file-type from 16.5.4 to 21.3.2#7721
Conversation
dependabot
Bot
added
dependencies
javascript
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: a22b646226
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "@open-condo/miniapp-utils": "workspace:^", | ||
| "express": "^4.21.2", | ||
| "file-type": "16.5.4", | ||
| "file-type": "21.3.2", |
There was a problem hiding this comment.
With this bump, file-type no longer exposes the old fromFile API used by packages/files/detectMimeType.js; the v21 API exports fileTypeFromFile instead. For every upload path that reaches utils.js and calls detectMimeTypeFromFile(f.filepath), fromFile is undefined and the detector falls back to the client-provided MIME type, so server-side content sniffing is effectively disabled until the import/call is migrated.
Useful? React with 👍 / 👎.
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/file-type-21.3.2
branch
from
a22b646 to
e1770dc
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/file-type-21.3.2
branch
from
e1770dc to
c9f6b8f
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/file-type-21.3.2
branch
from
c9f6b8f to
edba948
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/file-type-21.3.2
branch
from
edba948 to
a8729bd
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/file-type-21.3.2
branch
from
a8729bd to
b19d617
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/file-type-21.3.2
branch
from
b19d617 to
cfcbb6d
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/file-type-21.3.2
branch
from
cfcbb6d to
bb53d93
Compare
Bumps [file-type](https://github.com/sindresorhus/file-type) from 16.5.4 to 21.3.2. - [Release notes](https://github.com/sindresorhus/file-type/releases) - [Commits](sindresorhus/file-type@v16.5.4...v21.3.2) --- updated-dependencies: - dependency-name: file-type dependency-version: 21.3.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/file-type-21.3.2
branch
from
bb53d93 to
0801fa1
Compare
|
Bumps file-type from 16.5.4 to 21.3.2.
Release notes
Sourced from file-type's releases.
... (truncated)
Commits
e18028c21.3.2a155cd7Fix ZIP bomb in known-size ZIP probing6954817Harden parser more370ed91Fix bound recursive BOM and ID3 detectiond2ecea1Add a few more safeguards41fcff5Update readmea8f6934Fix CIad5857e21.3.15d2fedfHarden parser319abf8Fix infinite loop in ASF parser on malformed input