chore(deps): bump file-type from 16.5.3 to 16.5.4
Bumps file-type from 16.5.3 to 16.5.4.
Release notes
Sourced from file-type's releases.
v16.5.4
- Fix: Malformed MKV could cause an infinite loop https://github.com/sindresorhus/file-type/commit/d86835680f4cccbee1a60628783c36700ec9e254
- CVE-2022-36313
- Also fixed in 17.1.3
Commits
99cb01917.1.21b10a71Improve decoding of mime-type in ZIP file (#546)cffcf1fAdd note about ESM6c7ac31Update GitHub Actions (#543)330e6b9Enforce alphabetical order for supported file types list (#531)093eafeRemove duplicate code (#530)e4a809eImprove docs forfileTypeFromBlobd0f31fe17.1.1d89a4a1Improve signature ordering detection requirements (#518)1a553e7Update dependencies (#519)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
The latest updates on your projects. Learn more about Vercel for Git ↗︎
| Name | Status | Preview | Updated |
|---|---|---|---|
| graphql-modules | ✅ Ready (Inspect) | Visit Preview | Jul 23, 2022 at 4:43AM (UTC) |
⚠️ No Changeset found
Latest commit: 5dceb6173e3d8e8ec5a9d56610f09f3da43a3666
Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.
This PR includes no changesets
When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types
Click here to learn what changesets are, and how to add one.
Click here if you're a maintainer who wants to add a changeset to this PR
Looks like file-type is no longer a dependency, so this is no longer needed.