Skip to content

[stable34] chore(deps-dev): bump @zip.js/zip.js from 2.23.0 to 2.24.0 - #65845

Merged
nextcloud-command merged 1 commit into
stable34from
dependabot/npm_and_yarn/stable34/zip.js/zip.js-2.24.0
Oct 25, 2026
Merged

nextcloud-command merged 1 commit into
stable34from
dependabot/npm_and_yarn/stable34/zip.js/zip.js-2.24.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @zip.js/zip.js from 2.23.0 to 2.24.0.

Release notes

Sourced from @​zip.js/zip.js's releases.

v2.24.0

What's Changed in v2.24.0

New features

  • The uncompressedSize option of ZipWriter#add() is now read for a ReadableStream or any reader without a size, as the size the stream is expected to have: the entry is then laid out like one read from a reader of that size, i.e. without Zip64 structures below 4 GB and, with bufferedWrite, without a data descriptor. The sizes written remain the measured ones. The option is validated on every path and throws the new ERR_INVALID_UNCOMPRESSED_SIZE_OPTION error when it is not a non-negative integer

Improvements

  • Skip the data descriptor by default when the local header can carry the CRC-32 and the sizes: a passThrough entry read from a reader of known size with crc32 provided (or AES-encrypted, which stores no CRC-32), which also keeps the direct write path instead of a temporary stream, and a reader of unknown size written with bufferedWrite or dataDescriptor: false. ZipCrypto entries, entries copied with the entry option and explicit dataDescriptor: true keep their descriptor
  • Split the Node.js and Deno CI job into three lanes

Documentation

  • State that the duplicates policy of the filesystem imports applies to the entries kept by the filter option only

Full Changelog: gildas-lormeau/zip.js@v2.23.0...v2.24.0

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

Commits
  • 855527f bump up version
  • 1e037b2 use the uncompressedSize option as the size of a stream
  • 448c12b skip the data descriptor when the header can carry the values
  • 4d6a9fe split the node and deno ci job into three lanes
  • 5f6139e document the precedence of the import filter over duplicates
  • See full diff in compare view

@dependabot
dependabot Bot requested review from a team as code owners October 24, 2026 02:34
@dependabot dependabot Bot added the 3. to review Waiting for reviews label Oct 24, 2026
@dependabot
dependabot Bot requested review from kristian-zendato, pringelmann and skjnldsv and removed request for a team October 24, 2026 02:34
@github-actions github-actions Bot changed the title chore(deps-dev): bump @zip.js/zip.js from 2.23.0 to 2.24.0 [stable34] chore(deps-dev): bump @zip.js/zip.js from 2.23.0 to 2.24.0 Oct 24, 2026
@AndyScherzinger AndyScherzinger added this to the Nextcloud 34.0.6 milestone Oct 24, 2026
@AndyScherzinger

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot dependabot Bot changed the title [stable34] chore(deps-dev): bump @zip.js/zip.js from 2.23.0 to 2.24.0 chore(deps-dev): bump @zip.js/zip.js from 2.23.0 to 2.24.0 Oct 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/stable34/zip.js/zip.js-2.24.0 branch from c6b0a6c to 881b3a1 Compare October 24, 2026 17:35
@github-actions github-actions Bot changed the title chore(deps-dev): bump @zip.js/zip.js from 2.23.0 to 2.24.0 [stable34] chore(deps-dev): bump @zip.js/zip.js from 2.23.0 to 2.24.0 Oct 24, 2026
Bumps [@zip.js/zip.js](https://github.com/gildas-lormeau/zip.js) from 2.23.0 to 2.24.0.
- [Release notes](https://github.com/gildas-lormeau/zip.js/releases)
- [Commits](gildas-lormeau/zip.js@v2.23.0...v2.24.0)

---
updated-dependencies:
- dependency-name: "@zip.js/zip.js"
  dependency-version: 2.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@AndyScherzinger
AndyScherzinger force-pushed the dependabot/npm_and_yarn/stable34/zip.js/zip.js-2.24.0 branch from 881b3a1 to 3c775ab Compare October 25, 2026 10:49
@nextcloud-command
nextcloud-command merged commit 754e2a5 into stable34 Oct 25, 2026
88 of 89 checks passed
@nextcloud-command
nextcloud-command deleted the dependabot/npm_and_yarn/stable34/zip.js/zip.js-2.24.0 branch October 25, 2026 11:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants