urllib icon indicating copy to clipboard operation
urllib copied to clipboard

chore(deps): update dependency iconv-lite to ^0.7.0

Open renovate[bot] opened this issue 4 months ago • 5 comments

This PR contains the following updates:

Package Change Age Confidence
iconv-lite ^0.6.3 -> ^0.7.0 age confidence

Release Notes

pillarjs/iconv-lite (iconv-lite)

v0.7.0

Compare Source

🐞 Bug fixes
  • Handle split surrogate pairs when encoding utf8 - by @​yosion-p and @​ashtuchkin in #​282:

    Handle a case where streaming utf8 encoder (converting js strings -> buffers) encounters surrogate pairs split between chunks (last character of one chunk is high surrogate and first character of the next chunk is a low surrogate).

  • Avoid false positives in encodingExists by using objects without a prototype - by @​bjohansebas in #​328

    The encodingExists method could return incorrect results if the lookup matched properties inherited from the prototype of the object that stores the encodings, such as constructor and others. This change replaces that object with one that has no prototype, ensuring that only explicitly defined valid encodings in the library are considered. In addition, the fix is applied to the internal cache system to avoid the same kind of false positives

🚀 Improvements

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • [ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] avatar Aug 20 '25 20:08 renovate[bot]

[!IMPORTANT]

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

coderabbitai[bot] avatar Aug 20 '25 20:08 coderabbitai[bot]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatediconv-lite@​0.6.3 ⏵ 0.7.1100100100 +190100

View full report

socket-security[bot] avatar Aug 20 '25 20:08 socket-security[bot]

Open in StackBlitz

npm i https://pkg.pr.new/node-modules/urllib@593

commit: 5a31086

pkg-pr-new[bot] avatar Aug 20 '25 20:08 pkg-pr-new[bot]

Open in StackBlitz

npm i https://pkg.pr.new/node-modules/urllib@593

commit: 0881713

pkg-pr-new[bot] avatar Aug 20 '25 20:08 pkg-pr-new[bot]

Codecov Report

:white_check_mark: All modified and coverable lines are covered by tests. :white_check_mark: Project coverage is 93.96%. Comparing base (b390eb9) to head (5a31086).

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #593   +/-   ##
=======================================
  Coverage   93.96%   93.96%           
=======================================
  Files          14       14           
  Lines        1474     1474           
  Branches      321      321           
=======================================
  Hits         1385     1385           
  Misses         85       85           
  Partials        4        4           

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

:rocket: New features to boost your workflow:
  • :snowflake: Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • :package: JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

codecov[bot] avatar Aug 20 '25 20:08 codecov[bot]