build(deps): bump @zip.js/zip.js from 2.7.62 to 2.7.72

[dependabot]

Bumps @zip.js/zip.js from 2.7.62 to 2.7.72.

Release notes

Sourced from @​zip.js/zip.js's releases.

v2.7.72

• Fixed regression when using zip.js in Node < 21.2 with the option useCompressionStream not explicitly set to false (Node.js does not support the deflate-raw format of the CompressionStream API in version < 21.2)
• Removed useless files from the JSR repository

v2.7.71

• Improved security in ZipReader by:
  • adding the checkOverlappingEntry and checkOverlappingEntryOnly options (false by default) to detect potential non-recursive zip-bombs (e.g. "A better zip bomb"), more info here: How to detect and avoid zip bombs with this library? gildas-lormeau/zip.js#587 (comment)
  • making sure that the output size of the decompressed entry data matches the expected size exactly
• Fixed URLString type in the type definition file
• Updated dev dependencies

v2.7.70

• Fixed bug in Data64URIWriter when writing small succeeding amounts of data (see gildas-lormeau/zip.js#588)
• Improved security when uncompressing ZIP files. ZipReader will trigger an error as soon as the output size of an entry exceeds the expected "uncompressed size" defined in the central directory (see How to detect and avoid zip bombs with this library? gildas-lormeau/zip.js#587)

v2.7.69

• Ensure the compressed size, the uncompressed size, and the CRC2 checksum are written in the local header if the data descriptor is not used (see #585)

v2.7.68

Fixed regression introduced in version 2.7.65 when using HttpRangeReader with ZipWriter#add() (see #586)

v2.7.67

• Fixed ZipWriter#prependZip()
• Fixed the "level" value of the "general purpose bit flag" when creating zip files with encrypted data or not deflated data
• Added action to publish zip.js automatically on NPM with provenance

v2.7.66

• Fixed value of compression level in the "general purpose bit flag" when compressing files (fix previous version)

v2.7.65

• Fixed regression introduced in version v2.7.50 related to the encoding of the "general purpose bit flag" and the compression level when creating zip files (see #583)
• Added FileEntry#arrayBuffer and ZipFileEntry#getArrayBuffer methods to extract data as ArrayBuffer instances (see example)

v2.7.64

• added the ability in the ZipWriter#add() method to include the "ZIP64 extended information extra field" in the local headers when the zip64 option is enabled. This makes the ZIP file more robust when trying to recover data from a damaged ZIP file (see gildas-lormeau/zip.js#579).
• added the ZipWriter#remove() method to remove entries from the central directory
• added the ZipWriter#prependZip() method to allow appending/removing entries to/from an existing ZIP file (see example, example). This can also be useful to create a (large) ZIP file in multiple passes.
• circumvented a Node.js bug when using a Buffer instance (as a Uint8Array instance) with a Uint8ArrayReader reader (see gildas-lormeau/zip.js#580)
• fixed a ZipCrypto (legacy ZIP encryption) bug in ZipWriter when setting the dataDescriptor option to false explicitly (the option is true by default, it will also be automatically set to true in that case)
• updated dev dependencies

v2.7.63

What's Changed

• feat: discriminate Entry to DirectoryEntry and FileEntry by @​tpoisseau in gildas-lormeau/zip.js#576

New Contributors

• @​tpoisseau made their first contribution in gildas-lormeau/zip.js#576

Full Changelog: gildas-lormeau/zip.js@v2.7.62...v2.7.63

Commits

• 1405414 bump up version
• 9cc7921 update doc
• 347f13e update typedoc
• 0d07766 update built files
• 13e835d do not exclude tests folder
• 0812ea7 fix support in Node.js 20.x (fix #591)
• 76dc84c exclude unneeded files (cf .npmignore)
• 8166578 update doc
• f5689a6 update doc
• 6227339 bump up version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)