Skip to content

[Snyk] Upgrade iconv-lite from 0.6.3 to 0.7.0 #43

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Sep 15, 2025
Merged

[Snyk] Upgrade iconv-lite from 0.6.3 to 0.7.0 #43

merged 1 commit into from
Sep 15, 2025

Conversation

@GrinZero
Copy link
Owner

@GrinZero GrinZero commented Sep 14, 2025

snyk-top-banner

Snyk has created this PR to upgrade iconv-lite from 0.6.3 to 0.7.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released 25 days ago.

Release notes
Package name: iconv-lite
  • 0.7.0 - 2025-08-20

    🐞 Bug fixes

    • Handle split surrogate pairs when encoding utf8 - by @ yosion-p and @ ashtuchkin in #282:

      Handle a case where streaming utf8 encoder (converting js strings -> buffers) encounters
      surrogate pairs split between chunks (last character of one chunk is high surrogate and first
      character of the next chunk is a low surrogate).

    • Avoid false positives in encodingExists by using objects without a prototype - by @ bjohansebas in #328

      The encodingExists method could return incorrect results if the lookup matched properties inherited
      from the prototype of the object that stores the encodings, such as constructor and others. This change
      replaces that object with one that has no prototype, ensuring that only explicitly defined valid encodings
      in the library are considered. In addition, the fix is applied to the internal cache system to avoid the same
      kind of false positives

    🚀 Improvements

    • Make explicit that decode() method supports Uint8Array input - by @ jardicc in #271
    • Remove compatibility check for StringDecoder.end method - by @ bjohansebas in #331

    Other changes

    New Contributors

    Full Changelog: v0.6.3...v0.7.0

  • 0.6.3 - 2021-05-24
    No content.
from iconv-lite GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade iconv-lite from 0.6.3 to 0.7.0
544e68e 
Snyk has created this PR to upgrade iconv-lite from 0.6.3 to 0.7.0. See this package in npm: iconv-lite See this project in Snyk: https://app.snyk.io/org/grinzero/project/06a43aa2-6938-4a97-bd6c-49c8f5623153?utm_source=github&utm_medium=referral&page=upgrade-pr
@GrinZero GrinZero merged commit 8913eac into main Sep 15, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

3 participants

@GrinZero @snyk-bot