Skip to content

[stable33] chore(deps-dev): bump @zip.js/zip.js from 2.23.0 to 2.24.0 - #65842

Open
dependabot[bot] wants to merge 1 commit into
stable33from
dependabot/npm_and_yarn/stable33/zip.js/zip.js-2.24.0
Open

dependabot[bot] wants to merge 1 commit into
stable33from
dependabot/npm_and_yarn/stable33/zip.js/zip.js-2.24.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026

Copy link
Copy Markdown
Contributor

Bumps @zip.js/zip.js from 2.23.0 to 2.24.0.

Release notes

Sourced from @​zip.js/zip.js's releases.

v2.24.0

What's Changed in v2.24.0

New features

  • The uncompressedSize option of ZipWriter#add() is now read for a ReadableStream or any reader without a size, as the size the stream is expected to have: the entry is then laid out like one read from a reader of that size, i.e. without Zip64 structures below 4 GB and, with bufferedWrite, without a data descriptor. The sizes written remain the measured ones. The option is validated on every path and throws the new ERR_INVALID_UNCOMPRESSED_SIZE_OPTION error when it is not a non-negative integer

Improvements

  • Skip the data descriptor by default when the local header can carry the CRC-32 and the sizes: a passThrough entry read from a reader of known size with crc32 provided (or AES-encrypted, which stores no CRC-32), which also keeps the direct write path instead of a temporary stream, and a reader of unknown size written with bufferedWrite or dataDescriptor: false. ZipCrypto entries, entries copied with the entry option and explicit dataDescriptor: true keep their descriptor
  • Split the Node.js and Deno CI job into three lanes

Documentation

  • State that the duplicates policy of the filesystem imports applies to the entries kept by the filter option only

Full Changelog: gildas-lormeau/zip.js@v2.23.0...v2.24.0

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

Commits
  • 855527f bump up version
  • 1e037b2 use the uncompressedSize option as the size of a stream
  • 448c12b skip the data descriptor when the header can carry the values
  • 4d6a9fe split the node and deno ci job into three lanes
  • 5f6139e document the precedence of the import filter over duplicates
  • See full diff in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@zip.js/zip.js](https://github.com/gildas-lormeau/zip.js) from 2.23.0 to 2.24.0.
- [Release notes](https://github.com/gildas-lormeau/zip.js/releases)
- [Commits](gildas-lormeau/zip.js@v2.23.0...v2.24.0)

---
updated-dependencies:
- dependency-name: "@zip.js/zip.js"
  dependency-version: 2.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team as code owners October 24, 2026 02:33
@dependabot
dependabot Bot requested review from kristian-zendato, pringelmann and skjnldsv and removed request for a team October 24, 2026 02:33
@github-actions github-actions Bot changed the title chore(deps-dev): bump @zip.js/zip.js from 2.23.0 to 2.24.0 [stable33] chore(deps-dev): bump @zip.js/zip.js from 2.23.0 to 2.24.0 Oct 24, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant