[Snyk] Upgrade file-type from 8.1.0 to 18.2.0

[snyk-bot]

Snyk has created this PR to upgrade file-type from 8.1.0 to 18.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 73 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2023-01-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-FILETYPE-2958042	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: file-type

• 18.2.0 - 2023-01-15
  
  • Add support for Apache Parquet (#576) 1ec164b

  v18.1.0...v18.2.0

• 18.1.0 - 2023-01-11
  

  Improvements

  • Add support for AutoDesk DWG format (#572) 47aa221
  • Add support for Personal Storage Table (PST) file (.pst) (#573) ec3ba33
  • Add support for JPEG-LS (.jls) (#568) 976ed4b

  Fixes

  • Fix parsing big-endian encoded TIFF file (#571) e8bc341

  v18.0.0...v18.1.0

• 18.0.0 - 2022-08-24
  

  Breaking

  • Require Node.js 14 6d457c5

  v17.1.6...v18.0.0

• 17.1.6 - 2022-08-02
  
  • Fix an import path (#553) e843d73

  v17.1.5...v17.1.6

• 17.1.5 - 2022-08-02
  
  • Fix PDF detection in some cases a0c24eb

  v17.1.4...v17.1.5

• 17.1.4 - 2022-07-25
  
  • Fix a problem with a dependency (#549) 20a90ab

  v17.1.3...v17.1.4

• 17.1.3 - 2022-07-21
  
  • Fix: Malformed MKV could cause an infinite loop 2c4d120
    • CVE-2022-36313
    • Also backported to 16.5.4

  v17.1.2...v17.1.3

• 17.1.2 - 2022-06-01
  
  • Improve decoding of mime-type in ZIP file (#546) 1b10a71

  v17.1.1...v17.1.2

• 17.1.1 - 2021-12-28
  
  • Update dependencies (#519) 1a553e7

  v17.1.0...v17.1.1

• 17.1.0 - 2021-12-27
• 17.0.2 - 2021-12-16
• 17.0.1 - 2021-12-14
• 17.0.0 - 2021-11-24
• 16.5.4 - 2022-07-21
  
  • Fix: Malformed MKV could cause an infinite loop d868356
    • CVE-2022-36313
    • Also fixed in 17.1.3
• 16.5.3 - 2021-08-03
• 16.5.2 - 2021-07-20
• 16.5.1 - 2021-07-10
• 16.5.0 - 2021-05-28
• 16.4.0 - 2021-05-05
• 16.3.0 - 2021-03-06
• 16.2.0 - 2021-01-13
• 16.1.0 - 2020-12-21
• 16.0.1 - 2020-11-02
• 16.0.0 - 2020-10-18
• 15.0.1 - 2020-09-14
• 15.0.0 - 2020-08-26
• 14.7.1 - 2020-08-07
• 14.7.0 - 2020-08-02
• 14.6.2 - 2020-06-14
• 14.6.1 - 2020-06-07
• 14.6.0 - 2020-06-02
• 14.5.0 - 2020-05-21
• 14.4.0 - 2020-05-15
• 14.3.0 - 2020-05-04
• 14.2.0 - 2020-04-23
• 14.1.4 - 2020-03-11
• 14.1.3 - 2020-02-24
• 14.1.2 - 2020-02-12
• 14.1.1 - 2020-02-05
• 14.1.0 - 2020-02-05
• 14.0.0 - 2020-02-02
• 13.1.2 - 2020-01-22
• 13.1.1 - 2020-01-19
• 13.1.0 - 2020-01-15
• 13.0.3 - 2020-01-09
• 13.0.2 - 2020-01-07
• 13.0.1 - 2020-01-07
• 13.0.0 - 2020-01-07
• 12.4.2 - 2019-12-20
• 12.4.1 - 2019-12-19
• 12.4.0 - 2019-10-31
• 12.3.1 - 2019-10-22
• 12.3.0 - 2019-09-03
• 12.2.0 - 2019-08-18
• 12.1.0 - 2019-07-26
• 12.0.1 - 2019-07-06
• 12.0.0 - 2019-06-12
• 11.1.0 - 2019-05-23
• 11.0.0 - 2019-05-04
• 10.11.0 - 2019-04-11
• 10.10.0 - 2019-04-01
• 10.9.0 - 2019-03-05
• 10.8.0 - 2019-02-18
• 10.7.1 - 2019-01-22
• 10.7.0 - 2018-12-18
• 10.6.0 - 2018-12-03
• 10.5.0 - 2018-11-19
• 10.4.0 - 2018-11-02
• 10.3.0 - 2018-11-01
• 10.2.0 - 2018-10-28
• 10.1.0 - 2018-10-22
• 10.0.0 - 2018-10-07
• 9.0.0 - 2018-08-10
• 8.1.0 - 2018-07-08
  

  Improvements

  • Add support for AutoDesk DWG format (#572) 47aa221
  • Add support for Personal Storage Table (PST) file (.pst) (#573) ec3ba33
  • Add support for JPEG-LS (.jls) (#568) 976ed4b

  Fixes

  • Fix parsing big-endian encoded TIFF file (#571) e8bc341

  v18.0.0...v18.1.0

from file-type GitHub release notes

Commit messages

Package name: file-type

• 1c76b4a 18.2.0
• 1ec164b Add support for Apache Parquet ([Snyk] Upgrade tap from 11.1.5 to 16.3.0 #576)
• b544e6a 18.1.0
• 4c6d313 Meta tweaks
• 47aa221 Add support for AutoDesk DWG format ([Snyk] Upgrade tap from 11.1.5 to 16.3.0 #572)
• ec3ba33 Add support for Personal Storage Table (PST) file, `.pst` ([Snyk] Upgrade tap from 11.1.5 to 16.3.0 #573)
• 976ed4b Add support for JPEG-LS (`.jls`) ([Snyk] Upgrade tap from 11.1.5 to 16.3.0 #568)
• e8bc341 Fix parsing big-endian encoded TIFF file ([Snyk] Upgrade tap from 11.1.5 to 16.3.0 #571)
• 66860eb Update development dependencies ([Snyk] Upgrade tap from 11.1.5 to 16.3.0 #569)
• 5bdcb9d Remove corrupt and unused TIFF fixture ([Snyk] Upgrade tap from 11.1.5 to 16.3.0 #570)
• 54e5a94 Update `.m4v` description and rename `.mp4` fixture to `.m4v` ([Snyk] Upgrade tap from 11.1.5 to 16.3.0 #567)
• feac593 18.0.0
• 6d457c5 Require Node.js 14
• 8dff74d Update strtok3 to 7.0.0 & token-types to 5.0.0 ([Snyk] Upgrade tap from 11.1.5 to 16.3.0 #552)
• 3fa1561 17.1.6
• e843d73 Fix import path for `ITokenizer` ([Snyk] Upgrade mongoose from 4.2.4 to 6.5.1 #553)
• 4a6c0db 17.1.5
• a0c24eb Recursive parsing after a UTF-8 BOM field
• dff7b7b Fix a couple of docs typos
• 4110073 17.1.4
• 20a90ab Update strtok3 to ^7.0.0-alpha.9 ([Snyk] Security upgrade dustjs-linkedin from 2.5.0 to 3.0.0 #549)
• 41d13a3 17.1.3
• 2c4d120 Fix: Malformed MKV could cause an infinite loop
• 99cb019 17.1.2

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs