[PR #5019] [MERGED] ⬆️ bump adm zip to 0.5.16 #5710

Closed
opened 2026-02-28 21:17:09 -06:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/actualbudget/actual/pull/5019
Author: @matt-fidd
Created: 5/18/2025
Status: Merged
Merged: 5/18/2025
Merged by: @matt-fidd

Base: masterHead: bump-adm-zip


📝 Commits (3)

📊 Changes

4 files changed (+29 additions, -6 deletions)

View changed files

.yarn/patches/adm-zip-npm-0.5.16-4556fea098.patch (+10 -0)
📝 packages/loot-core/package.json (+1 -1)
upcoming-release-notes/5019.md (+6 -0)
📝 yarn.lock (+12 -5)

📄 Description

I've split this out from https://github.com/actualbudget/actual/pull/5015 because adm-zip requires patching.

I've had a PR up there (https://github.com/cthackers/adm-zip/pull/551) for quite a while but no response yet so this is the only way to update without changing the dependency over.


adm-zip (0.5.10 → 0.5.16)

  • v0.5.16: Fixed Linux file permissions preservation and undefined totalEntries
  • v0.5.15: Fixed Windows paths handling, added async folder functionality, and improved decoder
  • v0.5.14: Fixed inflater issue on Node.js >= 15
  • v0.5.13: Fixed extractAllToAsync and added zip bomb protection
  • v0.5.12-11: Extraction improvements and password protection support

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/actualbudget/actual/pull/5019 **Author:** [@matt-fidd](https://github.com/matt-fidd) **Created:** 5/18/2025 **Status:** ✅ Merged **Merged:** 5/18/2025 **Merged by:** [@matt-fidd](https://github.com/matt-fidd) **Base:** `master` ← **Head:** `bump-adm-zip` --- ### 📝 Commits (3) - [`4ad77a6`](https://github.com/actualbudget/actual/commit/4ad77a6ea7759997ffaa087e5f221e8b6a08da38) bump adm-zip to 0.5.16 - [`4ceca68`](https://github.com/actualbudget/actual/commit/4ceca68011328ede7cfd10119e181dad927d072a) note - [`df39ff2`](https://github.com/actualbudget/actual/commit/df39ff2b407d85772d6d38ebc11b4f892eb3011d) move to native yarn patch ### 📊 Changes **4 files changed** (+29 additions, -6 deletions) <details> <summary>View changed files</summary> ➕ `.yarn/patches/adm-zip-npm-0.5.16-4556fea098.patch` (+10 -0) 📝 `packages/loot-core/package.json` (+1 -1) ➕ `upcoming-release-notes/5019.md` (+6 -0) 📝 `yarn.lock` (+12 -5) </details> ### 📄 Description I've split this out from https://github.com/actualbudget/actual/pull/5015 because adm-zip requires patching. I've had a PR up there (https://github.com/cthackers/adm-zip/pull/551) for quite a while but no response yet so this is the only way to update without changing the dependency over. ------- ### adm-zip (0.5.10 → 0.5.16) - **v0.5.16**: Fixed Linux file permissions preservation and undefined totalEntries - **v0.5.15**: Fixed Windows paths handling, added async folder functionality, and improved decoder - **v0.5.14**: Fixed inflater issue on Node.js >= 15 - **v0.5.13**: Fixed extractAllToAsync and added zip bomb protection - **v0.5.12-11**: Extraction improvements and password protection support --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-02-28 21:17:09 -06:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/actual#5710