chore(deps): update dependency adm-zip to v0.5.16

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
adm-zip	overrides	patch	0.5.2 -> 0.5.16

---

Release Notes

cthackers/adm-zip (adm-zip)

v0.5.16

Compare Source

What's Changed

• Fixing preserving linux file permissions by @​NickAllmakerOpsCompass in https://github.com/cthackers/adm-zip/pull/531
• fix: totalEntries is not defined by @​sidartaveloso in https://github.com/cthackers/adm-zip/pull/535

New Contributors

• @​NickAllmakerOpsCompass made their first contribution in https://github.com/cthackers/adm-zip/pull/531
• @​sidartaveloso made their first contribution in https://github.com/cthackers/adm-zip/pull/535

Full Changelog: cthackers/adm-zip@v0.5.15...v0.5.16

v0.5.15

Compare Source

What's Changed

• Fix utils canonical to valid posix by @​skoniks in https://github.com/cthackers/adm-zip/pull/499
• addFile backslash test by @​5saviahv in https://github.com/cthackers/adm-zip/pull/500
• added addLocalFolderAsync2 by @​5saviahv in https://github.com/cthackers/adm-zip/pull/501
• fixed windows paths by @​roosipuu in https://github.com/cthackers/adm-zip/pull/503
• Add Windows build by @​5saviahv in https://github.com/cthackers/adm-zip/pull/504
• inital "decoder" functionality by @​5saviahv in https://github.com/cthackers/adm-zip/pull/505
• Bump braces from 3.0.2 to 3.0.3 by @​dependabot in https://github.com/cthackers/adm-zip/pull/506
• Write out Electron original-fs auto loading by @​5saviahv in https://github.com/cthackers/adm-zip/pull/502
• using writeZip() twice throws "Invalid LOC header (bad signature)" error by @​5saviahv in https://github.com/cthackers/adm-zip/pull/507
• Descriptor check & Main Header locating by @​5saviahv in https://github.com/cthackers/adm-zip/pull/508
• House keeping by @​5saviahv in https://github.com/cthackers/adm-zip/pull/509
• typo by @​5saviahv in https://github.com/cthackers/adm-zip/pull/510
• Allow interoperability files with non-UTF-8 (bit 11 = 0) name by @​yfdyh000 in https://github.com/cthackers/adm-zip/pull/450
• package lock update by @​5saviahv in https://github.com/cthackers/adm-zip/pull/511
• small updates by @​5saviahv in https://github.com/cthackers/adm-zip/pull/513
• CodeQL check by @​5saviahv in https://github.com/cthackers/adm-zip/pull/514
• Keep local extra data by @​5saviahv in https://github.com/cthackers/adm-zip/pull/515
• Update old test by @​5saviahv in https://github.com/cthackers/adm-zip/pull/516
• make all errors a function by @​5saviahv in https://github.com/cthackers/adm-zip/pull/517
• Update date time functions by @​5saviahv in https://github.com/cthackers/adm-zip/pull/518
• Add a length check when extra field parsed by @​code-sunbo in https://github.com/cthackers/adm-zip/pull/520
• deleteFile is too eager by @​5saviahv in https://github.com/cthackers/adm-zip/pull/525

New Contributors

• @​skoniks made their first contribution in https://github.com/cthackers/adm-zip/pull/499
• @​roosipuu made their first contribution in https://github.com/cthackers/adm-zip/pull/503
• @​code-sunbo made their first contribution in https://github.com/cthackers/adm-zip/pull/520

Full Changelog: cthackers/adm-zip@v0.5.14...v0.5.15

v0.5.14

Compare Source

Fixed an issue introduced on version 0.1.13 requiring a new mandatory parameter on the inflater on nodejs version >= 15

v0.5.13

Compare Source

• Fixed extractAllToAsync callback @​5saviahv
• Fixed issue with "toAsyncBuffer" where after that command all entries are gone @​5saviahv
• Minor fixes (tests, typos etc) @​5saviahv
• Added a an option to specificy the maximum expectedLength of the file to protect against zip bombs or limit memory usage @​undefined-moe
• Add check for invalid large disk entries @​criyle

v0.5.12

Compare Source

Fixed extraction error

v0.5.11

Compare Source

Add support for Info-Zip password check spec for ZipCrypto @​lukemalcolm
Extraction of password protected zip entries @​Santa77
Fixed unnecessary scanning a local file headers (except in the case of corrupted archives) @​likev

v0.5.10

Compare Source

Add Unix mode attribute even when archive is created from Windows
Fixed an issue where addLocalFolderAsync causes stack overflow when a lot of files are filtered
Support to unzip symlinks
Fix parameter initialization bug of extractAllToAsync
Allow for custom stat or permissions value in addLocalFolder
Various small fixes and tests

v0.5.9

Compare Source

v0.5.8

Compare Source

v0.5.7

Compare Source

v0.5.6: .

Compare Source

v0.5.5

Compare Source

v0.5.4

Compare Source

==================

• Fixed relative paths
• Added zipcrypto encryption
• Lower verMade for macOS when generating zip file

v0.5.3

Compare Source

==================

• Fixed filemode when unzipping

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sourcery-ai]

Reviewer's Guide by Sourcery

This PR updates the adm-zip dependency from version 0.5.2 to 0.5.16. This addresses several issues, including preserving Linux file permissions, handling undefined totalEntries, and improving zip bomb protection. Several other improvements and bug fixes are included in this version bump.

Class diagram showing adm-zip dependency update

classDiagram
    class Package {
        +dependencies
    }
    class AdmZip {
        +version: string
        +preserveLinuxPermissions()
        +handleTotalEntries()
        +protectAgainstZipBombs()
    }
    Package --> AdmZip: depends on
    note for AdmZip "Updated from v0.5.2 to v0.5.16"

Loading

File-Level Changes

Change	Details	Files
Updated the adm-zip dependency	Updated the adm-zip dependency from version 0.5.2 to 0.5.16 in package.json Regenerated the bun.lockb file to reflect the updated dependency	package.json bun.lockb

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time. You can also use
  this command to specify where the summary should be inserted.

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[sourcery-ai]

We have skipped reviewing this pull request. It seems to have been created by a bot (hey, renovate[bot]!). We assume it knows what it's doing!

[github-actions]

📦 Packages

Package	Install
React	bun add @settlemint/settlemint/[email protected]