Skip to content

build(deps): bump music-metadata from 11.15.0 to 11.16.1 in /app - #174

Merged
github-actions[bot] merged 1 commit into
devfrom
dependabot/npm_and_yarn/app/dev/music-metadata-11.16.1
Sep 28, 2026
Merged

github-actions[bot] merged 1 commit into
devfrom
dependabot/npm_and_yarn/app/dev/music-metadata-11.16.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps music-metadata from 11.15.0 to 11.16.1.

Release notes

Sourced from music-metadata's releases.

v11.16.1

Changes

🚀 Improvements

  • fix(id3v2): trim TXXX NUL padding without a regular expression @​spokodev (#2756)

🐛 Bug Fixes

📦 NPM release

NPM release: music-metadata@11.16.1

v11.16.0

Changes

🚀 Improvements

🔒 Security

🐛 Bug Fixes

📚 Documentation

📦 NPM release

NPM release: music-metadata@11.16.0

Commits
  • a10d7b2 11.16.1
  • 73d96ec Fix Ogg picture truncation when comments span many pages
  • 2d11543 fix(id3v2): trim TXXX NUL padding without a regular expression
  • 9e995a3 11.16.0
  • 989ef43 docs: correct README API types and parsing guidance
  • 2500f00 fix: map Vorbis UNSYNCEDLYRICS to common lyrics
  • 536535b fix(mp4): bound incremental atom payloads and require complete ftyp headers
  • 0f19ad6 fix(mp4): validate atom sizes before payload allocation
  • 9c28dc5 fix(mp4): validate tkhd header length before decoding
  • 487e6d5 Make type exports explicit and enforce isolated modules
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
@github-actions
github-actions Bot enabled auto-merge September 28, 2026 13:36
@socket-security

socket-security Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​music-metadata@​11.15.0 ⏵ 11.16.199 +1100100 +194 +4100

View full report

Bumps [music-metadata](https://github.com/Borewit/music-metadata) from 11.15.0 to 11.16.1.
- [Release notes](https://github.com/Borewit/music-metadata/releases)
- [Commits](Borewit/music-metadata@v11.15.0...v11.16.1)

---
updated-dependencies:
- dependency-name: music-metadata
  dependency-version: 11.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/app/dev/music-metadata-11.16.1 branch from f57778d to f58456f Compare September 28, 2026 13:52
@github-actions
github-actions Bot merged commit 570d53f into dev Sep 28, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/app/dev/music-metadata-11.16.1 branch September 28, 2026 13:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants