chore(deps-dev): bump @zip.js/zip.js from 2.7.62 to 2.7.71

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps @zip.js/zip.js from 2.7.62 to 2.7.71.

Release notes

Sourced from @​zip.js/zip.js's releases.

v2.7.71

• Improved security in ZipReader by:
  • adding the checkOverlappingEntry and checkOverlappingEntryOnly options (false by default) to detect potential non-recursive zip-bombs (e.g. "A better zip bomb"), more info here: How to detect and avoid zip bombs with this library? gildas-lormeau/zip.js#587 (comment)
  • making sure that the output size of the decompressed entry data matches the expected size exactly
• Fixed URLString type in the type definition file
• Updated dev dependencies

v2.7.70

• Fixed bug in Data64URIWriter when writing small succeeding amounts of data (see gildas-lormeau/zip.js#588)
• Improved security when uncompressing ZIP files. ZipReader will trigger an error as soon as the output size of an entry exceeds the expected "uncompressed size" defined in the central directory (see How to detect and avoid zip bombs with this library? gildas-lormeau/zip.js#587)

v2.7.69

• Ensure the compressed size, the uncompressed size, and the CRC2 checksum are written in the local header if the data descriptor is not used (see #585)

v2.7.68

Fixed regression introduced in version 2.7.65 when using HttpRangeReader with ZipWriter#add() (see #586)

v2.7.67

• Fixed ZipWriter#prependZip()
• Fixed the "level" value of the "general purpose bit flag" when creating zip files with encrypted data or not deflated data
• Added action to publish zip.js automatically on NPM with provenance

v2.7.66

• Fixed value of compression level in the "general purpose bit flag" when compressing files (fix previous version)

v2.7.65

• Fixed regression introduced in version v2.7.50 related to the encoding of the "general purpose bit flag" and the compression level when creating zip files (see #583)
• Added FileEntry#arrayBuffer and ZipFileEntry#getArrayBuffer methods to extract data as ArrayBuffer instances (see example)

v2.7.64

• added the ability in the ZipWriter#add() method to include the "ZIP64 extended information extra field" in the local headers when the zip64 option is enabled. This makes the ZIP file more robust when trying to recover data from a damaged ZIP file (see gildas-lormeau/zip.js#579).
• added the ZipWriter#remove() method to remove entries from the central directory
• added the ZipWriter#prependZip() method to allow appending/removing entries to/from an existing ZIP file (see example, example). This can also be useful to create a (large) ZIP file in multiple passes.
• circumvented a Node.js bug when using a Buffer instance (as a Uint8Array instance) with a Uint8ArrayReader reader (see gildas-lormeau/zip.js#580)
• fixed a ZipCrypto (legacy ZIP encryption) bug in ZipWriter when setting the dataDescriptor option to false explicitly (the option is true by default, it will also be automatically set to true in that case)
• updated dev dependencies

v2.7.63

What's Changed

• feat: discriminate Entry to DirectoryEntry and FileEntry by @​tpoisseau in gildas-lormeau/zip.js#576

New Contributors

• @​tpoisseau made their first contribution in gildas-lormeau/zip.js#576

Full Changelog: gildas-lormeau/zip.js@v2.7.62...v2.7.63

Commits

• 8166578 update doc
• f5689a6 update doc
• 6227339 bump up version
• 49e765a fix type
• 71c774a disable condition for encrypted files
• 0802837 update built files
• 66d1660 update dependencies
• 3dac594 rollback
• 62f806b rollback
• 7d6e670 use constant
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @nextcloud-command.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[nextcloud-command]

@dependabot merge

[dependabot]

One of your CI runs failed on this pull request, so Dependabot won't merge it.

Dependabot will still automatically merge this pull request if you amend it and your tests pass.