[Snyk] Upgrade xlsx from 0.15.6 to 0.16.3

[snyk-bot]

Snyk has created this PR to upgrade xlsx from 0.15.6 to 0.16.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released a month ago, on 2020-06-29.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-XLSX-585898	Proof of Concept

Release notes

Package name: xlsx

• 0.16.3 - 2020-06-29
  
  • updated SSF to 0.11.2
  • XLS write support for bookSST
• 0.16.2 - 2020-06-05
  

  version bump 0.16.2

• 0.16.1 - 2020-05-17
  
  • Custom Properties use correct encoding
  • AMD wrapper change (see #1937)
• 0.16.0 - 2020-04-30
  

  closes #1904 h/t

  • @atcazzual : Adam Cazzolla of the Sonatype Security Research team
  • @davisjam : James (Jamie) Davis of Virginia Tech
• 0.15.6 - 2020-03-15
  
  • CFB prevent infinite loop (h/t @rossj)
  • pass updated eslint checks (fixes #1726 h/t @BjoernRave)
  • defined name proper encoding (fixes #1785 h/t @laohe98)
  • correct theme color order (fixes #389 h/t @foreverpw)
  • ODS / XLML more aggressive flagging of stub cells
  • cellStyles implies sheetStubs
  • updated SSF to 0.10.3

from xlsx GitHub release notes

Commit messages

Package name: xlsx

• 768e1bd version bump 0.16.3
• 5b1440a Update electron demo (#2027)
• 9ec9f4f Add name to SheetProps
• cb2d835 when range is a single cell, s and e hold the same references and thus modifying properties of one affects the other (#2026)
• 716bef4 fix: missing PRN in xlsx.mini (#1908)
• 0c7e809 [ci skip] Fixed functions demos (#2025)
• d0457b7 change WTF value from 1 to true (#2016)
• 9fc0ab7 globalThis testing for SuiteScript 2.x [ci skip]
• 9015cdf Added test for CRLF newlines
• 486f35b Add option to force quotes around values in when exporting to csv (#2009)
• c615f85 Fix issue with dbf parsing
• c26525d Merge pull request #2004 from garrettluu/master
• 5b356e2 Fixed separators on files with \r\n at end of line
• cdfe678 Update CONTRIBUTING doc for PRs (#2003)
• 688757a [ci skip] Updated React and React Native demos (#1998)
• 5c1296a version bump 0.16.2
• bef6c7e fix: disabling PRN by default
• baea179 version bump 0.16.1
• 91f8c46 HTML preserve cell number format
• 0ac5336 fix per project team email to parsing issue with empty doc security tag
• 257d4e6 version bump 0.16.0
• 3468395 x-spreadsheet demo
• 548396f Better DST handling
• c91d218 XLML case insensitive (fixes #1800)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs