fix: [Snyk] Upgrade iconv-lite from 0.4.24 to 0.6.2

[snyk-bot]

Snyk has created this PR to upgrade iconv-lite from 0.4.24 to 0.6.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.
• The recommended version was released 9 months ago, on 2020-07-08.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	265/1000 Why? CVSS 5.3	No Known Exploit
	Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	265/1000 Why? CVSS 5.3	No Known Exploit
	Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	265/1000 Why? CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: iconv-lite

• 0.6.2 - 2020-07-08
  

  v0.6.2

• 0.6.1 - 2020-06-28
  

  v0.6.1

• 0.6.0 - 2020-06-08
  No content.
• 0.5.2 - 2020-06-08
  No content.
• 0.5.1 - 2020-01-18
  No content.
• 0.5.0 - 2019-06-26
  No content.
• 0.4.24 - 2018-08-22
  No content.

from iconv-lite GitHub release notes

Commit messages

Package name: iconv-lite

• efbad0a Release 0.6.2: Actually support Uint8Array decoding
• 21004dd Ensure all decoders support Uint8Array-s directly
• 724829e Release 0.6.1: Support Uint8Array when decoding.
• dd72d9d Support Uint8Array-s instead of Buffers when decoding (in SVG export, give top layer g element id="<filename>-<layername>" mbloch/mapshaper#246)
• 3331bbc Fix minor issue in UTF-32 decoder.
• 148b6bc Unify package.json dependency version formats. Fixes point-symbol=square label-text fix mbloch/mapshaper#241
• 0e5377a Update dependabot.yml
• 245db46 Create dependabot.yml
• b106faa Release 0.6.0: Support Electron environment (Consider PARENT attribute for -lines output mbloch/mapshaper#204); Remove extendNodeEncodings; Update gb18030 to :2005 edition.
• 7cf4c2e Auto-create generation/source-data folder
• 0fccd6f Update EUC-KR index file gen algorithm
• bd3cd35 Update gb18030 encoding to :2005 edition
• 5ceabd4 Sort and adjust devDependencies in package.json
• 4114d6f Remove Buffer constructor usage in tests (Look into supporting raster layers + GeoTIFF format mbloch/mapshaper#197)
• be44a2e Reworked Streaming API behavior in browser environments to fix Consider PARENT attribute for -lines output mbloch/mapshaper#204.
• b7288df Removed `extendNodeEncodings` mechanism. It didn't work in Node v4+ and was deprecated 5 years ago in v0.4.12.
• 5148f43 Release 0.5.2: Added getEncoder/getDecoder to .d.ts; minor devDependency fixes.
• e54536c Add getEncoder/getDecoder to typescript definitions. Fixes KML support mbloch/mapshaper#229
• eed6018 Switch code coverage checker from instanbul to c8
• 5dec724 Use iconv 2.x for tests, as 3.x dropped support of older Node versions
• 7664804 fix: semver fix version to 6.1.2
• c60e647 Release 0.5.1: Added cp720 encoding (Persian/Farsi, -simplify resolution option error  mbloch/mapshaper#221)
• fa594b1 Added cp720 encoding (Persian/Farsi)
• 2b4125d Release 0.5.0: Added UTF-32 encoding

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs