Skip to content

build(deps): Bump pako from 2.2.0 to 3.0.2 - #9

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pako-3.0.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pako-3.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •

Copy link
Copy Markdown

Bumps pako from 2.2.0 to 3.0.2.

Changelog

Sourced from pako's changelog.

3.0.2 - 2026-09-12

Fixed

  • Port missed upstream zlib fix for block type selection with Z_FIXED, avoiding fixed blocks when stored blocks would be smaller, #316.
  • Read gzip header time as an unsigned 32-bit value, fixing negative timestamps from 2038 onward, #311.

3.0.1 - 2026-07-06

Changed

  • Narrow Uint8Array type to ArrayBuffer only
  • Added Z_STREAM_ERROR check (reachable only via wrong options call)

[3.0.0] - 2026-06-26

Added

  • Generated type definitions.
  • Low-level zlib API exports.
  • .onStart() hooks for advanced stream setup.

Changed

  • Switched sources to TypeScript, and tests, examples and benchmarks to ESM.
  • Changed exports to named-only. Use import * as pako from 'pako' instead of default import if you need the whole API as an object.
  • Changed package files layout. See package.json for supported entry points.
  • legacyHash default is now false. Binary output is now compatible with nodejs by default.
  • dictionary option now accepts only Uint8Array / ArrayBuffer (no String anymore).
  • .onEnd() now only assembles output chunks into result, and no longer sets the err / msg fields.
  • Use native TextEncoder / TextDecoder for string conversion. Removed shims.
  • Replaced { to: 'string' }) with { toText: true }) for UTF-8 text output in high-level helpers (inflate, inflateRaw, ungzip).
  • Build dist/ on publish instead of keeping generated bundles in git.
  • Inflate.push() after stream end returns the decode result, not always false.

Removed

  • Default export. import pako from 'pako' is no longer supported.
  • { to: 'string' }) option from the streaming Inflate class. It now always emits byte chunks.

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 6, 2026
Bumps [pako](https://github.com/nodeca/pako) from 2.2.0 to 3.0.2.
- [Changelog](https://github.com/nodeca/pako/blob/master/CHANGELOG.md)
- [Commits](nodeca/pako@2.2.0...3.0.2)

---
updated-dependencies:
- dependency-name: pako
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/pako-3.0.2 branch from bdd8c1f to c84fe48 Compare October 7, 2026 09:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants