Skip to content

build(deps): bump music-metadata from 11.16.1 to 12.2.3 in /app - #208

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/app/dev/music-metadata-12.2.3
Closed

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/app/dev/music-metadata-12.2.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps music-metadata from 11.16.1 to 12.2.3.

Release notes

Sourced from music-metadata's releases.

v12.2.3

Changes

🐛 Bug Fixes

🛠️ Under the hood

📦 NPM release

NPM release: music-metadata@12.2.3

v12.2.2

Changes

  • refactor: adopt strtok3 bounded views and random-access guard @​Borewit (#2815)

🚀 Improvements

  • Avoid redundant observer events for unchanged format values @​Borewit (#2816)

🔒 Security

🛠️ Under the hood

📦 NPM release

NPM release: music-metadata@12.2.2

... (truncated)

Commits
  • 8e61c73 12.2.3
  • b3437ee fix: bound ASF metadata records to their object payloads
  • 6b31443 fix: validate audio sample tables used by MP4 chapters
  • cb75307 fix: respect ASF content description boundaries
  • 516e4f9 fix: ignore inherited native tag mappings
  • 03db3f1 fix: prevent orphan MP4 boxes from modifying another track
  • 959171e fix: preserve arbitrary ID3v2 credit role names
  • 2381a11 fix: validate ID3v2 chapter frame boundaries
  • 67a0aad chore(deps): update strtok3 to 10.6.2
  • b54867d refactor: group regression tests by format and behavior
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 26, 2026
@socket-security

socket-security Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​music-metadata@​11.16.1 ⏵ 12.2.399 +1100100 +196 +3100

View full report

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/app/dev/music-metadata-12.2.3 branch 4 times, most recently from 56266b3 to 090026c Compare October 26, 2026 14:05
Bumps [music-metadata](https://github.com/Borewit/music-metadata) from 11.16.1 to 12.2.3.
- [Release notes](https://github.com/Borewit/music-metadata/releases)
- [Commits](Borewit/music-metadata@v11.16.1...v12.2.3)

---
updated-dependencies:
- dependency-name: music-metadata
  dependency-version: 12.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/app/dev/music-metadata-12.2.3 branch from 090026c to ba4a3b0 Compare October 26, 2026 14:10
@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #214.

@dependabot dependabot Bot closed this Nov 2, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/app/dev/music-metadata-12.2.3 branch November 2, 2026 13:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants