Skip to content

build(deps): bump music-metadata from 11.16.1 to 12.3.5 in /app - #218

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/app/dev/music-metadata-12.3.5
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/app/dev/music-metadata-12.3.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps music-metadata from 11.16.1 to 12.3.5.

Release notes

Sourced from music-metadata's releases.

v12.3.5

Changes

🚀 Improvements

📚 Documentation

📦 NPM release

NPM release: music-metadata@12.3.5

v12.3.4

Changes

🚀 Improvements

📦 Dependencies

📦 NPM release

NPM release: music-metadata@12.3.4

v12.3.3

Changes

🚀 Improvements

  • fix(caf): derive duration for unknown-size fixed-packet audio @​Borewit (#2887)

🐛 Bug Fixes

  • fix(flac): decode maximum STREAMINFO block size in samples @​Borewit (#2894)
  • fix(mp4): separate media structure and user tag limits @​Borewit (#2892)
  • fix(ebml): recover physical EOF while skipping final payloads @​Borewit (#2886)
  • fix(wavpack): derive duration when total sample count is unknown @​Borewit (#2885)
  • fix(mpeg): scan headerless MP3 duration past early CBR frames @​Borewit (#2884)
  • fix(mpeg): count complete short ADTS final frames @​Borewit (#2883)
  • fix(id3v2): resynchronise tags before parsing extended headers @​Borewit (#2882)
  • fix(id3v2): remove tag-level unsynchronisation in ID3v2.2 and ID3v2.3 @​wleeaf (#2876)
  • Map an ASF WM/IsCompilation BOOL attribute to common.compilation @​wleeaf (#2879)
  • fix(id3v2): read the extended header size per ID3v2 version @​wleeaf (#2877)

🛠️ Under the hood

... (truncated)

Commits
  • ac6083a 12.3.5
  • e38b18e fix(lyrics): normalize ID3 USLT/ULT common values
  • ffee3e3 Update transient dependencies
  • c992bfc docs: link to music-metadata-editor for tag writing
  • 05f3f70 12.3.4
  • 61b8448 build(deps-dev): bump @​types/node
  • 745f1be Share metadata components with music-metadata-editor
  • a322b8e build(deps-dev): bump mime from 4.1.1 to 4.1.2
  • 820906d build(deps): bump file-type from 22.2.0 to 22.3.0
  • 69f66bc build(deps): bump @​borewit/text-codec from 0.2.2 to 0.2.3
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026
@socket-security

socket-security Bot commented Nov 9, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​music-metadata@​11.16.1 ⏵ 12.3.599100100 +196 +1100

View full report

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/app/dev/music-metadata-12.3.5 branch 2 times, most recently from 6be0c4d to fa23138 Compare November 9, 2026 13:54
Bumps [music-metadata](https://github.com/Borewit/music-metadata) from 11.16.1 to 12.3.5.
- [Release notes](https://github.com/Borewit/music-metadata/releases)
- [Commits](Borewit/music-metadata@v11.16.1...v12.3.5)

---
updated-dependencies:
- dependency-name: music-metadata
  dependency-version: 12.3.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/app/dev/music-metadata-12.3.5 branch from fa23138 to ef37a22 Compare November 9, 2026 13:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants