[PR #1359] [MERGED] chore(deps): bump james-heinrich/getid3 from 1.9.20 to 1.9.21 #1688

Closed
opened 2026-02-26 03:31:56 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/koel/koel/pull/1359
Author: @dependabot[bot]
Created: 10/4/2021
Status: Merged
Merged: 10/17/2021
Merged by: @phanan

Base: masterHead: dependabot/composer/james-heinrich/getid3-1.9.21


📝 Commits (2)

  • 319dada chore(deps): bump james-heinrich/getid3 from 1.9.20 to 1.9.21
  • debd67c Merge branch 'master' into dependabot/composer/james-heinrich/getid3-1.9.21

📊 Changes

1 file changed (+7 additions, -7 deletions)

View changed files

📝 composer.lock (+7 -7)

📄 Description

Bumps james-heinrich/getid3 from 1.9.20 to 1.9.21.

Release notes

Sourced from james-heinrich/getid3's releases.

v1.9.21-202109171300

1.9.21: [2021-09-22] James Heinrich :: 1.9.21-202109171300 » add support for RIFF.guan ¤ add ID3v1 genres 148-191 ¤ torrent files easy access key

  • bugfix #342 demo.mysqli.php XSS
  • bugfix #340 default quicktime.ReturnAtomData=false
  • bugfix #338 improved transliterated tag merging
  • bugfix #337 PHP 8.1 compatibility
  • bugfix #335 PHP 8.1 compatibility
  • bugfix #330 QuicktimeContentRatingLookup 'rtng'
  • bugfix #328 throw exception if a resource seek fails
  • bugfix #326 improved temporary path detection
  • bugfix #325 INF/NAN constants instead of float/string
  • bugfix #324 Nikon-specific atoms in QuickTime
  • bugfix #321 prevent errors on corrupt JPEGs
  • bugfix #319 prevent error in ZIP contents MIME detect
  • bugfix #315 ID3v2 USLT check for data length
  • bugfix #308 silence libxml deprecation warning
  • bugfix #304 undefined index: comments
  • bugfix #299 decbin type error in PHP8
  • bugfix #298 error scanning WAV via file pointer
  • bugfix #294 replace IMG_JPG with IMAGETYPE_JPEG
  • bugfix #292 PDFs take long time to parse
  • bugfix #291 divzero QuickTime with no playable content
  • bugfix #290 detect ID3v1 on minimal example files
  • bugfix #289 avoid crash on invalid TIFF
  • bugfix #287 mp3 CBR detected as VBR
  • bugfix #286 corrupt mp3 can cause slow scanning
  • bugfix #284 allow "0" as a value in tags
  • bugfix #283 array offset on value of type int
  • bugfix #277 ID3v2 add new Turkish Lira TRY
  • bugfix #270 demo.mysqli.php LONGBLOB
  • bugfix #266 fix possible endless loop on PNG
  • bugfix #257 undefined variables
  • bugfix #207 improved LAME version string parsing
Changelog

Sourced from james-heinrich/getid3's changelog.

1.9.21: [2021-09-22] James Heinrich :: 1.9.21-202109171300 » add support for RIFF.guan ¤ add ID3v1 genres 148-191 ¤ torrent files easy access key

  • bugfix #342 demo.mysqli.php XSS
  • bugfix #340 default quicktime.ReturnAtomData=false
  • bugfix #338 improved transliterated tag merging
  • bugfix #337 PHP 8.1 compatibility
  • bugfix #335 PHP 8.1 compatibility
  • bugfix #330 QuicktimeContentRatingLookup 'rtng'
  • bugfix #328 throw exception if a resource seek fails
  • bugfix #326 improved temporary path detection
  • bugfix #325 INF/NAN constants instead of float/string
  • bugfix #324 Nikon-specific atoms in QuickTime
  • bugfix #321 prevent errors on corrupt JPEGs
  • bugfix #319 prevent error in ZIP contents MIME detect
  • bugfix #315 ID3v2 USLT check for data length
  • bugfix #308 silence libxml deprecation warning
  • bugfix #304 undefined index: comments
  • bugfix #299 decbin type error in PHP8
  • bugfix #298 error scanning WAV via file pointer
  • bugfix #294 replace IMG_JPG with IMAGETYPE_JPEG
  • bugfix #292 PDFs take long time to parse
  • bugfix #291 divzero QuickTime with no playable content
  • bugfix #290 detect ID3v1 on minimal example files
  • bugfix #289 avoid crash on invalid TIFF
  • bugfix #287 mp3 CBR detected as VBR
  • bugfix #286 corrupt mp3 can cause slow scanning
  • bugfix #284 allow "0" as a value in tags
  • bugfix #283 array offset on value of type int
  • bugfix #277 ID3v2 add new Turkish Lira TRY
  • bugfix #270 demo.mysqli.php LONGBLOB
  • bugfix #266 fix possible endless loop on PNG
  • bugfix #257 undefined variables
  • bugfix #207 improved LAME version string parsing
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/koel/koel/pull/1359 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 10/4/2021 **Status:** ✅ Merged **Merged:** 10/17/2021 **Merged by:** [@phanan](https://github.com/phanan) **Base:** `master` ← **Head:** `dependabot/composer/james-heinrich/getid3-1.9.21` --- ### 📝 Commits (2) - [`319dada`](https://github.com/koel/koel/commit/319dada82a1e4861dba5c3b208d8d830e1506a87) chore(deps): bump james-heinrich/getid3 from 1.9.20 to 1.9.21 - [`debd67c`](https://github.com/koel/koel/commit/debd67c9a7b1e38320488204b5eb737f5c285cf7) Merge branch 'master' into dependabot/composer/james-heinrich/getid3-1.9.21 ### 📊 Changes **1 file changed** (+7 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `composer.lock` (+7 -7) </details> ### 📄 Description Bumps [james-heinrich/getid3](https://github.com/JamesHeinrich/getID3) from 1.9.20 to 1.9.21. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/JamesHeinrich/getID3/releases">james-heinrich/getid3's releases</a>.</em></p> <blockquote> <h2>v1.9.21-202109171300</h2> <p>1.9.21: [2021-09-22] James Heinrich :: 1.9.21-202109171300 » add support for RIFF.guan ¤ add ID3v1 genres 148-191 ¤ torrent files easy access key</p> <ul> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/342">#342</a> demo.mysqli.php XSS</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/340">#340</a> default quicktime.ReturnAtomData=false</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/338">#338</a> improved transliterated tag merging</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/337">#337</a> PHP 8.1 compatibility</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/335">#335</a> PHP 8.1 compatibility</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/330">#330</a> QuicktimeContentRatingLookup 'rtng'</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/328">#328</a> throw exception if a resource seek fails</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/326">#326</a> improved temporary path detection</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/325">#325</a> INF/NAN constants instead of float/string</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/324">#324</a> Nikon-specific atoms in QuickTime</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/321">#321</a> prevent errors on corrupt JPEGs</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/319">#319</a> prevent error in ZIP contents MIME detect</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/315">#315</a> ID3v2 USLT check for data length</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/308">#308</a> silence libxml deprecation warning</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/304">#304</a> undefined index: comments</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/299">#299</a> decbin type error in PHP8</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/298">#298</a> error scanning WAV via file pointer</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/294">#294</a> replace IMG_JPG with IMAGETYPE_JPEG</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/292">#292</a> PDFs take long time to parse</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/291">#291</a> divzero QuickTime with no playable content</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/290">#290</a> detect ID3v1 on minimal example files</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/289">#289</a> avoid crash on invalid TIFF</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/287">#287</a> mp3 CBR detected as VBR</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/286">#286</a> corrupt mp3 can cause slow scanning</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/284">#284</a> allow &quot;0&quot; as a value in tags</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/283">#283</a> array offset on value of type int</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/277">#277</a> ID3v2 add new Turkish Lira TRY</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/270">#270</a> demo.mysqli.php LONGBLOB</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/266">#266</a> fix possible endless loop on PNG</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/257">#257</a> undefined variables</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/207">#207</a> improved LAME version string parsing</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/JamesHeinrich/getID3/blob/master/changelog.txt">james-heinrich/getid3's changelog</a>.</em></p> <blockquote> <p>1.9.21: [2021-09-22] James Heinrich :: 1.9.21-202109171300 » add support for RIFF.guan ¤ add ID3v1 genres 148-191 ¤ torrent files easy access key</p> <ul> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/342">#342</a> demo.mysqli.php XSS</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/340">#340</a> default quicktime.ReturnAtomData=false</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/338">#338</a> improved transliterated tag merging</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/337">#337</a> PHP 8.1 compatibility</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/335">#335</a> PHP 8.1 compatibility</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/330">#330</a> QuicktimeContentRatingLookup 'rtng'</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/328">#328</a> throw exception if a resource seek fails</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/326">#326</a> improved temporary path detection</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/325">#325</a> INF/NAN constants instead of float/string</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/324">#324</a> Nikon-specific atoms in QuickTime</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/321">#321</a> prevent errors on corrupt JPEGs</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/319">#319</a> prevent error in ZIP contents MIME detect</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/315">#315</a> ID3v2 USLT check for data length</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/308">#308</a> silence libxml deprecation warning</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/304">#304</a> undefined index: comments</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/299">#299</a> decbin type error in PHP8</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/298">#298</a> error scanning WAV via file pointer</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/294">#294</a> replace IMG_JPG with IMAGETYPE_JPEG</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/292">#292</a> PDFs take long time to parse</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/291">#291</a> divzero QuickTime with no playable content</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/290">#290</a> detect ID3v1 on minimal example files</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/289">#289</a> avoid crash on invalid TIFF</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/287">#287</a> mp3 CBR detected as VBR</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/286">#286</a> corrupt mp3 can cause slow scanning</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/284">#284</a> allow &quot;0&quot; as a value in tags</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/283">#283</a> array offset on value of type int</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/277">#277</a> ID3v2 add new Turkish Lira TRY</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/270">#270</a> demo.mysqli.php LONGBLOB</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/266">#266</a> fix possible endless loop on PNG</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/257">#257</a> undefined variables</li> <li>bugfix <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/207">#207</a> improved LAME version string parsing</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/JamesHeinrich/getID3/commit/36f5dabb1325415a4b07a401113f8db2eb81eca1"><code>36f5dab</code></a> v1.9.21-202109171300 changelog</li> <li><a href="https://github.com/JamesHeinrich/getID3/commit/9418214d70830919f18e82bf1dc914e09740f9f8"><code>9418214</code></a> Merge branch 'master' of <a href="https://github.com/JamesHeinrich/getID3">https://github.com/JamesHeinrich/getID3</a></li> <li><a href="https://github.com/JamesHeinrich/getID3/commit/4788e3ed248b0643da73f1b4b2a94e2f52f71e48"><code>4788e3e</code></a> <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/340">#340</a> QuickTime ReturnAtomData default false</li> <li><a href="https://github.com/JamesHeinrich/getID3/commit/0163ba96f7fc64765e499847c2373b1f994797c5"><code>0163ba9</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/342">#342</a> from JamesHeinrich/mysqli-demo-xss</li> <li><a href="https://github.com/JamesHeinrich/getID3/commit/1b0bfa47f14d5845ebbff78f75e570907c3b9ccb"><code>1b0bfa4</code></a> Fix XSS in demo.mysqli.php</li> <li><a href="https://github.com/JamesHeinrich/getID3/commit/4e02ed09c081a606c734c6b27d1b504fecfe402f"><code>4e02ed0</code></a> CopyTagsToComments process RIFF tags last</li> <li><a href="https://github.com/JamesHeinrich/getID3/commit/0884677f408183fb8ac2e1f016cf2bedbbe09ebe"><code>0884677</code></a> Merge branch 'master' of <a href="https://github.com/JamesHeinrich/getID3">https://github.com/JamesHeinrich/getID3</a></li> <li><a href="https://github.com/JamesHeinrich/getID3/commit/5f6d2ace45d90d3c2a1ed7e0ed9e4bb3e9857bbc"><code>5f6d2ac</code></a> <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/338">#338</a> improved merging of badly transliterated tag values</li> <li><a href="https://github.com/JamesHeinrich/getID3/commit/cb831b64d21b2b2361e7011853d0fc26e323e11c"><code>cb831b6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/336">#336</a> from jrfnl/feature/ghactions-build-against-php-8.1</li> <li><a href="https://github.com/JamesHeinrich/getID3/commit/81c2efad9d698c0899de8ae5bfa24a51a904a593"><code>81c2efa</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/JamesHeinrich/getID3/issues/337">#337</a> from jrfnl/feature/php-8.1-fix-false-to-array-depreca...</li> <li>Additional commits viewable in <a href="https://github.com/JamesHeinrich/getID3/compare/v1.9.20...v1.9.21">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=james-heinrich/getid3&package-manager=composer&previous-version=1.9.20&new-version=1.9.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/koel/koel/network/alerts). </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-02-26 03:31:56 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/koel-koel#1688
No description provided.