[Snyk] Upgrade xlsx from 0.14.5 to 0.18.5

[snyk-bot]

Snyk has created this PR to upgrade xlsx from 0.14.5 to 0.18.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 29 versions ahead of your current version.
• The recommended version was released 9 months ago, on 2022-03-24.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-XLSX-1311141	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
	Denial of Service (DoS) SNYK-JS-XLSX-1311139	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
	Denial of Service (DoS) SNYK-JS-XLSX-1311137	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-XLSX-585898	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: xlsx

• 0.18.5 - 2022-03-24
  

  version bump 0.18.5: basic NUMBERS write

• 0.18.4 - 2022-03-16
  

  version bump 0.18.4

• 0.18.3 - 2022-03-03
  
  • XLSX / XLSB dynamic array formulae
  • use Uint8Array when available in write (fixes #2539 h/t @ RScherzer)
  • mini build cleanup to satiate webpack (fixes #2526 #2530)
• 0.18.2 - 2022-02-15
  
  • fixes #2521 h/t @ lanchengkai
  • fixes #2522 h/t @ duchm12
• 0.18.1 - 2022-02-14
  

  version bump 0.18.1: ESM

• 0.18.0 - 2022-02-01
• 0.17.5 - 2022-01-10
  

  version bump 0.17.5

• 0.17.4 - 2021-11-14
• 0.17.3 - 2021-10-13
• 0.17.2 - 2021-09-16
• 0.17.1 - 2021-08-18
• 0.17.0 - 2021-05-13
  
  • Explicit errors on inconsistent XLS records
  • DBF cap worksheet to 1<<20 rows
• 0.16.9 - 2020-11-20
• 0.16.8 - 2020-10-06
  

  version bump 0.16.8: CRLF in formulae

• 0.16.7 - 2020-09-11
  
  • set active worksheet to first visible (fixes #1433 h/t @ ManjunathSVBB)
• 0.16.6 - 2020-08-12
  

  version bump 0.16.6: xlfn option

• 0.16.5 - 2020-07-31
• 0.16.4 - 2020-07-16
• 0.16.3 - 2020-06-29
• 0.16.2 - 2020-06-05
• 0.16.1 - 2020-05-17
• 0.16.0 - 2020-04-30
• 0.15.6 - 2020-03-15
• 0.15.5 - 2020-01-28
• 0.15.4 - 2019-12-23
• 0.15.3 - 2019-11-27
• 0.15.2 - 2019-11-15
• 0.15.1 - 2019-08-14
• 0.15.0 - 2019-08-04
• 0.14.5 - 2019-08-03

from xlsx GitHub release notes

Commit messages

Package name: xlsx

• 0400a87 version bump 0.18.5: basic NUMBERS write
• e69ecd4 remove broken CDNs [ci skip]
• 0f0b3de popping IIFEs to appease rollup tree shaking
• 2f274dd book_append_sheet rolling names
• a5b3877 Fix rawNumber support inside sheet_to_json
• 69bb1e7 "side-effect free"
• 90a7b4e remove SSF._general_int
• 61487bc use TextEncoder for zip strings (fixes ZEPPELIN-2984: allow enter from username apache/zeppelin#2616)
• 61b17a8 version bump 0.18.4
• 2cbc28d vue-modify demo [ci skip]
• 9a3294c phasing out patterns with side effects
• f443aa8 react-modify demo [ci skip]
• b9e7d0d XLSB/XLS Record Name refactor
• 0270784 `skipHidden` for `sheet_to_json` [ci skip]
• 0044f3b clean cptable global pollution
• 0b6ebc6 DBF preserve field properties
• b3793e2 HTML Parsing fix misaligned cells (fixes [ZEPPELIN-1650] Add mariadb, redshift configs and useful links to JDBC doc apache/zeppelin#1621)
• b738e5d pulling ssf into main project [ci skip]
• d97fce4 ssf repo reorg
• c6a86cf make stream utils available to Node ESM
• a32b304 CSV omit trailing record separator [ci skip]
• 467020f stream.to_json end (fixes [ZEPPELIN-1835] Upgrade ElasticSearch to version 2.4.3 apache/zeppelin#1779)
• ba3280e Demos [ci skip]
• 6ede9dc xlsx-cli v1.1.2 [ci skip]

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs