[Snyk] Upgrade hls.js from 1.5.9 to 1.5.13

[tachibana-shin]

Snyk has created this PR to upgrade hls.js from 1.5.9 to 1.5.13.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 55 versions ahead of your current version.

• The recommended version was released on a month ago.

Release notes

Package name: hls.js

• 1.5.13 - 2024-07-03
  

  Summary

  HLS.js v1.5.13 includes bug fixes and improvements over the last release.

  Changes Since The Last Release

  v1.5.12...v1.5.13

  HLS.js changes:

  • Fix parsing of multiple codecs when converting from AVC1 to AVCOTI (#6533) @ jhonatangcavalcanti
  • Fix reduceMaxBufferLength with under-reported bitrate (#6539) @ robwalch
    • Resolves #6535 by @ mbUSC

  Demo Page changes:

  • Fix XSS vulnerability by validating user input stream URL (#6538) @ yemaw
    • Resolves #5606 by @ JesseClarkND

  Demo Page

  https://7e3969ad.hls-js-dev.pages.dev/demo/

  Feedback

  Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.

• 1.5.13-0.canary.10411 - 2024-07-03
• 1.5.13-0.canary.10410 - 2024-07-03
• 1.5.13-0.canary.10408 - 2024-07-03
• 1.5.13-0.canary.10406 - 2024-07-01
• 1.5.13-0.canary.10404 - 2024-07-01
• 1.5.13-0.canary.10403 - 2024-07-01
• 1.5.13-0.canary.10401 - 2024-07-01
• 1.5.12 - 2024-07-01
  

  Summary

  HLS.js v1.5.12 includes bug fixes and improvements over the last release.

  Changes Since The Last Release

  v1.5.11...v1.5.12

  • Fix: Reduce max buffer length (#6530) @ robwalch

  Demo Page

  https://001e7642.hls-js-dev.pages.dev/demo/

  Feedback

  Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.

• 1.5.12-0.canary.10399 - 2024-07-01
• 1.5.12-0.canary.10398 - 2024-07-01
• 1.5.12-0.canary.10397 - 2024-06-29
• 1.5.12-0.canary.10395 - 2024-06-29
• 1.5.12-0.canary.10393 - 2024-06-29
• 1.5.12-0.canary.10391 - 2024-06-28
• 1.5.12-0.canary.10390 - 2024-06-27
• 1.5.12-0.canary.10388 - 2024-06-25
• 1.5.12-0.canary.10386 - 2024-06-25
• 1.5.12-0.canary.10384 - 2024-06-21
• 1.5.12-0.canary.10382 - 2024-06-18
• 1.5.12-0.canary.10380 - 2024-06-18
• 1.5.12-0.canary.10378 - 2024-06-18
• 1.5.12-0.canary.10376 - 2024-06-17
• 1.5.12-0.canary.10374 - 2024-06-17
• 1.5.12-0.canary.10372 - 2024-06-17
• 1.5.12-0.canary.10370 - 2024-06-17
• 1.5.12-0.canary.10368 - 2024-06-14
• 1.5.12-0.canary.10367 - 2024-06-13
• 1.5.12-0.canary.10366 - 2024-06-12
• 1.5.12-0.canary.10364 - 2024-06-12
• 1.5.12-0.canary.10363 - 2024-06-12
• 1.5.12-0.canary.10361 - 2024-06-12
• 1.5.12-0.canary.10359 - 2024-06-12
• 1.5.12-0.canary.10357 - 2024-06-12
• 1.5.12-0.canary.10355 - 2024-06-12
• 1.5.12-0.canary.10353 - 2024-06-12
• 1.5.12-0.canary.10352 - 2024-06-11
• 1.5.12-0.canary.10351 - 2024-06-11
• 1.5.12-0.canary.10349 - 2024-06-11
• 1.5.12-0.canary.10347 - 2024-06-08
• 1.5.12-0.canary.10345 - 2024-06-08
• 1.5.12-0.canary.10343 - 2024-06-07
• 1.5.12-0.canary.10341 - 2024-06-06
• 1.5.12-0.canary.10340 - 2024-06-04
• 1.5.12-0.canary.10338 - 2024-06-04
• 1.5.11 - 2024-06-04
  

  Summary

  HLS.js v1.5.11 includes bug fixes and improvements over the last release.

  Changes Since The Last Release

  v1.5.10...v1.5.11

  • Fix error handling for GAP tags in subtitle and audio playlists (#6478) @ robwalch

  Demo Page

  https://f7ddc5db.hls-js-dev.pages.dev/demo/

  Feedback

  Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.

• 1.5.11-0.canary.10336 - 2024-06-04
• 1.5.11-0.canary.10334 - 2024-06-03
• 1.5.11-0.canary.10332 - 2024-06-03
• 1.5.11-0.canary.10330 - 2024-06-03
• 1.5.10 - 2024-06-03
  

  Summary

  HLS.js v1.5.10 includes bug fixes and improvements over the last release.

  Changes Since The Last Release

  v1.5.9...v1.5.10

  • Fix light ESM build (#6307) @ Chocobozzz
  • Fix errors (#6201) related to xhrSetup (#6459) @ xta
  • Prevent overlapping appends on start not present in v1.4.x (#6471) @ robwalch
    • Workaround for (#6441) reported by @ tvinko
  • Fix HE-AACv1 and v2 in fMP4 on iOS (#6472) reported by @ InstabilSpielt
  • Fix unsupported EC-3 in TS parsing error handling in sync path (#6469)
    • Fix for improper error handling (#6447) reported by @ accedo-robcc

  Demo Page

  https://56631b07.hls-js-dev.pages.dev/

  Feedback

  Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.

• 1.5.10-0.canary.10328 - 2024-06-03
• 1.5.10-0.canary.10326 - 2024-06-01
• 1.5.10-0.canary.10321 - 2024-05-31
• 1.5.10-0.canary.10320 - 2024-05-31
• 1.5.9 - 2024-05-29
  

  Summary

  HLS.js v1.5.9 includes bug fixes and improvements over the last release.

  Changes Since The Last Release

  v1.5.8...v1.5.9

  • Fix missing details if subtitle changed synchronously after loaded and before onLoaded callback (#6424) @ iamboorrito
  • Fix: Handle irregular white-space in segment URIs (#6396) @ robwalch
  • Fix backtracking when an appended segment has no buffered timerange (#6434)
  • Fix 608 parser handling of redundant control codes (Fixes #6427)
  • Fix 608 caption TextTrack Cue seek/discontinuity timing (regression introduced in v1.5.0 with #5557)
  • Fix JS AES fallback when browserCrypto.subtle returns undefined (rather than null) (#6446)
  • Emit FRAG_PARSING_ERROR on unsupported M2TS codec (#6447)

  Demo Page

  https://978f0c41.hls-js-dev.pages.dev/

  Feedback

  Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.

from hls.js GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected]	None	0	20.2 MB	hlsjs-ci

🚮 Removed packages: npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎