Bump content-disposition from 1.1.0 to 3.0.0

[dependabot]

Bumps content-disposition from 1.1.0 to 3.0.0.

Release notes

Sourced from content-disposition's releases.

v3.0.0

This release switches to ESM only.

Changed

• Export package as ESM (jshttp/content-disposition#141)
• Reject invalid percent-encoding in ISO-8859-1 ext-value (jshttp/content-disposition#138)
• Skip duplicate parameter in extended format (jshttp/content-disposition#144)
  • If you were previously using format with extended: true but including both param and param*, it now ignores param and uses param* when it would otherwise encode. The behavior of extended: false is the same as before, both params will be included.

v2.0.1

Fixed

• Use first extended param (#136) fad11ba
• Update RFC references (#134) a43fd35
• Allow empty param values in quoted text (#133) 5d5d71c

---

jshttp/content-disposition@v2.0.0...v2.0.1

v2.0.0

Large refactor to make the parser 3x faster and lenient on input. Removes the default export and renames it to create.

import { create, parse, format } from 'content-disposition';
create('filename');
parse(
'attachment; filename="EURO rates.txt"; filename*=UTF-8''%e2%82%ac%20rates.txt',
);
format({
type: 'attachment',
parameters: {
filename: '€ rates.txt',
},
});

Adds a multipart option that can be used to parse the header within multipart/form-data appropriately.

Note: The filename in create is no longer normalized with basename, ensure you are using appropriate filenames and not exposing your directory structure by using absolute paths.

Changed

• Rename exports (#123) ec3a844
  • No default export, use create export instead
• Removed basename from create, pass a filename instead of a full path

... (truncated)

Commits

• 1a542fe 3.0.0
• c703c02 Add release workflow (#143)
• bd0e608 Skip duplicate parameter in extended format (#144)
• aec3aa4 Export package as ESM (#141)
• 862e437 Reject invalid percent-encoding in ISO-8859-1 ext-value (#138)
• 0da5e1f 2.0.1
• fad11ba Use first extended param (#136)
• a43fd35 Update RFC references (#134)
• 5d5d71c Allow empty param values in quoted text (#133)
• cecbb49 2.0.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for content-disposition since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)