immich-app/immich
1
0
Fork 0
mirror of https://github.com/immich-app/immich.git synced 2026-07-25 14:00:45 +03:00
Code Issues 783 Packages Projects Releases 22 Wiki Activity

[PR #4617] [CLOSED] [Snyk] Upgrade exiftool-vendored from 23.1.0 to 23.2.0 #10448

New Issue
Closed
opened 2026-02-05 14:22:07 +03:00 by OVERLORD · 0 comments
OVERLORD commented 2026-02-05 14:22:07 +03:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/immich-app/immich/pull/4617
Author: @etnoy
Created: 10/24/2023
Status: ❌ Closed

Base: main ← Head: snyk-upgrade-2550be7efab0f07a388558c7ac09a896

📝 Commits (1)

  • 66963ee fix: upgrade exiftool-vendored from 23.1.0 to 23.2.0

📊 Changes

2 files changed (+8 additions, -25 deletions)

View changed files

📝 server/package-lock.json (+7 -24)
📝 server/package.json (+1 -1)

📄 Description

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade exiftool-vendored from 23.1.0 to 23.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 21 days ago, on 2023-10-02.
Release notes
Package name: exiftool-vendored
  • 23.2.0 - 2023-10-02
    • replace jsdoc reference of DefaultCreateDateTagNames with CapturedAtTagNames (ce23a32)
    • DRY up DefaultCreateDateTagNames and CapturedAtTagNames. Rebuild docs. (816af93)
    • Timezone improvements: - Fix extractTzOffsetFromUTCOffset type signature to use CapturedAtTagNames directly. - Fix GpsDateTimeStamp to not write to the underlying tags object - use correct isUTC() (52be3b4)
    • Update CapturedAtTagNames.ts (2ccb925)
    • Timezone parsing improvements: - add isZoneValid() backstop - extract zoneToShortOffset() - improve normalizeZone() and extractZone() - add instance tests for Version, Struct, and - rebuild Tags - rebuild docs (5cad294)
    • yarn u (5698008)
  • 23.1.0 - 2023-09-30
    • pull in ExifTool v12.67. Rebuild tags and docs. (d9f0063)
    • yarn docs (4a509a2)
    • don't test emoji in filenames on windows (c2eb83c)
    • revert mistaken tz backfill condition (8c76df0)
    • rebuild tags, docs, and update changelog (35883b9)
    • yarn docs. prep changelog. (ed7bf9e)
    • Date/Time parsing improvements to fix #157: - timezone validation is against a static list of all known timezone offsets (as a backstop against issue #157) - datetime and time parsing now handle timezone extraction, as the luxon 'Z' token is currently broken. - ExifTime now has a zone - extracted parsing into new TimeParsing - date/time parsing now uses a generator for template generation, which avoids some array GC - add a ton of new parsing tests (b722751)
    • add yarn u script (409bd88)
    • add SecondMs and improve typing for validDateTime() (f2a6d7e)
    • delete commented console.log lines (bb10b8c)
    • trivial pad improvements: - stricter input typing - avoid recursive call for negative numbers - add test for negative inputs that are longer than padlen (8bd1e9a)
from exiftool-vendored GitHub release notes
Commit messages
Package name: exiftool-vendored
  • ce23a32 replace jsdoc reference of DefaultCreateDateTagNames with CapturedAtTagNames
  • 816af93 DRY up DefaultCreateDateTagNames and CapturedAtTagNames. Rebuild docs.
  • 52be3b4 Timezone improvements:
  • 2ccb925 Update CapturedAtTagNames.ts
  • 5cad294 Timezone parsing improvements:
  • 5698008 yarn u
  • de64660 Release 23.1.0

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/immich-app/immich/pull/4617 **Author:** [@etnoy](https://github.com/etnoy) **Created:** 10/24/2023 **Status:** ❌ Closed **Base:** `main` ← **Head:** `snyk-upgrade-2550be7efab0f07a388558c7ac09a896` --- ### 📝 Commits (1) - [`66963ee`](https://github.com/immich-app/immich/commit/66963ee3a49822729b02401ec19efdf5cf06ac2c) fix: upgrade exiftool-vendored from 23.1.0 to 23.2.0 ### 📊 Changes **2 files changed** (+8 additions, -25 deletions) <details> <summary>View changed files</summary> 📝 `server/package-lock.json` (+7 -24) 📝 `server/package.json` (+1 -1) </details> ### 📄 Description <p>This PR was automatically created by Snyk using the credentials of a real user.</p><br /><h3>Snyk has created this PR to upgrade exiftool-vendored from 23.1.0 to 23.2.0.</h3> :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. <hr/> - The recommended version is **1 version** ahead of your current version. - The recommended version was released **21 days ago**, on 2023-10-02. <details> <summary><b>Release notes</b></summary> <br/> <details> <summary>Package name: <b>exiftool-vendored</b></summary> <ul> <li> <b>23.2.0</b> - <a href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/releases/tag/v23.2.0">2023-10-02</a></br><ul> <li>replace jsdoc reference of DefaultCreateDateTagNames with CapturedAtTagNames (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/ce23a32984a0a283e59d509dbdfe106e4b184ce2/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/ce23a32984a0a283e59d509dbdfe106e4b184ce2"><tt>ce23a32</tt></a>)</li> <li>DRY up DefaultCreateDateTagNames and CapturedAtTagNames. Rebuild docs. (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/816af9334bf87e76cb9186d5e9cbbbe6af6a3842/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/816af9334bf87e76cb9186d5e9cbbbe6af6a3842"><tt>816af93</tt></a>)</li> <li>Timezone improvements: - Fix extractTzOffsetFromUTCOffset type signature to use CapturedAtTagNames directly. - Fix GpsDateTimeStamp to not write to the underlying tags object - use correct isUTC() (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/52be3b49efb76a25e28f47f18dd580a0691810a8/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/52be3b49efb76a25e28f47f18dd580a0691810a8"><tt>52be3b4</tt></a>)</li> <li>Update CapturedAtTagNames.ts (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/2ccb9258f8ed5ef84f535ec8380b55b222c31a38/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/2ccb9258f8ed5ef84f535ec8380b55b222c31a38"><tt>2ccb925</tt></a>)</li> <li>Timezone parsing improvements: - add isZoneValid() backstop - extract zoneToShortOffset() - improve normalizeZone() and extractZone() - add instance tests for Version, Struct, and - rebuild Tags - rebuild docs (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/5cad294a7975d9ba5bfdbf5e9121a18108e05705/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/5cad294a7975d9ba5bfdbf5e9121a18108e05705"><tt>5cad294</tt></a>)</li> <li>yarn u (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/569800807cc346e767ac5930e0c861b731a53612/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/569800807cc346e767ac5930e0c861b731a53612"><tt>5698008</tt></a>)</li> </ul> </li> <li> <b>23.1.0</b> - <a href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/releases/tag/v23.1.0">2023-09-30</a></br><ul> <li>pull in ExifTool v12.67. Rebuild tags and docs. (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/d9f0063a63e872d58387abd572de2945da62a34e/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/d9f0063a63e872d58387abd572de2945da62a34e"><tt>d9f0063</tt></a>)</li> <li>yarn docs (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/4a509a2486b2ce016caa3ad36bc9a4b25f0ed74b/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/4a509a2486b2ce016caa3ad36bc9a4b25f0ed74b"><tt>4a509a2</tt></a>)</li> <li>don't test emoji in filenames on windows (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/c2eb83ce7c6c073a70dfe6fc4805588ea0fbf74b/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/c2eb83ce7c6c073a70dfe6fc4805588ea0fbf74b"><tt>c2eb83c</tt></a>)</li> <li>revert mistaken tz backfill condition (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/8c76df0f0d1d2c888716a23e04e89eb90bc89bfd/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/8c76df0f0d1d2c888716a23e04e89eb90bc89bfd"><tt>8c76df0</tt></a>)</li> <li>rebuild tags, docs, and update changelog (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/35883b9730456c5de7548a7f6b512d349746a656/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/35883b9730456c5de7548a7f6b512d349746a656"><tt>35883b9</tt></a>)</li> <li>yarn docs. prep changelog. (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/ed7bf9eaea9b1d8ad234fb907953568219fc5bdb/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/ed7bf9eaea9b1d8ad234fb907953568219fc5bdb"><tt>ed7bf9e</tt></a>)</li> <li>Date/Time parsing improvements to fix <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1903285328" data-permission-text="Title is private" data-url="https://github.com/photostructure/exiftool-vendored.js/issues/157" data-hovercard-type="issue" data-hovercard-url="/photostructure/exiftool-vendored.js/issues/157/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/issues/157">#157</a>: - timezone validation is against a static list of all known timezone offsets (as a backstop against issue <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1903285328" data-permission-text="Title is private" data-url="https://github.com/photostructure/exiftool-vendored.js/issues/157" data-hovercard-type="issue" data-hovercard-url="/photostructure/exiftool-vendored.js/issues/157/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/issues/157">#157</a>) - datetime and time parsing now handle timezone extraction, as the luxon 'Z' token is currently broken. - ExifTime now has a zone - extracted parsing into new TimeParsing - date/time parsing now uses a generator for template generation, which avoids some array GC - add a ton of new parsing tests (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/b72275160be6c31ff7db2dc37d6213582d257649/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/b72275160be6c31ff7db2dc37d6213582d257649"><tt>b722751</tt></a>)</li> <li>add <code>yarn u</code> script (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/409bd88e0f40e9e694b8606fa7df21ee0eab4c87/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/409bd88e0f40e9e694b8606fa7df21ee0eab4c87"><tt>409bd88</tt></a>)</li> <li>add SecondMs and improve typing for validDateTime() (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/f2a6d7e7bf6358e788fbb6461b8845e216f0331e/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/f2a6d7e7bf6358e788fbb6461b8845e216f0331e"><tt>f2a6d7e</tt></a>)</li> <li>delete commented console.log lines (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/bb10b8c0ce57a1da1c0eca954166e1ea31de2b1f/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/bb10b8c0ce57a1da1c0eca954166e1ea31de2b1f"><tt>bb10b8c</tt></a>)</li> <li>trivial pad improvements: - stricter input typing - avoid recursive call for negative numbers - add test for negative inputs that are longer than padlen (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/photostructure/exiftool-vendored.js/commit/8bd1e9ac1b6a46d57f0eaa3d41bf63fe976f0891/hovercard" href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/8bd1e9ac1b6a46d57f0eaa3d41bf63fe976f0891"><tt>8bd1e9a</tt></a>)</li> </ul> </li> </ul> from <a href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/releases">exiftool-vendored GitHub release notes</a> </details> </details> <details> <summary><b>Commit messages</b></summary> </br> <details> <summary>Package name: <b>exiftool-vendored</b></summary> <ul> <li><a href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/ce23a32984a0a283e59d509dbdfe106e4b184ce2">ce23a32</a> replace jsdoc reference of DefaultCreateDateTagNames with CapturedAtTagNames</li> <li><a href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/816af9334bf87e76cb9186d5e9cbbbe6af6a3842">816af93</a> DRY up DefaultCreateDateTagNames and CapturedAtTagNames. Rebuild docs.</li> <li><a href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/52be3b49efb76a25e28f47f18dd580a0691810a8">52be3b4</a> Timezone improvements:</li> <li><a href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/2ccb9258f8ed5ef84f535ec8380b55b222c31a38">2ccb925</a> Update CapturedAtTagNames.ts</li> <li><a href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/5cad294a7975d9ba5bfdbf5e9121a18108e05705">5cad294</a> Timezone parsing improvements:</li> <li><a href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/569800807cc346e767ac5930e0c861b731a53612">5698008</a> yarn u</li> <li><a href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/commit/de64660108095433c22eb77a2735e85564cf0ee8">de64660</a> Release 23.1.0</li> </ul> <a href="https://snyk.io/redirect/github/photostructure/exiftool-vendored.js/compare/d9f0063a63e872d58387abd572de2945da62a34e...ce23a32984a0a283e59d509dbdfe106e4b184ce2">Compare</a> </details> </details> <hr/> **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJhNTA3OWY4YS1mODM1LTQ5N2QtOWVjOS05NjhlNDY2NTY1MjAiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImE1MDc5ZjhhLWY4MzUtNDk3ZC05ZWM5LTk2OGU0NjY1NjUyMCJ9fQ==" width="0" height="0"/> 🧐 [View latest project report](https://app.snyk.io/org/etnoy/project/3290aee0-c212-4eab-9d2b-de59de86b3eb?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/etnoy/project/3290aee0-c212-4eab-9d2b-de59de86b3eb/settings/integration?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/etnoy/project/3290aee0-c212-4eab-9d2b-de59de86b3eb/settings/integration?pkg&#x3D;exiftool-vendored&amp;utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr#auto-dep-upgrades) <!--- (snyk:metadata:{"prId":"a5079f8a-f835-497d-9ec9-968e46656520","prPublicId":"a5079f8a-f835-497d-9ec9-968e46656520","dependencies":[{"name":"exiftool-vendored","from":"23.1.0","to":"23.2.0"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/etnoy/project/3290aee0-c212-4eab-9d2b-de59de86b3eb?utm_source=github&utm_medium=referral&page=upgrade-pr","projectPublicId":"3290aee0-c212-4eab-9d2b-de59de86b3eb","env":"prod","prType":"upgrade","vulns":[],"issuesToFix":[],"upgrade":[],"upgradeInfo":{"versionsDiff":1,"publishedDate":"2023-10-02T23:33:56.819Z"},"templateVariants":[],"hasFixes":false,"isMajorUpgrade":false,"isBreakingChange":false,"priorityScoreList":[]}) ---> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
OVERLORD added the pull-request label 2026-02-05 14:22:07 +03:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
accessibility
changelog:enhancement
changelog:security
changelog:skip
changelog:translation
cli
date-time
dependencies
documentation
external-library
format
good first issue
mobile-beta
mobile-beta
mobile-beta
needs-answer
nice to have
pull-request
Mirrored from GitHub Pull Request
 sharing
tech-debt
📱mobile
🖥️web
🗄️server
🧠machine-learning
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: immich-app/immich#10448
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?