Skip to content

build(deps): bump mammoth from 1.12.0 to 1.12.1 - #205

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/mammoth-1.12.1
Aug 12, 2026
Merged

build(deps): bump mammoth from 1.12.0 to 1.12.1#205
github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/mammoth-1.12.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

User description

Bumps mammoth from 1.12.0 to 1.12.1.

Changelog

Sourced from mammoth's changelog.

1.12.1

  • Fix: on Windows, when an image's content type includes a backslash in the subpart, files may be written outside of the directory set by --output-dir.

  • Detect and ignore numbering levels that use numStyleLink to refer to themselves.

Commits
  • e3b9cec Bump version to 1.12.1
  • c69ea62 Ignore numbering levels that use numStyleLink to refer to themselves
  • fbf5e22 Check image content type for backslashes
  • 1a495a9 Add note on performance
  • ee59684 Remove donations section
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

PR Type

Bug fix, Dependencies


Description

  • Bump mammoth dependency from 1.12.0 to 1.12.1

  • Patch update fixes a Windows path traversal vulnerability in image content types

  • Adds handling for self-referencing numbering levels using numStyleLink


Diagram Walkthrough

flowchart LR
  A["package.json"] -- "update version" --> B["mammoth 1.12.1"]
  B -- "fixes" --> C["Windows path traversal"]
  B -- "fixes" --> D["Self-referencing numStyleLink"]
Loading

File Walkthrough

Relevant files
Dependencies
package.json
Bump mammoth version to 1.12.1                                                     

package.json

  • Update mammoth dependency version from ^1.12.0 to ^1.12.1
+1/-1     

Bumps [mammoth](https://github.com/mwilliamson/mammoth.js) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/mwilliamson/mammoth.js/releases)
- [Changelog](https://github.com/mwilliamson/mammoth.js/blob/master/NEWS)
- [Commits](mwilliamson/mammoth.js@1.12.0...1.12.1)

---
updated-dependencies:
- dependency-name: mammoth
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 12, 2026
@dependabot
dependabot Bot requested a review from rudra496 as a code owner August 12, 2026 20:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 12, 2026
@vercel

vercel Bot commented Aug 12, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
stealth-humanizer Ready Ready Preview Aug 12, 2026 8:06pm

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 Approved by Dependabot Autopilot.

@github-actions
github-actions Bot enabled auto-merge (squash) August 12, 2026 20:05
@rudra-pr-agent

Copy link
Copy Markdown

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪
🧪 No relevant tests
🔒 No security concerns identified
⚡ No major issues detected

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 Approved by Dependabot Autopilot.

@rudra-pr-agent

Copy link
Copy Markdown

PR Code Suggestions ✨

No code suggestions found for the PR.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 Approved by Dependabot Autopilot.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 Approved by Dependabot Autopilot.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 Approved by Dependabot Autopilot.

@github-actions
github-actions Bot merged commit f4d7aeb into master Aug 12, 2026
13 checks passed

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 Approved by Dependabot Autopilot.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/mammoth-1.12.1 branch August 12, 2026 20:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code Review effort 1/5

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants