fix(deps): update dependency file-type to v16 [security] - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
file-type	^15.0.1 -> ^16.0.0

GitHub Vulnerability Alerts

CVE-2022-36313

An issue was discovered in the file-type package from 13.0.0 until 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS attack when used on a web server.

---

Release Notes

sindresorhus/file-type (file-type)

v16.5.4

Compare Source

• Fix: Malformed MKV could cause an infinite loop sindresorhus/file-type@d868356
  • CVE-2022-36313
  • Also fixed in 17.1.3

v16.5.3

Compare Source

• Upgrade dependencies sindresorhus/file-type@3b08ab1

v16.5.2

Compare Source

• Lock strtok3 dependency

v16.5.1

Compare Source

• Fix mimeTypes TypeScript type (#​464) 0012c56

v16.5.0

Compare Source

• Add support for JPEG XL image format (#​455) 57ecf2d
• Remove ASAR 240 bytes of JSON payload length limitation (#​453) 07101ac
• Remove an unnecessary dependency (#​458) 3df0ed1

v16.4.0

Compare Source

• Add support for VCF and fix ICS detection (#​451) 29618c8
• Add support for XCF (#​450) 6ab25f3

v16.3.0

Compare Source

• Add support for Zstandard compressed file (#​439) 9319167

v16.2.0

Compare Source

• Improve PDF / AI (Adobe Illustrator) recognition (#​396) 9736aa3
• Add support for 3mf (#​415) 7f95cd2

v16.1.0

Compare Source

• Add support for CHM (#​424) e43cdc9

v16.0.1

Compare Source

• Fix Webpack 5 compatibility (#​412) eab48da

v16.0.0

Compare Source

Breaking

• Replace .wma / .wmv with .asf detection (the container format) (#​398) fe331be

Improvements

• Add support for ASCII STL (#​405) f227ac2

---

Configuration

📅 Schedule: Branch creation - "" in timezone GMT, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[changeset-bot]

⚠️ No Changeset found

Latest commit: f095bf1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR