[Snyk] Upgrade hls.js from 1.4.14 to 1.6.4 #182
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade hls.js from 1.4.14 to 1.6.4. See this package in npm: hls.js See this project in Snyk: https://app.snyk.io/org/tot-ra/project/3f566743-6ee7-474b-aa30-f8e7242644a9?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade hls.js from 1.4.14 to 1.6.4.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1018 versions ahead of your current version.
The recommended version was released 22 days ago.
Release notes
Package name: hls.js
Summary
HLS.js v1.6.4 fixes a regression in fragmented mp4 audio segment handling introduced in v1.6.3.
Changes Since The Last Release
v1.6.3...v1.6.4
Demo Page
https://5f099c29.hls-js-dev.pages.dev/demo/
API and Breaking Changes
If you are upgrading from version v0.14.17 or lower, see the MIGRATING guide for API changes between v0.14.x and v1.0.0.
Feedback
Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.
Summary
HLS.js v1.6.3 includes bug fixes and improvements over the last release.
Changes Since The Last Release
v1.6.2...v1.6.3
New configuration options
preserveManualLevelOnErroroption (#7280) @ brodiddevrequireKeySystemAccessOnStart(EME clear to encrypted transition) (#7216) @ grabofusstartOnSegmentBoundarysynchronizing live start position with program boundary (#7211) @ krseagerliveSyncMode?: 'edge' | 'buffered'to change live catch up seek behavior (#7210) @ whdudtod1273Interstitials
EME
requireKeySystemAccessOnStartfixes Chrome PIPELINE_DECODE_ERROR on clear to encrypted transition (#7216) @ grabofusMSE and codec selection
Misc
Demo Page
https://b96cca92.hls-js-dev.pages.dev/demo/
API and Breaking Changes
If you are upgrading from version v0.14.17 or lower, see the MIGRATING guide for API changes between v0.14.x and v1.0.0.
Feedback
Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.
Summary
HLS.js v1.6.2 includes bug fixes and improvements over the last release.
Changes Since The Last Release
v1.6.1...v1.6.2
Demo Page
https://e5abc373.hls-js-dev.pages.dev/demo/
API and Breaking Changes
If you are upgrading from version v0.14.17 or lower, see the MIGRATING guide for API changes between v0.14.x and v1.0.0.
Feedback
Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.
Summary
HLS.js v1.6.1 includes bug fixes and improvements over the last release.
Changes Since The Last Release
v1.6.0...v1.6.1
mediakeySession.remove()and only call for persistent-license sessions (#7050) @ JackPukeyStatuses.forEachcallback not work well (#7150)Demo Page
https://26b6689f.hls-js-dev.pages.dev/demo/
API and Breaking Changes
If you are upgrading from version v0.14.17 or lower, see the MIGRATING guide for API changes between v0.14.x and v1.0.0.
Feedback
Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.
Summary
HLS.js v1.6.0 introduces support for HLS Interstitials with new API features, media support, and playback enhancements.
New features in release version 1.6
enableEmsgKLVMetadatatotrueto enable) (#6674) @ glyndAPI changes in release version 1.6
config.detectStallWithCurrentTimeMsused to specify the maximum amount of time in milliseconds before aBUFFER_STALLED_ERRORis reported when the media elementscurrentTimehas not advanced while playing (#6941)config.nudgeOnVideoHolewhether or not to nudge the playhead when crossing over video buffer gaps to flush the rendering pipeline and ensure smooth playback through video buffered ranges (#6972)config.enableInterstitialPlaybackset to false to disable Interstitial playback without turning off Interstitials parsing and eventsconfig.interstitialsControllerset tonullto disable Interstitials support completelyconfig.interstitialAssetListLoadPolicydefines the loading policy of X-ASSET-LIST JSONconfig.liveSyncOnStallIncrease(#6455) @ vk342config.maxDevicePixelRatioto limit browser value when capping level to media element dimensions (#6825) @ signalwerkconfig.videoPreference.videoCodecvideo codec selection preference option (#6483)config.primarySessionIdidentifies the parent player session that spawned the asset player (read fromhls.sessionId)config.assetPlayerIdidentifies logs from asset playersconfig.timelineOffsetoffsets MSE appends for gapless playbackconfig.fetchSetupoptional async result (#6714) @ zcehls.bufferedToEndread-only indicates when EOS has been appended (media is buffered from currentTime to end of stream)hls.bufferingEnabledread-only flag toggled withpauseBuffering()andresumeBuffering()hls.hasEnoughToStartgetter returns whether enough is buffered to seek to start position (#6571)hls.inFlightFragmentshls.interstitialsManagerread-onlyInterstitialsManagerornull. TheInterstitialsManageris an interface for accessing program information and methods for seeking across items and skipping Interstitials.hls.latestLevelDetailsread-onlyLevelDetailsobject of the most up-to-date HLS variant Playlist datahls.loadLevelObjread-onlyLevelobject of selected level (variant) ornullhls.loadingEnabledread-only flag toggled withhls.startLoad()andhls.stopLoad()hls.pathwayPriorityContent-Steering setting (#6295) @ PavelFomin90hls.pathwaysgetter (#6997) @ grabofushls.sessionIdread-onlyHlsinstance UUID - used to assign a value to the _HLS_primary_id query parameter of interstitial requestshls.startPositionread-only the resolvedstartPositionthat playback will begin at once media is appendedhls.targetLatency(#6473) @ vk342hls.transferMedia()detaches and returns MediaSource and SourceBuffers non-destructivelyhls.urlread-only value of the currently playing url (fromhls.loadSource(url)) (#6411) @ iboboEvents.MEDIA_ENDEDevent (#6141)Events.STALL_RESOLVEDevent (#6941)Events.EVENT_CUE_ENTERUsed internally to determine when the playhead has entered a time-range replaced by an Interstitial event.levelInfo: LeveltoLevelLoadingDataandLevelLoadedDataevent datatrack: MediaPlaylisttoTrackLoadingDataandTrackLoadedDataevent data (audio and subtitle events)withoutMultiVariant: booleantoLevelLoadedDataeventLevelDetais.expiredread-only indicates live playlist data is no longer valid for fragment loadingLevelDetais.requestScheduledto improve live playlist reload schedulingFragment.bitrateandFragment.byteLengthgettersFragmentproperties have been replaced with accessors:get baseurl(),get/set stats(),get/set programDateTime(). Class property accessors are not enumerable. This impacts copying object properties and serialization.Fragment.statsremain enumerable with (#6999)hls.startLoad()takes a second optional argument to skip seeking on start (otherwise, HLS.js seeks following to the first optionalstartPositionargument on append)hls.attachMedia()supports transferring MediaSource and SourceBuffers fromHlsinstances withhls.transferMedia()hls.recoverMediaError()seeks to the value ofcurrentTimebefore the source reset is performed (#6297)ASSET_LIST_LOADINGwhen a request is made for an X-ASSET-LIST JSON objectASSET_LIST_LOADEDwhen a response is received for an X-ASSET-LIST JSON objectINTERSTITIALS_UPDATEDwhen Interstitials are added, removed, or the schedule is updated following a variant playlist update or updated asset durations from X-ASSET-LIST JSON or asset playlist and media parsingINTERSTITIALS_BUFFERED_TO_BOUNDARYwhen the forward buffer reaches the boundary of the following schedule item (Interstitial event or primary segment)INTERSTITIAL_ASSET_PLAYER_CREATEDwhen an asset player instance is created to stream an Interstitial asset (will always be before attaching media to the asset player)INTERSTITIAL_STARTEDwhen streaming of an Interstitial event containing one or more assets has begun (may occur before X-ASSET-LIST JSON is loaded or playback has started)INTERSTITIAL_ENDEDwhen streaming of an Interstitial event containing one or more assets has ended - before resuming primary or starting the next eventINTERSTITIAL_ASSET_STARTEDwhen streaming of an Interstitial asset has begun (following the beginning of the event or the end of the last asset)INTERSTITIAL_ASSET_ENDEDwhen streaming of an Interstitial asset has ended (before the next asset or the event ending)INTERSTITIAL_ASSET_ERRORwhen an error occurs starting or streaming an Interstitial asset (this can include non-fatal errors such as stalling and errors that will end streaming of the asset, resulting in the schedule advancing to the next asset or fallback to primary)INTERSTITIALS_PRIMARY_RESUMEDwhen playback of primary content has begun or resumed from an Interstitial eventBUFFERED_TO_ENDwhen the last audio and video segments in the playlist have been appended (EOS signaled on all SourceBuffers)AUDIO_TRACK_UPDATEDsimilar to LEVEL_UPDATED fired for any update to audio group playlistsSUBTITLE_TRACK_UPDATEDsimilar to LEVEL_UPDATED fired for any update to subtitle group playlistsMEDIA_ATTACHING,MEDIA_ATTACHED,MEDIA_DETACHING, andMEDIA_DETACHEDinclude additional information (depending on whether media is being transferred)NETWORK_ERRORASSET_LIST_LOAD_ERRORnetwork error loading asset listASSET_LIST_LOAD_TIMEOUTnetwork timeout error loading asset listASSET_LIST_PARSING_ERRORasset list was not valid JSON or missing required dataOTHER_ERRORINTERSTITIAL_ASSET_ITEM_ERRORan issue interrupted or prevented asset playback. This will result in skipping the remainder of the asset or falling back to primary content. The eventerrorwill contain more details. This type of error differs from theINTERSTITIAL_ASSET_ERRORevents forwarded from asset player errors.ATTACH_MEDIA_ERRORwhen callingattachMediawith falseymediaargument (#6556) @ agajassiKEY_SYSTEM_DESTROY_CLOSE_SESSION_ERRORKEY_SYSTEM_DESTROY_MEDIA_KEYS_ERRORKEY_SYSTEM_DESTROY_REMOVE_SESSION_ERROREnhancements