@scratch/scratch-vm 11.2.0 → 11.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@scratch/scratch-vm",
3
- "version": "11.2.0",
3
+ "version": "11.3.0",
4
4
  "description": "Virtual Machine for Scratch 3.0",
5
5
  "author": "Massachusetts Institute of Technology",
6
6
  "license": "AGPL-3.0-only",
@@ -50,8 +50,8 @@
50
50
  "statements": 70
51
51
  },
52
52
  "dependencies": {
53
- "@scratch/scratch-render": "11.2.0",
54
- "@scratch/scratch-svg-renderer": "11.2.0",
53
+ "@scratch/scratch-render": "11.3.0",
54
+ "@scratch/scratch-svg-renderer": "11.3.0",
55
55
  "@vernier/godirect": "1.8.3",
56
56
  "arraybuffer-loader": "1.0.8",
57
57
  "atob": "2.1.2",
@@ -64,18 +64,18 @@
64
64
  "immutable": "3.8.2",
65
65
  "jszip": "3.10.1",
66
66
  "minilog": "3.1.0",
67
- "scratch-audio": "2.0.152",
67
+ "scratch-audio": "2.0.179",
68
68
  "scratch-parser": "6.0.0",
69
- "scratch-sb1-converter": "2.0.148",
70
- "scratch-storage": "4.0.149",
69
+ "scratch-sb1-converter": "2.0.177",
70
+ "scratch-storage": "4.0.178",
71
71
  "scratch-translate-extension-languages": "1.0.7",
72
72
  "text-encoding": "0.7.0",
73
73
  "uuid": "8.3.2",
74
74
  "web-worker": "1.3.0"
75
75
  },
76
76
  "devDependencies": {
77
- "@babel/core": "7.27.1",
78
- "@babel/eslint-parser": "7.27.1",
77
+ "@babel/core": "7.27.7",
78
+ "@babel/eslint-parser": "7.27.5",
79
79
  "@babel/preset-env": "7.27.2",
80
80
  "adm-zip": "0.4.11",
81
81
  "babel-loader": "9.2.1",
@@ -93,8 +93,8 @@
93
93
  "json": "^9.0.4",
94
94
  "pngjs": "3.4.0",
95
95
  "scratch-blocks": "1.1.210",
96
- "scratch-l10n": "5.0.255",
97
- "scratch-render-fonts": "1.0.197",
96
+ "scratch-l10n": "5.0.293",
97
+ "scratch-render-fonts": "1.0.209",
98
98
  "scratch-semantic-release-config": "3.0.0",
99
99
  "scratch-webpack-configuration": "3.0.0",
100
100
  "script-loader": "0.7.2",
@@ -103,6 +103,6 @@
103
103
  "tap": "16.3.10",
104
104
  "webpack": "5.99.9",
105
105
  "webpack-cli": "4.10.0",
106
- "webpack-dev-server": "5.2.1"
106
+ "webpack-dev-server": "5.2.2"
107
107
  }
108
108
  }
@@ -1,5 +1,6 @@
1
1
  const JSZip = require('jszip');
2
2
  const log = require('../util/log');
3
+ const {sanitizeSvg} = require('@scratch/scratch-svg-renderer');
3
4
 
4
5
  /**
5
6
  * Deserializes sound from file into storage cache so that it can
@@ -156,6 +157,11 @@ const deserializeCostume = function (costume, runtime, zip, assetFileName, textL
156
157
 
157
158
  return Promise.all([textLayerFilePromise,
158
159
  costumeFile.async('uint8array')
160
+ .then(data =>
161
+ (costumeFormat === 'svg' ?
162
+ sanitizeSvg.sanitizeByteStream(data) :
163
+ data)
164
+ )
159
165
  .then(data => storage.createAsset(
160
166
  assetType,
161
167
  // TODO eventually we want to map non-png's to their actual file types?