Bump dropzone from 5.9.3 to 6.2.1

[dependabot]

Bumps dropzone from 5.9.3 to 6.2.1.

Release notes

Sourced from dropzone's releases.

dropzone@6.2.1

Patch Changes

• #2355 07a1347 Thanks @​enyo! - Point homepage at https://www.dropzone.dev/. It referenced /js, a route that only ever redirected to the front page and no longer exists, so the homepage link on npm was a 404.

• #2353 bb5af51 Thanks @​enyo! - CODE_OF_CONDUCT.md is no longer part of the published package. It stays in the repository where GitHub looks for it, but the library now lives in packages/dropzone and npm can only pack files from inside that directory. Nothing else about the package changed.

Changelog

Sourced from dropzone's changelog.

6.2.1

Patch Changes

• #2355 07a1347 Thanks @​enyo! - Point homepage at https://www.dropzone.dev/. It referenced /js, a route that only ever redirected to the front page and no longer exists, so the homepage link on npm was a 404.

• #2353 bb5af51 Thanks @​enyo! - CODE_OF_CONDUCT.md is no longer part of the published package. It stays in the repository where GitHub looks for it, but the library now lives in packages/dropzone and npm can only pack files from inside that directory. Nothing else about the package changed.

6.2.0

Minor Changes

• #2351 ee82380 Thanks @​enyo! - addedfiles now reports the files found inside a dropped folder. It previously received e.dataTransfer.files, which holds the folder entries rather than their contents, so anyone counting dropped files got the wrong answer for folders.

  This changes when the event fires. Reading a folder is asynchronous, so on browsers that support folder drops — all of them — addedfiles is now emitted once the walk finishes, after the individual addedfile events, instead of synchronously at the end of the drop handler. Listeners still receive the event; only the timing moves.

  Also adds an emptyfolder event, emitted with the folder's path when a dropped folder turns out to contain nothing at all.

• #2348 f0697ee Thanks @​enyo! - parallelChunkUploads: true now starts at most parallelUploads chunks at a time rather than every chunk of the file at once. Pass a number to set a different limit, or Infinity to restore the previous behaviour.

• #2349 8a8b449 Thanks @​enyo! - Add resizeTransparencyFill, the color shown through transparent parts of a resized image. A transparent PNG resized to image/jpeg previously came out with black where it used to be see-through; set this to "#fff", or any CSS color, for a background instead. Defaults to null, which keeps the current behavior.

Patch Changes

• d3a9221 Thanks @​enyo! - Reword the default dictMaxFilesExceeded message from "You can not upload any more files." to "You cannot upload any more files."

• #2350 9b5015b Thanks @​enyo! - Give the hidden file input an aria-label, so accessibility auditors stop reporting it as an unlabelled input. This does not change anything for screen reader users: browsers leave visibility: hidden elements out of the accessibility tree entirely, and the .dz-button carrying dictDefaultMessage remains the control they interact with.

• #2352 b24f8cc Thanks @​enyo! - Associate the hidden file input with its form. The input is appended to hiddenInputContainer (the body by default), so it sits outside the form it belongs to and several dropzones on one page produce indistinguishable inputs. It now carries a form attribute when the dropzone is a form, or sits inside one, and that form has an id. The input has no name, so this does not change what a native submit sends — but it does mean the input now appears in form.elements.

• 4e13aab Thanks @​enyo! - Vendor just-extend into the source and drop the dependency. Dropzone now installs with no dependencies at all; the option merging behaviour is unchanged.

6.1.0

Minor Changes

• b32d746 Thanks @​filip-kinsky! - Emit an error instead of a broken thumbnail when a file claims an image type but cannot be decoded. The new dictThumbnailError option holds the message.

Patch Changes

• 94a0656 Thanks @​AJHoeh! - Coerce chunkSize to a number before computing chunk boundaries. When the option arrived as a string, every chunk after the first was sliced from the wrong offset and the uploaded file was silently corrupted.

• 85c5c2a Thanks @​enyo! - Stop preview thumbnails from being dragged back into the dropzone, which added the same file a second time under a generated name.

• 4762df8 Thanks @​Forceu! - Send a single chunk for zero byte files instead of hanging. With forceChunking enabled, an empty file produced a chunk count of zero, so nothing was ever uploaded.

6.0.0

The 6.0.0 line is now stable. There are no API changes since 6.0.0-beta.2 — see the 6.0.0-beta.1 notes below for the breaking changes in this major

... (truncated)

Commits

• 4af4a8e Version packages
• 07a1347 Fix the homepage and documentation links
• 09a5d01 Point at enyo/dropzone after the transfer
• 42cdb6e Fix local dev, drop legacy Svelte syntax, and use only oxfmt and oxlint
• c341220 Move Playwright to the workspace root
• 39c4642 Move the library into packages/dropzone
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for dropzone since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #3153.