Update dependency sirv to v1.0.18 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
sirv	1.0.12 -> 1.0.18

---

Release Notes

lukeed/sirv

v1.0.18

Compare Source

Patches

• (sirv): Append charset=utf-8 to HTML content-type (#​106, #​122): d1b8ba6
  Thank you @​aleclarson~!

---

Full Changelog: lukeed/sirv@v1.0.17...v1.0.18

v1.0.17

Compare Source

v1.0.16

Compare Source

v1.0.15

Compare Source

v1.0.14

Compare Source

Chores

• (sirv): Bump @polka/url to take advantage of this fix

v1.0.13

Compare Source

Patches

• (sirv) Only use req.path if has req._decoded flag exists (#​82):

  The req._decoded check was added & should have always been in there, since this was sirv's way of preventing duplicate decodeURIComponent calls. However, this was only true when it received a request from a polka@next app, since Polka was previously writing the decoded value to req.path – this changed with polka@v1.0.0-next.16

  Now that the latest polka@next (and Express) doesn't decode automatically anymore, req.path isn't trustworthy on its own. It needs req._decoded to be there too in order to trust it.

  This combo-check is backwards compatible for polka@next users who don't upgrade and will unblock Express users for the first time, who have always had a "raw" req.path value set.

---

Configuration

📅 Schedule: "before 3am on the first day of the month" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.