chore(deps): bump mammoth from 1.12.0 to 1.12.1

[dependabot]

Bumps mammoth from 1.12.0 to 1.12.1.

Changelog

Sourced from mammoth's changelog.

1.12.1

• Fix: on Windows, when an image's content type includes a backslash in the subpart, files may be written outside of the directory set by --output-dir.

• Detect and ignore numbering levels that use numStyleLink to refer to themselves.

Commits

• e3b9cec Bump version to 1.12.1
• c69ea62 Ignore numbering levels that use numStyleLink to refer to themselves
• fbf5e22 Check image content type for backslashes
• 1a495a9 Add note on performance
• ee59684 Remove donations section
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.
• ⚠️ 1 packages with OpenSSF Scorecard issues.

See the Details below.

OpenSSF Scorecard

Package	Version	Score	Details
npm/mammoth	1.12.1	⚠️ 2.9	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review ⚠️ 0 Found 0/30 approved changesets -- score normalized to 0 Maintained 🟢 4 4 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 4 SAST ⚠️ 0 no SAST tool detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 10 license file detected Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy ⚠️ 0 security policy file not detected

Scanned Files

• package-lock.json

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🟢	Lines	80.47% (🎯 65%)	11100 / 13793
🟢	Statements	78.43% (🎯 65%)	12699 / 16191
🟢	Functions	71.02% (🎯 60%)	3962 / 5578
🟢	Branches	69.46% (🎯 58%)	9370 / 13489

File Coverage

No changed files found.

Generated in workflow #1247 for commit 484cfd7 by the Vitest Coverage Report Action