Bump basic-ftp from 5.3.0 to 6.0.1

[dependabot]

Bumps basic-ftp from 5.3.0 to 6.0.1.

Release notes

Sourced from basic-ftp's releases.

6.0.1

• Fixed: Use and renew TLS 1.3 session tickets for data connections. (Thanks for testing, @​dennisameling)

6.0.0

• Breaking change: This library does not allow separate transfer hosts by default anymore. This provides security by default against FTP bounce attacks. This FTP feature is used very rarely, there is a good chance you don't actually have to change anything in your code. You can allow separate transfer hosts by using allowSeparateTransferHost: true when instantiating a Client. (Thanks, @​Jvr2022)

5.3.1

• Fixed: Protect against unbounded control response, fixes GHSA-rpmf-866q-6p89.

Changelog

Sourced from basic-ftp's changelog.

6.0.1

• Fixed: Use and renew TLS 1.3 session tickets for data connections.

6.0.0

• Breaking change: This library does not allow separate transfer hosts by default anymore. This provides security by default against FTP bounce attacks. This FTP feature is used very rarely, there is a good chance you don't actually have to change anything in your code. You can allow separate transfer hosts by using allowSeparateTransferHost: true when instantiating a Client. (Thanks, @​Jvr2022)

5.3.1

• Fixed: Protect against unbounded control response, fixes GHSA-rpmf-866q-6p89.

Commits

• aab681b Bump version
• e8d9741 Support TLS 1.3 (#277)
• 5585c9d Disable flaky test
• 92ac124 Update security policy
• 24aecfd Update contribution doc
• b35e760 Bump version
• eb95b0e Take care of loopback addresses
• 1901831 Don't allow separate transfer hosts by default
• 980371b Guard against unbounded control response
• 50827c7 Adjust changelog to match release notes
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)