[Snyk] Upgrade: , add-to-calendar-button-react, chart.js, dompurify, framer-motion, highlight.js, path-to-regexp, react-day-picker, react-icons, react-router, react-router-dom, react-spinners, styled-components #899
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@reduxjs/toolkit
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
from 2.2.4 to 2.2.7 | 3 versions ahead of your current version | a month ago
on 2024-07-27
add-to-calendar-button-react
from 2.6.14 to 2.6.18 | 4 versions ahead of your current version | 3 months ago
on 2024-06-18
chart.js
from 4.4.2 to 4.4.3 | 1 version ahead of your current version | 4 months ago
on 2024-05-17
dompurify
from 3.1.3 to 3.1.6 | 3 versions ahead of your current version | 2 months ago
on 2024-07-05
framer-motion
from 11.2.10 to 11.3.28 | 63 versions ahead of your current version | 23 days ago
on 2024-08-15
highlight.js
from 11.9.0 to 11.10.0 | 1 version ahead of your current version | 2 months ago
on 2024-07-06
path-to-regexp
from 6.2.2 to 7.1.0 | 2 versions ahead of your current version
on 2024-07-13
react-day-picker
from 8.10.1 to 9.0.8 | 20 versions ahead of your current version
on 2024-08-07
react-icons
from 5.2.1 to 5.3.0 | 1 version ahead of your current version | 25 days ago
on 2024-08-13
react-router
from 6.23.1 to 6.26.1 | 13 versions ahead of your current version | 23 days ago
on 2024-08-15
react-router-dom
from 6.23.1 to 6.26.1 | 13 versions ahead of your current version | 23 days ago
on 2024-08-15
react-spinners
from 0.13.8 to 0.14.1 | 2 versions ahead of your current version | 2 months ago
on 2024-06-26
styled-components
from 6.1.11 to 6.1.12 | 1 version ahead of your current version | 2 months ago
on 2024-07-17
Release notes
Package name: @reduxjs/toolkit
-
2.2.7 - 2024-07-27
- #1806
- #3962
- #3983
- Fix: TypeScript Type Portability Issues by @ aryaemami59 in #4467
- Export UpdateDefinitions from toolkit/query by @ joekrill in #4519
- feat: Adds ExtraArgument to withTypes for listenerMiddleware. by @ antondalgren in #4517
- Improve treeshakeability of build artifacts by @ aryaemami59 in #4435
- Export RetryOptions by @ markerikson in #4529
-
2.2.6 - 2024-06-29
- Brings internal
- Exports
- Fixes an issue in recent
- Fix
- Add export for FetchBaseQueryArgs by @ WilsonCWong in #4465
- Fix Immer current usage when calling addManyMutably more than once by @ JacobShafer in #4420
- Golf a few pieces of entity adapter code by @ EskiMojo14 in #4485
-
2.2.5 - 2024-05-16
-
2.2.4 - 2024-05-09
from @reduxjs/toolkit GitHub release notesThis bugfix release fixes issues with "TS type portability" errors, improves build artifact tree shaking behavior, and exports some additional TS types.
Changelog
TS Type Portability
We've had a slew of issues reported around "TS type portability" errors, such as:
The error messages are typically along the lines of:
@ aryaemami59 did some deep investigation and concluded these were due to a mixture of using
interfaceinstead oftypein most places, not pre-bundling our TS typedefs, and not exporting some of the unique symbols we use internally.Arya put together a highly detailed writeup and set of fixes in #4467: Fix: TypeScript Type Portability Issues, and that appears to resolve all of those issues we've seen. Thank you!
Other Changes
Arya also did significant work to improve RTK's treeshaking, tweaking internal definitions to let bundlers better separate out unused code.
We've exported additional types like
UpdateDefinitionsandRetryOptions, per request.listenerMiddleware.withTypes()methods now allow passing in anExtraArgumentgeneric.What's Changed
Full Changelog: v2.2.6...v2.2.7
This bugfix release:
useIsomorphicLayoutEffectusage in line with React Redux in React Native environmentsFetchBaseQueryArgstypecreateEntityAdaptersorting perf improvements that could (in specific cases) cause Immer to throw an errorWhat's Changed
useIsomorphicLayoutEffectusage in React Native environments by @ aryaemami59 in #4436Full Changelog: v2.2.5...v2.2.6
Package name: add-to-calendar-button-react
-
2.6.18 - 2024-06-18
- fix
-
2.6.17 - 2024-06-18
-
2.6.16 - 2024-06-01
-
2.6.15 - 2024-05-15
- Workaround to make all-day events with Yahoo work again.
- Demo page optimization.
-
2.6.14 - 2024-04-30
- optimizing default font
- fixing date button allday issue
from add-to-calendar-button-react GitHub release notesbump
new common class for all host elements to optimize styling via ::parts
Package name: chart.js
-
4.4.3 - 2024-05-17
- npm
- Migration guide
- Docs
- API
- Samples
- #11754 Fix error when object prototype is frozen
- #11764 do not attempt to clear canvas if one does not exist
- #11755 #11450 hide bar by dataindex
- #11690 Create parsed object with correct keys
- #11707 platform.isAttached should return false if canvas is false-y
- #11762 Update license year
- #11776 Bump to 4.4.3
- #11773 Bump pnpm/action-setup from 3.0.0 to 4.0.0
- #11720 Bump follow-redirects from 1.15.4 to 1.15.6
-
4.4.2 - 2024-02-28
- npm
- Migration guide
- Docs
- API
- Samples
- #11685 addListener and removeListener should be only invoked on truthy values
- #11682 fix #11503, autoskipping 0 tick when min is below 0
- #11616 fix(#11615): fix calculating caretX position on stacked bar with index interaction.
- #11662 bugfix #10896 - Changed 'r' to optional for BubbleChart
- #11674 docs(types): fix description in index.d.ts
- #11614 Add extra calrification for html legend
- #11689 Bump to 4.4.2
- #11664 Bump pnpm/action-setup from 2.4.0 to 3.0.0
- #11657 Bump release-drafter/release-drafter from 5 to 6
- #11650 Bump dorny/paths-filter from 2 to 3
- #11636 Bump socket.io-parser from 4.2.2 to 4.2.4
- #11635 Bump follow-redirects from 1.15.2 to 1.15.4
- #11633 Update pnpm lockfile
from chart.js GitHub release notesEssential Links
Bugs Fixed
Documentation
Development
Thanks to @ DAcodedBEAT, @ EricWittrock, @ LeeLenaleee, @ LiamSwayne, @ dependabot and @ dependabot[bot]
Essential Links
Bugs Fixed
Types
Documentation
Development
Thanks to @ DAcodedBEAT, @ LeeLenaleee, @ Megaemce, @ dependabot, @ dependabot[bot], @ mirumirumi, @ smoonsf and @ waszkiewiczja
Package name: dompurify
-
3.1.6 - 2024-07-05
- Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @ kevin-mizu
- Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @ realansgar
- Fixed a minor problem with the bower file pointing to the wrong dist path
- Fixed several minor typos in docs, comments and comment blocks, thanks @ Rotzbua
- Updated several development dependencies
-
3.1.5 - 2024-05-31
- Fixed a minor issue with the dist paths in
- Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @ kakao-bishop-cho
-
3.1.4 - 2024-05-20
- Fixed an issue with the recently implemented
- Added several new popover attributes to allow-list, thanks @ Gigabyte5671
- Fixed the tests and adjusted the test runner to cover all branches
-
3.1.3 - 2024-05-11
- Fixed several mXSS variations found by and thanks to @ kevin-mizu & @ Ry0taK
- Added better configurability for comment scrubbing default behavior
- Added better hardening against Prototype Pollution attacks, thanks @ kevin-mizu
- Added better handling and readability of the
- Fixed some smaller issues in README and other documentation
from dompurify GitHub release notesbower.js, thanks @ HakumenNCisNaNchecks, thanks @ tulachnodeTypeproperty, thanks @ ssi02014Package name: framer-motion
-
11.3.28 - 2024-08-15
-
11.3.28-alpha.1 - 2024-08-14
-
11.3.28-alpha.0 - 2024-08-14
-
11.3.27 - 2024-08-14
-
11.3.26 - 2024-08-14
-
11.3.25 - 2024-08-14
-
11.3.25-alpha.12 - 2024-08-14
-
11.3.25-alpha.11 - 2024-08-14
-
11.3.25-alpha.10 - 2024-08-14
-
11.3.25-alpha.9 - 2024-08-14
-
11.3.25-alpha.8 - 2024-08-14
-
11.3.25-alpha.7 - 2024-08-14
-
11.3.25-alpha.6 - 2024-08-14
-
11.3.25-alpha.5 - 2024-08-14
-
11.3.25-alpha.4 - 2024-08-13
-
11.3.25-alpha.3 - 2024-08-13
-
11.3.25-alpha.2 - 2024-08-13
-
11.3.25-alpha.1 - 2024-08-13
-
11.3.25-alpha.0 - 2024-08-13
-
11.3.24 - 2024-08-08
-
11.3.24-alpha.2 - 2024-08-08
-
11.3.24-alpha.1 - 2024-08-08
-
11.3.23 - 2024-08-07
-
11.3.23-alpha.10 - 2024-08-08
-
11.3.23-alpha.9 - 2024-08-08
-
11.3.23-alpha.8 - 2024-08-08
-
11.3.23-alpha.7 - 2024-08-08
-
11.3.23-alpha.6 - 2024-08-08
-
11.3.23-alpha.5 - 2024-08-08
-
11.3.23-alpha.4 - 2024-08-08
-
11.3.23-alpha.3 - 2024-08-08
-
11.3.23-alpha.2 - 2024-08-08
-
11.3.23-alpha.1 - 2024-08-07
-
11.3.23-alpha.0 - 2024-08-07
-
11.3.22 - 2024-08-07
-
11.3.21 - 2024-08-01
-
11.3.20 - 2024-08-01
-
11.3.19 - 2024-07-27
-
11.3.18 - 2024-07-26
-
11.3.18-alpha.0 - 2024-07-26
-
11.3.17 - 2024-07-24
-
11.3.16 - 2024-07-24
-
11.3.15 - 2024-07-24
-
11.3.14 - 2024-07-24
-
11.3.13 - 2024-07-24
-
11.3.12 - 2024-07-23
-
11.3.11 - 2024-07-23
-
11.3.10 - 2024-07-23
-
11.3.9 - 2024-07-23
-
11.3.8 - 2024-07-19
-
11.3.7 - 2024-07-18
-
11.3.6 - 2024-07-17
-
11.3.5 - 2024-07-17
-
11.3.4 - 2024-07-16
-
11.3.3 - 2024-07-16
-
11.3.2 - 2024-07-11
-
11.3.1 - 2024-07-11
-
11.3.0 - 2024-07-10
-
11.3.0-alpha.0 - 2024-06-12
-
11.2.14 - 2024-07-09
-
11.2.13 - 2024-07-04
-
11.2.12 - 2024-06-25
-
11.2.11 - 2024-06-19
-
11.2.10 - 2024-05-31
from framer-motion GitHub release notesv11.3.28
v11.3.28-alpha.1
v11.3.28-alpha.0
v11.3.27
v11.3.26
v11.3.25
v11.3.25-alpha.12
v11.3.25-alpha.11
v11.3.25-alpha.10
v11.3.25-alpha.9
Package name: highlight.js
-
11.10.0 - 2024-07-06
- enh(typescript) add support for
- enc(c) added more C23 keywords Melkor-1
- enh(json) added jsonc as an alias BackupMiles
- enh(gml) updated to latest language version (GML v2024.2) gnysek
- enh(c) added more C23 keywords and preprcoessor directives Eisenwave
- enh(js/ts) support namespaced tagged template strings Aral Balkan
- enh(perl) fix false-positive variable match at end of string Josh Goebel
- fix(cpp) not all kinds of number literals are highlighted correctly Lê Duy Quang
- fix(css) fix overly greedy pseudo class matching Bradley Mackey
- enh(arcade) updated to ArcGIS Arcade version 1.24 Kristian Ekenes
- fix(typescript): params types Mohamed Ali
- fix(rust) fix escaped double quotes in string Mohamed Ali
- fix(rust) fix for r# raw identifier not being highlighted correctly. JaeBaek Lee
- enh(rust) Adding union to be recognized as a keyword in Rust. JaeBaek Lee
- fix(yaml) fix for yaml with keys having brackets highlighted incorrectly Aneesh Kulkarni
- fix(csharp) add raw string highlighting for C# 11. Tara
- fix(bash) fix # within token being detected as the start of a comment Felix Uhl
- fix(python) fix
- enh(python) adds a scope to the
- enh(delphi) allow digits to be omitted for hex and binary literals Jonah Jeleniewski
- enh(delphi) add support for digit separators Jonah Jeleniewski
- enh(delphi) add support for character strings with non-decimal numerics Jonah Jeleniewski
- fix(javascript) incorrect function name highlighting CY Fung
- fix(1c) fix escaped symbols "+-;():=,[]" literals Vitaly Barilko
- fix(swift) correctly highlight generics and conformances in type definitions Bradley Mackey
- enh(swift) add package keyword Bradley Mackey
- fix(swift) ensure keyword attributes highlight correctly Bradley Mackey
- fix(types) fix interface LanguageDetail > keywords Patrick Chiu
- enh(java) add
- enh(bash) add keyword
- fix(haxe) captures
- fix(go) fix go number literals to accept
- enh(markdown) add entity support David Schach TaraLei
- enh(css) add
- enh(css) add
- fix(fortran) fixes parsing of keywords delimited by dots Julien Bloino
- enh(css) add
- enh(css) add
- enh(css) add
- added 3rd party CODEOWNERS grammar to SUPPORTED_LANGUAGES nataliia-radina
- added 3rd party Luau grammar to SUPPORTED_LANGUAGES Robloxian Demo
- added 3rd party ReScript grammar to SUPPORTED_LANGUAGES Paul Tsnobiladzé
- added 3rd party Zig grammar to SUPPORTED_LANGUAGES [Hyou BunKen][]
- added 3rd party WGSL grammar to SUPPORTED_LANGUAGES Arman Uguray
- added 3rd party Unison grammar to SUPPORTED_LANGUAGES Rúnar Bjarnason
- added 3rd party Phix grammar to SUPPORTED_LANGUAGES PeteLomax
- added 3rd party Mirth grammar to SUPPORTED_LANGUAGES Sierra
- added 3rd party JSONata grammar to SUPPORTED_LANGUAGES Vlad Dimov
- enh(tools): order CSS options picklist David Schach
- enh(tools): remove duplicate CSS options David Schach
- (typescript): deprecate old
- Added
-
11.9.0 - 2023-10-09
- Drops support for Node 14.x, which is no longer supported by Node.js.
- In the
- (enh) prevent re-highlighting of an element [joshgoebel][]
- (chore) Remove discontinued badges from README Bradley Mackey
- (chore) Fix build size report Bradley Mackey
- added 3rd party Iptables grammar to SUPPORTED_LANGUAGES Checconio
- added 3rd party x86asmatt grammar to SUPPORTED_LANGUAGES gondow
- added 3rd party riscv64 grammar to SUPPORTED_LANGUAGES aana-h2
- added 3rd party Ballerina grammar to SUPPORTED_LANGUAGES Yasith Deelaka
- fix(rust) added negative-lookahead for callable keywords
- enh(armasm) added
- enh(haxe) added
- enh(haxe) support numeric separators and suffixes Robert Borghese
- fix(haxe) fixed metadata arguments and support non-colon syntax Robert Borghese
- fix(haxe) differentiate
- fix(bash) do not delimit a string by an escaped apostrophe [hancar][]
- enh(swift) support
- enh(swift) support parameter pack keywords Bradley Mackey
- enh(swift) regex literal support Bradley Mackey
- enh(swift)
- enh(scala) add using directives support
- fix(scala) fixed comments in constructor arguments not being properly highlighted Isaac Nonato
- enh(swift) ownership modifiers support Bradley Mackey
- enh(nsis) Add
- fix(haskell) do not treat double dashes inside infix operators as comments [Zlondrej][]
- enh(rust) added
- enh(leaf) update syntax to 4.0 Samuel Bishop
- fix(reasonml) simplify syntax and align it with ocaml jchavarri
- fix(swift)
- enh(swift) macro attributes are highlighted as keywords Bradley Mackey
- enh(stan) updated for version 2.33 (#3859) Brian Ward
- fix(css) added '_' css variable detection Md Saad Akhtar
- enh(groovy) add
- (chore) Update dev tool to use the new
- (enh) Auto-update the highlighted output when the language dropdown changes. Shah Shabbir Ahmmed
from highlight.js GitHub release notesSorry for the wait, this one is a doozie, thanks to all the contributors who made it possible!
CAVEATS / POTENTIALLY BREAKING CHANGES
Important
This version drops support for Node 16.x, which is no longer supported by Node.js.
Core Grammars:
satisfiesoperator Kisaragi Hiuorconflicts with string highlighting Mohamed Aliselfvariable [Lee Falin][]gototo be recognized as a keyword in Java Alvin JoysudoAlvin Joynewkeyword without capturing it within variables/class names Cameron Taylor_separators, add hex p exponents Lisa Ugrayjustify-itemsandjustify-selfattributes Vasily Polovnyovaccent-color,appearance,color-scheme,rotate,scaleandtranslateattributes Carl Räftingselect,option,optgroup,pictureandsourceto list of known tags Vasily Polovnyovinset,inset-*,border-start-*-radiusandborder-end-*-radiusattributes Vasily Polovnyovtext-decoration-skip-ink,text-decoration-thicknessandtext-underline-offsetattributes Vasily PolovnyovNew Grammars:
Developer Tool:
highlightAPI Misha KaletskyThemes:
1c-lighttheme a like in the IDE 1C:Enterprise 8 (for 1c) Vitaly BarilkoVersion 11.9.0
CAVEATS / POTENTIALLY BREAKING CHANGES
nodebuildstyles/*.cssfiles now ship un-minifiedwith minified counterparts as:
styles/*.min.cssmvorisek(this makes things consistent with our
cdnbuilds)Parser:
New Grammars:
Core Grammars:
ifwhilefor[Omar Hussein][]x0-x30andw0-w30ARMv8 registers Nicholas Thompsonfinal,is,macrokeywords and$identifiers Robert Borgheseabstractdeclaration from keyword Robert Borghesemacrokeyword Bradley Mackey@ uncheckedand@ Sendablesupport Bradley Mackey//> using foo bar[Jamie Thompson][]!assertcompiler flag [idleberg][]eprintln!macro qoheniacwarn_unqualified_accessis an attribute Bradley Mackeyrecordandvaras keywords Guillaume LaforgeDeveloper Tool:
highlightAPI. Shah Shabbir AhmmedPackage name: path-to-regexp
-
7.1.0 - 2024-07-13
- Adds a
- Fixes separator to default to
- Allows separator to be undefined in
- This is only relevant if you are building
- I highly recommend enabling
-
7.0.0 - 2024-06-20
- The function returned by
- For repeated values, when
- Parameter names can contain all unicode identifier characters (defined as regex
- Modifiers (
- No more implied prefix of
- No support for arrays or regexes as inputs
- The wildcard (standalone
- Removed
- Renamed
- Reserved
- Removed
- Enable a "loose" mode by default, so
- Removed the ESM + CommonJS dual package in favor of only one CommonJS supported export
- Minimum JS support for ES2020 (previous ES2015)
- Encode defaults to
- Adds
- Adds
- Allow
- All remaining methods support
- This should be useful if you are programmatically building paths to match or want to avoid parsing multiple times
- Requiring
- Related: Removing
- Removing array and regex support is to reduce the overall package size for things many users don't need
- Unicode IDs are added to align more closely with browser URLPattern behavior, which uses JS identifiers
-
6.2.2 - 2024-04-07
- Fix readme example c7ec332
- Update shield URL e828000
from path-to-regexp GitHub release notesAdded
strictoption to detect potential ReDOS issuesFixed
suffix + prefixwhen not specifiedTokenDataTokenDatamanually, previouslyparsefilled it in automaticallyComments
strict: trueand I'm probably releasing a V8 with it enabled by default ASAP as a necessary security mitigationv7.0.0...v7.1.0
Hi all! There's a few major breaking changes in this release so read carefully.
Breaking changes:
compileonly accepts strings as values (i.e. no numbers, useString(value)before compiling a path)encode !== false, it must be an array of strings\p{XID_Continue}).?,*,+) must be used after a param explicitly wrapped in{}/or.*) has been added back and matches Express.js expected behaviorendsWithoptionstrict: truetotrailing: false;,,,!, and@for future use-casestokensToRegexp,tokensToFunctionandregexpToFunctionin favor of simplifying exports/can be repeated multiple times in a matched path (i.e./fooworks like//foo, etc)encodeanddecodeno longer receive the token as the second parameterencodeURIComponentand decode defaults todecodeURIComponentAdded:
encodePathto fix an issue aroundencodebeing used for both path and parameters (the path and parameter should be encoded slightly differently)looseas an option to support arbitrarily matching the delimiter in paths, e.g.foo/barandfoo///barshould work the sameencodeanddecodeto be set tofalsewhich skips all processing of the parameters input/outputTokenData(exported, returned byparse) as inputRequests for feedback:
{}is an obvious drawback but I'm seeking feedback on whether it helps make path behavior clearer/and.as implicit prefixesv6.2.2...v7.0.0
No API changes. Documentation only release.
Changed
v6.2.1...v6.2.2
Package name: react-day-picker
This release fixes a regression in v9.0.7 affecting range mode.
What's Changed
Full Changelog: v9.0.7...v9.0.8
This release improves compatibility with v8 and fix an issue with the calendar navigation.
What's Changed
startMonthorendMonthchange by @ gpbl in #2343defaultLocaleby @ gpbl in #2348undefinedas initially selected value, as it was in v8 by @ gpbl in #2341calendartorootin the examples by @ gpbl in #2347New Contributors
Full Changelog: v9.0.6...v9.0.7
This release addresses the failed import of the common-js module for some app builder and add new
data-attributes to help the integration with Tailwind. Thanks for your feedback!What's Changed
New Contributors
Full Changelog: v9.0.5...v9.0.6
This release improves the range mode behavior (see the updated docs) and address some styling issues.
What's Changed