[Snyk] Upgrade: , react, react-dom, react-transition-group, chroma-js, emoji-mart, rc-slider, react-color, react-copy-to-clipboard, react-material-ui-form-validator, react-router-transition, react-scripts, react-sortable-hoc #73
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @material-ui/core from 3.9.2 to 3.9.4.
See this package in npm: https://www.npmjs.com/package/@material-ui/core
- react from 16.8.4 to 16.14.0.
See this package in npm: https://www.npmjs.com/package/react
- react-dom from 16.8.4 to 16.14.0.
See this package in npm: https://www.npmjs.com/package/react-dom
- react-transition-group from 2.6.1 to 2.9.0.
See this package in npm: https://www.npmjs.com/package/react-transition-group
- chroma-js from 2.0.3 to 2.6.0.
See this package in npm: https://www.npmjs.com/package/chroma-js
- emoji-mart from 2.10.0 to 2.11.2.
See this package in npm: https://www.npmjs.com/package/emoji-mart
- rc-slider from 8.6.6 to 8.7.1.
See this package in npm: https://www.npmjs.com/package/rc-slider
- react-color from 2.17.0 to 2.19.3.
See this package in npm: https://www.npmjs.com/package/react-color
- react-copy-to-clipboard from 5.0.1 to 5.1.0.
See this package in npm: https://www.npmjs.com/package/react-copy-to-clipboard
- react-material-ui-form-validator from 2.0.7 to 2.1.4.
See this package in npm: https://www.npmjs.com/package/react-material-ui-form-validator
- react-router-transition from 1.3.0 to 1.4.0.
See this package in npm: https://www.npmjs.com/package/react-router-transition
- react-scripts from 4.0.0 to 4.0.3.
See this package in npm: https://www.npmjs.com/package/react-scripts
- react-sortable-hoc from 1.7.1 to 1.11.0.
See this package in npm: https://www.npmjs.com/package/react-sortable-hoc
See this project in Snyk:
https://app.snyk.io/org/mrmaverick-dev/project/448f5947-c230-4e90-835e-653a0d3de8c1?utm_source=github&utm_medium=referral&page=upgrade-pr
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@material-ui/core
from 3.9.2 to 3.9.4 | 2 versions ahead of your current version | 5 years ago
on 2019-11-28
react
from 16.8.4 to 16.14.0 | 13 versions ahead of your current version | 4 years ago
on 2020-10-14
react-dom
from 16.8.4 to 16.14.0 | 13 versions ahead of your current version | 4 years ago
on 2020-10-14
react-transition-group
from 2.6.1 to 2.9.0 | 4 versions ahead of your current version | 5 years ago
on 2019-04-06
chroma-js
from 2.0.3 to 2.6.0 | 18 versions ahead of your current version | a month ago
on 2024-07-30
emoji-mart
from 2.10.0 to 2.11.2 | 3 versions ahead of your current version | 5 years ago
on 2019-12-23
rc-slider
from 8.6.6 to 8.7.1 | 9 versions ahead of your current version | 5 years ago
on 2019-09-06
react-color
from 2.17.0 to 2.19.3 | 7 versions ahead of your current version | 4 years ago
on 2020-10-28
react-copy-to-clipboard
from 5.0.1 to 5.1.0 | 4 versions ahead of your current version | 2 years ago
on 2022-04-13
react-material-ui-form-validator
from 2.0.7 to 2.1.4 | 8 versions ahead of your current version | 4 years ago
on 2021-02-04
react-router-transition
from 1.3.0 to 1.4.0 | 1 version ahead of your current version | 5 years ago
on 2019-10-06
react-scripts
from 4.0.0 to 4.0.3 | 3 versions ahead of your current version | 4 years ago
on 2021-02-22
react-sortable-hoc
from 1.7.1 to 1.11.0 | 9 versions ahead of your current version | 5 years ago
on 2020-01-20
Issues fixed by the recommended upgrade:
SNYK-JS-QS-3153490
SNYK-JS-FOLLOWREDIRECTS-6141137
SNYK-JS-IP-6240864
SNYK-JS-URLPARSE-2407770
SNYK-JS-ASYNC-2441827
SNYK-JS-BODYPARSER-7926860
SNYK-JS-EXPRESS-6474509
SNYK-JS-EVENTSOURCE-2823375
SNYK-JS-EXPRESS-7926867
SNYK-JS-FOLLOWREDIRECTS-2332181
SNYK-JS-FOLLOWREDIRECTS-6444610
SNYK-JS-URLPARSE-2412697
SNYK-JS-URLPARSE-1533425
SNYK-JS-URLPARSE-2401205
SNYK-JS-URLPARSE-2407759
SNYK-JS-SEND-7926862
SNYK-JS-SERVESTATIC-7926865
SNYK-JS-FOLLOWREDIRECTS-2396346
SNYK-JS-BABELTRAVERSE-5962462
SNYK-JS-MINIMIST-2429795
Release notes
Package name: @material-ui/core
-
3.9.4 - 2019-11-28
-
-
3.9.3 - 2019-03-28
-
3.9.2 - 2019-02-03
from @material-ui/core GitHub release notesNov 28, 2019
@ material-ui/core@v3.9.4[Portal] Fix circular PortalProps Types (#18602)
Fix TypeScript 3.7 support
Package name: react
-
16.14.0 - 2020-10-14
- Add support for the new JSX transform. (@ lunaruan in #18299)
-
16.13.1 - 2020-03-19
- Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@ acdlite in #18238)
- Revert warning for cross-component updates that happen inside class render lifecycles (
- react: https://unpkg.com/react@16.13.1/umd/
- react-art: https://unpkg.com/react-art@16.13.1/umd/
- react-dom: https://unpkg.com/react-dom@16.13.1/umd/
- react-is: https://unpkg.com/react-is@16.13.1/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.1/umd/
- scheduler: https://unpkg.com/scheduler@0.19.1/umd/
-
16.13.0 - 2020-02-26
- Warn when a string ref is used in a manner that's not amenable to a future codemod (@ lunaruan in #17864)
- Deprecate
- Warn when changes in
- Warn when a function component is updated during another component's render phase (@ acdlite in #17099)
- Deprecate
- Fix
- Call
- Add
- Don't call
- Show component stacks in more warnings (@ gaearon in #17922, #17586)
- Warn for problematic usages of
- Remove
- Don't group Idle/Offscreen work with other work (@ sebmarkbage in #17456)
- Adjust
- Add missing event plugin priorities (@ trueadm in #17914)
- Fix
- Fix
- Don't warn when suspending at the wrong priority (@ gaearon in #17971)
- Fix a bug with rebasing updates (@ acdlite and @ sebmarkbage in #17560, #17510, #17483, #17480)
- react: https://unpkg.com/react@16.13.0/umd/
- react-art: https://unpkg.com/react-art@16.13.0/umd/
- react-dom: https://unpkg.com/react-dom@16.13.0/umd/
- react-is: https://unpkg.com/react-is@16.13.0/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.0/umd/
- scheduler: https://unpkg.com/scheduler@0.19.0/umd/
-
16.12.0 - 2019-11-14
- Fix passive effects (
- Fix
-
16.11.0 - 2019-10-22
-
16.10.2 - 2019-10-03
-
16.10.1 - 2019-09-28
-
16.10.0 - 2019-09-27
-
16.9.0 - 2019-08-08
-
16.9.0-rc.0 - 2019-08-05
-
16.9.0-alpha.0 - 2019-04-03
-
16.8.6 - 2019-03-28
-
16.8.5 - 2019-03-22
-
16.8.4 - 2019-03-05
from react GitHub release notesReact
React DOM
componentWillReceiveProps,shouldComponentUpdate, and so on). (@ gaearon in #18330)Artifacts
React
React.createFactory()(@ trueadm in #17878)React DOM
stylemay cause an unexpected collision (@ sophiebits in #14181, #18002)unstable_createPortal(@ trueadm in #17880)onMouseEnterbeing fired on disabled buttons (@ AlfredoGJ in #17675)shouldComponentUpdatetwice when developing inStrictMode(@ bvaughn in #17942)versionproperty to ReactDOM (@ ealush in #15780)toString()ofdangerouslySetInnerHTML(@ sebmarkbage in #17773)Concurrent Mode (Experimental)
ReactDOM.createRoot()(@ trueadm in #17937)ReactDOM.createRoot()callback params and added warnings on usage (@ bvaughn in #17916)SuspenseListCPU bound heuristic (@ sebmarkbage in #17455)isPendingonly being true when transitioning from inside an input event (@ acdlite in #17382)React.memocomponents dropping updates when interrupted by a higher priority update (@ acdlite in #18091)Artifacts
React DOM
useEffect) not being fired in a multi-root app. (@ acdlite in #17347)React Is
lazyandmemotypes considered elements instead of components (@ bvaughn in #17278)Artifacts
• react: https://unpkg.com/react@16.12.0/umd/
• react-art: https://unpkg.com/react-art@16.12.0/umd/
• react-dom: https://unpkg.com/react-dom@16.12.0/umd/
• react-is: https://unpkg.com/react-is@16.12.0/umd/
• react-test-renderer: https://unpkg.com/react-test-renderer@16.12.0/umd/
• scheduler: https://unpkg.com/scheduler@0.18.0/umd/
Package name: react-dom
-
16.14.0 - 2020-10-14
- Add support for the new JSX transform. (@ lunaruan in #18299)
-
16.13.1 - 2020-03-19
- Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@ acdlite in #18238)
- Revert warning for cross-component updates that happen inside class render lifecycles (
- react: https://unpkg.com/react@16.13.1/umd/
- react-art: https://unpkg.com/react-art@16.13.1/umd/
- react-dom: https://unpkg.com/react-dom@16.13.1/umd/
- react-is: https://unpkg.com/react-is@16.13.1/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.1/umd/
- scheduler: https://unpkg.com/scheduler@0.19.1/umd/
-
16.13.0 - 2020-02-26
- Warn when a string ref is used in a manner that's not amenable to a future codemod (@ lunaruan in #17864)
- Deprecate
- Warn when changes in
- Warn when a function component is updated during another component's render phase (@ acdlite in #17099)
- Deprecate
- Fix
- Call
- Add
- Don't call
- Show component stacks in more warnings (@ gaearon in #17922, #17586)
- Warn for problematic usages of
- Remove
- Don't group Idle/Offscreen work with other work (@ sebmarkbage in #17456)
- Adjust
- Add missing event plugin priorities (@ trueadm in #17914)
- Fix
- Fix
- Don't warn when suspending at the wrong priority (@ gaearon in #17971)
- Fix a bug with rebasing updates (@ acdlite and @ sebmarkbage in #17560, #17510, #17483, #17480)
- react: https://unpkg.com/react@16.13.0/umd/
- react-art: https://unpkg.com/react-art@16.13.0/umd/
- react-dom: https://unpkg.com/react-dom@16.13.0/umd/
- react-is: https://unpkg.com/react-is@16.13.0/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.0/umd/
- scheduler: https://unpkg.com/scheduler@0.19.0/umd/
-
16.12.0 - 2019-11-14
- Fix passive effects (
- Fix
-
16.11.0 - 2019-10-22
-
16.10.2 - 2019-10-03
-
16.10.1 - 2019-09-28
-
16.10.0 - 2019-09-27
-
16.9.0 - 2019-08-08
-
16.9.0-rc.0 - 2019-08-05
-
16.9.0-alpha.0 - 2019-04-03
-
16.8.6 - 2019-03-28
-
16.8.5 - 2019-03-22
-
16.8.4 - 2019-03-05
from react-dom GitHub release notesReact
React DOM
componentWillReceiveProps,shouldComponentUpdate, and so on). (@ gaearon in #18330)Artifacts
React
React.createFactory()(@ trueadm in #17878)React DOM
stylemay cause an unexpected collision (@ sophiebits in #14181, #18002)unstable_createPortal(@ trueadm in #17880)onMouseEnterbeing fired on disabled buttons (@ AlfredoGJ in #17675)shouldComponentUpdatetwice when developing inStrictMode(@ bvaughn in #17942)versionproperty to ReactDOM (@ ealush in #15780)toString()ofdangerouslySetInnerHTML(@ sebmarkbage in #17773)Concurrent Mode (Experimental)
ReactDOM.createRoot()(@ trueadm in #17937)ReactDOM.createRoot()callback params and added warnings on usage (@ bvaughn in #17916)SuspenseListCPU bound heuristic (@ sebmarkbage in #17455)isPendingonly being true when transitioning from inside an input event (@ acdlite in #17382)React.memocomponents dropping updates when interrupted by a higher priority update (@ acdlite in #18091)Artifacts
React DOM
useEffect) not being fired in a multi-root app. (@ acdlite in #17347)React Is
lazyandmemotypes considered elements instead of components (@ bvaughn in #17278)Artifacts
• react: https://unpkg.com/react@16.12.0/umd/
• react-art: https://unpkg.com/react-art@16.12.0/umd/
• react-dom: https://unpkg.com/react-dom@16.12.0/umd/
• react-is: https://unpkg.com/react-is@16.12.0/umd/
• react-test-renderer: https://unpkg.com/react-test-renderer@16.12.0/umd/
• scheduler: https://unpkg.com/scheduler@0.18.0/umd/
Package name: react-transition-group
-
2.9.0 - 2019-04-06
- CSSTransition: add "done" class for appear (fe3c156), closes #383 #327 #327
- bump semantic release dependencies (1bdcaec)
-
2.8.0 - 2019-04-02
- add support for empty classNames (#481) (d755dc6)
-
2.7.1 - 2019-03-25
- revert tree-shaking support because it was a breaking change (271364c)
-
2.7.0 - 2019-03-22
- support ESM (tree-shaking) (#455) (ef3e357)
-
2.6.1 - 2019-03-14
- Transition: make
- package.json: mark react-transition-group as side-effect free for webpack tree shaking (#472) (b81dc89)
from react-transition-group GitHub release notes2.9.0 (2019-04-06)
Features
Reverts
2.8.0 (2019-04-02)
Features
2.7.1 (2019-03-25)
Bug Fixes
2.7.0 (2019-03-22)
Features
2.6.1 (2019-03-14)
Bug Fixes
exitkey optional when passing an object to thetimeoutprop (#464) (3a4cf9c)Package name: chroma-js
-
2.6.0 - 2024-07-30
- 🎉 NEW: color.tint + color.shade (thanks to @ tremby in #246)
- fix: remove false w3c color cornflower (thanks to @ friedPotat0 in #298)
- docs: replace website with archive by @ Artoria2e5 in #264
-
2.5.0 - 2024-07-30
- 🎉 Big code refactoring to ES modules plus dependency and build setup updates by @ gka & @ zyyv in #336
- Update 404 links in readme.md by @ rdela in #326
- Update readme.md by @ JiatLn in https://github.com/gka/chroma.js/pull/307a.js/pull/336
- @ zyyv made their first contribution in #336
- @ rdela made their first contribution in #326
- @ JiatLn made their first contribution in #307
-
2.5.0-4 - 2024-07-30
-
2.5.0-3 - 2024-07-30
-
2.5.0-2 - 2024-07-30
-
2.5.0-1 - 2024-07-30
-
2.5.0-0 - 2024-07-30
-
2.4.2 - 2022-02-03
-
2.4.1 - 2022-02-03
-
2.4.0 - 2022-02-03
-
2.3.0 - 2022-01-27
-
2.2.0 - 2022-01-27
-
2.1.2 - 2021-05-19
-
2.1.1 - 2021-03-03
-
2.1.0 - 2019-10-31
-
2.0.6 - 2019-08-28
-
2.0.5 - 2019-08-28
-
2.0.4 - 2019-06-17
-
2.0.3 - 2019-02-16
from chroma-js GitHub release notesWhat's Changed
Full Changelog: v2.5.0...v2.6.0
What's Changed
New Contributors
Full Changelog: v2.3.0...v2.5.0
2.5.0-4
2.5.0-3
2.5.0-2
2.5.0-1
2.5.0-0
Package name: emoji-mart
-
2.11.2 - 2019-12-23
-
2.11.1 - 2019-05-09
-
2.11.0 - 2019-03-28
-
2.10.0 - 2019-03-15
- chore: fix prettier linting
- test: replace karma with jest
- chore:
- fix: improve requestIdleCallback usage
- fix: make each emoji category into a list
- chore: fix custom emoji URLs in storybook
- fix: improve a11y of skin tone picker
- fix: improve accessible page structure
- fix: use tabIndex, not tabindex
- fix: fix search input when value is prepopulated
- fix: fix emoji.id undefined error
- fix: remove unused notFoundString prop
- perf: throttle keyboard input to improve responsiveness
- fix: fix preact compatibility
- fix: improve a11y of emoji list
- fix: makes skin tone picker more accessible
- fix: make categories into accessible nav buttons
- fix: improve search/clear a11y
- fix: add prop-types to dependencies
- feat: add slim builds for modern browsers
- fix: fix babel-runtime not found
- Support case where showPreview is false but showSkinTones is true. Also add prepare script.
- docs: add more explicit dev docs
- fix: allow prop-types to be removed in production
- Fixed bug where selecting the first emoji search result with the ENTER KEY ignores skin tone selection
- fix: forces emoji's not to break line
- fix: fix native emoji on Linux
- fix: improve a11y of emoji list
- fix: makes skin tone picker more accessible
- fix: fix emoji.id undefined error
- fix: fix preact compatibility
- fix: make categories into accessible nav buttons
- fix: improve search/clear a11y
- feat: add slim builds for modern browsers
- fix: fix babel-runtime not found
- docs: add more explicit dev docs
- fix: allow prop-types to be removed in production
- fix: fix native emoji on Linux
- tweak babelrc to use runtime helpers for Object.assign
- fix webkit CSS, fix clear button
- fix prettier
from emoji-mart GitHub release notesUpdate README
Release v2.11.1
Release v2.11.0
Changelog
#304#302yarn cleanshould remove dist-modern#301#300#299#298#297#296#295#290#289#288#287#285#284#283#282#281#280#260#278#277#276#258#270#261#256#218#220#201#254#219#221#259#228#227#257#255c13b730bd17294ef71101Commits
v2.9.2...v2.10.0
Package name: rc-slider
-
8.7.1 - 2019-09-06
-
8.7.0 - 2019-09-03
-
8.6.13 - 2019-06-11
-
8.6.12 - 2019-06-05
-
8.6.11 - 2019-05-14
-
8.6.10 - 2019-05-14
-
8.6.9 - 2019-04-02
-
8.6.8 - 2019-04-01
-
8.6.7 - 2019-03-13
-
8.6.6 - 2019-02-23
from rc-slider GitHub release notesPackage name: react-color
Patches
Credits
Huge thanks to @ erkkaha, @ DarrenBangsund, @ mfix22, @ blimusiek, @ pizza3, @ saikatbhattacharya, and @ kriscarle for helping!
Patches
preventDefaulton passive events: