[Snyk] Upgrade d3 from 5.16.0 to 7.8.0 #7

snyk-bot · 2023-01-21T18:13:51Z

Snyk has created this PR to upgrade d3 from 5.16.0 to 7.8.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 37 versions ahead of your current version.
The recommended version was released a month ago, on 2022-12-20.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-D3COLOR-1076592	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: d3

7.8.0 - 2022-12-20
- Add d3.pathRound.
- Add configurable precision when generating path data via path.digits.
- Add likewise shape.digits method to d3.arc, d3.area, d3.line, d3.link, and d3.symbol.
- Improve the performance of d3.geoPath’s string concatenation.
- Fix arc rendering for small arcs with rounded corners.
- Fix BumpRadial implementation to support multiple points.
- Fix projection when lambda is outside the range ±3π.
- Rename d3.symbolX to d3.symbolTimes; d3.symbolX is now deprecated.
7.7.0 - 2022-12-03
- Add d3.unixDay and d3.unixDays. d3/d3-time#58
- Adopt d3.unixDay in place of d3.utcDay for d3.utcTicks to ensure uniform tick spacing.
- Fix mutation of user-owned thresholds in d3.bin. d3/d3-array#263
- Fix infinite loop when d3.quantile or d3.quickselect is called with invalid arguments. d3/d3-array#262
7.6.1 - 2022-07-03
- density.bandwidth now supports fractional (non-integer) values.
7.6.0 - 2022-07-03
- Add d3.blur.
- Add d3.blur2.
- Add d3.blurImage.
- Add d3.medianIndex.
- Add d3.quantileIndex.
7.5.0 - 2022-06-26
- Add density.contours.
7.4.5 - 2022-06-24
- Fix the interpretation of an array of numbers passed to density.thresholds.
7.4.4 - 2022-04-11
- Fix incorrect behavior of d3.bisector when given an asymmetric comparator.
7.4.3 - 2022-04-07
- Fix crash in d3.bin. Thanks, @ weiglemc!
7.4.2 - 2022-04-03
- Fix off-by-one bin assignment due to rounding error in d3.bin.
7.4.1 - 2022-04-02
- Significantly improve the performance of d3.bin.
- Fix the implementation of d3.thresholdScott.
- d3.pack and d3.packEnclose are now fully deterministic.
- d3.pack and d3.packEnclose now handle certain floating point errors better.
7.4.0 - 2022-03-28
7.3.0 - 2022-01-07
7.2.1 - 2021-12-10
7.2.0 - 2021-12-04
7.1.1 - 2021-10-03
7.1.0 - 2021-10-01
7.0.4 - 2021-09-24
7.0.3 - 2021-09-20
7.0.2 - 2021-09-19
7.0.1 - 2021-08-16
7.0.0 - 2021-06-11
6.7.0 - 2021-04-16
6.6.2 - 2021-03-29
6.6.1 - 2021-03-24
6.6.0 - 2021-03-10
6.5.0 - 2021-01-25
6.4.0 - 2021-01-22
6.3.1 - 2020-12-08
6.3.0 - 2020-12-03
6.2.0 - 2020-09-23
6.1.1 - 2020-08-31
6.1.0 - 2020-08-29
6.0.0 - 2020-08-26
6.0.0-rc.4 - 2020-08-23
6.0.0-rc.3 - 2020-08-05
6.0.0-rc.2 - 2020-07-31
6.0.0-rc.1 - 2020-07-28
5.16.0 - 2020-04-20

from d3 GitHub release notes

Commit messages

Package name: d3

73ed925 7.8.0
a8a664c drop rollup-plugin-ascii
4b62ad3 d3-geo 3.1.0, d3-path 3.1.0, d3-shape 3.2.0
7c240e8 jsDelivr, not Skypack
33a4148 7.7.0
c4e728c d3-array 3.2.1, d3-time 3.1.0
19302a5 7.6.1
c1c2c0b d3-contour 4.0.0
795f203 7.6.0
22f1dc7 d3-array 3.2.0
d618835 7.5.0
d9f58e1 d3-contour 3.1.0
6d70571 7.4.5
7e9eba3 d3-contour 3.0.2
2f256d9 7.4.4
8ff8c81 d3-array 3.1.6
56c9454 7.4.3
d216428 d3-array 3.1.5
ad80958 7.4.2
a76d0b8 d3-array 3.1.4
3540d3f 7.4.1
6b9768f d3-array 3.1.3, d3-hierarchy 3.1.2
778af6b Updated API Reference Link in README.md (console: prevent internal timers storage from growing nodejs/node#3562)
552ddf9 7.4.0