Update react-loading-skeleton 3.3.1 → 3.4.0 (minor)

[depfu]

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ react-loading-skeleton (3.3.1 → 3.4.0) · Repo · Changelog

Release Notes

3.4.0 (from changelog)

Features

• Remove z-index: 1 from the skeleton. This was a Safari-specific workaround that is no longer necessary in the latest versions of the browser. (#216)

Does any of this look wrong? Please let us know.

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu cancel merge

Cancels automatic merging of this PR

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/merge2@1.4.1	None	0	8.9 kB	zensh
npm/micromatch@4.0.5	None	+5	244 kB	jonschlinkert
npm/mime-types@2.1.35	None	0	18.3 kB	dougwilson
npm/mini-css-extract-plugin@2.7.6	unsafe Transitive: environment, eval, filesystem, network, shell	+65	17.5 MB	evilebottnawi
npm/minimalistic-assert@1.0.1	None	0	1.55 kB	cwmma
npm/minimatch@3.1.2	None	+3	57.8 kB	isaacs
npm/minimist@1.2.6	None	0	33.2 kB	substack
npm/ms@2.1.2	None	0	6.84 kB	styfle
npm/msw@1.3.2	environment, filesystem, network, shell	+31	45.3 MB	kettanaito
npm/normalize-package-data@3.0.3	None	+6	224 kB	gar
npm/normalize-path@3.0.0	None	0	9.22 kB	jonschlinkert
npm/nth-check@2.0.1	None	+1	15.3 kB	feedic
npm/object-assign@4.1.1	None	0	5.49 kB	sindresorhus
npm/object-inspect@1.12.3	None	0	94.8 kB	ljharb
npm/object.assign@4.1.4	Transitive: eval	+9	1.32 MB	ljharb
npm/object.fromentries@2.0.7	Transitive: eval	+51	4.14 MB	ljharb
npm/object.values@1.1.7	Transitive: eval	+51	4.16 MB	ljharb
npm/once@1.4.0	None	+1	7.01 kB	isaacs
npm/onetime@5.1.2	None	+1	10.6 kB	sindresorhus
npm/p-limit@3.1.0	None	+1	13.8 kB	sindresorhus
npm/parse-json@5.2.0	Transitive: environment	+13	153 kB	sindresorhus
npm/parseurl@1.3.3	None	0	10.3 kB	dougwilson
npm/path-key@3.1.1	None	0	4.55 kB	sindresorhus
npm/picomatch@2.3.1	None	0	90 kB	mrmlnc
npm/postcss-cli@10.1.0	environment, filesystem	+46	1.91 MB	ryanzim
npm/postcss-loader@7.3.3	eval, unsafe Transitive: environment, filesystem, network, shell	+91	18.8 MB	evilebottnawi
npm/postcss-value-parser@4.2.0	None	0	27.2 kB	evilebottnawi
npm/postcss@8.4.31	environment, filesystem	+2	350 kB	ai
npm/pptr-testing-library@0.7.0	eval, filesystem Transitive: environment, unsafe	+78	48.6 MB	patrickhulce
npm/prettier@3.0.3	environment, filesystem, unsafe	0	8.49 MB	prettier-bot
npm/process@0.11.10	None	0	15.3 kB	cwmma
npm/prop-types@15.8.1	environment	+4	145 kB	ljharb
npm/pubsub-js@1.9.4	None	0	112 kB	mrgnrdrck
npm/punycode@2.1.1	None	0	32.4 kB	mathias
npm/puppeteer@21.4.1	environment Transitive: filesystem, unsafe	+23	41.8 MB	google-wombot
npm/range-parser@1.2.1	None	0	8.46 kB	dougwilson
npm/react-confetti@6.1.0	Transitive: environment	+3	561 kB	alampros
npm/react-dom@18.2.0	environment	+4	4.93 MB	gnoff
npm/react-hot-toast@2.4.1	Transitive: environment	+5	5.11 MB	timolins
npm/react-i18next@14.1.0	Transitive: environment	+6	1.55 MB	adrai
npm/react-loading-skeleton@3.4.0	Transitive: environment	+3	362 kB	dvtng
npm/react-modal@3.16.1	environment	+8	5.24 MB	diasbruno
npm/react-qr-code@2.0.12	Transitive: environment	+6	475 kB	rtkhanas
npm/react-router-dom@6.22.2	environment	+5	5.81 MB	mjackson
npm/react@18.2.0	environment	+2	337 kB	gnoff
npm/readable-stream@3.6.0	environment	+3	147 kB	matteo.collina
npm/regenerator-runtime@0.13.11	None	0	27.8 kB	benjamn
npm/regexp.prototype.flags@1.5.0	Transitive: eval	+10	213 kB	ljharb
npm/resolve-from@5.0.0	filesystem, unsafe	0	5.82 kB	sindresorhus
npm/resolve-global@1.0.0	None	0	4.34 kB	sindresorhus
npm/resolve@1.22.8	environment, filesystem	+5	232 kB	ljharb
npm/ripemd160@2.0.2	None	+1	13.7 kB	dcousens
npm/safe-buffer@5.2.1	None	0	32.1 kB	feross
npm/safer-buffer@2.1.2	None	0	42.3 kB	chalker
npm/semver@7.5.4	None	+2	124 kB	npm-cli-ops
npm/serialize-javascript@6.0.1	None	+2	55.3 kB	okuryu
npm/sha.js@2.4.11	None	+2	67.1 kB	dcousens
npm/signal-exit@3.0.7	None	0	9.96 kB	isaacs
npm/slip77@0.2.0	None	+2	3.86 MB	tiero
npm/source-map-js@1.0.2	None	0	148 kB	7rulnik
npm/split2@3.2.2	Transitive: environment	+4	164 kB	matteo.collina
npm/stream-browserify@3.0.0	Transitive: environment	+4	159 kB	goto-bus-stop
npm/stream@0.0.2	None	0	12.1 kB	juliangruber
npm/string_decoder@1.1.1	None	0	15.3 kB	matteo.collina
npm/strip-ansi@6.0.1	None	0	4.03 kB	sindresorhus
npm/swc-loader@0.2.3	Transitive: environment, eval, filesystem, network, shell, unsafe	+78	422 MB	kdy1
npm/tailwindcss-3d@1.0.2	Transitive: environment, filesystem, unsafe	+46	10.6 MB	sambauers
npm/tailwindcss@3.4.1	environment, filesystem Transitive: unsafe	+44	9.07 MB	adamwathan
npm/tapable@2.2.0	None	0	46.9 kB	sokra
npm/terser-webpack-plugin@5.3.9	Transitive: environment, eval, filesystem, network, shell, unsafe	+64	17.4 MB	evilebottnawi
npm/terser@5.17.6	environment, eval Transitive: filesystem, shell	+2	2.65 MB	fabiosantoscode
npm/through@2.3.8	None	0	12.5 kB	dominictarr
npm/tsconfig-paths-webpack-plugin@4.1.0	Transitive: environment, filesystem, unsafe	+10	688 kB	jonaskello
npm/tslib@2.6.2	None	0	84 kB	typescript-bot
npm/type-check@0.4.0	None	+1	57.9 kB	gkz
npm/type-fest@1.4.0	None	0	141 kB	sindresorhus
npm/typeforce@1.18.0	None	0	19.1 kB	dcousens
npm/typescript@5.2.2	None	0	40.6 MB	typescript-bot
npm/unpipe@1.0.0	None	0	4.31 kB	dougwilson
npm/util-deprecate@1.0.2	None	0	5.48 kB	tootallnate
npm/uuid@9.0.1	None	0	123 kB	ctavan
npm/webextension-polyfill@0.10.0	None	0	198 kB	addons-robot
npm/webpack-bundle-analyzer@4.9.1	environment, filesystem, network	+7	1.82 MB	valscion
npm/webpack-cli@5.1.4	environment, filesystem, unsafe Transitive: eval, network, shell	+80	18 MB	evilebottnawi
npm/webpack-dev-server@4.15.1	environment, eval, network Transitive: filesystem, shell, unsafe	+91	18.7 MB	evilebottnawi
npm/webpack-sources@3.2.3	None	0	91.3 kB	sokra
npm/webpack@5.89.0	environment, filesystem, network, unsafe Transitive: eval, shell	+64	17.4 MB	thelarkinn
npm/wext-manifest-loader@3.0.0	environment, filesystem Transitive: eval, unsafe	+11	1.9 MB	abhijithvijayan
npm/wext-manifest-webpack-plugin@1.2.1	None	0	10.5 kB	abhijithvijayan
npm/which-typed-array@1.1.11	Transitive: eval	+11	218 kB	ljharb
npm/yargs-parser@20.2.9	environment, filesystem	0	124 kB	oss-bot
npm/yargs@17.7.1	environment, filesystem	+7	506 kB	oss-bot
npm/zustand@4.5.2	environment	+7	2.05 MB	daishi

🚮 Removed packages: npm/@babel/core@7.18.9, npm/@babel/helper-plugin-utils@7.18.9, npm/@discoveryjs/json-ext@0.5.7, npm/@types/babel__traverse@7.17.1, npm/@types/express-serve-static-core@4.17.27, npm/@types/express@4.17.13, npm/@types/serve-static@1.13.10, npm/bl@4.1.0, npm/colorette@2.0.20, npm/cookie@0.4.2, npm/domhandler@4.2.0, npm/domutils@2.7.0, npm/enhanced-resolve@5.15.0, npm/entities@4.3.1, npm/escodegen@2.1.0, npm/fast-fifo@1.3.0, npm/is-generator-function@1.0.10, npm/istanbul-lib-coverage@3.2.0

View full report↗︎

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source
Install scripts	npm/msw@1.3.2	Install script: postinstall Source: node -e "try{require('./config/scripts/postinstall')}catch(e){}"	package.json
Install scripts	npm/puppeteer@21.4.1	Install script: postinstall Source: node install.mjs	package.json

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore npm/msw@1.3.2
• @SocketSecurity ignore npm/puppeteer@21.4.1