Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(main): release react-form-builder 2.3.0 #233

Conversation

github-actions[bot]
Copy link
Contributor

🤖 I have created a release beep boop

2.3.0 (2024-04-10)

🆕 Features

  • add array conditions to dependent question in multiple_checkboxes (#126) (ae84e7f)
  • add commitLint and Husky (8253496)
  • add country subdivision question (#232) (bca07a9)
  • add dependant questions logic to radio buttons (e81e81b)
  • add devtools when in DEV mode (2373031)
  • add international option to Phone (84aef3e)
  • add option to prepend the flag to the country name (72b4413)
  • add react markdown to radio label (#111) (d205009)
  • added pr template and codeowners file (ee82413)
  • added pre-commit job (34d43e8)
  • builder parent div updated (ba4fbdd)
  • builder: add dependent question to multicheckboxes (#116) (1d4e366)
  • edit labels by question (0c3aaa4)
  • github action to publish on npm (af134b7)
  • github action to publish on npm (#98) (e57372b)
  • making new and removing old tooltip component (73a1450)
  • mobile: add default country value (#124) (37843c6)
  • multiplecheckbox: add disable others option (#112) (d0c18c8)
  • new country question (246aa4a)
  • new sorted arrays by country name (877b5ad)
  • node: update version (c772b5d)
  • phone: add ltr attribute (#122) (95ee699)
  • precommit script added (b85f7ca)
  • precommit script added (91e6f2e)
  • props added (5c1bfe2)
  • questions: add image input question type (#161) (343c57a)
  • radio test edit (521f6dc)
  • refactor container condiciontalQuestion (67501bc)
  • regions: change gb, ie, fr and se regions data (#121) (62fec42)
  • remove support for node < 16 (bb40b3a)
  • text-area: add word count type (#130) (5306f5b)
  • textarea question implemented (46e0f1e)
  • upgrade to node v20 (7b79369)
  • wip: new country question with countries enriched data (77293f8)

🐛 Bug Fixes

  • add component name in github release tag (#223) (cb98e49)
  • adding countries left asked by ... (dfc8a2c)
  • allowed-endpoints for scorecard (6e68663)
  • allowed-endpoints for test reporter (b85ebe4)
  • avoid overriding default onChange behavior to allow showing dependentQuestions (0886ae8)
  • date picker test (#113) (c1875f8)
  • dateField: remove ? (3f3603e)
  • dateQuestion: select date order (#117) (91fa555)
  • disable submit button when form is being submitted (8686d87)
  • error-handling: add error class to all Select based questions (#172) (196ccbb)
  • error-message: use errorStyles prop instead of overwrite sx (#142) (a69d150)
  • eslint: sx problem (#134) (1958e67)
  • fix vulnerabilities with auit fix (dc182b5)
  • form: new ? typo (a4ae823)
  • form: remove ? typo (#125) (4d6a22f)
  • get back egress-policy block for harden runner (e623043)
  • linter errors and warnings (daa0acd)
  • minor changes according to pr review (bddcea4)
  • prevent re-submitting the form while it's being submitted (d67c0fa)
  • react-select: use id to prevent hydration errors (#140) (bfcbdf0)
  • revert to egress-policy: audit for cd gh action (c01c736)
  • rollup config and countries translation (a86ace4)
  • rollup&Fields: update rollup, use uuidV4, update packages (#144) (40e60a9)
  • selectImage: type of values when undefined (5948442)
  • select: update select default value to listen to new value changes (#168) (e91d8c6)
  • set node version 16 (794ec2f)
  • set recommended policy for cd gh action (18565dd)
  • text-area: set counter type (46616e9)
  • text-area: use proper sep for countlimit (#138) (97192b9)
  • textarea errorMessage (#129) (68699f9)
  • textarea validation for min and max word count (9433275)
  • updgrade to node 18 as some dependencies need it (2fa29fd)
  • wip: import the lib from a react app (3fbb86f)

🔧 Others

📝 Docs

🎨 Styling

🔄 Code Refactoring

  • builder: set component props (#141) (f641f20)
  • externalize components (5aee392)
  • improve example app to support multiple forms (2ad9348)
  • move builder styles to separate file (1231bcd)
  • move button styles to separate file (e9050b5)
  • move example styles to separate file (18b3d5f)
  • one single rollup config file (84f6dc4)
  • updated aria-label in checkbox links (#110) (c75a754)
  • use form context to avoid passing it to children (340ee7c)
  • use uuid lib instead of useId hook (e20d322)

🔬 Tests

  • add test coverage (31b2a1b)
  • remove textarea from tests due to unexpected behaviour (1ab970c)
  • wip: fixing tests (b430580)

☁️ CI

  • add ci workflow (7d99a8e)
  • add code climate gh action for test coverage (0074b22)
  • add code climate gh action for test coverage (c308040)
  • add scorecard workflows (592b012)
  • remove support for node14 (3478c97)
  • rename namespace from guidesmiths to onebeyond (795af29)
  • replace ci github action to trigger with new release (00b14e1)
  • reset version to start with 1.0.0 for the new namespace (56e4817)
  • set egress-policy to audit (4172284)
  • use release please to manage the release process (#213) (7b44380)

This PR was generated with Release Please.

Copy link

socket-security bot commented Apr 10, 2024

Copy link

socket-security bot commented Apr 10, 2024

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Install scripts npm/core-js-pure@3.36.1
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"
  • orphan: npm/core-js-pure@3.36.1
Install scripts npm/core-js@3.36.1
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"
  • orphan: npm/core-js@3.36.1

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/core-js-pure@3.36.1
  • @SocketSecurity ignore npm/core-js@3.36.1

@inigomarquinez
Copy link
Contributor

Duplicated of #235

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant