[Snyk] Upgrade @emotion/styled from 11.10.0 to 11.11.0

[DevenGengan]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @emotion/styled from 11.10.0 to 11.11.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released 9 months ago, on 2023-05-06.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIHTML-1296849	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-XSS-1584355	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @emotion/styled

• 11.11.0 - 2023-05-06
  

  Minor Changes

  • #3031 336f3d50 Thanks @ Andarist! - Added support for cascade @ layers by updating the underlying parser (stylis).

  Patch Changes

  • #3029 eed5e6cf Thanks @ Andarist! - Fixed importing in Node ESM

  • Updated dependencies [336f3d50, eed5e6cf]:

    • @ emotion/[email protected]
    • @ emotion/[email protected]
    • @ emotion/[email protected]
    • @ emotion/[email protected]
    • @ emotion/[email protected]
• 11.10.8 - 2023-04-28
• 11.10.6 - 2023-02-16
• 11.10.5 - 2022-10-27
• 11.10.4 - 2022-08-30
• 11.10.0 - 2022-07-31

from @emotion/styled GitHub release notes

Commit messages

Package name: @emotion/styled

• 1135f8e Version Packages (build(deps): bump github.com/GaijinEntertainment/go-exhaustruct/v2 from 2.2.0 to 2.2.2 golangci/golangci-lint#3030)
• 336f3d5 Add support for cascade `@ layer`s (build(deps): bump github.com/daixiang0/gci from 0.4.3 to 0.5.0 golangci/golangci-lint#3031)
• eed5e6c Fixed importing in Node ESM (build(deps): bump github.com/ryancurrah/gomodguard from 1.2.3 to 1.2.4 golangci/golangci-lint#3029)
• e6e5b3d Add `aspectRatio` property to unitless (dev: change format like function without args golangci/golangci-lint#3012)
• 5645b37 Version Packages (staticcheck doesn't work in v1.47.2 golangci/golangci-lint#3026)
• 6bd1342 Upgrade Stylis to a version with parsing fix for `&` in nested functions (cgo: fix many linters ignoring Cgo files golangci/golangci-lint#3025)
• 149194e Version Packages (Missing option 'exclude' in lll linter settings golangci/golangci-lint#3020)
• b02be0b Fixed ignore flag not disabling the warning for rules defined inside other rules (gci: fix panic with invalid configuration option golangci/golangci-lint#3019)
• 314a5fb Adding Apache Superset to "In the Wild" section (build(deps): bump github.com/alingse/asasalint from 0.0.10 to 0.0.11 golangci/golangci-lint#3003)
• 0283f88 Version Packages (revive: ignore slow rules golangci/golangci-lint#2999)
• 4e172c2 Remove peer dependency on `@ babel/core` from most packages (gci: Prefixes with capital letters are ignored golangci/golangci-lint#2985)
• 88ce707 Add Feathery to the in the wild list (Process hangs when run by vscode golangci/golangci-lint#2990)
• acb72a4 Add explicit `permissions` to GitHub workflows (build(deps): bump gatsby-plugin-manifest from 4.13.0 to 4.15.1 in /docs golangci/golangci-lint#2899)
• 92be52d Version Packages (docs(gocritic): add enable and disable ruleguard settings golangci/golangci-lint#2885)
• 13afe03 Upgrade Stylis to a version with container queries support (build(deps): bump github.com/firefart/nonamedreturns from 1.0.1 to 1.0.2 golangci/golangci-lint#2929)
• d8a13bc Fork Stylis prefixer (docs(govet): add settings for shadow and unusedresult golangci/golangci-lint#2890)
• c1ee578 Remove unused `cx` import in a doc example (nonamedreturns: add setting allow-error-in-defer golangci/golangci-lint#2915)
• 4c0005f Do not warn about `@ emotion/react` being loaded twice in Vitest (build(deps): bump devcert from 1.2.0 to 1.2.1 in /docs golangci/golangci-lint#2905)
• 61c6696 Do not log failed rule insertions in the speedy mode for `-ms-expand` and `-ms-reveal` pseudo-elements (nolintlint does not report unused issue when disabled linter is disabled in configuration golangci/golangci-lint#2920)
• 8a16374 Fixed incorrect backticks in `jsx-import.md` (Load Package is not necessary for all linters golangci/golangci-lint#2914)
• 6eef2e3 Clarification that Internet Explorer doesn't belong in the group "popular browsers" (build(deps): bump sharp from 0.30.3 to 0.30.6 in /docs golangci/golangci-lint#2900)
• c02b121 Fixed an issue that prevented using `content: "element(name)"` (build(deps): bump prism-react-renderer from 1.3.1 to 1.3.3 in /docs golangci/golangci-lint#2896)
• 5fa2d54 Adds documentation for integrating with `eslint-plugin-react` (fix: codeQL scanning golangci/golangci-lint#2882)
• 5ffa54a Fix typo in docs (build(deps): bump github.com/spf13/viper from 1.11.0 to 1.12.0 golangci/golangci-lint#2889)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs