Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade: , react, react-dom, react-transition-group, chroma-js, emoji-mart, rc-slider, react-color, react-copy-to-clipboard, react-material-ui-form-validator, react-router-transition, react-scripts, react-sortable-hoc #73

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade: , react, react-dom, react-transition-group, chroma-js, emoji-mart, rc-slider, react-color, react-copy-to-clipboard, react-material-ui-form-validator, react-router-transition, react-scripts, react-sortable-hoc #73

wants to merge 1 commit into from

Conversation

Maverick-Talys
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@material-ui/core
from 3.9.2 to 3.9.4 | 2 versions ahead of your current version | 5 years ago
on 2019-11-28
react
from 16.8.4 to 16.14.0 | 13 versions ahead of your current version | 4 years ago
on 2020-10-14
react-dom
from 16.8.4 to 16.14.0 | 13 versions ahead of your current version | 4 years ago
on 2020-10-14
react-transition-group
from 2.6.1 to 2.9.0 | 4 versions ahead of your current version | 5 years ago
on 2019-04-06
chroma-js
from 2.0.3 to 2.6.0 | 18 versions ahead of your current version | a month ago
on 2024-07-30
emoji-mart
from 2.10.0 to 2.11.2 | 3 versions ahead of your current version | 5 years ago
on 2019-12-23
rc-slider
from 8.6.6 to 8.7.1 | 9 versions ahead of your current version | 5 years ago
on 2019-09-06
react-color
from 2.17.0 to 2.19.3 | 7 versions ahead of your current version | 4 years ago
on 2020-10-28
react-copy-to-clipboard
from 5.0.1 to 5.1.0 | 4 versions ahead of your current version | 2 years ago
on 2022-04-13
react-material-ui-form-validator
from 2.0.7 to 2.1.4 | 8 versions ahead of your current version | 4 years ago
on 2021-02-04
react-router-transition
from 1.3.0 to 1.4.0 | 1 version ahead of your current version | 5 years ago
on 2019-10-06
react-scripts
from 4.0.0 to 4.0.3 | 3 versions ahead of your current version | 4 years ago
on 2021-02-22
react-sortable-hoc
from 1.7.1 to 1.11.0 | 9 versions ahead of your current version | 5 years ago
on 2020-01-20

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Prototype Poisoning
SNYK-JS-QS-3153490		 305 Proof of Concept
high severity Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137		 305 Proof of Concept
high severity Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864		 305 Proof of Concept
high severity Improper Input Validation
SNYK-JS-URLPARSE-2407770		 305 Proof of Concept
high severity Prototype Pollution
SNYK-JS-ASYNC-2441827		 305 Proof of Concept
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860		 305 No Known Exploit
medium severity Open Redirect
SNYK-JS-EXPRESS-6474509		 305 No Known Exploit
medium severity Information Exposure
SNYK-JS-EVENTSOURCE-2823375		 305 Proof of Concept
medium severity Cross-site Scripting
SNYK-JS-EXPRESS-7926867		 305 No Known Exploit
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181		 305 Proof of Concept
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610		 305 Proof of Concept
medium severity Authorization Bypass Through User-Controlled Key
SNYK-JS-URLPARSE-2412697		 305 Proof of Concept
medium severity Open Redirect
SNYK-JS-URLPARSE-1533425		 305 Proof of Concept
medium severity Access Restriction Bypass
SNYK-JS-URLPARSE-2401205		 305 Proof of Concept
medium severity Authorization Bypass
SNYK-JS-URLPARSE-2407759		 305 Proof of Concept
low severity Cross-site Scripting
SNYK-JS-SEND-7926862		 305 No Known Exploit
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865		 305 No Known Exploit
low severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2396346		 305 No Known Exploit
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462		 305 Proof of Concept
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		 305 Proof of Concept
Release notes
Package name: @material-ui/core
  • 3.9.4 - 2019-11-28
    Nov 28, 2019

    @ material-ui/[email protected]

    • [Portal] Fix circular PortalProps Types (#18602)

      Fix TypeScript 3.7 support

  • 3.9.3 - 2019-03-28
  • 3.9.2 - 2019-02-03
from @material-ui/core GitHub release notes
Package name: react from react GitHub release notes
Package name: react-dom from react-dom GitHub release notes
Package name: react-transition-group from react-transition-group GitHub release notes
Package name: chroma-js from chroma-js GitHub release notes
Package name: emoji-mart
  • 2.11.2 - 2019-12-23

    Update README

  • 2.11.1 - 2019-05-09

    Release v2.11.1

  • 2.11.0 - 2019-03-28

    Release v2.11.0

  • 2.10.0 - 2019-03-15

    Changelog

    • chore: fix prettier linting #304
    • test: replace karma with jest #302
    • chore: yarn clean should remove dist-modern #301
    • fix: improve requestIdleCallback usage #300
    • fix: make each emoji category into a list #299
    • chore: fix custom emoji URLs in storybook #298
    • fix: improve a11y of skin tone picker #297
    • fix: improve accessible page structure #296
    • fix: use tabIndex, not tabindex #295
    • fix: fix search input when value is prepopulated #290
    • fix: fix emoji.id undefined error #289
    • fix: remove unused notFoundString prop #288
    • perf: throttle keyboard input to improve responsiveness #287
    • fix: fix preact compatibility #285
    • fix: improve a11y of emoji list #284
    • fix: makes skin tone picker more accessible #283
    • fix: make categories into accessible nav buttons #282
    • fix: improve search/clear a11y #281
    • fix: add prop-types to dependencies #280
    • feat: add slim builds for modern browsers #260
    • fix: fix babel-runtime not found #278
    • Support case where showPreview is false but showSkinTones is true. Also add prepare script. #277
    • docs: add more explicit dev docs #276
    • fix: allow prop-types to be removed in production #258
    • Fixed bug where selecting the first emoji search result with the ENTER KEY ignores skin tone selection #270
    • fix: forces emoji's not to break line #261
    • fix: fix native emoji on Linux #256
    • fix: improve a11y of emoji list #218
    • fix: makes skin tone picker more accessible #220
    • fix: fix emoji.id undefined error #201
    • fix: fix preact compatibility #254
    • fix: make categories into accessible nav buttons #219
    • fix: improve search/clear a11y #221
    • feat: add slim builds for modern browsers #259
    • fix: fix babel-runtime not found #228
    • docs: add more explicit dev docs #227
    • fix: allow prop-types to be removed in production #257
    • fix: fix native emoji on Linux #255
    • tweak babelrc to use runtime helpers for Object.assign c13b730
    • fix webkit CSS, fix clear button bd17294
    • fix prettier ef71101

    Commits

    v2.9.2...v2.10.0

from emoji-mart GitHub release notes
Package name: rc-slider
  • 8.7.1 - 2019-09-06
  • 8.7.0 - 2019-09-03
  • 8.6.13 - 2019-06-11
  • 8.6.12 - 2019-06-05
  • 8.6.11 - 2019-05-14
  • 8.6.10 - 2019-05-14
  • 8.6.9 - 2019-04-02
  • 8.6.8 - 2019-04-01
  • 8.6.7 - 2019-03-13
  • 8.6.6 - 2019-02-23
from rc-slider GitHub release notes
Package name: react-color
  • 2.19.3 - 2020-10-28
  • 2.19.1 - 2020-10-27
  • 2.18.1 - 2020-05-04

    Patches

    • (BlockPicker): fixes blockpicker input not working: #616
    • Default chrome view picker: #665
    • Remove cWRP from ColorWrap: #662
    • Remove cWRP from ChromeFields: #661
    • Remove wWRP from EdibleInput: #635
    • Fixes Corners Jumping in Saturation Field: #670
    • [Example] With Portals: #617
    • Fix duplicated % symbols in Chrome Picker: #704
    • Passing children to Checkboard component: #703
    • Example with hooks: #700
    • Fix Duplicate Percentage in EdibleInput: #708
    • Fix EdibleInput from rejecting 0% and 1%: #709
    • Fix CirclePicker white pixel bug: #710
    • Remove isValidHex validation from Swatches: #688
    • Fix Color Source Bug on Saturation and Hue: #671

    Credits

    Huge thanks to @ erkkaha, @ DarrenBangsund, @ mfix22, @ blimusiek, @ pizza3, @ saikatbhattacharya, and @ kriscarle for helping!

  • 2.18.0 - 2020-01-08
  • 2.17.3 - 2019-04-29

    Patches

    • Export Helpers: #613
    • Dont Change Color on Hover: #612
    • Remove preventDefault on passive events:

@snyk-bot
fix: upgrade multiple dependencies with Snyk
54e0c52 
Snyk has created this PR to upgrade:
  - @material-ui/core from 3.9.2 to 3.9.4.
    See this package in npm: https://www.npmjs.com/package/@material-ui/core
  - react from 16.8.4 to 16.14.0.
    See this package in npm: https://www.npmjs.com/package/react
  - react-dom from 16.8.4 to 16.14.0.
    See this package in npm: https://www.npmjs.com/package/react-dom
  - react-transition-group from 2.6.1 to 2.9.0.
    See this package in npm: https://www.npmjs.com/package/react-transition-group
  - chroma-js from 2.0.3 to 2.6.0.
    See this package in npm: https://www.npmjs.com/package/chroma-js
  - emoji-mart from 2.10.0 to 2.11.2.
    See this package in npm: https://www.npmjs.com/package/emoji-mart
  - rc-slider from 8.6.6 to 8.7.1.
    See this package in npm: https://www.npmjs.com/package/rc-slider
  - react-color from 2.17.0 to 2.19.3.
    See this package in npm: https://www.npmjs.com/package/react-color
  - react-copy-to-clipboard from 5.0.1 to 5.1.0.
    See this package in npm: https://www.npmjs.com/package/react-copy-to-clipboard
  - react-material-ui-form-validator from 2.0.7 to 2.1.4.
    See this package in npm: https://www.npmjs.com/package/react-material-ui-form-validator
  - react-router-transition from 1.3.0 to 1.4.0.
    See this package in npm: https://www.npmjs.com/package/react-router-transition
  - react-scripts from 4.0.0 to 4.0.3.
    See this package in npm: https://www.npmjs.com/package/react-scripts
  - react-sortable-hoc from 1.7.1 to 1.11.0.
    See this package in npm: https://www.npmjs.com/package/react-sortable-hoc

See this project in Snyk:
https://app.snyk.io/org/mrmaverick-dev/project/448f5947-c230-4e90-835e-653a0d3de8c1?utm_source=github&utm_medium=referral&page=upgrade-pr
sourcery-ai[bot]
sourcery-ai bot reviewed Sep 13, 2024
View reviewed changes
Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. Here's why:

  • It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
  • We don't review packaging changes - Let us know if you'd like us to change this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sourcery-ai Sourcery AI Sourcery AI left review comments

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@Maverick-Talys @snyk-bot