Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: , , , babel-preset-minify, bootstrap, browser-sync, del, gh-pages, gulp, gulp-autoprefixer, gulp-sass, gulp-sourcemaps, jquery, popper.js #50

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

WontonSam
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Name Versions Released on

@babel/core
from 7.12.3 to 7.25.2 | 96 versions ahead of your current version | 2 months ago
on 2024-07-30
@babel/preset-env
from 7.12.1 to 7.25.4 | 82 versions ahead of your current version | a month ago
on 2024-08-22
@fortawesome/fontawesome-free
from 5.15.1 to 6.6.0 | 18 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
on 2024-07-16
babel-preset-minify
from 0.5.1 to 0.5.2 | 1 version ahead of your current version | 2 years ago
on 2022-05-06
bootstrap
from 4.5.3 to 5.3.3 | 28 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 7 months ago
on 2024-02-20
browser-sync
from 2.26.13 to 3.0.2 | 32 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 9 months ago
on 2023-12-27
del
from 6.0.0 to 7.1.0 | 4 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-08-30
gh-pages
from 3.1.0 to 6.1.1 | 9 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 9 months ago
on 2023-12-23
gulp
from 4.0.2 to 5.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 6 months ago
on 2024-03-29
gulp-autoprefixer
from 7.0.1 to 9.0.0 | 2 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-11-02
gulp-sass
from 4.1.0 to 5.1.0 | 3 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 3 years ago
on 2021-12-31
gulp-sourcemaps
from 2.6.5 to 3.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 4 years ago
on 2020-11-11
jquery
from 3.5.1 to 3.7.1 | 7 versions ahead of your current version | a year ago
on 2023-08-28
popper.js
from 1.16.0 to 1.16.1 | 2 versions ahead of your current version | 5 years ago
on 2020-01-22

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
159 Proof of Concept
high severity Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137
159 Proof of Concept
high severity Use After Free
SNYK-JS-NODESASS-541000
159 No Known Exploit
high severity Arbitrary File Overwrite
SNYK-JS-TAR-1536528
159 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
159 Proof of Concept
high severity Prototype Pollution
SNYK-JS-ASYNC-2441827
159 Proof of Concept
high severity Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-1579269
159 Proof of Concept
high severity Prototype Pollution
SNYK-JS-GHPAGES-3042993
159 No Known Exploit
high severity Cross-site Request Forgery (CSRF)
SNYK-JS-AXIOS-6032459
159 Proof of Concept
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
159 Proof of Concept
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
159 Proof of Concept
high severity Prototype Pollution
SNYK-JS-COPYPROPS-1082870
159 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970
159 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-ENGINEIO-1056749
159 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-ENGINEIO-3136336
159 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076
159 Proof of Concept
high severity Prototype Pollution
SNYK-JS-Y18N-1021887
159 Proof of Concept
high severity NULL Pointer Dereference
SNYK-JS-NODESASS-535500
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-1023599
159 Proof of Concept
high severity Prototype Pollution
SNYK-JS-UNSETVALUE-2400660
159 No Known Exploit
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574
159 Proof of Concept
high severity Arbitrary File Overwrite
SNYK-JS-TAR-1536531
159 No Known Exploit
high severity Arbitrary File Write
SNYK-JS-TAR-1579147
159 No Known Exploit
high severity Arbitrary File Write
SNYK-JS-TAR-1579152
159 No Known Exploit
high severity Arbitrary File Write
SNYK-JS-TAR-1579155
159 No Known Exploit
high severity Denial of Service (DoS)
SNYK-JS-TRIMNEWLINES-1298042
159 No Known Exploit
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574
159 Proof of Concept
high severity Arbitrary Code Injection
SNYK-JS-XMLHTTPREQUESTSSL-1082936
159 Proof of Concept
high severity Access Restriction Bypass
SNYK-JS-XMLHTTPREQUESTSSL-1255647
159 Proof of Concept
high severity Prototype Pollution
SNYK-JS-Y18N-1021887
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
159 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-SOCKETIOPARSER-1056752
159 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-SOCKETIOPARSER-1056752
159 Proof of Concept
high severity Prototype Pollution
SNYK-JS-INI-1048974
159 Proof of Concept
high severity Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922
159 No Known Exploit
high severity Code Injection
SNYK-JS-LODASH-1040724
159 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
159 No Known Exploit
high severity Prototype Poisoning
SNYK-JS-QS-3153490
159 Proof of Concept
high severity Prototype Poisoning
SNYK-JS-QS-3153490
159 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
159 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818
159 No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JS-BOOTSTRAP-7444580
159 Proof of Concept
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181
159 Proof of Concept
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610
159 Proof of Concept
medium severity Out-of-bounds Read
SNYK-JS-NODESASS-541002
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
159 Proof of Concept
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-6124857
159 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-BOOTSTRAP-7444593
159 Proof of Concept
low severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2396346
159 No Known Exploit
critical severity Improper Input Validation
SNYK-JS-SOCKETIOPARSER-3091012
159 No Known Exploit
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610
159 Proof of Concept
medium severity Server-Side Request Forgery (SSRF)
SNYK-JS-AXIOS-1038255
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BROWSERSLIST-1090194
159 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-YARGSPARSER-560381
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-1072471
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
159 Proof of Concept
medium severity Out-of-bounds Read
SNYK-JS-NODESASS-540958
159 Proof of Concept
medium severity Uncontrolled Recursion
SNYK-JS-NODESASS-540964
159 Proof of Concept
medium severity Denial of Service (DoS)
SNYK-JS-NODESASS-540978
159 Proof of Concept
medium severity NULL Pointer Dereference
SNYK-JS-NODESASS-540992
159 Proof of Concept
medium severity Out-of-Bounds
SNYK-JS-NODESASS-540998
159 Proof of Concept
medium severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909
159 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-TOUGHCOOKIE-5672873
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
159 Proof of Concept
medium severity Insecure Defaults
SNYK-JS-SOCKETIO-1024859
159 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-JSON5-3182856
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1090595
159 Proof of Concept
medium severity Server-side Request Forgery (SSRF)
SNYK-JS-REQUEST-3361831
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SCSSTOKENIZER-2339884
159 No Known Exploit
low severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2396346
159 No Known Exploit
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462
159 Proof of Concept
medium severity Improper Certificate Validation
SNYK-JS-NODESASS-1059081
159 No Known Exploit
medium severity Out-of-Bounds
SNYK-JS-NODESASS-535498
159 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
159 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
159 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
159 Proof of Concept
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795
159 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758
159 No Known Exploit
critical severity Improper Input Validation
SNYK-JS-SOCKETIOPARSER-3091012
159 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640
159 Proof of Concept
Release notes
Package name: @babel/core
  • 7.25.2 - 2024-07-30

    v7.25.2 (2024-07-30)

    🐛 Bug Fix

    • babel-core, babel-traverse

    Committers: 2

  • 7.24.9 - 2024-07-15

    v7.24.9 (2024-07-15)

    🐛 Bug Fix

    💅 Polish

    • babel-generator, babel-plugin-transform-optional-chaining

    🏠 Internal

    • babel-helper-module-transforms

    Committers: 5

  • 7.24.8 - 2024-07-11
  • 7.24.7 - 2024-06-05
  • 7.24.6 - 2024-05-24
  • 7.24.5 - 2024-04-29
  • 7.24.4 - 2024-04-03
  • 7.24.3 - 2024-03-20
  • 7.24.1 - 2024-03-19
  • 7.24.0 - 2024-02-28
  • 7.23.9 - 2024-01-25
  • 7.23.7 - 2023-12-29
  • 7.23.6 - 2023-12-11
  • 7.23.5 - 2023-11-29
  • 7.23.3 - 2023-11-09
  • 7.23.2 - 2023-10-12
  • 7.23.0 - 2023-09-25
  • 7.22.20 - 2023-09-16
  • 7.22.19 - 2023-09-14
  • 7.22.18 - 2023-09-14
  • 7.22.17 - 2023-09-08
  • 7.22.15 - 2023-09-04
  • 7.22.11 - 2023-08-24
  • 7.22.10 - 2023-08-07
  • 7.22.9 - 2023-07-12
  • 7.22.8 - 2023-07-06
  • 7.22.7 - 2023-07-06
  • 7.22.6 - 2023-07-04
  • 7.22.5 - 2023-06-08
  • 7.22.1 - 2023-05-26
  • 7.22.0 - 2023-05-26
  • 7.21.8 - 2023-05-02
  • 7.21.5 - 2023-04-28
  • 7.21.4 - 2023-03-31
  • 7.21.4-esm.4 - 2023-04-04
  • 7.21.4-esm.3 - 2023-04-04
  • 7.21.4-esm.2 - 2023-04-04
  • 7.21.4-esm.1 - 2023-04-04
  • 7.21.4-esm - 2023-04-04
  • 7.21.3 - 2023-03-14
  • 7.21.0 - 2023-02-20
  • 7.20.12 - 2023-01-04
  • 7.20.7 - 2022-12-22
  • 7.20.5 - 2022-11-28
  • 7.20.2 - 2022-11-04
  • 7.19.6 - 2022-10-20
  • 7.19.3 - 2022-09-27
  • 7.19.1 - 2022-09-14
  • 7.19.0 - 2022-09-05
  • 7.18.13 - 2022-08-22
  • 7.18.10 - 2022-08-01
  • 7.18.9 - 2022-07-18
  • 7.18.6 - 2022-06-27
  • 7.18.5 - 2022-06-13
  • 7.18.2 - 2022-05-25
  • 7.18.0 - 2022-05-19
  • 7.17.12 - 2022-05-16
  • 7.17.10 - 2022-04-29
  • 7.17.9 - 2022-04-06
  • 7.17.8 - 2022-03-18
  • 7.17.7 - 2022-03-14
  • 7.17.5 - 2022-02-17
  • 7.17.4 - 2022-02-15
  • 7.17.3 - 2022-02-15
  • 7.17.2 - 2022-02-08
  • 7.17.0 - 2022-02-02
  • 7.16.12 - 2022-01-22
  • 7.16.10 - 2022-01-19
  • 7.16.7 - 2021-12-31
  • 7.16.5 - 2021-12-13
  • 7.16.0 - 2021-10-29
  • 7.15.8 - 2021-10-06
  • 7.15.5 - 2021-09-04
  • 7.15.4 - 2021-09-02
  • 7.15.0 - 2021-08-04
  • 7.14.8 - 2021-07-20
  • 7.14.6 - 2021-06-14
  • 7.14.5 - 2021-06-09
  • 7.14.3 - 2021-05-17
  • 7.14.2 - 2021-05-12
  • 7.14.0 - 2021-04-29
  • 7.13.16 - 2021-04-20
  • 7.13.15 - 2021-04-08
  • 7.13.14 - 2021-03-29
  • 7.13.13 - 2021-03-26
  • 7.13.10 - 2021-03-08
  • 7.13.8 - 2021-02-26
  • 7.13.1 - 2021-02-23
  • 7.13.0 - 2021-02-22
  • 7.12.17 - 2021-02-18
  • 7.12.16 - 2021-02-11
  • 7.12.13 - 2021-02-03
  • 7.12.10 - 2020-12-09
  • 7.12.9 - 2020-11-24
  • 7.12.8 - 2020-11-23
  • 7.12.7 - 2020-11-20
  • 7.12.3 - 2020-10-16
from @babel/core GitHub release notes
Package name: @babel/preset-env
  • 7.25.4 - 2024-08-22

    v7.25.4 (2024-08-22)

    🐛 Bug Fix

    💅 Polish

    • babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
    • babel-generator, babel-plugin-transform-class-properties
    • babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread

    🔬 Output optimization

    Committers: 4

  • 7.25.3 - 2024-07-31

    v7.25.3 (2024-07-31)

    🐛 Bug Fix

    • babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse

    🏠 Internal

    Committers: 2

  • 7.25.2 - 2024-07-30

    v7.25.2 (2024-07-30)

    🐛 Bug Fix

    • babel-core, babel-traverse

    Committers: 2

  • 7.25.0 - 2024-07-26

    v7.25.0 (2024-07-26)

    Thanks @ davidtaylorhq and @ slatereax for your first PR!

    You can find the release blog post with some highlights at https://babeljs.io/blog/2024/07/26/7.25.0.

    👓 Spec Compliance

    • babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
    • babel-plugin-transform-typescript
      • #16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@ liuxingbaoyu)

    🚀 New Feature

    • babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types
    • babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse
    • babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types
    • babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse
    • babel-core, babel-parser
    • babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env
    • babel-plugin-transform-block-scoping, babel-traverse, babel-types
    • babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules
    • babel-helper-transform-fixture-test-runner, babel-node
    • babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone
      • #16445 Add duplicate-named-capturing-groups-regex to preset-env (@ JLHwung)

    🐛 Bug Fix

    🏠 Internal

    • Other
    • babel-generator
    • babel-helper-function-name, babel-plugin-transform-arrow-functions, babel-plugin-transform-function-name, babel-preset-env, babel-traverse

    🏃‍♀️ Performance

    • babel-parser, babel-plugin-proposal-pipeline-operator

    🔬 Output optimization

    • babel-plugin-transform-classes
    • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-object-super, babel-plugin-transform-private-methods, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
    • babel-plugin-transform-class-properties, babel-plugin-transform-classes

    Committers: 6

  • 7.24.8 - 2024-07-11
  • 7.24.7 - 2024-06-05
  • 7.24.6 - 2024-05-24
  • 7.24.5 - 2024-04-29
  • 7.24.4 - 2024-04-03
  • 7.24.3 - 2024-03-20
  • 7.24.1 - 2024-03-19
  • 7.24.0 - 2024-02-28
  • 7.23.9 - 2024-01-25
  • 7.23.8 - 2024-01-08
  • 7.23.7 - 2023-12-29
  • 7.23.6 - 2023-12-11
  • 7.23.5 - 2023-11-29
  • 7.23.3 - 2023-11-09
  • 7.23.2 - 2023-10-11
  • 7.22.20 - 2023-09-16
  • 7.22.15 - 2023-09-04
  • 7.22.14 - 2023-08-30
  • 7.22.10 - 2023-08-07
  • 7.22.9 - 2023-07-12
  • 7.22.7 - 2023-07-06
  • 7.22.6 - 2023-07-04
  • 7.22.5 - 2023-06-08
  • 7.22.4 - 2023-05-29
  • 7.22.2 - 2023-05-26
  • 7.22.1 - 2023-05-26
  • 7.22.0 - 2023-05-26
  • 7.21.5 - 2023-04-28
  • 7.21.4 - 2023-03-31
  • 7.21.4-esm.4 - 2023-04-04
  • 7.21.4-esm.3 - 2023-04-04
  • 7.21.4-esm.2 - 2023-04-04
  • 7.21.4-esm.1 - 2023-04-04
  • 7.21.4-esm - 2023-04-04
  • 7.20.2 - 2022-11-04
  • 7.19.4 - 2022-10-10
  • 7.19.3 - 2022-09-27
  • 7.19.1 - 2022-09-14
  • 7.19.0 - 2022-09-05
  • 7.18.10 - 2022-08-01
  • 7.18.9 - 2022-07-18
  • 7.18.6 - 2022-06-27
  • 7.18.2 - 2022-05-25
  • 7.18.0 - 2022-05-19
  • 7.17.12 - 2022-05-16
  • 7.17.10 - 2022-04-29
  • 7.16.11 - 2022-01-20
  • 7.16.10 - 2022-01-19
  • 7.16.8 - 2022-01-10
  • 7.16.7 - 2021-12-31
  • 7.16.5 - 2021-12-13
  • 7.16.4 - 2021-11-16
  • 7.16.0 - 2021-10-29
  • 7.15.8 - 2021-10-06
  • 7.15.6 - 2021-09-09
  • 7.15.4 - 2021-09-02
  • 7.15.0 - 2021-08-04
  • 7.14.9 - 2021-08-01
  • 7.14.8 - 2021-07-20
  • 7.14.7 - 2021-06-21
  • 7.14.5 - 2021-06-09
  • 7.14.4 - 2021-05-28
  • 7.14.2 - 2021-05-12
  • 7.14.1 - 2021-05-04
  • 7.14.0 - 2021-04-29
  • 7.13.15 - 2021-04-08
  • 7.13.12 - 2021-03-22
  • 7.13.10 - 2021-03-08
  • 7.13.9 - 2021-03-01
  • 7.13.8 - 2021-02-26
  • 7.13.5 - 2021-02-23
  • 7.13.0 - 2021-02-22
  • 7.12.17 - 2021-02-18
  • 7.12.16 - 2021-02-11
  • 7.12.13 - 2021-02-03
  • 7.12.11 - 2020-12-15
  • 7.12.10 - 2020-12-09
  • 7.12.7 - 2020-11-20
  • 7.12.1 - 2020-10-15
from @babel/preset-env GitHub release notes
Package name: @fortawesome/fontawesome-free from @fortawesome/fontawesome-free GitHub release notes
Package name: bootstrap
  • 5.3.3 - 2024-02-20

    Highlights

    • Fixed a breaking change introduced with color modes where it was required to manually import variables-dark.scss when building Bootstrap with Sass. Now, _variables.scss will automatically import _variables-dark.scss. If you were already importing _variables-dark.scss manually, you should keep doing it as it won't break anything and will be the way to go in v6.
    • Fixed a regression in the selector engine that wasn't able to handle multiple IDs anymore.

    Color modes

    • Badges now use the .text-bg-* text utilities to be certain that the text is always readable (especially when the customized colors are different in light and dark modes).
    • Fixed our color-modes.js script to handle the case where the OS is set to light mode and the auto color mode is used on the website. If you copied the script from our docs, you should apply this change to your own script.
    • Fixed color schemes description in the color modes documentation to show that color-scheme() only accept light and dark values as parameters.

    Miscellaneous

    • Allowed <dl>, <dt> and <dd> in the sanitizer.
    • Dropped evenly items distribution for modal and offcanvas headers.
    • Fixed the accordion CSS selectors to avoid inheritance issues when nesting accordions.
    • Fixed the focus box-shadow for the validation stated form controls.
    • Fixed the focus ring on focused checked buttons.
    • Fixed the product example mobile navbar toggler.
    • Changed the RTL processing of carousel control icons.

    🎨 CSS

    • #37508: Use child combinators to avoid inheriting parent accordion's flush styles
    • #38719: Fix focus box-shadow for validation stated form-controls
    • #38884: fix border-radius on radio-switch
    • #39294: Tests: update navbar in visual modal test

Snyk has created this PR to upgrade:
  - @babel/core from 7.12.3 to 7.25.2.
    See this package in npm: https://www.npmjs.com/package/@babel/core
  - @babel/preset-env from 7.12.1 to 7.25.4.
    See this package in npm: https://www.npmjs.com/package/@babel/preset-env
  - @fortawesome/fontawesome-free from 5.15.1 to 6.6.0.
    See this package in npm: https://www.npmjs.com/package/@fortawesome/fontawesome-free
  - babel-preset-minify from 0.5.1 to 0.5.2.
    See this package in npm: https://www.npmjs.com/package/babel-preset-minify
  - bootstrap from 4.5.3 to 5.3.3.
    See this package in npm: https://www.npmjs.com/package/bootstrap
  - browser-sync from 2.26.13 to 3.0.2.
    See this package in npm: https://www.npmjs.com/package/browser-sync
  - del from 6.0.0 to 7.1.0.
    See this package in npm: https://www.npmjs.com/package/del
  - gh-pages from 3.1.0 to 6.1.1.
    See this package in npm: https://www.npmjs.com/package/gh-pages
  - gulp from 4.0.2 to 5.0.0.
    See this package in npm: https://www.npmjs.com/package/gulp
  - gulp-autoprefixer from 7.0.1 to 9.0.0.
    See this package in npm: https://www.npmjs.com/package/gulp-autoprefixer
  - gulp-sass from 4.1.0 to 5.1.0.
    See this package in npm: https://www.npmjs.com/package/gulp-sass
  - gulp-sourcemaps from 2.6.5 to 3.0.0.
    See this package in npm: https://www.npmjs.com/package/gulp-sourcemaps
  - jquery from 3.5.1 to 3.7.1.
    See this package in npm: https://www.npmjs.com/package/jquery
  - popper.js from 1.16.0 to 1.16.1.
    See this package in npm: https://www.npmjs.com/package/popper.js

See this project in Snyk:
https://app.snyk.io/org/cachiman/project/718d13fb-cfe5-43c0-b66e-2f9e7d9f3dda?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

google-cla bot commented Sep 20, 2024

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Copy link

sonarcloud bot commented Sep 20, 2024

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants