Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: , , , , , , , , , , , , , , , , , , apexcharts, axios, lucide-react, react-hook-form, react-router-dom, react-tooltip, tailwind-merge, zustand #64

Open
wants to merge 1 commit into
base: development
Choose a base branch
from

Conversation

bernardarhia
Copy link
Contributor

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@radix-ui/react-slot
from 1.0.2 to 1.1.0 | 8 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-dialog
from 1.0.5 to 1.1.1 | 18 versions ahead of your current version | 3 months ago
on 2024-06-21
@radix-ui/react-alert-dialog
from 1.0.5 to 1.1.1 | 17 versions ahead of your current version | 3 months ago
on 2024-06-21
@radix-ui/react-avatar
from 1.0.4 to 1.1.0 | 8 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-checkbox
from 1.0.4 to 1.1.1 | 10 versions ahead of your current version | 2 months ago
on 2024-06-28
@radix-ui/react-dropdown-menu
from 2.0.6 to 2.1.1 | 21 versions ahead of your current version | 3 months ago
on 2024-06-21
@radix-ui/react-label
from 2.0.2 to 2.1.0 | 15 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-popover
from 1.0.7 to 1.1.1 | 19 versions ahead of your current version | 3 months ago
on 2024-06-21
@radix-ui/react-radio-group
from 1.1.3 to 1.2.0 | 19 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-scroll-area
from 1.0.5 to 1.1.0 | 20 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-select
from 2.0.0 to 2.1.1 | 22 versions ahead of your current version | 3 months ago
on 2024-06-21
@radix-ui/react-slider
from 1.1.2 to 1.2.0 | 11 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-switch
from 1.0.3 to 1.1.0 | 8 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-toast
from 1.1.5 to 1.2.1 | 16 versions ahead of your current version | 3 months ago
on 2024-06-21
@reduxjs/toolkit
from 2.2.5 to 2.2.7 | 2 versions ahead of your current version | a month ago
on 2024-07-27
@tanstack/react-form
from 0.13.7 to 0.29.1 | 39 versions ahead of your current version | a month ago
on 2024-08-12
@tanstack/react-query
from 5.49.2 to 5.51.23 | 15 versions ahead of your current version | a month ago
on 2024-08-08
@tanstack/react-table
from 8.17.3 to 8.20.1 | 5 versions ahead of your current version | a month ago
on 2024-08-03
apexcharts
from 3.49.1 to 3.52.0 | 4 versions ahead of your current version | a month ago
on 2024-08-05
axios
from 1.7.2 to 1.7.4 | 2 versions ahead of your current version | 25 days ago
on 2024-08-13
lucide-react
from 0.400.0 to 0.428.0 | 28 versions ahead of your current version | 22 days ago
on 2024-08-16
react-hook-form
from 7.52.0 to 7.52.2 | 2 versions ahead of your current version | a month ago
on 2024-08-03
react-router-dom
from 6.23.1 to 6.26.1 | 13 versions ahead of your current version | 23 days ago
on 2024-08-15
react-tooltip
from 5.27.1 to 5.28.0 | 2 versions ahead of your current version | a month ago
on 2024-08-04
tailwind-merge
from 2.3.0 to 2.5.2 | 28 versions ahead of your current version | a month ago
on 2024-08-12
zustand
from 4.5.4 to 4.5.5 | 1 version ahead of your current version | 23 days ago
on 2024-08-15

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Server-side Request Forgery (SSRF)
SNYK-JS-AXIOS-7361793
801 Proof of Concept
Release notes
Package name: @radix-ui/react-slot
  • 1.1.0 - 2024-06-19
  • 1.1.0-rc.7 - 2024-06-19
  • 1.1.0-rc.6 - 2024-06-11
  • 1.1.0-rc.5 - 2024-06-11
  • 1.1.0-rc.4 - 2024-06-10
  • 1.1.0-rc.3 - 2024-06-03
  • 1.1.0-rc.2 - 2024-06-03
  • 1.1.0-rc.1 - 2024-06-03
  • 1.0.2 - 2023-05-26
from @radix-ui/react-slot GitHub release notes
Package name: @radix-ui/react-dialog
  • 1.1.1 - 2024-06-21
  • 1.1.1-rc.1 - 2024-06-21
  • 1.1.0 - 2024-06-19
  • 1.1.0-rc.9 - 2024-06-19
  • 1.1.0-rc.8 - 2024-06-11
  • 1.1.0-rc.7 - 2024-06-11
  • 1.1.0-rc.6 - 2024-06-11
  • 1.1.0-rc.5 - 2024-06-11
  • 1.1.0-rc.4 - 2024-06-10
  • 1.1.0-rc.3 - 2024-06-03
  • 1.1.0-rc.2 - 2024-06-03
  • 1.1.0-rc.1 - 2024-06-03
  • 1.0.6-rc.6 - 2024-06-03
  • 1.0.6-rc.5 - 2024-03-14
  • 1.0.6-rc.4 - 2024-03-12
  • 1.0.6-rc.3 - 2024-03-07
  • 1.0.6-rc.2 - 2024-03-06
  • 1.0.6-rc.1 - 2024-03-06
  • 1.0.5 - 2023-09-25
from @radix-ui/react-dialog GitHub release notes
Package name: @radix-ui/react-alert-dialog
  • 1.1.1 - 2024-06-21
  • 1.1.1-rc.1 - 2024-06-21
  • 1.1.0 - 2024-06-19
  • 1.1.0-rc.8 - 2024-06-19
  • 1.1.0-rc.7 - 2024-06-11
  • 1.1.0-rc.6 - 2024-06-11
  • 1.1.0-rc.5 - 2024-06-11
  • 1.1.0-rc.4 - 2024-06-10
  • 1.1.0-rc.3 - 2024-06-03
  • 1.1.0-rc.2 - 2024-06-03
  • 1.1.0-rc.1 - 2024-06-03
  • 1.0.6-rc.6 - 2024-06-03
  • 1.0.6-rc.5 - 2024-03-14
  • 1.0.6-rc.4 - 2024-03-12
  • 1.0.6-rc.3 - 2024-03-07
  • 1.0.6-rc.2 - 2024-03-06
  • 1.0.6-rc.1 - 2024-03-06
  • 1.0.5 - 2023-09-25
from @radix-ui/react-alert-dialog GitHub release notes
Package name: @radix-ui/react-avatar
  • 1.1.0 - 2024-06-19
  • 1.1.0-rc.7 - 2024-06-19
  • 1.1.0-rc.6 - 2024-06-11
  • 1.1.0-rc.5 - 2024-06-11
  • 1.1.0-rc.4 - 2024-06-10
  • 1.1.0-rc.3 - 2024-06-03
  • 1.1.0-rc.2 - 2024-06-03
  • 1.1.0-rc.1 - 2024-06-03
  • 1.0.4 - 2023-09-25
from @radix-ui/react-avatar GitHub release notes
Package name: @radix-ui/react-checkbox
  • 1.1.1 - 2024-06-28
  • 1.1.1-rc.1 - 2024-06-28
  • 1.1.0 - 2024-06-19
  • 1.1.0-rc.7 - 2024-06-19
  • 1.1.0-rc.6 - 2024-06-11
  • 1.1.0-rc.5 - 2024-06-11
  • 1.1.0-rc.4 - 2024-06-10
  • 1.1.0-rc.3 - 2024-06-03
  • 1.1.0-rc.2 - 2024-06-03
  • 1.1.0-rc.1 - 2024-06-03
  • 1.0.4 - 2023-05-26
from @radix-ui/react-checkbox GitHub release notes
Package name: @radix-ui/react-dropdown-menu
  • 2.1.1 - 2024-06-21
  • 2.1.1-rc.1 - 2024-06-21
  • 2.1.0 - 2024-06-19
  • 2.1.0-rc.7 - 2024-06-19
  • 2.1.0-rc.6 - 2024-06-11
  • 2.1.0-rc.5 - 2024-06-11
  • 2.1.0-rc.4 - 2024-06-10
  • 2.1.0-rc.3 - 2024-06-03
  • 2.1.0-rc.2 - 2024-06-03
  • 2.1.0-rc.1 - 2024-06-03
  • 2.0.7-rc.11 - 2024-06-03
  • 2.0.7-rc.10 - 2024-03-14
  • 2.0.7-rc.9 - 2024-03-12
  • 2.0.7-rc.8 - 2024-03-07
  • 2.0.7-rc.7 - 2024-03-06
  • 2.0.7-rc.6 - 2024-03-06
  • 2.0.7-rc.5 - 2024-03-05
  • 2.0.7-rc.4 - 2024-03-01
  • 2.0.7-rc.3 - 2024-02-29
  • 2.0.7-rc.2 - 2024-02-29
  • 2.0.7-rc.1 - 2024-02-28
  • 2.0.6 - 2023-09-25
from @radix-ui/react-dropdown-menu GitHub release notes
Package name: @radix-ui/react-label
  • 2.1.0 - 2024-06-19
  • 2.1.0-rc.7 - 2024-06-19
  • 2.1.0-rc.6 - 2024-06-11
  • 2.1.0-rc.5 - 2024-06-11
  • 2.1.0-rc.4 - 2024-06-10
  • 2.1.0-rc.3 - 2024-06-03
  • 2.1.0-rc.2 - 2024-06-03
  • 2.1.0-rc.1 - 2024-06-03
  • 2.0.3-rc.7 - 2024-06-03
  • 2.0.3-rc.6 - 2024-03-14
  • 2.0.3-rc.5 - 2024-03-12
  • 2.0.3-rc.4 - 2024-03-07
  • 2.0.3-rc.3 - 2024-03-06
  • 2.0.3-rc.2 - 2024-03-06
  • 2.0.3-rc.1 - 2024-03-05
  • 2.0.2 - 2023-05-26
from @radix-ui/react-label GitHub release notes
Package name: @radix-ui/react-popover
  • 1.1.1 - 2024-06-21
  • 1.1.1-rc.1 - 2024-06-21
  • 1.1.0 - 2024-06-19
  • 1.1.0-rc.7 - 2024-06-19
  • 1.1.0-rc.6 - 2024-06-11
  • 1.1.0-rc.5 - 2024-06-11
  • 1.1.0-rc.4 - 2024-06-10
  • 1.1.0-rc.3 - 2024-06-03
  • 1.1.0-rc.2 - 2024-06-03
  • 1.1.0-rc.1 - 2024-06-03
  • 1.0.8-rc.9 - 2024-06-03
  • 1.0.8-rc.8 - 2024-03-14
  • 1.0.8-rc.7 - 2024-03-12
  • 1.0.8-rc.6 - 2024-03-07
  • 1.0.8-rc.5 - 2024-03-06
  • 1.0.8-rc.4 - 2024-03-06
  • 1.0.8-rc.3 - 2024-03-05
  • 1.0.8-rc.2 - 2024-03-01
  • 1.0.8-rc.1 - 2024-02-29
  • 1.0.7 - 2023-09-25
from @radix-ui/react-popover GitHub release notes
Package name: @radix-ui/react-radio-group
  • 1.2.0 - 2024-06-19
  • 1.2.0-rc.7 - 2024-06-19
  • 1.2.0-rc.6 - 2024-06-11
  • 1.2.0-rc.5 - 2024-06-11
  • 1.2.0-rc.4 - 2024-06-10
  • 1.2.0-rc.3 - 2024-06-03
  • 1.2.0-rc.2 - 2024-06-03
  • 1.2.0-rc.1 - 2024-06-03
  • 1.1.4-rc.11 - 2024-06-03
  • 1.1.4-rc.10 - 2024-03-14
  • 1.1.4-rc.9 - 2024-03-12
  • 1.1.4-rc.8 - 2024-03-07
  • 1.1.4-rc.7 - 2024-03-06
  • 1.1.4-rc.6 - 2024-03-06
  • 1.1.4-rc.5 - 2024-03-05
  • 1.1.4-rc.4 - 2024-03-01
  • 1.1.4-rc.3 - 2024-02-29
  • 1.1.4-rc.2 - 2024-02-29
  • 1.1.4-rc.1 - 2024-02-28
  • 1.1.3 - 2023-05-26
from @radix-ui/react-radio-group GitHub release notes
Package name: @radix-ui/react-scroll-area
  • 1.1.0 - 2024-06-19
  • 1.1.0-rc.7 - 2024-06-19
  • 1.1.0-rc.6 - 2024-06-11
  • 1.1.0-rc.5 - 2024-06-11
  • 1.1.0-rc.4 - 2024-06-10
  • 1.1.0-rc.3 - 2024-06-03
  • 1.1.0-rc.2 - 2024-06-03
  • 1.1.0-rc.1 - 2024-06-03
  • 1.0.6-rc.12 - 2024-06-03
  • 1.0.6-rc.11 - 2024-03-14
  • 1.0.6-rc.10 - 2024-03-12
  • 1.0.6-rc.9 - 2024-03-07
  • 1.0.6-rc.8 - 2024-03-06
  • 1.0.6-rc.7 - 2024-03-06
  • 1.0.6-rc.6 - 2024-03-05
  • 1.0.6-rc.5 - 2024-03-01
  • 1.0.6-rc.4 - 2024-02-29
  • 1.0.6-rc.3 - 2024-02-29
  • 1.0.6-rc.2 - 2024-02-28
  • 1.0.6-rc.1 - 2024-02-28
  • 1.0.5 - 2023-09-25
from @radix-ui/react-scroll-area GitHub release notes
Package name: @radix-ui/react-select
  • 2.1.1 - 2024-06-21
  • 2.1.1-rc.1 - 2024-06-21
  • 2.1.0 - 2024-06-19
  • 2.1.0-rc.7 - 2024-06-19
  • 2.1.0-rc.6 - 2024-06-11
  • 2.1.0-rc.5 - 2024-06-11
  • 2.1.0-rc.4 - 2024-06-10
  • 2.1.0-rc.3 - 2024-06-03
  • 2.1.0-rc.2 - 2024-06-03
  • 2.1.0-rc.1 - 2024-06-03
  • 2.0.1-rc.12 - 2024-06-03
  • 2.0.1-rc.11 - 2024-03-14
  • 2.0.1-rc.10 - 2024-03-12
  • 2.0.1-rc.9 - 2024-03-07
  • 2.0.1-rc.8 - 2024-03-06
  • 2.0.1-rc.7 - 2024-03-06
  • 2.0.1-rc.6 - 2024-03-05
  • 2.0.1-rc.5 - 2024-03-01
  • 2.0.1-rc.4 - 2024-02-29
  • 2.0.1-rc.3 - 2024-02-29
  • 2.0.1-rc.2 - 2024-02-28
  • 2.0.1-rc.1 - 2024-02-28
  • 2.0.0 - 2023-09-25
from @radix-ui/react-select GitHub release notes
Package name: @radix-ui/react-slider
  • 1.2.0 - 2024-06-19
  • 1.2.0-rc.10 - 2024-06-19
  • 1.2.0-rc.9 - 2024-06-11
  • 1.2.0-rc.8 - 2024-06-11
  • 1.2.0-rc.7 - 2024-06-10
  • 1.2.0-rc.6 - 2024-06-03
  • 1.2.0-rc.5 - 2024-06-03
  • 1.2.0-rc.4 - 2024-06-03
  • 1.2.0-rc.3 - 2024-06-03
  • 1.2.0-rc.2 - 2024-03-14
  • 1.2.0-rc.1 - 2024-03-12
  • 1.1.2 - 2023-05-26
from @radix-ui/react-slider GitHub release notes
Package name: @radix-ui/react-switch
  • 1.1.0 - 2024-06-19
  • 1.1.0-rc.7 - 2024-06-19
  • 1.1.0-rc.6 - 2024-06-11
  • 1.1.0-rc.5 - 2024-06-11
  • 1.1.0-rc.4 - 2024-06-10
  • 1.1.0-rc.3 - 2024-06-03
  • 1.1.0-rc.2 - 2024-06-03
  • 1.1.0-rc.1 - 2024-06-03
  • 1.0.3 - 2023-05-26
from @radix-ui/react-switch GitHub release notes
Package name: @radix-ui/react-toast
  • 1.2.1 - 2024-06-21
  • 1.2.1-rc.1 - 2024-06-21
  • 1.2.0 - 2024-06-19
  • 1.2.0-rc.7 - 2024-06-19
  • 1.2.0-rc.6 - 2024-06-11
  • 1.2.0-rc.5 - 2024-06-11
  • 1.2.0-rc.4 - 2024-06-10
  • 1.2.0-rc.3 - 2024-06-03
  • 1.2.0-rc.2 - 2024-06-03
  • 1.2.0-rc.1 - 2024-06-03
  • 1.1.6-rc.6 - 2024-06-03
  • 1.1.6-rc.5 - 2024-03-14
  • 1.1.6-rc.4 - 2024-03-12
  • 1.1.6-rc.3 - 2024-03-07
  • 1.1.6-rc.2 - 2024-03-06
  • 1.1.6-rc.1 - 2024-03-06
  • 1.1.5 - 2023-09-25
from @radix-ui/react-toast GitHub release notes
Package name: @reduxjs/toolkit
  • 2.2.7 - 2024-07-27

    This bugfix release fixes issues with "TS type portability" errors, improves build artifact tree shaking behavior, and exports some additional TS types.

    Changelog

    TS Type Portability

    We've had a slew of issues reported around "TS type portability" errors, such as:

    The error messages are typically along the lines of:

    Type error: The inferred type of 'configureStore' cannot be named without a reference to '@ reduxjs/toolkit/node_modules/redux'. This is likely not portable. A type annotation is necessary.

    @ aryaemami59 did some deep investigation and concluded these were due to a mixture of using interface instead of type in most places, not pre-bundling our TS typedefs, and not exporting some of the unique symbols we use internally.

    Arya put together a highly detailed writeup and set of fixes in #4467: Fix: TypeScript Type Portability Issues, and that appears to resolve all of those issues we've seen. Thank you!

    Other Changes

    Arya also did significant work to improve RTK's treeshaking, tweaking internal definitions to let bundlers better separate out unused code.

    We've exported additional types like UpdateDefinitions and RetryOptions, per request.

    listenerMiddleware.withTypes() methods now allow passing in an ExtraArgument generic.

    What's Changed

    Full Changelog: v2.2.6...v2.2.7

  • 2.2.6 - 2024-06-29

    This bugfix release:

    • Brings internal useIsomorphicLayoutEffect usage in line with React Redux in React Native environments
    • Exports FetchBaseQueryArgs type
    • Fixes an issue in recent createEntityAdapter sorting perf improvements that could (in specific cases) cause Immer to throw an error

    What's Changed

    Full Changelog: v2.2.5...v2.2.6

  • 2.2.5 - 2024-05-16
from @reduxjs/toolkit GitHub release notes
Package name: @tanstack/react-form

Snyk has created this PR to upgrade:
  - @radix-ui/react-slot from 1.0.2 to 1.1.0.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-slot
  - @radix-ui/react-dialog from 1.0.5 to 1.1.1.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-dialog
  - @radix-ui/react-alert-dialog from 1.0.5 to 1.1.1.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-alert-dialog
  - @radix-ui/react-avatar from 1.0.4 to 1.1.0.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-avatar
  - @radix-ui/react-checkbox from 1.0.4 to 1.1.1.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-checkbox
  - @radix-ui/react-dropdown-menu from 2.0.6 to 2.1.1.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-dropdown-menu
  - @radix-ui/react-label from 2.0.2 to 2.1.0.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-label
  - @radix-ui/react-popover from 1.0.7 to 1.1.1.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-popover
  - @radix-ui/react-radio-group from 1.1.3 to 1.2.0.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-radio-group
  - @radix-ui/react-scroll-area from 1.0.5 to 1.1.0.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-scroll-area
  - @radix-ui/react-select from 2.0.0 to 2.1.1.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-select
  - @radix-ui/react-slider from 1.1.2 to 1.2.0.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-slider
  - @radix-ui/react-switch from 1.0.3 to 1.1.0.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-switch
  - @radix-ui/react-toast from 1.1.5 to 1.2.1.
    See this package in npm: https://www.npmjs.com/package/@radix-ui/react-toast
  - @reduxjs/toolkit from 2.2.5 to 2.2.7.
    See this package in npm: https://www.npmjs.com/package/@reduxjs/toolkit
  - @tanstack/react-form from 0.13.7 to 0.29.1.
    See this package in npm: https://www.npmjs.com/package/@tanstack/react-form
  - @tanstack/react-query from 5.49.2 to 5.51.23.
    See this package in npm: https://www.npmjs.com/package/@tanstack/react-query
  - @tanstack/react-table from 8.17.3 to 8.20.1.
    See this package in npm: https://www.npmjs.com/package/@tanstack/react-table
  - apexcharts from 3.49.1 to 3.52.0.
    See this package in npm: https://www.npmjs.com/package/apexcharts
  - axios from 1.7.2 to 1.7.4.
    See this package in npm: https://www.npmjs.com/package/axios
  - lucide-react from 0.400.0 to 0.428.0.
    See this package in npm: https://www.npmjs.com/package/lucide-react
  - react-hook-form from 7.52.0 to 7.52.2.
    See this package in npm: https://www.npmjs.com/package/react-hook-form
  - react-router-dom from 6.23.1 to 6.26.1.
    See this package in npm: https://www.npmjs.com/package/react-router-dom
  - react-tooltip from 5.27.1 to 5.28.0.
    See this package in npm: https://www.npmjs.com/package/react-tooltip
  - tailwind-merge from 2.3.0 to 2.5.2.
    See this package in npm: https://www.npmjs.com/package/tailwind-merge
  - zustand from 4.5.4 to 4.5.5.
    See this package in npm: https://www.npmjs.com/package/zustand

See this project in Snyk:
https://app.snyk.io/org/bernardarhia/project/6812589b-7012-450a-9c14-160bf15f0025?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

netlify bot commented Sep 7, 2024

Deploy Preview for pos-staging-app ready!

Name Link
🔨 Latest commit ff99b9e
🔍 Latest deploy log https://app.netlify.com/sites/pos-staging-app/deploys/66dc24ed1b08ab0008185412
😎 Deploy Preview https://deploy-preview-64--pos-staging-app.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants