Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade bootstrap-vue from 2.21.2 to 2.22.0 #52

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

tghelere
Copy link
Owner

@tghelere tghelere commented May 8, 2022

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade bootstrap-vue from 2.21.2 to 2.22.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 21 days ago, on 2022-04-17.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Information Exposure
SNYK-JS-NODEFETCH-2342118
325/1000
Why? CVSS 6.5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: bootstrap-vue
  • 2.22.0 - 2022-04-17

    🚀 Features

    • b-link
      • #6811 Support exact-path and exact-path-active-class props for router link
    • b-form-tags
      • #6395 Adds focusin & focusout to wrapper and prevents firing multiple focus/blur events
      • #6347 Add feedback-aria-live prop
    • general
      • #6375 Add headerTag and footerTag props to all componets with header and footer
    • b-dropdown
      • #6339 Add toggle-attrs prop

    🐛 Bug Fixes

    • general
      • #6834 Replace sass division with multiplication
    • b-table
      • #6645 Selected table header text no longer prevents table row selection
      • #6606 Fix range selection of b-table
      • #6603 Set aria-sort when using sortKey and no-local-sorting
      • #6383 Default role to grid when selectable and table otherwise
      • #6382 Prefer user-provided role attribute
      • #6372 Add missing role="grid" when selectable
      • #6371 Header cell overflow for .sr-only sort label
      • #6355 Add missing sortKey field type and correct a typo
    • b-skeleton
      • #6858 Accepts custom attributes
    • nav-item-dropdown
      • 97bb97b Update dropdown to set correct aria-controls
    • b-dropdown
      • #6865 Set correct aria-haspopup attribute for the toggle button
      • #6367 Decrease delay when hiding inside a navbar on no-touch devices
    • utils/dom
    • docs
      • #6545 Use https:// urls in docs
    • b-form-group
      • #6346 Remove role="alert" from valid/invalid feedback
    • b-input-tags
      • #6389 Respect custom $input-color
    • b-link
      • #6374 Remove default values from vue-router pass-down props
    • b-img-lazy
      • #6349 Fix blank placeholder for Firefox
      • #6302 Fix blank-src not working
    • b-form-input/b-form-textarea
      • #6345 Legacy browser support

    🏡 Chore

    • tests
      • 8ce291b Refactor tests not to use $children
      • b16514b Remove useless localVue usage
      • ac8ebfe Replace find with findComponents
      • d113cc7 Remove createContainer helper
    • b-form-tags
      • #6752 Correct typo b-from-tags to b-form-tags
    • icons
      • #6611 Update Bootstrap Icons to v1.5.0
    • docs
      • #6466 Add new "Vuexy - Admin Dashboard" theme
      • #6368 Make sure the clicked anchor target is reflected in URL
    • ci
      • #6592 Update workflows to new Node.js versions
    • refactor
      • #6381 Move away from lifecycle hook listeners
      • #6356 Unify event variable names

    💖 Thanks to

    • Andrei Gheorghiu
    • Connor Forbes
    • Illya Klymov
    • JD
    • James Pickard
    • Jingsong Gao
    • John Franey
    • Jonathan Guberman
    • Joshua Wu
    • Konstantin
    • Lei Wang
    • Olena Horal
    • Pete Hegman
    • Rare Kang
    • Samuel Denis-D'Ortun
    • William
    • William Teixeira
    • magical-l
    • ochowei
    • xenolithviktor
  • 2.21.2 - 2021-01-01
    Read more
from bootstrap-vue GitHub release notes
Commit messages
Package name: bootstrap-vue
  • 93a7590 chore: simplify bootstrap version range in package.json
  • 94c810a build: update release scripts
  • 6c34b14 chore(deps): bump actions/checkout from 2 to 3 (#6928)
  • 048e847 chore(deps): bump prismjs from 1.25.0 to 1.27.0 (#6922)
  • 8501a32 chore(deps): bump minimist from 1.2.5 to 1.2.6 (#6949)
  • 6b3bd36 chore(deps): bump codecov/codecov-action from 2.1.0 to 3.0.0 (#6955)
  • 14ae1c7 chore(deps): bump actions/setup-node from 2.5.0 to 3.1.1 (#6953)
  • 2eb08fe chore(deps): bump actions/cache from 2.1.7 to 3.0.2 (#6954)
  • c645a33 chore(deps): bump node-fetch from 2.6.1 to 2.6.7 (#6903)
  • c9d244a chore(deps): bump shelljs from 0.8.4 to 0.8.5 (#6896)
  • 4222833 chore(deps): bump bootstrap from 4.5.3 to 4.6.0 (#6337)
  • 524652a chore(compat): fetch fresh template element when checking visibility
  • 48ec2e0 chore(deps-dev): bump terser from 5.7.0 to 5.10.0 (#6885)
  • dfbc56d chore(deps-dev): bump @ babel/standalone from 7.14.1 to 7.16.6 (#6884)
  • fefc76b chore(deps-dev): bump autoprefixer from 10.2.5 to 10.4.0 (#6883)
  • 7ea67d2 chore(deps-dev): bump improved-yarn-audit from 2.3.2 to 3.0.0 (#6881)
  • d2133b8 chore(deps-dev): bump eslint-plugin-prettier from 3.4.0 to 3.4.1 (#6880)
  • 9f70574 Update README.md (#6794)
  • 8ce291b chore(compat): refactor tests not to use $children
  • 6683001 chore(compat): fix table-sorting test
  • 92d588f chore(compat): refactor skeleton-wrapper test
  • 6353c31 chore(compat): deal with timing differences in Vue 2 and Vue 3
  • ccf62a4 chore(compat): replace toHaveBeenCalledLastWith with relaxed check
  • b1f6538 chore(compat): refactor icon search in component tree

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants