[Snyk] Upgrade: vue, axios, leaflet, vuetify #146
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- vue from 2.7.14 to 2.7.16.
See this package in npm: https://www.npmjs.com/package/vue
- axios from 0.28.0 to 0.28.1.
See this package in npm: https://www.npmjs.com/package/axios
- leaflet from 1.8.0 to 1.9.4.
See this package in npm: https://www.npmjs.com/package/leaflet
- vuetify from 2.7.1 to 2.7.2.
See this package in npm: https://www.npmjs.com/package/vuetify
See this project in Snyk:
https://app.snyk.io/org/julienchapron/project/bbfbd160-2d3e-4909-a3b2-b0e19f3cc6bb?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
vue
from 2.7.14 to 2.7.16 | 4 versions ahead of your current version | 9 months ago
on 2023-12-24
axios
from 0.28.0 to 0.28.1 | 1 version ahead of your current version | 5 months ago
on 2024-03-28
leaflet
from 1.8.0 to 1.9.4 | 5 versions ahead of your current version | a year ago
on 2023-05-18
vuetify
from 2.7.1 to 2.7.2 | 1 version ahead of your current version | 7 months ago
on 2024-02-14
Release notes
Package name: vue
-
2.7.16 - 2023-12-24
-
2.7.16-beta.2 - 2023-12-14
-
2.7.16-beta.1 - 2023-12-08
-
2.7.15 - 2023-10-23
-
2.7.14 - 2022-11-09
from vue GitHub release notesPackage name: axios
-
0.28.1 - 2024-03-28
- fix(backport): custom params serializer support (#6263)
- fix(backport): uncaught ReferenceError
-
0.28.0 - 2024-02-12
- fix(security): fixed CVE-2023-45857 by backporting
- Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)
- Fixing content-type header repeated #4745
- Fixed timeout error message for HTTP 4738
- Added
- URL params serializer (#4734)
- Fixed toFormData Blob issue on node>v17 #4728
- Adding types for progress event callbacks #4675
- Fixed max body length defaults #4731
- Added data URL support for node.js (#4725)
- Added isCancel type assert (#4293)
- Added the ability for the
- Add
- Allow type definition for axios instance methods (#4224)
- Fixed
- Fixed
- Adding Canceler parameters config and request (#4711)
- fix(types): allow to specify partial default headers for instance creation (#4185)
- Added
- Fixing Z_BUF_ERROR when no content (#4701)
- Fixed race condition on immediate requests cancellation (#4261)
- Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance #4248
- Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (#4229)
- Fix TS definition for AxiosRequestTransformer (#4201)
- Use type alias instead of interface for AxiosPromise (#4505)
- Include request and config when creating a CanceledError instance (#4659)
- Added generic TS types for the exposed toFormData helper (#4668)
- Optimized the code that checks cancellation (#4587)
- Replaced webpack with rollup (#4596)
- Added stack trace to AxiosError (#4624)
- Updated AxiosError.config to be optional in the type definition (#4665)
- Removed incorrect argument for NetworkError constructor (#4656)
from axios GitHub release notesRelease notes:
Release notes:
Bug Fixes
reqis not defined (#6307)Release notes:
Bug Fixes
withXSRFTokenoption to v0.x (#6091)Backports from v1.x:
axios.formToJSONmethod (#4735)url-encoded-formserializer to respect theformSerializerconfig (#4721)string[]toAxiosRequestHeaderstype (#4322)AxiosErrorstack capturing; (#4718)AxiosErrorstatus code type; (#4717)blobto the list of protocols supported by the browser (#4678)Package name: leaflet
🐞 Bug fixes
zoomAnimationisfalseand zooming viaflyToor pinch (#8794 by @ plainheart)toGeoJSON()still works with an empty array (#8737 by @ Falke-Design)LineUtilandPolyUtilonly iterate over array values and not properties (#8840 by @ Falke-Design)LineUtilandPolyUtilfor small layers (#8784 by @ Falke-Design)Tooltip-boundFeatureGroupthat contains a layer without agetElementmethod (#8890 by @ Falke-Design)Tooltipis not showing when loaded dynamically while moving the map (#8672 by @ theGOTOguy)noMoveStartoption not applying tofitBounds(#8911 by @ AbdullahSohail-SE)🙌 Accessibility
🐞 Bug fixes
Lglobal (#8536 by @ mourner)setMaxBounds(map.getBounds())(#8534 by @ rjackson)latLngsToCoords()does not return references passed to it (#7344 by @ marlo22)worldCopyJump()behavior is consistent when using a keyboard (#8562 by @ Falke-Design)popupopenevent (#8571 by @ Belair34)Popup(#8520 by @ rjackson)position: stickyfor map container (#8550 by @ tmiaa)🐞 Bug fixes
leaflet/dist/leaflet-src.esm.jsexplicitly instead to take advantage; ESM by default will come in v2) (#8493 by @ jonkoops)🧪 Tests
📝 Docs
Boundsequalsparameters in docs (#8500 by @ Falke-Design)Eventslistensnot propagating to parent objects, in particular fixing compatibility with Leaflet.markercluster plugin (#8211 by @ Falke-Design)⚡ Note on future versions
The v1.9 release is setting the stage for the first major version bump of Leaflet since 2016! A lot has changed since then, and it's time for Leaflet to grow together with the web platform.
After this release, we are branching off the 1.x code and putting it in maintenance mode — reserving potential 1.x releases only for critical bugfixes. Although version 2.0 is still far away and will take some time to take shape, we plan to make the following changes:
This has been a long time coming, but now that Internet Explorer is officially end-of-life, it's time to say goodbye. Going forward, Leaflet will move to an evergreen strategy that targets browsers like Firefox, Chrome, Edge and Safari.
To maintain backwards compatibility, Leaflet is written entirely in ES5, a version of JavaScript supported by legacy browsers. So we have not been able to make use of many great JavaScript features (e.g. standardized classes, instead having to rely on our own implementation). By adopting a more modern version of the ECMAScript standard, we can start working towards aligning Leaflet with what is expected from a modern JavaScript library.
When we released Leaflet v1, the landscape in the JavaScript world was very different and full of competing module standards such as CommonJS, AMD and UMD. Today, ECMAScript modules have become the clear way forward to unite the JavaScript ecosystem under one banner. Moving forward, Leaflet will only be distributed in a single standardized module system, greatly reducing complexity of our distributed code.
As a developer using Leaflet, the capital letter
Lis probably intimately familiar to you. This is the Leaflet global where all of Leaflet's functionality lives. To allow compiler tooling to better eliminate dead-code through a process called tree-shaking, we are removing this global variable. To preserve backwards compatibility with older plugins, we will provide a shim that can be imported manually that will restore this functionality.v1.9.0 changelog
color-adjusttoprint-color-adjust(#8211 by @ Malvoz)❇️ API changes
contentandlatLngoptions toPopup/Tooltipconstructors (#7783 by @ Falke-Design)Boundsto have the same functions asLatLngBounds(#7882 by @ Falke-Design)✨ Improvements
getCenter()calculation and move it toPolyUtil/LineUtil(#7603 by @ Falke-Design)maxBounds(#8168 by @ mourner)Events.listensto search for specific function (#8161 by @ Falke-Design)noMoveStartoption topanTo(#6685 by @ Chivano)FeatureCollectionhandling togeometryToLayer(#8163 by @ Falke-Design)🙌 Accessibility
Tooltipaccessibility (focus and voice over) (#8247 by @ alekzvik)role="presentation"from image tiles (#8172 by @ Malvoz)🐞 Bug fixes
map._moveoverrequestAnimFrame(#8328 by @ AMDvsTMD)_isClickDisabledto not throw no error if parent is removed from DOM (#8288 by @ Falke-Design)DomEvent.DoubleTapto ignore clicks on<label>s with aforattribute (#8227 by @ IvanSanchez)once()twice if same event is fired insideonce(#8190 by @ Falke-Design)map.getCenter()returning a mutable object (#8167 by @ mourner)min/maxZoomwhen used in combination withdetectRetina(#7328 by @ bozdoz)📝 Docs
anchortodata-anchor(#8174 by @ KnightJam1)🔧 Workflow
eslint-plugin-script-tags(#8331 by @ jonkoops)🧪 Tests
map.latLngToLayerPointmethod (#8407 by @ kreloaded)map.panTo(#8390 by @ anurag-dhamala)map.containerPointToLatLngandmap.latLngToContainerPoint(#8384 by @ abhi3315)Layer._addZoomLimit(#8037 by @ zishiwu123)Map(#8206 by @ stephenspol)CircleMarker._containsPoint(#8340 by @ gernhard1337)