Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade vuetify from 3.5.17 to 3.6.3 #1313

Merged
merged 1 commit into from
May 28, 2024

Conversation

brittag
Copy link
Contributor

@brittag brittag commented May 24, 2024

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade vuetify from 3.5.17 to 3.6.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 9 versions ahead of your current version.

  • The recommended version was released on 23 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
169 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LOADERUTILS-3043105
169 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-JSON5-3182856
169 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992
169 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943
169 No Known Exploit
Release notes
Package name: vuetify
  • 3.6.3 - 2024-05-02

    🔄 Reverts

  • 3.6.2 - 2024-05-01

    🔧 Bug Fixes

  • 3.6.1 - 2024-04-30

    See v3.6 Release here

    🚀 Features

    • VConfirmEdit/VEmptyState/VFab/VSpeedDial/VSparkline: promote from labs (c8a03cd)

    🔧 Bug Fixes

    • VSnackbar: return correct children (5056034)
  • 3.6.0 - 2024-04-30

    v3.6.0 (Nebula)

    Welcome to the v3.6.0 release of Vuetify!


    Hero

    💪 Support Vuetify Development

    Vuetify is an open source MIT project that has been made possible due to the generous contributions by our sponsors and backers. If you are interested in supporting this project, please consider:

    📖 Table of Contents

    📑 Upgrade guide

    • If you want to opt out of the mobile data table view, set the mobile prop to false
    • Remove any manual imports of Labs components that were promoted as of this release

    🏅 Component promotions

    The following components have been promoted to the core framework from labs:

    confirm-edit

    The confirm edit component is a powerful tool that allows you to confirm changes to a field before they are saved. This is especially useful in scenarios where you want to prevent accidental changes to a field.

    empty-state

    The empty state component is a simple way to display a message when a list or page is empty. This is useful for informing users that there is no data to display.

    fab

    The floating action button is a layout aware component that is always visible on the screen. It can also be used inline in conjunction with cards and lists.

    sparkline

    The sparkline component is a simple way to display a small chart inline with text. This is useful for displaying trends or other data in a compact format.

    speed-dial

    The speed dial component is a floating action button that expands into a menu of actions. This is useful for providing quick access to common actions in a compact format.

    💯 Release notes

    🚀 Features

    • display: add explicit prop that overrides mobile state (fafc39f)
    • framework: support css cascade layers (#19641) (4820347)
    • VBtn: add new readonly prop (72f33dc)
    • VDataTable: add mobile view (#19431) (66880ce)
    • VLayout: add dimension support (0114108)
    • VNavigationDrawer: add new persistent prop (#19552) (74cc2bf)
    • VSlideGroup: replace css transform with native scroll (#17286) (93bd7b5)

    🔧 Bug Fixes

    • layout: translate full amount if element and layout size is 0 (99ea55d)
    • VDataTable: add missing scss variable for loading opacity (69b5cc8)
    • VDialog: adjust styling to better match material spec (383bbdc)
    • VNavigationDrawer: don't restrict elementSize when location is top or bottom (1ee802d)
    • VOverlay: move targetRef out of props (5e40cc8), closes #19685

    🧪 Labs

  • 3.6.0-beta.0.0 - 2024-04-23

    🚀 Features

    🔧 Bug Fixes

    • VDataTable: add missing scss variable for loading opacity (69b5cc8)
    • VDialog: adjust styling to better match material spec (383bbdc)

    🔬 Code Refactoring

    • VSlideGroup: replace css transform with native scroll (#17286) (93bd7b5)

    🧪 Labs

    • VSpeedDial: proxy VMenu model (245f6d3)
  • 3.6.0-alpha.2 - 2024-04-16

    🚀 Features

    • date: support typescript module augmentation for adapters (20ffadc), closes #18710
    • Tooltip: add new directive (#19053) (2e1e743)
    • variant: add configurable $border-width-root (2abb221), closes #16786
    • VCardText/Subtitle: add opacity support (8633854)
    • VDataIterator: loading prop fix and add new slot "loader" (#18811) (3fca676), closes #17652
    • VDivider: add opacity support (702bb50)
    • VDivider: add slot support (395f157)
    • VInput: add dimensions support to VInput (#19600) (45c8f61)
    • VListItemSubtitle: add new opacity prop (565a794), closes #16446
    • VProgressLinear: add new buffer color / opacity props (#19190) (f257755)

    🔧 Bug Fixes

    • VCounter: add error color when max is exceeded (d4921d8), closes #19615
    • VDataTable: sort on transformed column values (b6b9be5), closes #18840
    • VFileInput: add hideInput prop (#17270) (614262e), closes #17142
    • VTimeline: provide correct dot-color default (380e8e6)
  • 3.6.0-alpha.1 - 2024-04-11

    🚀 Features

    • calendar: add new prop for dynamic/static number of weeks (#19584) (296a790)

    🔧 Bug Fixes

    • layout: partial revert of layout change (0cd9e54)
    • VBottomNavigation: remove internal translate and fix active/modelValue (54e33b6)
    • VNavigationDrawer: only show shadow when active (665a46f)
  • 3.6.0-alpha.0 - 2024-04-10
  • 3.5.18 - 2024-04-30

    🔧 Bug Fixes

    • locale: ko translations (#19687) (a063f94)
    • useDirectiveComponent: cannot read properties of undefined (#19693) (b9a588f)
    • VDatePicker: stay on current month when selecting multiple (2d13e36)
    • VSnackbar: make touchstart listener passive (24d1066)
    • VSnackbar: conditionally load layout styles (9504efa), closes #19717

    🧪 Labs

    • VCalendar: remove background for week view mode (#19681) (1ce2879), closes #18988
    • VSpeedDial: remove mode designator on transition (2c726a5)
  • 3.5.17 - 2024-04-23

    🔧 Bug Fixes

    🔄 Reverts

    • Revert "fix(VProgressLinear): remove locationStyles" (78fa9b9), closes #19658

    🧪 Labs

from vuetify GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade vuetify from 3.5.17 to 3.6.3.

See this package in npm:
vuetify

See this project in Snyk:
https://app.snyk.io/org/eregs-x7s/project/bec2fb44-4372-4cd4-bac2-d5e881fde4db?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

✨ See the Django Site in action

Copy link
Contributor

@PhilR8 PhilR8 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All tests pass. Basic smoke testing of experimental deployment looks good. Approved.

@PhilR8 PhilR8 merged commit 158ced4 into main May 28, 2024
20 checks passed
peggles2 pushed a commit that referenced this pull request May 29, 2024
Snyk has created this PR to upgrade vuetify from 3.5.17 to 3.6.3.

See this package in npm:
vuetify

See this project in Snyk:
https://app.snyk.io/org/eregs-x7s/project/bec2fb44-4372-4cd4-bac2-d5e881fde4db?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment