Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade recharts from 2.1.16 to 2.12.7 #12

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Sandaru-IT21001352
Copy link

snyk-top-banner

Snyk has created this PR to upgrade recharts from 2.1.16 to 2.12.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 38 versions ahead of your current version.

  • The recommended version was released on 5 months ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-D3COLOR-1076592
586 Proof of Concept
Release notes
Package name: recharts
  • 2.12.7 - 2024-05-08

    Whats changed

    Fix

    • Area: re-add calculated area points to the areaDot callback props when it is a function. This was accidentally removed in v2.3. Fixes #4480
    • Brush: guard against undefined property access error when an ariaLabel is not specified. Follow up from #2093 (comment)

    Full Changelog: v2.12.6...v2.12.7

  • 2.12.6 - 2024-04-21

    What's Changed

    Fix

    • Tooltip: fix glitch where Tooltip always rendered in the top left even if animation was disabled by @ HHongSeungWoo in #4425 fixes #4424

    Chore

    • CI/Build fix: Added proper .js suffixes to main module and jsnext:main paths in package.json by @ dobosalparbc in #4431 fixes #2858

    Full Changelog: v2.12.5...v2.12.6

  • 2.12.5 - 2024-04-12

    Small fixes while working on v3 continued...

    What's Changed

    Feat

    • BarChart: support percentage (of chart) for barSize. Helps set size of bar when there are few datapoints Fixes #3640 by @ graup in #4407

    Fix

    Address #4382

    A recent release of @ types/react broke some builds because they removed certain (unused) events from common event handler attributes. recharts was unknowingly enumerating keys of SVGProps in the Layer component with the old types and causing a type error on tsc with skipLibCheck: false

    • typescript - Layer: use SVGAttributes instead of SVGProps in forwardRef components by @ ckifer in #4413
    • typescript - Pie: fix Pie ref which was cast to HTMLElement when the ref is actually referring to SVGGElement. This gave false information to whoever is using ref on the Pie component

    Full Changelog: v2.12.4...v2.12.5

  • 2.12.4 - 2024-04-04

    What's Changed

    Small fixes while working on v3 continued...

    Fix

    • Accessibility: remove role attribute from recharts-wrapper which caused an accessibility violation with > 1 chart on the same page by @ julianna-langston in #4386, fixes #4384
    • X/YAxis: fix incorrect padding calculation when there is 1 datapoint or less by @ graup in #4314 closes #4313

    className fixes - helps slowly address #2169:

    • Tooltip: allow custom className on cursor by @ 108yen in #4306
    • RadarChart/RadialBarChart: allow custom className on PolarRadiusAxis, PolarAngleAxis, and Radar dot by @ 108yen in #4335
    • Pie: allow custom className on label and labelLine of Pie by @ 108yen in #4381

    Full Changelog: v2.12.3...v2.12.4

  • 2.12.3 - 2024-03-15

    Some more small changes/fixes while working on 3.x

    What's Changed

    Fix

    • Legend: fix issue where Legend was not taken into account when scaling the chart container by @ zhonglin94 in #4272 closes #4246
    • Area: fixed a bug where className was not assigned to areaDot by @ 108yen in #4294 closes #4290
    • RadialBar: address regression where radial bar and its background were off from eachother because of rounding by @ ckifer in #4295 closes #4264
    • ErrorBar: do not count null as 0 in error bar domain by @ rinkstiekema in #4297

    New Contributors

    Full Changelog: v2.12.2...v2.12.3

  • 2.12.2 - 2024-03-01

    What's Changed

    Some more small fixes while working on 3.x

    Fix

    • Pie: pie label keys are not unique when data is 0 by @ ckifer in #4224
    • ResponsiveContainer: Remove incorrectly timed console.warn call, only log when using soon-to-be deprecated feature by @ HHongSeungWoo in #4249

    Full Changelog: v2.12.1...v2.12.2

  • 2.12.1 - 2024-02-20
  • 2.12.0 - 2024-02-09
  • 2.11.0 - 2024-01-27
  • 2.10.4 - 2024-01-09
  • 2.10.3 - 2023-12-01
  • 2.10.2 - 2023-11-29
  • 2.10.1 - 2023-11-19
  • 2.10.0 - 2023-11-19
  • 2.9.3 - 2023-11-06
  • 2.9.2 - 2023-11-01
  • 2.9.1 - 2023-10-30
  • 2.9.0 - 2023-10-15
  • 2.8.0 - 2023-08-25
  • 2.7.3 - 2023-08-08
  • 2.7.2 - 2023-06-22
  • 2.7.1 - 2023-06-15
  • 2.7.0 - 2023-06-15
  • 2.7.0-alpha.0 - 2023-05-26
  • 2.6.2 - 2023-05-10
  • 2.6.1 - 2023-05-10
  • 2.6.0 - 2023-05-08
  • 2.5.0 - 2023-03-15
  • 2.4.3 - 2023-02-16
  • 2.4.2 - 2023-02-15
  • 2.4.1 - 2023-02-10
  • 2.4.0 - 2023-02-09
  • 2.3.2 - 2023-01-12
  • 2.3.1 - 2023-01-12
  • 2.3.0 - 2023-01-12
  • 2.3.0-alpha.1 - 2023-01-05
  • 2.3.0-alpha.0 - 2023-01-04
  • 2.2.0 - 2022-12-08
  • 2.1.16 - 2022-10-29
from recharts GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade recharts from 2.1.16 to 2.12.7.

See this package in npm:
recharts

See this project in Snyk:
https://app.snyk.io/org/sandaru-it21001352/project/6e959cb0-1333-4144-9098-e0c0ad5cd6d3?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment