[Snyk] Upgrade: , , , , , dompurify #286
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @wordpress/i18n from 4.58.0 to 5.6.0.
See this package in npm: https://www.npmjs.com/package/@wordpress/i18n
- @wordpress/element from 4.20.0 to 6.6.0.
See this package in npm: https://www.npmjs.com/package/@wordpress/element
- @wordpress/keycodes from 3.58.0 to 4.6.0.
See this package in npm: https://www.npmjs.com/package/@wordpress/keycodes
- @wordpress/components from 19.17.0 to 28.6.0.
See this package in npm: https://www.npmjs.com/package/@wordpress/components
- @wordpress/icons from 6.3.0 to 10.6.0.
See this package in npm: https://www.npmjs.com/package/@wordpress/icons
- dompurify from 2.5.6 to 3.1.6.
See this package in npm: https://www.npmjs.com/package/dompurify
See this project in Snyk:
https://app.snyk.io/org/cachiman-inc/project/7066bd46-684e-4444-bad5-95a2a8204730?utm_source=github&utm_medium=referral&page=upgrade-pr
|
Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA). View this failed invocation of the CLA check for more information. For the most up to date status, view the checks section at the bottom of the pull request. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@wordpress/i18n
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
from 4.58.0 to 5.6.0 | 8 versions ahead of your current version
on 2024-08-21
@wordpress/element
from 4.20.0 to 6.6.0 | 67 versions ahead of your current version
on 2024-08-21
@wordpress/keycodes
from 3.58.0 to 4.6.0 | 8 versions ahead of your current version
on 2024-08-21
@wordpress/components
from 19.17.0 to 28.6.0 | 108 versions ahead of your current version
on 2024-08-21
@wordpress/icons
from 6.3.0 to 10.6.0 | 104 versions ahead of your current version
on 2024-08-21
dompurify
from 2.5.6 to 3.1.6 | 19 versions ahead of your current version
on 2024-07-05
Release notes
Package name: @wordpress/i18n
-
5.6.0 - 2024-08-21
- Improve focus state for button block.
- Reduce specificity of block styles to make it easier for themes to style the editor.
- Optimize data subscribers to avoid unnecessary work on each editor change.
- Avoid overlapping block breadcrumb when block movers are visible for full- and wide-aligned blocks.
- Preload user permissions for reusable blocks to avoid UI flickering for block settings menu options.
- Remove unnecessary bottom padding for nested lists.
- Restore block movers to focus mode.
- Improve display of categories list panel.
- Restore block movers to full- and wide-aligned blocks.
- Always show drag handles for nested blocks, even when only a single block exists.
- Improve HTML output for formatted text.
- Fix an error preventing registerFormatType to be called wrongly indicated as duplicate.
- Resolve problematic post lock release behavior when leaving the editor when using newer versions of Chrome.
- Resolve an issue to detect autosave presence at editor load in considering saveability.
- Resolve a typo which could interfere with audio shortcode transforms.
- Apply RichText attributes correctly to resolve an issue with registerFormatType.
- Preserve attributes of a multi-line classic block paragraph.
- Resolve an issue for Windows and Linux development mode due to a access key safeguard.
- Refactor a number of core blocks toward better interoperability with the Blocks RFC: [1], [2], [3], [4].
- Move selection state for RichText components to the block editor store, to enable future work to resolve or improve selection behavior.
- Change the behavior of reusable blocks autocomplete to fetch upon input, improving reliability of tests and avoiding unnecessary network requests.
- Allow development mode constant to be redefined by plugins.
- Improve reliability of e2e tests: [1], [2], [3].
- Avoid running files contained in the git subfolder as tests.
- Resolve an issue with e2e errors related to dependencies updates.
- Add a new ESLint rule to enforce accessible use of BaseControl.
- Remove redundant CSS styles.
- Add e2e tests for dynamic allowed blocks, transforms from media to embed block, explicit persistence undo regression.
- Add a new
- Include a React hooks ESLint configuration.
- Add a new Webpack plugin to help externalize and extract script dependencies (not yet published).
- Include auto-generated documentation for core data module actions and selectors.
- Update contributing documentation to extract detailed sections to their own documents.
- Document the withGlobalEvents higher-order component creator.
- Add related resources for BlockEditor components.
- Clarify requirements for e2e-test-utils package.
- Exclude private, experimental, and unstable APIs from auto-generated data documentation.
- Include missing DropZone component props in documentation.
- Mention component stylesheets in usage instructions.
- Update copy/paste support list to reflect paste support of images from Microsoft Word and Libre/Open Office.
- Add missing "Code is Poetry" footers.
- Improve wording of JavaScript Tutorial document.
- Improve Travis build performance by expanding containers for e2e tests.
- Refine transitions for bottom sheets.
- Extract a HorizontalRule component for use in a cross-platform separator block.
- Fix an error with changing list types.
- Avoid setting caret when rich-text text will be trimmed.
- Fix title not focusing.
- Improve post title accessibility.
- Improve image block accessibility for deselected, and selected states.
- Add accessibility label for unselected paragraph.
- Fix history stack when not empty on a fresh start of the editor.
- Improve Heading block accessibility.
- Make accessibility string properly localizable.
- Update string concatenation for accessibility labels.
-
5.5.0 - 2024-08-07
-
5.4.0 - 2024-07-24
-
5.3.0 - 2024-07-10
-
5.2.0 - 2024-06-26
-
5.1.0 - 2024-06-15
-
5.0.1 - 2024-06-11
-
5.0.0 - 2024-05-31
-
4.58.0 - 2024-05-16
from @wordpress/i18n GitHub release notesChangelog
Enhancements
Bug Fixes
Various
wpDataSelecte2e test utility.Documentation
Mobile
Package name: @wordpress/element
-
6.6.0 - 2024-08-21
-
6.5.0 - 2024-08-07
-
6.4.0 - 2024-07-24
-
6.3.0 - 2024-07-10
-
6.2.0 - 2024-06-26
-
6.1.0 - 2024-06-15
-
6.0.1 - 2024-06-11
-
6.0.0 - 2024-05-31
-
5.35.0 - 2024-05-16
-
5.34.0 - 2024-05-02
-
5.33.0 - 2024-04-19
-
5.32.0 - 2024-04-03
-
5.31.0 - 2024-03-21
-
5.30.0 - 2024-03-06
-
5.29.0 - 2024-02-21
-
5.28.1 - 2024-02-20
-
5.28.0 - 2024-02-09
-
5.27.0 - 2024-01-24
-
5.26.0 - 2024-01-16
-
5.25.1-next.79a6196f.0 - 2024-01-11
-
5.25.0 - 2023-12-13
-
5.24.0 - 2023-11-29
-
5.23.0 - 2023-11-16
-
5.22.0 - 2023-11-02
-
5.21.1-next.f8d8eceb.0 - 2023-11-01
-
5.21.0 - 2023-10-18
-
5.20.0 - 2023-10-05
-
5.19.13 - 2023-11-13
-
5.19.12 - 2023-11-05
-
5.19.11 - 2023-11-01
-
5.19.10 - 2023-10-28
-
5.19.9 - 2023-10-23
-
5.19.8 - 2023-10-17
-
5.19.7 - 2023-10-16
-
5.19.6 - 2023-10-12
-
5.19.5 - 2023-10-10
-
5.19.4 - 2023-10-09
-
5.19.3 - 2023-10-02
-
5.19.2 - 2023-09-26
-
5.19.1 - 2023-09-25
-
5.19.0 - 2023-09-20
-
5.18.1-next.5a1d1283.0 - 2023-09-01
-
5.18.0 - 2023-08-31
-
5.17.1 - 2023-08-20
-
5.17.0 - 2023-08-17
-
5.16.0 - 2023-08-10
-
5.15.0 - 2023-07-20
-
5.14.0 - 2023-07-05
-
5.13.0 - 2023-06-23
-
5.12.2 - 2023-10-12
-
5.12.1 - 2023-06-26
-
5.12.0 - 2023-06-07
-
5.11.0 - 2023-05-24
-
5.10.0 - 2023-05-10
-
5.9.0 - 2023-04-26
-
5.8.0 - 2023-04-12
-
5.7.0 - 2023-03-29
-
5.6.0 - 2023-03-15
-
5.5.0 - 2023-03-01
-
5.4.0 - 2023-02-15
-
5.3.3 - 2023-10-12
-
5.3.2 - 2023-02-21
-
5.3.1 - 2023-02-03
-
5.3.0 - 2023-02-01
-
5.2.0 - 2023-01-17
-
5.1.0 - 2023-01-02
-
5.0.0 - 2022-12-14
-
4.20.0 - 2022-11-16
from @wordpress/element GitHub release notes@ wordpress/scripts@5.1.0
Package name: @wordpress/keycodes
-
4.6.0 - 2024-08-21
- Fix issue with drag-and-drop in columns.
- Fix TinyMCE list plugin registration.
- Fix IE11 flexbox alignment when min-width is set.
- Fix IE11 focus loss after TinyMCE init. Add IE check.
- Fix getSelectedBlockClientId selector.
- Fix issue where unregistering a block type would cause blocks that convert to it to break.
- Fix Classic block not showing galleries on a grid.
- Fix visual issues with Button block text wrap.
- Fix modals in Edge.
- Fix Categories block filter effect on the front-end.
- Fix an issue where the block toolbar would cause an image to jump downwards when the wide or full - alignments were activated.
- Apply IE11 input fix only when mounting TinyMCE.
- Improve block preview styling.
- Make the Image Link URL field readonly.
- Disable HTML edit from Media & Text block.
- Avoid loading theme editor styles if not existing (RTL languages).
- Improve scoping of nested paragraph right-padding CSS rule.
- Add e2e tests for the format API.
- Merge similar text strings for i18n.
- Move editor specific styles from style.scss to editor.scss in Cover block.
- Simplify sidebar tabs aria-labels.
- Remove onSplit from RichText docs.
- Remove textdomain from the block library.
- Avoid rendering AdminNotices compatibility component.
- Avoid changing default wpautop priority.
- Change @ Package names to WordPress.
- Update published packages changelogs.
-
4.5.0 - 2024-08-07
-
4.4.0 - 2024-07-24
-
4.3.0 - 2024-07-10
-
4.2.0 - 2024-06-26
-
4.1.0 - 2024-06-15
-
4.0.1 - 2024-06-11
-
4.0.0 - 2024-05-31
-
3.58.0 - 2024-05-16
from @wordpress/keycodes GitHub release notesChangelog
Package name: @wordpress/components
-
28.6.0 - 2024-08-21
-
28.5.0 - 2024-08-07
-
28.4.0 - 2024-07-24
-
28.3.0 - 2024-07-10
-
28.2.0 - 2024-06-26
-
28.1.0 - 2024-06-15
-
28.0.3 - 2024-06-25
-
28.0.2 - 2024-06-18
-
28.0.1 - 2024-06-11
-
28.0.0 - 2024-05-31
-
27.6.0 - 2024-05-16
-
27.5.0 - 2024-05-02
-
27.4.0 - 2024-04-19
-
27.3.0 - 2024-04-03
-
27.2.0 - 2024-03-21
-
27.1.0 - 2024-03-06
-
27.0.0 - 2024-02-21
-
26.0.6 - 2024-04-09
-
26.0.5 - 2024-03-12
-
26.0.4 - 2024-03-04
-
26.0.3 - 2024-02-27
-
26.0.2 - 2024-02-20
-
26.0.1 - 2024-02-13
-
26.0.1-next.5a1d1283.0 - 2023-09-01
-
26.0.0 - 2024-02-09
-
25.16.0 - 2024-01-24
-
25.15.1-next.79a6196f.0 - 2024-01-11
-
25.15.0 - 2024-01-16
-
25.14.0 - 2023-12-13
-
25.13.0 - 2023-11-29
-
25.12.0 - 2023-11-16
-
25.11.1-next.f8d8eceb.0 - 2023-11-01
-
25.11.0 - 2023-11-02
-
25.10.0 - 2023-10-18
-
25.9.1 - 2023-10-12
-
25.9.0 - 2023-10-05
-
25.8.14 - 2024-01-05
-
25.8.13 - 2023-11-13
-
25.8.12 - 2023-11-05
-
25.8.11 - 2023-11-01
-
25.8.10 - 2023-10-28
-
25.8.9 - 2023-10-23
-
25.8.8 - 2023-10-17
-
25.8.7 - 2023-10-16
-
25.8.6 - 2023-10-12
-
25.8.5 - 2023-10-10
-
25.8.4 - 2023-10-09
-
25.8.3 - 2023-10-02
-
25.8.2 - 2023-09-26
-
25.8.1 - 2023-09-25
-
25.8.0 - 2023-09-20
-
25.7.0 - 2023-08-31
-
25.6.1 - 2023-08-20
-
25.6.0 - 2023-08-17
-
25.5.0 - 2023-08-10
-
25.4.0 - 2023-07-20
-
25.3.0 - 2023-07-05
-
25.2.0 - 2023-06-30
-
25.1.12 - 2023-10-12
-
25.1.11 - 2023-09-05
-
25.1.10 - 2023-07-28
-
25.1.9 - 2023-07-25
-
25.1.8 - 2023-07-18
-
25.1.7 - 2023-07-14
-
25.1.6 - 2023-07-11
-
25.1.5 - 2023-07-07
-
25.1.4 - 2023-07-03
-
25.1.3 - 2023-06-28
-
25.1.2 - 2023-06-27
-
25.1.1 - 2023-06-26
-
25.1.0 - 2023-06-07
-
25.0.0 - 2023-05-24
-
24.0.0 - 2023-05-10
-
23.9.0 - 2023-04-26
-
23.8.0 - 2023-04-12
-
23.7.0 - 2023-03-29
-
23.6.0 - 2023-03-15
-
23.5.0 - 2023-03-01
-
23.4.0 - 2023-02-15
-
23.3.8 - 2023-10-12
-
23.3.7 - 2023-05-09
-
23.3.6 - 2023-03-09
-
23.3.5 - 2023-03-01
-
23.3.4 - 2023-02-21
-
23.3.3 - 2023-02-20
-
23.3.2 - 2023-02-14
-
23.3.1 - 2023-02-03
-
23.3.0 - 2023-02-01
-
23.2.0 - 2023-01-17
-
23.1.0 - 2023-01-02
-
23.0.0 - 2022-12-14
-
22.1.0 - 2022-11-16
-
22.0.0 - 2022-11-02
-
21.3.0 - 2022-10-19
-
21.2.0 - 2022-10-05
-
21.1.2-next.4d3b314fd5.0 - 2022-09-27
-
21.1.0 - 2022-09-21
-
21.0.7 - 2022-11-11
-
21.0.6 - 2022-10-18
-
21.0.5 - 2022-10-11
-
21.0.4 - 2022-10-04
-
21.0.3 - 2022-09-27
-
21.0.2 - 2022-09-20
-
21.0.1 - 2022-09-20
-
21.0.0 - 2022-09-13
-
20.0.2-next.957ca95e4c.0 - 2022-08-29
-
20.0.1-next.d6164808d3.0 - 2022-08-23
-
20.0.0 - 2022-08-24
-
19.17.0 - 2022-08-10
from @wordpress/components GitHub release notesPackage name: @wordpress/icons
-
10.6.0 - 2024-08-21
-
10.5.0 - 2024-08-07
-
10.4.0 - 2024-07-24
-
10.3.0 - 2024-07-10
-
10.2.0 - 2024-06-26
-
10.1.0 - 2024-06-15
-
10.0.2 - 2024-06-25
-
10.0.1 - 2024-06-11
-
10.0.0 - 2024-05-31
-
9.49.0 - 2024-05-16
-
9.48.0 - 2024-05-02
-
9.47.0 - 2024-04-19
-
9.46.0 - 2024-04-03
-
9.45.0 - 2024-03-21
-
9.44.0 - 2024-03-06
-
9.43.0 - 2024-02-21
-
9.42.4 - 2024-03-12
-
9.42.3 - 2024-03-04
-
9.42.2 - 2024-02-27
-
9.42.1 - 2024-02-20
-
9.42.0 - 2024-02-09
-
9.41.0 - 2024-01-24
-
9.40.0 - 2024-01-16
-
9.39.1-next.79a6196f.0 - 2024-01-11
-
9.39.0 - 2023-12-13
-
9.38.0 - 2023-11-29
-
9.37.0 - 2023-11-16
-
9.36.0 - 2023-11-02
-
9.35.1-next.f8d8eceb.0 - 2023-11-01
-
9.35.0 - 2023-10-18
-
9.34.0 - 2023-10-05
-
9.33.13 - 2023-11-13
-
9.33.12 - 2023-11-05
-
9.33.11 - 2023-11-01
-
9.33.10 - 2023-10-28
-
9.33.9 - 2023-10-23
-
9.33.8 - 2023-10-17
-
9.33.7 - 2023-10-16
-
9.33.6 - 2023-10-12
-
9.33.5 - 2023-10-10
-
9.33.4 - 2023-10-09
-
9.33.3 - 2023-10-02
-
9.33.2 - 2023-09-26
-
9.33.1 - 2023-09-25
-
9.33.0 - 2023-09-20
-
9.32.1-next.5a1d1283.0 - 2023-09-01
-
9.32.0 - 2023-08-31
-
9.31.1 - 2023-08-20
-
9.31.0 - 2023-08-17
-
9.30.0 - 2023-08-10
-
9.29.0 - 2023-07-20
-
9.28.0 - 2023-07-05
-
9.27.0 - 2023-06-30
-
9.26.3 - 2023-10-12
-
9.26.2 - 2023-06-27
-
9.26.1 - 2023-06-26
-
9.26.0 - 2023-06-07
-
9.25.0 - 2023-05-24
-
9.24.0 - 2023-05-10
-
9.23.0 - 2023-04-26
-
9.22.0 - 2023-04-12
-
9.21.0 - 2023-03-29
-
9.20.0 - 2023-03-15
-
9.19.0 - 2023-03-01
-
9.18.0 - 2023-02-15
-
9.17.3 - 2023-10-12
-
9.17.2 - 2023-02-21
-
9.17.1 - 2023-02-03
-
9.17.0 - 2023-02-01
-
9.16.0 - 2023-01-17
-
9.15.0 - 2023-01-02
-
9.14.0 - 2022-12-14
-
9.13.0 - 2022-11-16
-
9.12.0 - 2022-11-02
-
9.11.0 - 2022-10-19
-
9.10.0 - 2022-10-05
-
9.9.1-next.4d3b314fd5.0 - 2022-09-27
-
9.9.0 - 2022-09-21
-
9.8.1 - 2022-09-20
-
9.8.0 - 2022-09-13
-
9.7.1-next.957ca95e4c.0 - 2022-08-29
-
9.7.0 - 2022-08-24
-
9.6.1-next.d6164808d3.0 - 2022-08-23
-
9.6.0 - 2022-08-10
-
9.5.0 - 2022-07-27
-
9.4.0 - 2022-07-13
-
9.3.0 - 2022-06-29
-
9.2.0 - 2022-06-15
-
9.1.0 - 2022-06-01
-
9.0.0 - 2022-05-18
-
8.4.0 - 2022-05-04
-
8.3.0 - 2022-04-21
-
8.2.3 - 2022-06-30
-
8.2.2 - 2022-04-26
-
8.2.1 - 2022-04-19
-
8.2.0 - 2022-04-08
-
8.1.0 - 2022-03-23
-
8.0.1 - 2022-03-11
-
8.0.0 - 2022-03-11
-
7.1.0-next.e230fbab09.0 - 2022-03-09
-
7.0.2-next.a55ed9455a.0 - 2022-03-09
-
7.0.1 - 2022-02-23
-
7.0.0 - 2022-02-23
-
6.3.1-next.f435e9e01b.0 - 2022-02-23
-
6.3.0 - 2022-02-10
from @wordpress/icons GitHub release notesPackage name: dompurify
-
3.1.6 - 2024-07-05
- Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @ kevin-mizu
- Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @ realansgar
- Fixed a minor problem with the bower file pointing to the wrong dist path
- Fixed several minor typos in docs, comments and comment blocks, thanks @ Rotzbua
- Updated several development dependencies
-
3.1.5 - 2024-05-31
- Fixed a minor issue with the dist paths in
- Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @ kakao-bishop-cho
-
3.1.4 - 2024-05-20
- Fixed an issue with the recently implemented
- Added several new popover attributes to allow-list, thanks @ Gigabyte5671
- Fixed the tests and adjusted the test runner to cover all branches
-
3.1.3 - 2024-05-11
- Fixed several mXSS variations found by and thanks to @ kevin-mizu & @ Ry0taK
- Added better configurability for comment scrubbing default behavior
- Added better hardening against Prototype Pollution attacks, thanks @ kevin-mizu
- Added better handling and readability of the
- Fixed some smaller issues in README and other documentation
-
3.1.2 - 2024-04-30
- Addressed and fixed a mXSS variation found by @ kevin-mizu
- Addressed and fixed a mXSS variation found by Adam Kues of Assetnote
- Updated tests for older Safari and Chrome versions
-
3.1.1 - 2024-04-26
-
3.1.0 - 2024-04-07
-
3.0.11 - 2024-03-21
-
3.0.10 - 2024-03-19
-
3.0.9 - 2024-02-20
-
3.0.8 - 2024-01-05
-
3.0.7 - 2024-01-04
-
3.0.6 - 2023-09-28
-
3.0.5 - 2023-07-11
-
3.0.4 - 2023-06-29
-
3.0.3 - 2023-05-06
-
3.0.2 - 2023-04-14
-
3.0.1 - 2023-03-01
-
3.0.0 - 2023-02-13
-
2.5.6 - 2024-07-05
- Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @ kevin-mizu
- Fixed a minor problem with the bower file pointing to the wrong dist path
- Updated several development dependencies
from dompurify GitHub release notesbower.js, thanks @ HakumenNCisNaNchecks, thanks @ tulachnodeTypeproperty, thanks @ ssi02014Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: