Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: , , stylis, , , , , , , chart.js, chroma-js, react-chartjs-2, react-github-btn, react-router-dom, react-scripts, react-table, stylis-plugin-rtl #483

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Crushoverride007
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@emotion/cache
from 11.7.1 to 11.13.1 | 12 versions ahead of your current version | 2 months ago
on 2024-07-25
@emotion/styled
from 11.6.0 to 11.13.0 | 12 versions ahead of your current version | 2 months ago
on 2024-07-20
stylis
from 4.0.13 to 4.3.4 | 11 versions ahead of your current version | a month ago
on 2024-08-22
@emotion/react
from 11.7.1 to 11.13.3 | 17 versions ahead of your current version | a month ago
on 2024-08-21
@mui/icons-material
from 5.4.1 to 5.16.7 | 69 versions ahead of your current version | a month ago
on 2024-08-09
@mui/material
from 5.4.1 to 5.16.7 | 123 versions ahead of your current version | a month ago
on 2024-08-09
@mui/styled-engine
from 5.4.1 to 5.16.6 | 58 versions ahead of your current version | 2 months ago
on 2024-07-30
@testing-library/jest-dom
from 5.16.2 to 5.17.0 | 4 versions ahead of your current version | a year ago
on 2023-07-18
@testing-library/react
from 12.1.2 to 12.1.5 | 3 versions ahead of your current version | 2 years ago
on 2022-04-11
chart.js
from 3.4.1 to 3.9.1 | 12 versions ahead of your current version | 2 years ago
on 2022-08-03
chroma-js
from 2.4.2 to 2.6.0 | 7 versions ahead of your current version | 2 months ago
on 2024-07-30
react-chartjs-2
from 3.0.4 to 3.3.0 | 5 versions ahead of your current version | 3 years ago
on 2021-10-26
react-github-btn
from 1.2.1 to 1.4.0 | 3 versions ahead of your current version | 2 years ago
on 2022-09-03
react-router-dom
from 6.2.1 to 6.26.1 | 151 versions ahead of your current version | a month ago
on 2024-08-15
react-scripts
from 5.0.0 to 5.0.1 | 1 version ahead of your current version | 2 years ago
on 2022-04-12
react-table
from 7.7.0 to 7.8.0 | 1 version ahead of your current version | 2 years ago
on 2022-05-16
stylis-plugin-rtl
from 2.0.2 to 2.1.1 | 2 versions ahead of your current version | 3 years ago
on 2021-10-19

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970
696 Proof of Concept
Release notes
Package name: @emotion/cache
  • 11.13.1 - 2024-07-25

    Patch Changes

  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

  • 11.12.0 - 2024-07-19
  • 11.11.0 - 2023-05-06
  • 11.10.8 - 2023-04-28
  • 11.10.7 - 2023-04-05
  • 11.10.5 - 2022-10-27
  • 11.10.3 - 2022-08-23
  • 11.10.2 - 2022-08-22
  • 11.10.1 - 2022-08-02
  • 11.10.0 - 2022-07-31
  • 11.9.3 - 2022-06-12
  • 11.7.1 - 2021-12-12
from @emotion/cache GitHub release notes
Package name: @emotion/styled
  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

  • 11.12.0 - 2024-07-19
  • 11.11.5 - 2024-03-29
  • 11.11.0 - 2023-05-06
  • 11.10.8 - 2023-04-28
  • 11.10.6 - 2023-02-16
  • 11.10.5 - 2022-10-27
  • 11.10.4 - 2022-08-30
  • 11.10.0 - 2022-07-31
  • 11.9.3 - 2022-06-12
  • 11.8.1 - 2022-02-19
  • 11.8.0 - 2022-02-19
  • 11.6.0 - 2021-11-14
from @emotion/styled GitHub release notes
Package name: stylis from stylis GitHub release notes
Package name: @emotion/react
  • 11.13.3 - 2024-08-21

    Patch Changes

  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

  • 11.12.0 - 2024-07-19
  • 11.11.4 - 2024-02-27
  • 11.11.3 - 2023-12-23
  • 11.11.1 - 2023-06-07
  • 11.11.0 - 2023-05-06
  • 11.10.8 - 2023-04-28
  • 11.10.6 - 2023-02-16
  • 11.10.5 - 2022-10-27
  • 11.10.4 - 2022-08-30
  • 11.10.0 - 2022-07-31
  • 11.9.3 - 2022-06-12
  • 11.9.0 - 2022-04-06
  • 11.8.2 - 2022-03-10
  • 11.8.1 - 2022-02-19
  • 11.8.0 - 2022-02-19
  • 11.7.1 - 2021-12-12
from @emotion/react GitHub release notes
Package name: @mui/icons-material
  • 5.16.7 - 2024-08-09

    Aug 9, 2024

    A big thanks to the 3 contributors who made this release possible.

    @ mui/[email protected]

    • ​[material-ui][mui-system] Add support for version runtime checks (#43233) @ DiegoAndai

    Docs

    Core

    All contributors of this release in alphabetical order: @ DiegoAndai, @ oliviertassinari, @ zanivan

  • 5.16.6 - 2024-07-30

    Jul 30, 2024

    A big thanks to the 5 contributors who made this release possible.

    @ mui/[email protected]

    • [Divider] Enable borderStyle enhancement in divider with children (#43059) @ anuujj

    Docs

    • [material-ui][Card] Update CardMedia description (#43121) @ shahzaibdev1
    • [material-ui] Replace deprecated <ListItem button/> with ListItemButton component in routing libraries list example (#43114) @ aliharis99
    • [material-ui][Snackbar] Improve close reason type in demos (#43105) @ sai6855

    Core

    All contributors of this release in alphabetical order: @ aliharis99, @ anuujj, @ mnajdova, @ sai6855, @ shahzaibdev1

  • 5.16.5 - 2024-07-25

    Jul 25, 2024

    A big thanks to the 4 contributors who made this release possible.

    @ mui/[email protected]

    Docs

    All contributors of this release in alphabetical order: @ ManthanGajjar, @ mnajdova, @ navedqb, @ oliviertassinari

    Full Changelog: v5.16.4...v5.16.5

  • 5.16.4 - 2024-07-16

    Jul 16, 2024

    A big thanks to the one contributor who made this release possible.

    @ mui/[email protected]

    All contributors of this release in alphabetical order: @ mnajdova

  • 5.16.3 - 2024-07-16

    Jul 16, 2024

    A big thanks to the 3 contributors who made this release possible.

    @ mui/[email protected]

    Docs

    All contributors of this release in alphabetical order: @ HoFa1997, @ mnajdova, @ oliviertassinari

  • 5.16.2 - 2024-07-16
  • 5.16.1 - 2024-07-11
  • 5.16.0 - 2024-07-05
  • 5.15.21 - 2024-06-28
  • 5.15.20 - 2024-06-12
  • 5.15.19 - 2024-05-29
  • 5.15.18 - 2024-05-16
  • 5.15.17 - 2024-05-08
  • 5.15.16 - 2024-05-01
  • 5.15.15 - 2024-04-04
  • 5.15.14 - 2024-03-19
  • 5.15.13 - 2024-03-13
  • 5.15.12 - 2024-03-05
  • 5.15.11 - 2024-02-24
  • 5.15.10 - 2024-02-12
  • 5.15.9 - 2024-02-08
  • 5.15.8 - 2024-02-06
  • 5.15.7 - 2024-01-31
  • 5.15.6 - 2024-01-22
  • 5.15.5 - 2024-01-17
  • 5.15.4 - 2024-01-10
  • 5.15.3 - 2024-01-03
  • 5.15.2 - 2023-12-25
  • 5.15.1 - 2023-12-19
  • 5.15.0 - 2023-12-12
  • 5.14.19 - 2023-11-29
  • 5.14.18 - 2023-11-14
  • 5.14.16 - 2023-10-31
  • 5.14.15 - 2023-10-24
  • 5.14.14 - 2023-10-17
  • 5.14.13 - 2023-10-10
  • 5.14.12 - 2023-10-04
  • 5.14.11 - 2023-09-26
  • 5.14.9 - 2023-09-13
  • 5.14.8 - 2023-09-05
  • 5.14.7 - 2023-08-29
  • 5.14.6 - 2023-08-24
  • 5.14.5 - 2024-01-17
  • 5.14.3 - 2023-08-01
  • 5.14.1 - 2023-07-19
  • 5.14.0 - 2023-07-11
  • 5.13.7 - 2023-07-04
  • 5.11.16 - 2023-04-04
  • 5.11.11 - 2023-02-28
  • 5.11.9 - 2023-02-14
  • 5.11.0 - 2022-12-13
  • 5.10.16 - 2022-11-28
  • 5.10.15 - 2022-11-22
  • 5.10.14 - 2022-11-15
  • 5.10.9 - 2022-10-11
  • 5.10.6 - 2022-09-19
  • 5.10.3 - 2022-08-29
  • 5.10.2 - 2022-08-23
  • 5.8.4 - 2022-06-14
  • 5.8.3 - 2022-06-07
  • 5.8.2 - 2022-05-31
  • 5.8.0 - 2022-05-17
  • 5.6.2 - 2022-04-18
  • 5.6.1 - 2022-04-11
  • 5.6.0 - 2022-04-06
  • 5.5.1 - 2022-03-14
  • 5.5.0 - 2022-03-07
  • 5.4.4 - 2022-02-28
  • 5.4.2 - 2022-02-15
  • 5.4.1 - 2022-02-08
from @mui/icons-material GitHub release notes
Package name: @mui/material
  • 5.16.7 - 2024-08-09

    Aug 9, 2024

    A big thanks to the 3 contributors who made this release possible.

    @ mui/[email protected]

    • ​[material-ui][mui-system] Add support for version runtime checks (#43233) @ DiegoAndai

    Docs

    Core

    All contributors of this release in alphabetical order: @ DiegoAndai, @ oliviertassinari, @ zanivan

  • 5.16.6 - 2024-07-30
  • 5.16.5 - 2024-07-25
  • 5.16.4 - 2024-07-16
  • 5.16.3 - 2024-07-16
  • 5.16.2 - 2024-07-16
  • 5.16.1 - 2024-07-11
  • 5.16.0 - 2024-07-05
  • 5.15.21 - 2024-06-28
  • 5.15.20 - 2024-06-12
  • 5.15.19 - 2024-05-29
  • 5.15.18 - 2024-05-16
  • 5.15.17 - 2024-05-08
  • 5.15.16 - 2024-05-01
  • 5.15.15 - 2024-04-04
  • 5.15.14 - 2024-03-19
  • 5.15.13 - 2024-03-13
  • 5.15.12 - 2024-03-05
  • 5.15.11 - 2024-02-24
  • 5.15.10 - 2024-02-12
  • 5.15.9 - 2024-02-08
  • 5.15.8 - 2024-02-06
  • 5.15.7 - 2024-01-31
  • 5.15.6 - 2024-01-22
  • 5.15.5 - 2024-01-17
  • 5.15.4 - 2024-01-10
  • 5.15.3 - 2024-01-03
  • 5.15.2 - 2023-12-25
  • 5.15.1 - 2023-12-19
  • 5.15.0 - 2023-12-12
  • 5.14.20 - 2023-12-05
  • 5.14.19 - 2023-11-29
  • 5.14.18 - 2023-11-14
  • 5.14.17 - 2023-11-06
  • 5.14.16 - 2023-10-31
  • 5.14.15 - 2023-10-24
  • 5.14.14 - 2023-10-17
  • 5.14.13 - 2023-10-10
  • 5.14.12 - 2023-10-04
  • 5.14.11 - 2023-09-26
  • 5.14.10 - 2023-09-18
  • 5.14.9 - 2023-09-13
  • 5.14.8 - 2023-09-05
  • 5.14.7 - 2023-08-29
  • 5.14.6 - 2023-08-24
  • 5.14.5 - 2023-08-14
  • 5.14.4 - 2023-08-08
  • 5.14.3 - 2023-08-01
  • 5.14.2 - 2023-07-25
  • 5.14.1 - 2023-07-19
  • 5.14.0 - 2023-07-11
  • 5.13.7 - 2023-07-04
  • 5.13.6 - 2023-06-23
  • 5.13.5 - 2023-06-12
  • 5.13.4 - 2023-06-05
  • 5.13.3 - 2023-05-29
  • 5.13.2 - 2023-05-22
  • 5.13.1 - 2023-05-17
  • 5.13.0 - 2023-05-10
  • 5.12.3 - 2023-05-02
  • 5.12.2 - 2023-04-25
  • 5.12.1 - 2023-04-17
  • 5.12.0 - 2023-04-11
  • 5.11.16 - 2023-04-04
  • 5.11.15 - 2023-03-28
  • 5.11.14 - 2023-03-21
  • 5.11.13 - 2023-03-14
  • 5.11.12 - 2023-03-06
  • 5.11.11 - 2023-02-28
  • 5.11.10 - 2023-02-20
  • 5.11.9 - 2023-02-14
  • 5.11.8 - 2023-02-07
  • 5.11.7 - 2023-01-31
  • 5.11.6 - 2023-01-23
  • 5.11.5 - 2023-01-18
  • 5.11.4 - 2023-01-09
  • 5.11.3 - 2023-01-02
  • 5.11.2 - 2022-12-26
  • 5.11.1 - 2022-12-20
  • 5.11.0 - 2022-12-13
  • 5.10.17 - 2022-12-06
  • 5.10.16 - 2022-11-28
  • 5.10.15 - 2022-11-22
  • 5.10.14 - 2022-11-15
  • 5.10.13 - 2022-11-07
  • 5.10.12 - 2022-10-31
  • 5.10.11 - 2022-10-25
  • 5.10.10 - 2022-10-18
  • 5.10.9 - 2022-10-11
  • 5.10.8 - 2022-10-03
  • 5.10.7 - 2022-09-27
  • 5.10.6 - 2022-09-19
  • 5.10.5 - 2022-09-12
  • 5.10.4 - 2022-09-06
  • 5.10.3 - 2022-08-29
  • 5.10.2 - 2022-08-23
  • 5.10.1 - 2022-08-16
  • 5.10.0 - 2022-08-09
  • 5.9.3 - 2022-08-01
  • 5.9.2 - 2022-07-25
  • 5.9.1 - 2022-07-18
  • 5.9.0 - 2022-07-12
  • 5.8.7 - 2022-07-04
  • 5.8.6 - 2022-06-27
  • 5.8.5 - 2022-06-21
  • 5.8.4 - 2022-06-14
  • 5.8.3 - 2022-06-07
  • 5.8.2 - 2022-05-31
  • 5.8.1 - 2022-05-23
  • 5.8.0 - 2022-05-17
  • 5.7.0 - 2022-05-10
  • 5.6.4 - 2022-05-02
  • 5.6.3 - 2022-04-25
  • 5.6.2 - 2022-04-18
  • 5.6.1 - 2022-04-11
  • 5.6.0 - 2022-04-06
  • 5.5.3 - 2022-03-28
  • 5.5.2 - 2022-03-21
  • 5.5.1 - 2022-03-14
  • 5.5.0 - 2022-03-07
  • 5.4.4 - 2022-02-28
  • 5.4.3 - 2022-02-21
  • 5.4.2 - 2022-02-15
  • 5.4.1 - 2022-02-08
from @mui/material GitHub release notes
Package name: @mui/styled-engine
  • 5.16.6 - 2024-07-30
  • 5.16.4 - 2024-07-16
  • 5.16.2 - 2024-07-16
  • 5.16.1 - 2024-07-11
  • 5.15.14 - 2024-03-19
  • 5.15.11 - 2024-02-22
  • 5.15.9 - 2024-02-08
  • 5.15.8 - 2024-02-06
  • 5.15.7 - 2024-01-31
  • 5.15.6 - 2024-01-22
  • 5.15.5 - 2024-01-17
  • 5.15.4 - 2024-01-10
  • 5.15.3 - 2024-01-03
  • 5.15.2 - 2023-12-25
  • 5.15.1 - 2023-12-19
  • 5.15.0 - 2023-12-12
  • 5.14.20 - 2023-12-05
  • 5.14.19 - 2023-11-29
  • 5.14.18 - 2023-11-14
  • 5.14.17 - 2023-11-06
  • 5.14.16 - 2023-10-31
  • 5.14.15 - 2023-10-24
  • 5.14.14 - 2023-10-17
  • 5.14.13 - 2023-10-10
  • 5.14.12 - 2023-10-04
  • 5.14.11 - 2023-09-26
  • 5.14.10 - 2023-09-18
  • 5.14.9 - 2023-09-13
  • 5.14.8 - 2023-09-05
  • 5.14.7 - 2023-08-29
  • 5.14.6 - 2023-08-24
  • 5.13.2 - 2023-05-22
  • 5.12.3 - 2023-05-02
  • 5.12.0 - 2023-04-11
  • 5.11.16 - 2023-04-04
  • 5.11.11 - 2023-02-28
  • 5.11.9 - 2023-02-14
  • 5.11.8 - 2023-02-07
  • 5.11.0 - 2022-12-13
  • 5.10.16 - 2022-11-28
  • 5.10.14 - 2022-11-15
  • 5.10.8 - 2022-10-03
  • 5.10.7 - 2022-09-27
  • 5.10.6 - 2022-09-19
  • 5.10.5 - 2022-09-12
  • 5.10.4 - 2022-09-06
  • 5.10.3 - 2022-08-29
  • 5.10.2 - 2022-08-23
  • 5.10.1 - 2022-08-16
  • 5.10.0 - 2022-08-09
  • 5.8.7 - 2022-07-04
  • 5.8.0 - 2022-05-17
  • 5.7.0 - 2022-05-10
  • 5.6.1 - 2022-04-11
  • 5.6.0 - 2022-04-06
  • 5.5.2 - 2022-03-21
  • 5.4.4 - 2022-02-28
  • 5.4.2 - 2022-02-15
  • 5.4.1 - 2022-02-08
from @mui/styled-engine GitHub release notes
Package name: @testing-library/jest-dom from @testing-library/jest-dom GitHub release notes
Package name: @testing-library/react from @testing-library/react GitHub release notes
Package name: chart.js
  • 3.9.1 - 2022-08-03

    Essential Links

    Bugs Fixed

    Thanks to @ LeeLenaleee

  • 3.9.0 - 2022-08-02

    Essential Links

    Enhancements

    • #10439 feat: remove line element from scatter controller
    • #10528 feat: pass some chart options to DateAdapter
    • #10405 Add circular prop to arc element
    • #10530 Skip all borders if borderSkipped === true
    • #10517 parsing: support dot(s) in object keys
    • #10519 Enable borderDash option in the grid as scriptable

    Performance

    • #10517 parsing: support dot(s) in object keys

    Bugs Fixed

    • #10524 pass boxWidth only if pointStyleWidth presents
    • #10523 fix: calc visible points on update #10467

    Documentation

    • #10527 Add docs for changing from time scale to logarithmic/linear scale
    • #10518 Improve docs radial linear grid
    • #10522 Fix Stack Overflow tag: chart.js
    • #10520 Fix Stack Overflow tag: chart.js
    • #10515 Fix dead link on reload or open in new tab

Snyk has created this PR to upgrade:
  - @emotion/cache from 11.7.1 to 11.13.1.
    See this package in npm: https://www.npmjs.com/package/@emotion/cache
  - @emotion/styled from 11.6.0 to 11.13.0.
    See this package in npm: https://www.npmjs.com/package/@emotion/styled
  - stylis from 4.0.13 to 4.3.4.
    See this package in npm: https://www.npmjs.com/package/stylis
  - @emotion/react from 11.7.1 to 11.13.3.
    See this package in npm: https://www.npmjs.com/package/@emotion/react
  - @mui/icons-material from 5.4.1 to 5.16.7.
    See this package in npm: https://www.npmjs.com/package/@mui/icons-material
  - @mui/material from 5.4.1 to 5.16.7.
    See this package in npm: https://www.npmjs.com/package/@mui/material
  - @mui/styled-engine from 5.4.1 to 5.16.6.
    See this package in npm: https://www.npmjs.com/package/@mui/styled-engine
  - @testing-library/jest-dom from 5.16.2 to 5.17.0.
    See this package in npm: https://www.npmjs.com/package/@testing-library/jest-dom
  - @testing-library/react from 12.1.2 to 12.1.5.
    See this package in npm: https://www.npmjs.com/package/@testing-library/react
  - chart.js from 3.4.1 to 3.9.1.
    See this package in npm: https://www.npmjs.com/package/chart.js
  - chroma-js from 2.4.2 to 2.6.0.
    See this package in npm: https://www.npmjs.com/package/chroma-js
  - react-chartjs-2 from 3.0.4 to 3.3.0.
    See this package in npm: https://www.npmjs.com/package/react-chartjs-2
  - react-github-btn from 1.2.1 to 1.4.0.
    See this package in npm: https://www.npmjs.com/package/react-github-btn
  - react-router-dom from 6.2.1 to 6.26.1.
    See this package in npm: https://www.npmjs.com/package/react-router-dom
  - react-scripts from 5.0.0 to 5.0.1.
    See this package in npm: https://www.npmjs.com/package/react-scripts
  - react-table from 7.7.0 to 7.8.0.
    See this package in npm: https://www.npmjs.com/package/react-table
  - stylis-plugin-rtl from 2.0.2 to 2.1.1.
    See this package in npm: https://www.npmjs.com/package/stylis-plugin-rtl

See this project in Snyk:
https://app.snyk.io/org/crushoverride007/project/006e0867-0594-4c83-94e3-f301bf4fc036?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

Unable to locate .performanceTestingBot config file

Copy link

sonarcloud bot commented Sep 19, 2024

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants