Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade styled-components from 5.3.5 to 6.0.5 #25

Merged
merged 1 commit into from
Aug 21, 2023

Conversation

Woodpile37
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade styled-components from 5.3.5 to 6.0.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 44 versions ahead of your current version.
  • The recommended version was released a month ago, on 2023-07-21.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Undesired Behavior
SNYK-JS-STYLEDCOMPONENTS-3149924
482/1000
Why? Proof of Concept exploit, CVSS 7.5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: styled-components
  • 6.0.5 - 2023-07-21

    What's Changed

    New Contributors

    Full Changelog: v6.0.4...v6.0.5

  • 6.0.4 - 2023-07-13

    What's Changed

    • refactor: dev warning on unknown props retargeted specifically toward HTML targets rather than other React components by @ woodreamz in #4084
    • fix: untyped event handler callbacks by @ ziolekjj in #4086

    New Contributors

    Full Changelog: v6.0.3...v6.0.4

  • 6.0.3 - 2023-07-07

    What's Changed

    New Contributors

    Full Changelog: v6.0.2...v6.0.3

  • 6.0.2 - 2023-07-03

    What's Changed

    • fix: StyleSheetManager must accept undefined props by @ gineika in #4069
    • fix: replace slow Omit type by @ gineika in #4068
    • drop displayName in production to save bytes, it's already present in the static className if you're using the babel plugin or equivalent
    • refactor use of flatMap and at with ES5-compliant variants

    New Contributors

    Full Changelog: v6.0.1...v6.0.2

  • 6.0.1 - 2023-06-28

    Fixed an issue where a dev-time warning was being triggered too eagerly.

    Full Changelog: v6.0.0...v6.0.1

  • 6.0.0 - 2023-06-28
    yarn add styled-components
    

    Changed in this version

    • fix(types): prevent prop bleed on styling properties (fixes #4053, c0f8015)
    • feat(types): ship csstype via "CSS" namespace (e6c4f0a)
    • chore: bump stylis to 4.3 (fixes #4007, fa58875)
    • reduced some sources of unnecessary branching logic

    Breaking changes in v6

    Migration guide → https://styled-components.com/docs/faqs#what-do-i-need-to-do-to-migrate-to-v6

    • now using stylis v4 (if using stylis-plugin-rtl you'll need to upgrade to the newer version)
    • styled-components now provides its own types; if you installed @ types/styled-components in the past, you'll want to remove it
    • dropped $as and $forwardedAs props (use as or forwardedAs)
    • dropped automatic prop filtering; use transient props ($ prefix) for stuff you don't want to be passed to child component / HTML
    • StyleSheetManager
      • replaced disableVendorPrefixes with enableVendorPrefixes prop
      • dropped automatic vendor prefixing; if you need to support older browsers, you can re-enable it easily with the above prop
        <StyleSheetManager enableVendorPrefixes>
          {/* your React tree and ThemeProvider goes here */}
        </StyleSheetManager>
    • dropped deprecated withComponent API (87f511a); use "as" prop instead
    • node >= 14 needed

    Full Changelog: v5.3.7...v6.0.0

  • 6.0.0-rc.2-4007 - 2023-05-26
  • 6.0.0-rc.6 - 2023-06-23
    yarn add styled-components
    

    Changed in this version

    • fix: stylis types are now included as a direct dependency #4051 (235a62b)
    • refactor: simplify code related to style tag injection #4040 (c3939a4)
    • chore: don't warn if shouldForwardProp is in use and the prop is forwarded (00ab9c4)

    Breaking changes in v6

    Migration guide → https://styled-components.com/docs/faqs#what-do-i-need-to-do-to-migrate-to-v6

    • now using stylis v4 (if using stylis-plugin-rtl you'll need to upgrade to the newer version)
    • styled-components now provides its own types; if you installed @ types/styled-components in the past, you'll want to remove it
    • dropped $as and $forwardedAs props (use as or forwardedAs)
    • dropped automatic prop filtering; use transient props ($ prefix) for stuff you don't want to be passed to child component / HTML
    • StyleSheetManager
      • replaced disableVendorPrefixes with enableVendorPrefixes prop
      • dropped automatic vendor prefixing; if you need to support older browsers, you can re-enable it easily with the above prop
        <StyleSheetManager enableVendorPrefixes>
          {/* your React tree and ThemeProvider goes here */}
        </StyleSheetManager>
    • dropped deprecated withComponent API (87f511a); use "as" prop instead
    • node >= 14 needed

    Full Changelog: https://github.com/styled-components/styled-components/compare/v6.0.0-rc.5..v6.0.0-rc.6

  • 6.0.0-rc.5 - 2023-06-22
    Read more
  • 6.0.0-rc.4 - 2023-06-22
  • 6.0.0-rc.3 - 2023-06-04
  • 6.0.0-rc.2 - 2023-05-24
  • 6.0.0-rc.1 - 2023-05-06
  • 6.0.0-rc.0 - 2023-05-04
  • 6.0.0-beta.15 - 2023-04-23
  • 6.0.0-beta.14 - 2023-03-23
  • 6.0.0-beta.13 - 2023-03-10
  • 6.0.0-beta.12 - 2023-03-02
  • 6.0.0-beta.11 - 2023-02-03
  • 6.0.0-beta.10 - 2023-02-03
  • 6.0.0-beta.9 - 2023-01-03
  • 6.0.0-beta.8 - 2022-12-23
  • 6.0.0-beta.7 - 2022-12-23
  • 6.0.0-beta.6 - 2022-11-13
  • 6.0.0-beta.5 - 2022-10-26
  • 6.0.0-beta.4 - 2022-10-25
  • 6.0.0-beta.3 - 2022-10-04
  • 6.0.0-beta.2 - 2022-09-02
  • 6.0.0-beta.1 - 2022-08-31
  • 6.0.0-beta.0 - 2022-08-31
  • 6.0.0-alpha.7 - 2022-07-22
  • 6.0.0-alpha.6 - 2022-07-22
  • 6.0.0-alpha.5 - 2022-03-24
  • 6.0.0-alpha.4 - 2022-03-24
  • 6.0.0-alpha.3 - 2022-03-24
  • 6.0.0-alpha.2 - 2022-03-24
  • 6.0.0-alpha.1 - 2022-02-24
  • 6.0.0-alpha.0 - 2022-02-22
  • 5.3.11 - 2023-05-26
  • 5.3.10 - 2023-04-23
  • 5.3.9 - 2023-03-13
  • 5.3.8 - 2023-03-02
  • 5.3.7 - 2023-03-02
  • 5.3.6 - 2022-09-27
  • 5.3.5 - 2022-03-24
from styled-components GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@changeset-bot
Copy link

changeset-bot bot commented Aug 21, 2023

⚠️ No Changeset found

Latest commit: 2f17e43

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@Woodpile37 Woodpile37 merged commit fb84e29 into main Aug 21, 2023
20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants