[Snyk] Upgrade chart.js from 3.5.0 to 3.9.1 #2

Zelilac · 2024-05-28T01:08:00Z

This PR was automatically created by Snyk using the credentials of a real user.

![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade chart.js from 3.5.0 to 3.9.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 11 versions ahead of your current version.
The recommended version was released on 2 years ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	572	Proof of Concept

Release notes

Package name: chart.js

3.9.1 - 2022-08-03
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Bugs Fixed
- #10552 fix import helpers
Thanks to @ LeeLenaleee
3.9.0 - 2022-08-02
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Enhancements
- #10439 feat: remove line element from scatter controller
- #10528 feat: pass some chart options to DateAdapter
- #10405 Add circular prop to arc element
- #10530 Skip all borders if borderSkipped === true
- #10517 parsing: support dot(s) in object keys
- #10519 Enable borderDash option in the grid as scriptable
Performance
- #10517 parsing: support dot(s) in object keys
Bugs Fixed
- #10524 pass boxWidth only if pointStyleWidth presents
- #10523 fix: calc visible points on update #10467
Documentation
- #10527 Add docs for changing from time scale to logarithmic/linear scale
- #10518 Improve docs radial linear grid
- #10522 Fix Stack Overflow tag: chart.js
- #10520 Fix Stack Overflow tag: chart.js
- #10515 Fix dead link on reload or open in new tab
- #10516 Clarifying threshold requirement in the docs for decimation
Development
- #10541 Bump to 3.9.0
Thanks to @ LeeLenaleee, @ M4sterShake, @ benmccann, @ dangreen, @ kurkle, @ peterhauke, @ stockiNail, @ thabarbados and @ touletan
3.8.2 - 2022-07-24
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Bugs Fixed
- #10513 Explicitly include package.json files for subpackages
Development
- #10513 Explicitly include package.json files for subpackages
Thanks to @ etimberg
3.8.1 - 2022-07-24
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Enhancements
- #10495 Improve error message with id of the canvas
- #10412 Add pointStyleWidth option for legend
Bugs Fixed
- #10484 Resolve plugin defaults for local plugins
- #10489 draw tooltip with object borderwidth
- #10451 Fix options update when changing to shared opts
- #10454 Fix crash with skipNull and uneven datasets
- #10414 Respect `fill: false` with custom draw times
Types
- #10494 Allow clip to be configurable in options object typescript
- #10436 Add index to legendItem interface
- #10404 Add padding to pointLabels type, add type to scriptable context
- #10387 Allow for each dataset to be individually typed without a main type
Documentation
- #10490 document defaults for plugins
- #10497 Update link to be able to use within github
- #10446 Add a stale version warning + a link to the latest version of docs
- #10470 Update integration.md
- #10447 Enforce maximum width on chart editor blocks in the docs
- #10456 Update aspectRatio documentation
- #10415 Update responsive.md
- #10434 Clarify helpers need to be imported when using bundlers
- #10410 Fix typo in link to documentation from sample
- #10400 Fix default value of 'includeInvisible' option in the documentation
- #10392 Clarify api docs
Development
- #10509 Bump to 3.8.1
- #10493 Bump terser from 4.8.0 to 4.8.1
- #10471 Bump moment from 2.29.2 to 2.29.4
- #10431 Bump actions/setup-node from 2 to 3
- #10430 Bump actions/checkout from 2 to 3
- #10393 Bump eventsource from 1.1.0 to 1.1.1
Thanks to @ LeeLenaleee, @ Pourbahrami, @ andrewl64, @ dependabot, @ dependabot[bot], @ etimberg, @ ideabrian, @ igorlukanin, @ kurkle, @ naveensrinivasan, @ stockiNail and @ touletan
3.8.0 - 2022-05-25
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
- #10341 Correct auto.esm.js import to allow module to work in browser
- #10316 Use abs() when comparing for spanGaps
- #10320 Bump async from 2.6.3 to 2.6.4
- #10290 Bump moment from 2.29.1 to 2.29.2
- #10260 Bump minimist from 1.2.5 to 1.2.6
- #10204 Bump karma from 6.3.14 to 6.3.16
- #10200 Bump url-parse from 1.5.7 to 1.5.10
- #10198 Bump prismjs from 1.25.0 to 1.27.0
- #10181 Bump url-parse from 1.5.3 to 1.5.7
- #10146 Bump karma from 6.3.9 to 6.3.14
- #10150 Bump log4js from 6.3.0 to 6.4.1
- #10152 Bump engine.io from 6.1.0 to 6.1.2
- #10151 Bump node-fetch from 2.6.6 to 2.6.7
- #10149 Bump follow-redirects from 1.14.6 to 1.14.8
Enhancements
- #10362 Add option to include invisible points
- #10328 Resolve canvasGradient is undefined in node
- #10293 Enable configuration of radial scale point label border radius
- #10278 Allow time scale to offset using skipped ticks
- #10046 Interaction functions
- #10182 Allow individual chart controllers to opt-in to the decimation plugin
- #10088 Make object notation usable for polarArea and radar
- #10106 Add new align 'inner' for X axis
Bugs Fixed
- #10371 Update to v0.2.1 color dependency to fix bug with invalid colours
- #10340 Update scale polarArea correctly on data hide
- #10289 display tooltips only at points in chart area
- #10328 Resolve canvasGradient is undefined in node
- #10301 Trigger legend onLeave when the mouse leaves the canvas
- #10276 Document tooltip draw hooks and only call hooks when the tooltip draws
- #10157 minimum bar length setting keeps bar base in view
Types
- #10364 Types: Allow font to be partial scriptable and individually scriptable
- #10283 Types: add 'middle' to borderSkipped
- #10275 Export types for cartesian and radial tick options
- #10269 add startAngle to radial scale options typings
- #10254 Add missing fields to the ScriptableContext type
- #10179 Allow array for line opts in dataset
Documentation
- #10308 Add links to docs in all the samples
- #10259 Fix a typo in data-structures.md
- #10266 Correct chart initialization flow
- #10250 Update link to filler plugin
- #10184 Fix broken link in Animations docs page.
- #10158 remove hardcoded licenseYear in docs
- #10156 update link to license and bump license year
- #10154 Document scale update plugin hooks
Development
- #10377 Bump to 3.8.0
- #10247 Resolve circulair import filler plugin
- #10243 Replace deprecated String.prototype.substr()
- #10040 Refactor filler plugin for easier maintenance
Thanks to @ CommanderRoot, @ LeeLenaleee, @ Talla2XLC, @ akiraaso, @ dependabot, @ dependabot[bot], @ etimberg, @ joshkel, @ kurkle, @ kylejonesdev, @ linkviii, @ luke-heberling, @ msteiger, @ pzelnip, @ t-mangoe and @ yhvicey
3.7.1 - 2022-02-12
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Bugs Fixed
- #10024 Fix using above/below filling option with discontinuous lines
Types
- #10124 Add missing mouse events to CoreChartOptions.events type
- #10133 Allow spanGaps to be specified on LineOptions
- #10137 Ensure that min/max of TimeScaleOptions can be a string
- #10075 fix: allow colors as array
- #10131 Correct type for updateHoverStyle
- #10130 Type Chart.legend property
- #10111 Change repeating alingment string to single type
- #10078 Move scriptable and array to helper function in types
- #10057 add typing and docs for maxTicksLimit all scales
Documentation
- #10138 Sort docs sub menus alphabetically, add line and plugin sample
- #10100 Sort line and bubble dataset options alphabetically
- #10103 Fix typos found by codespell
- #10057 add typing and docs for maxTicksLimit all scales
- #10045 typo Cofiguration
Development
- #10148 Bump to 3.7.1
- #10117 add SubTitle to TS register test
- #10078 Move scriptable and array to helper function in types
- #10038 Improve issue templates
Thanks to @ DimitriPapadopoulos, @ LeeLenaleee, @ LovelyAndy, @ caub, @ charlesmass2, @ etimberg, @ jmorel and @ stockiNail
3.7.0 - 2021-12-23
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Enhancements
- #9949 Add centerPointLabels option for linear radial scale
- #9970 Limit active element changes to chartArea
- #9944 Improvements to tooltip positioners
- #9933 add beforeDestroy hook

Snyk has created this PR to upgrade chart.js from 3.5.0 to 3.9.1. See this package in npm: chart.js See this project in Snyk: https://app.snyk.io/org/securingwithzai/project/83dc17d6-31fd-4934-a74c-61422b05a481?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade chart.js from 3.5.0 to 3.9.1 #2

[Snyk] Upgrade chart.js from 3.5.0 to 3.9.1 #2

Zelilac commented May 28, 2024

Essential Links

Bugs Fixed

Essential Links

Enhancements

Performance

Bugs Fixed

Documentation

Development

Essential Links

Bugs Fixed

Development

Essential Links

Enhancements

Bugs Fixed

Types

Documentation

Development

Essential Links

Enhancements

Bugs Fixed

Types

Documentation

Development

Essential Links

Bugs Fixed

Types

Documentation

Development

Essential Links

Enhancements

[Snyk] Upgrade chart.js from 3.5.0 to 3.9.1 #2

Are you sure you want to change the base?

[Snyk] Upgrade chart.js from 3.5.0 to 3.9.1 #2

Conversation

Zelilac commented May 28, 2024

Snyk has created this PR to upgrade chart.js from 3.5.0 to 3.9.1.

Issues fixed by the recommended upgrade:

Essential Links

Bugs Fixed

Essential Links

Enhancements

Performance

Bugs Fixed

Documentation

Development

Essential Links

Bugs Fixed

Development

Essential Links

Enhancements

Bugs Fixed

Types

Documentation

Development

Essential Links

Enhancements

Bugs Fixed

Types

Documentation

Development

Essential Links

Bugs Fixed

Types

Documentation

Development

Essential Links

Enhancements