Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade alpinejs from 3.13.10 to 3.14.0 #14860

Closed
wants to merge 1 commit into from

Conversation

snipe
Copy link
Owner

@snipe snipe commented Jun 12, 2024

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade alpinejs from 3.13.10 to 3.14.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released on 22 days ago.

Release notes
Package name: alpinejs
  • 3.14.0 - 2024-05-21

    Changed

    • ✨ Enhances clicks with key modifiers #4209
    • Update transition.md - changed span to div #4215
    • collapse: remove overflow hidden even if height does not match perfect #4203
    • Fix error: TypeError: i is not a function #4204
    • Adjust code block according to example #4197
    • Higher visibility in docs about needing x-data for things to work #4194
  • 3.13.10 - 2024-04-24

    Changed

    • Comma modifier to keyup and keydown events #4170
    • Fix morphing root level state #4169
    • Fix morph when x-for is used inside x-teleport #4168
    • Fix form reset for x-model radio, checkbox arrays, select multiple and various modifiers #4159
    • Wrong plugin name in Sort docs #4165
from alpinejs GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade alpinejs from 3.13.10 to 3.14.0.

See this package in npm:
alpinejs

See this project in Snyk:
https://app.snyk.io/org/snipe/project/3d53e1dd-b8bf-46b5-ba61-18ce26933166?utm_source=github&utm_medium=referral&page=upgrade-pr
@probot-autolabeler probot-autolabeler bot added dependencies Pull requests that update a dependency file javascript labels Jun 12, 2024
Copy link

what-the-diff bot commented Jun 12, 2024

PR Summary

  • Updated 'alpinejs' library in package.json
    The version of the JavaScript framework 'alpinejs' used in our project has been updated. By upgrading from version 3.13.10 to 3.14.0, this brings us the latest features and fixes from the library, which should help improve the stability and functionality of our application.

@snipe
Copy link
Owner Author

snipe commented Jun 17, 2024

@marcusmoore - this bump seems a little too risky to blindly take. Can you test this locally and make sure nothing breaks? I know alpine can be a bit finicky. I think we use it most in the new label engine.

@snipe
Copy link
Owner Author

snipe commented Jun 17, 2024

(We wouldn't commit this directly to master anyway, of course, but it bears testing.)

@marcusmoore
Copy link
Collaborator

@snipe Alpine is being removed in #14831 since it is bundled with Livewire 3. I'm going to get the conflict resolved and move the PR out out of draft today (soon) so we can probably ignore this for now? It doesn't look like there is a security fix in that version.

@snipe
Copy link
Owner Author

snipe commented Jun 18, 2024

Should we just close this then? If there are no security implications, AND it's going away anyway, I can just close it.

@marcusmoore
Copy link
Collaborator

@snipe yeah I'm thinking we should just close this one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants