[Snyk] Upgrade bootstrap-vue from 2.0.0-rc.11 to 2.23.1 #9
Conversation
Snyk has created this PR to upgrade bootstrap-vue from 2.0.0-rc.11 to 2.23.1. See this package in npm: bootstrap-vue See this project in Snyk: https://app.snyk.io/org/okeamah/project/0ab18772-444e-4ffb-9359-976b5cdedfce?utm_source=github&utm_medium=referral&page=upgrade-pr
![sourcery-ai[bot]](https://github.com/avatars/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
Snyk has created this PR to upgrade bootstrap-vue from 2.0.0-rc.11 to 2.23.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 60 versions ahead of your current version.
The recommended version was released on 2 years ago.
Issues fixed by the recommended upgrade:
SNYK-JS-LODASH-608086
SNYK-JS-ANSIREGEX-1583908
SNYK-JS-ANSIREGEX-1583908
SNYK-JS-LODASH-6139239
SNYK-JS-BOOTSTRAPVUE-73558
SNYK-JS-LODASH-1040724
SNYK-JS-LODASH-450202
SNYK-JS-LODASH-567746
SNYK-JS-MINIMIST-559764
SNYK-JS-NODEFETCH-2342118
SNYK-JS-NODEFETCH-674311
SNYK-JS-BOOTSTRAP-173700
SNYK-JS-LODASH-1018905
SNYK-JS-MINIMIST-2429795
Release notes
Package name: bootstrap-vue
-
2.23.1 - 2022-10-26
-
2.23.0 - 2022-10-25
-
2.22.0 - 2022-04-17
- #6811 Support
- #6395 Adds
- #6347 Add
- #6375 Add
- #6339 Add
- #6834 Replace sass division with multiplication
- #6645 Selected table header text no longer prevents table row selection
- #6606 Fix range selection of b-table
- #6603 Set
- #6383 Default
- #6382 Prefer user-provided
- #6372 Add missing
- #6371 Header cell overflow for
- #6355 Add missing
- #6858 Accepts custom attributes
- 97bb97b Update dropdown to set correct aria-controls
- #6865 Set correct
- #6367 Decrease delay when hiding inside a navbar on no-touch devices
- #6508, #6511 Bind
- #6545 Use
- #6346 Remove
- #6389 Respect custom
- #6374 Remove default values from
- #6349 Fix
- #6302 Fix
- #6345 Legacy browser support
- 8ce291b Refactor tests not to use $children
- b16514b Remove useless localVue usage
- ac8ebfe Replace find with findComponents
- d113cc7 Remove createContainer helper
- #6752 Correct typo
- #6611 Update Bootstrap Icons to v1.5.0
- #6466 Add new "Vuexy - Admin Dashboard" theme
- #6368 Make sure the clicked anchor target is reflected in URL
- #6592 Update workflows to new Node.js versions
- #6381 Move away from lifecycle hook listeners
- #6356 Unify event variable names
- Andrei Gheorghiu
- Connor Forbes
- Illya Klymov
- JD
- James Pickard
- Jingsong Gao
- John Franey
- Jonathan Guberman
- Joshua Wu
- Konstantin
- Lei Wang
- Olena Horal
- Pete Hegman
- Rare Kang
- Samuel Denis-D'Ortun
- William
- William Teixeira
- magical-l
- ochowei
- xenolithviktor
-
2.21.2 - 2021-01-01
- #6274 Only apply
- #6266 Allow
- #6251 Only set
- #6265 Clean up props inheritance
- #6226 Environment detection based on
- #6249 Control size
- #6234 Make sure to not exceed 100% in height
- #6233 Title render handling
- #6263 Correct typos and improve wording in theming section
- #6244 Fix typos in
- d94edfe Fix typo on "Getting started" page
- #6232 Remove
- #6231 Fix typos in the Dropdown README
- #6222 Improve Bootstrap/BootstrapVue style import guide in "Getting started" docs
- #6252 Update Bootstrap Icons to v1.2.2
- #6227 Add Nuxt.js CodeSanbox CI template
- Rich Klein
- a-kriya
- cvn
- darrelfrancis
-
2.21.1 - 2020-12-16
- #6208 Restore correct active tab detection logic
- #6217 Attribute inheritance
- #6200 Don't set initial page count twice
- #6198 Root events
- #6206 Fix
-
2.21.0 - 2020-12-14
- #6178 Add
- #6179 Add
- #6163 Add
- #6141 Code enhancements for easier Vue 3 migration
- #6186 Label styles when in
- #6154 Cleanup rendering logic
- #6159
- #6153 Default sort compare logic for date strings
- c375ce9 Use original value for fallback when number parsing fails in
- #6194 Update Bootstrap Icons to v1.2.1
- #6180 Update Bootstrap Icons to v1.2.0
- b0f5f63 Prefer multiple constants over constants object
- #6148 Update
- magical-l
-
2.20.1 - 2020-12-01
- #6113 User supplied prop function detection
- c375ce9 Use original value for fallback when number parsing fails in
-
2.20.0 - 2020-11-30
- #6104 Add
- #6105 Sort handling for numeric string values
- #6102 Only set
- #6103 Required handling
- #6101 Button markup
- #6070 User supplied prop function detection
- #6084 Modified value handling
- #6100 Improved code sharing between form components
- #6043 Update "Can I use" links
- #6040 Fix gull & dexam preview image link
- 25080ca Correct comment to Nuxt.js module
- naime-hossain
-
2.19.0 - 2020-11-08
- #5981 Improved defaults handling
- #5965 Improve aside right handling
- #5977 update Bootstrap Icons to v1.1.0
- #6009 Click handling on close
- #6006 Accessibility when
- #6008
- #5975 Badge
- #5963 Prevent avatar from being squished
- #6019 Add another
- #6014 Improve component name formatting
- #5995 Add gull & dexam themes
- #6015 Unify interval/timeout handling
- #6002 Add
- #5990 Migrate from
- #6004 Move to Dependabot for all dependency updates
- #6003 Add CodeQL action
- #6001 Update Node.js versions
- 82amp
- JD
- Joris Lacance
- Tal Koren
- naime-hossain
-
2.18.1 - 2020-10-21
- #5939 Local component lookup
- #5934
- #5933 Content element ID handling
- #5935 Add example on how to alias Vue with Vue CLI
-
2.18.0 - 2020-10-19
-
2.17.3 - 2020-09-18
-
2.17.2 - 2020-09-18
-
2.17.1 - 2020-09-16
-
2.17.0 - 2020-09-13
-
2.16.0 - 2020-07-28
-
2.15.0 - 2020-05-22
-
2.14.0 - 2020-05-12
-
2.13.1 - 2020-05-06
-
2.13.0 - 2020-04-27
-
2.12.0 - 2020-04-20
-
2.11.0 - 2020-04-08
-
2.10.1 - 2020-04-02
-
2.10.0 - 2020-04-01
-
2.9.0 - 2020-03-26
-
2.8.0 - 2020-03-22
-
2.7.0 - 2020-03-14
-
2.6.1 - 2020-03-06
-
2.6.0 - 2020-03-05
-
2.5.0 - 2020-02-18
-
2.4.2 - 2020-02-15
-
2.4.1 - 2020-02-13
-
2.4.0 - 2020-02-01
-
2.3.0 - 2020-01-24
-
2.2.2 - 2020-01-15
-
2.2.1 - 2020-01-14
-
2.2.0 - 2020-01-09
-
2.1.0 - 2019-11-13
-
2.0.4 - 2019-10-11
-
2.0.3 - 2019-10-05
-
2.0.2 - 2019-09-20
-
2.0.1 - 2019-09-13
-
2.0.0 - 2019-09-07
-
2.0.0-rc.28 - 2019-08-12
-
2.0.0-rc.27 - 2019-07-22
-
2.0.0-rc.26 - 2019-07-09
-
2.0.0-rc.25 - 2019-06-30
-
2.0.0-rc.24 - 2019-06-17
-
2.0.0-rc.23 - 2019-06-14
-
2.0.0-rc.22 - 2019-05-31
-
2.0.0-rc.21 - 2019-05-26
-
2.0.0-rc.20 - 2019-05-12
-
2.0.0-rc.19 - 2019-04-21
-
2.0.0-rc.18 - 2019-04-08
-
2.0.0-rc.17 - 2019-04-08
-
2.0.0-rc.16 - 2019-03-28
-
2.0.0-rc.15 - 2019-03-18
-
2.0.0-rc.14 - 2019-03-08
-
2.0.0-rc.13 - 2019-02-19
-
2.0.0-rc.12 - 2019-02-14
-
2.0.0-rc.11 - 2018-05-20
from bootstrap-vue GitHub release noteschore(release): v2.23.1
chore(release): v2.23.0
🚀 Features
b-linkexact-pathandexact-path-active-classprops for router linkb-form-tagsfocusin&focusoutto wrapper and prevents firing multiplefocus/blureventsfeedback-aria-livepropgeneralheaderTagandfooterTagprops to all componets with header and footerb-dropdowntoggle-attrsprop🐛 Bug Fixes
generalb-tablearia-sortwhen usingsortKeyandno-local-sortingroletogridwhenselectableandtableotherwiseroleattributerole="grid"when selectable.sr-onlysort labelsortKeyfield type and correct a typob-skeletonnav-item-dropdownb-dropdownaria-haspopupattribute for the toggle buttonutils/domrequestAFtowindowdocshttps://urls in docsb-form-grouprole="alert"from valid/invalid feedbackb-input-tags$input-colorb-linkvue-routerpass-down propsb-img-lazyblankplaceholder for Firefoxblank-srcnot workingb-form-input/b-form-textarea🏡 Chore
testsb-form-tagsb-from-tagstob-form-tagsiconsdocscirefactor💖 Thanks to
🐛 Bug Fixes
b-dropdownheadingrole to header when not aheadertagb-tableresponsiveandstackedprops togetheraria-describedbywhen caption really existsgeneraluserAgentb-form-datepicker/b-form-timepickerb-sidebarb-icon🏡 Chore
docs<b-form-select>and<b-form-textarea>docslabel-forfrom<b-form-group>'s with<b-form-file>componenticonsgeneral💖 Thanks to
🐛 Bug Fixes
b-tabsb-badgeb-paginationb-dropdown🏡 Chore
docs<b-form-timepicker>"Button only mode" example markup🚀 Features
b-form-groupcontent-colsprops and scopeddefaultslotb-sidebarheaderslotb-form-tagsno-tags-removeproprefactor🐛 Bug Fixes
b-form-datepicker/b-form-timepickerbutton-onlymodeb-tabsb-form-datepickervalueAsDateprop handlingtabledefaultSortCompare🏡 Chore
iconsrefactordocshighlight.jsto v10💖 Thanks to
🐛 Bug Fixes
generaltabledefaultSortCompare🚀 Features
b-form-tagsresetmethod🐛 Bug Fixes
b-tabletabindex="0"for sortable TH'sb-form-tagsb-form-spinbuttongeneralb-form-input🏡 Chore
refactordocsiconsoption💖 Thanks to
🚀 Features
configb-mediaicons🐛 Bug Fixes
b-dropdownb-form-grouplabel-forprop not setb-form-checkbox/b-form-radiochangeevent timingb-avatarz-indexhandling🏡 Chore
docspageOptionssetting examplegeneralSECURITY.mdnode-sasstosass(Dart Sass)ci💖 Thanks to
🐛 Bug Fixes
b-iconb-linkhrefhandling with live routerb-form-group🏡 Chore
docsImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"bootstrap-vue","from":"2.0.0-rc.11","to":"2.23.1"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-LODASH-608086","issue_id":"SNYK-JS-LODASH-608086","priority_score":150,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"low"},{"name":"availability","value":"low"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.01055},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Fri Aug 21 2020 12:53:03 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.62},{"name":"likelihood","value":2.67},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Prototype Pollution"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-ANSIREGEX-1583908","issue_id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-ANSIREGEX-1583908","issue_id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-LODASH-6139239","issue_id":"SNYK-JS-LODASH-6139239","priority_score":170,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.01055},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Mon Apr 15 2024 13:48:35 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.83},{"name":"scoreVersion","value":"V5"}]...