[Snyk] Upgrade: , bootstrap, jquery, moment, datatables.net, datatables.net-bs4, jquery-ui-dist, jquery-validation, bootstrap-touchspin, cldr-data, datatables.net-buttons, datatables.net-buttons-bs4, jquery-migrate, jsrender, magnific-popup, swiper, tinymce #20

shivajirepo · 2024-09-08T08:44:52Z

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@fortawesome/fontawesome-free
from 5.15.2 to 5.15.4 | 2 versions ahead of your current version | 3 years ago
on 2021-08-04
bootstrap
from 4.6.0 to 4.6.2 | 2 versions ahead of your current version | 2 years ago
on 2022-07-19
jquery
from 3.6.0 to 3.7.1 | 6 versions ahead of your current version | a year ago
on 2023-08-28
moment
from 2.29.4 to 2.30.1 | 2 versions ahead of your current version | 8 months ago
on 2023-12-27
datatables.net
from 1.12.1 to 1.13.11 | 11 versions ahead of your current version | 6 months ago
on 2024-02-27
datatables.net-bs4
from 1.12.1 to 1.13.11 | 11 versions ahead of your current version | 6 months ago
on 2024-02-27
jquery-ui-dist
from 1.13.2 to 1.13.3 | 1 version ahead of your current version | 3 months ago
on 2024-05-26
jquery-validation
from 1.19.5 to 1.21.0 | 3 versions ahead of your current version | 2 months ago
on 2024-07-17
bootstrap-touchspin
from 4.3.0 to 4.7.3 | 11 versions ahead of your current version | a year ago
on 2023-05-25
cldr-data
from 36.0.1 to 36.0.2 | 1 version ahead of your current version | 5 months ago
on 2024-04-12
datatables.net-buttons
from 1.6.5 to 1.7.1 | 2 versions ahead of your current version | 3 years ago
on 2021-06-04
datatables.net-buttons-bs4
from 1.6.5 to 1.7.1 | 2 versions ahead of your current version | 3 years ago
on 2021-06-04
jquery-migrate
from 3.4.0 to 3.5.2 | 4 versions ahead of your current version | 2 months ago
on 2024-07-17
jsrender
from 1.0.11 to 1.0.15 | 4 versions ahead of your current version | 2 months ago
on 2024-07-14
magnific-popup
from 1.1.0 to 1.2.0 | 1 version ahead of your current version | 3 months ago
on 2024-06-08
swiper
from 8.3.2 to 8.4.7 | 8 versions ahead of your current version | 2 years ago
on 2023-01-30
tinymce
from 5.10.7 to 5.10.9 | 2 versions ahead of your current version | 10 months ago
on 2023-11-15

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Cross-site Scripting (XSS) SNYK-JS-TINYMCE-6016276	519	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-TINYMCE-6016290	519	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-TINYMCE-6062167	519	No Known Exploit
Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	519	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	519	No Known Exploit

Release notes

Package name: @fortawesome/fontawesome-free

5.15.4 - 2021-08-04
5.15.3 - 2021-03-16
5.15.2 - 2021-01-13

from @fortawesome/fontawesome-free GitHub release notes

Package name: bootstrap

4.6.2 - 2022-07-19
Highlights
- Added an example to our Collapse plugin docs to show how to use horizontal collapsing. This has long been possible via our JS, but we never had an official class to utilize it.
- We've replaced the deprecated color-adjust with print-color-adjust in our Sass files as part of the Autoprefixer v10.4.6 issues. This should quiet the issues folks have seen from that dependency change. If you're using our distribution CSS files, like bootstrap.min.css, you may still see the warning.
- Tweaked the size of small and .small to compute to a whole pixel value (was 12.8px and now is 14px).
- Improved accessibility around our dropdowns, color contrast, and role attributes.
- Fixed some broken links to supporting documentation.
- Updated dependencies across the board.
What's Changed
- Removed blurred background reference from the Toast Docs. by @ pricop in #35190
- Update links to CCA, MQ5 prefers-reduced-motion, evergreen WCAG urls, more resources by @ patrickhlauke in #35427
- v4-dev backports and updates by @ XhmikosR in #35482
- Backport #35556 by @ julien-deramond in #35558
- Tweak toast docs by @ patrickhlauke in #35633
- v4-dev backports and updates by @ XhmikosR in #35642
- Doc: Reorder alphabetically lists of components by @ julien-deramond in #36128
- Updated the small-font-size to use a round value by @ pricop in #36172
- v4 dev backports and updates by @ XhmikosR in #35767
- _custom-forms.scss: fix order of attributes by @ twin-elements in #36231
- Replace the deprecated color-adjust with print-color-adjust by @ AdrianCurtin in #36283
- [v4] Doc: remove role="group" from some split drop* buttons by @ julien-deramond in #36254
- Dynamic tabs: use buttons rather than links (backport to v4) by @ patrickhlauke in #33163
- v4 dev updates by @ XhmikosR in #36430
- Fix closing HTML tag in navs docs by @ julien-deramond in #36466
- v4: Horizontal collapse by @ mdo in #36434
- Fixing tabs' tests v4 by @ louismaximepiton in #36485
- Docs: fix some ARIA Authoring Practices Guides broken links by @ julien-deramond in #36490
- v4 - Remove confusing unnecessary id/aria-labelledby for dropdown menus by @ patrickhlauke in #36491
- v4 Docs: outdated ARIA/PF link, expand contrast explanation in accessibility.md by @ patrickhlauke in #36492
- v4: Improve accessible name of version dropdown in docs navbar by @ patrickhlauke in #36504
- Update devDependencies by @ XhmikosR in #36522
- Docs: update clipboard.js to v2.0.11 by @ julien-deramond in #36631
- Update devDependencies by @ XhmikosR in #36724
- v4: Add Fathom by @ mdo in #36727
- Docs: Capitalize Unicode by @ julien-deramond in #36735
- Release v4.6.2 by @ XhmikosR in #36725
New Contributors
- @ twin-elements made their first contribution in #36231
- @ AdrianCurtin made their first contribution in #36283
Full Changelog: v4.6.1...v4.6.2
4.6.1 - 2021-10-28
What's changed
- Replace Sass division with multiplication and custom divide() function by @ mdo in #34571
- Update RFS to v8.1.0 by @ XhmikosR in #34571
- fix(forms): input-group and validation icons by @ ffoodd in #32968
- Fix minor visual bug in Firefox caused by moz-focusring by @ kremit in #32821
- Adjust SAFE_URL_PATTERN regex for use with test method of regexes by @ nikonthethird in #33153
- Add sms in the SAFE_URL_PATTERN for sanitizer by @ XhmikosR in #35074
- Adjust feedback icon position and padding for select.form-control by @ mdo in #33206
- Carousel: use buttons, not links, for prev/next controls by @ patrickhlauke in #33165
- v4: Sass docs for default variables by @ mdo in #33392
- Handle complex expressions in add() & subtract() by @ ffoodd in #34047
- More concise improvements for add() and subtract() by @ ffoodd in #34432
- Remove aria-haspopup from dropdowns by @ patrickhlauke in #33624
- Dropdown: support .dropdown-item wrapped in <li> tags by @ cpsievert in #33649
- Update Node versions in JS tests (drop Node 10, add Node 16), update docs JS assets and add variables for vertical-align in spinners by @ XhmikosR in #33807
- Replace Freenode with Libera IRC server by @ midzer #34050
- Fix repetition in the Navbar docs description by @ coliff in #34208
- Enable 0.x with negative margins in utilities by @ k-utsumi in #33593
- Remove print thead rule by @ coliff in #34426
- Fix prevented show event disabling modals with fade class from being displayed again by @ alpadev in #34087
- Input group validation with custom-file input by @ ffoodd in #33239
- Add eslint-plugin-qunit and tighten JS tests by @ XhmikosR in #32270
- Update our tests to Node 16 and npm 8 by @ XhmikosR in #35142
- Disabled link cleanup by @ patrickhlauke in #34924
- Updated our devDependencies including terser; also enabled two passes for terser by @ XhmikosR
Full changelog

v4.6.0...v4.6.1
4.6.0 - 2021-01-19

from bootstrap GitHub release notes

Package name: jquery

3.7.1 - 2023-08-28
https://blog.jquery.com/2023/08/28/jquery-3-7-1-released-reliable-table-row-dimensions/
3.7.0 - 2023-05-11
https://blog.jquery.com/2023/05/11/jquery-3-7-0-released-staying-in-order/
3.6.4 - 2023-03-08
https://blog.jquery.com/2023/03/08/jquery-3-6-4-released-selector-forgiveness/
3.6.3 - 2022-12-20
https://blog.jquery.com/2022/12/20/jquery-3-6-3-released-a-quick-selector-fix/
3.6.2 - 2022-12-13
https://blog.jquery.com/2022/12/13/jquery-3-6-2-released/
3.6.1 - 2022-08-26
https://blog.jquery.com/2022/08/26/jquery-3-6-1-maintenance-release/
3.6.0 - 2021-03-02
https://blog.jquery.com/2021/03/02/jquery-3-6-0-released/

from jquery GitHub release notes

Package name: moment

2.30.1 - 2023-12-27
2.30.1
2.30.0 - 2023-12-26
2.30.0
2.29.4 - 2022-07-06
2.29.4

from moment GitHub release notes

Package name: datatables.net

1.13.11 - 2024-02-27
1.13.10 - 2024-02-09
1.13.8 - 2023-11-16
1.13.7 - 2023-11-03
1.13.6 - 2023-07-31
1.13.5 - 2023-07-04
1.13.4 - 2023-03-10
1.13.3 - 2023-02-28
1.13.2 - 2023-02-03
1.13.1 - 2022-11-08
1.13.0 - 2022-11-08
1.12.1 - 2022-05-19

from datatables.net GitHub release notes

Package name: datatables.net-bs4

1.13.11 - 2024-02-27
1.13.10 - 2024-02-09
1.13.8 - 2023-11-16
1.13.7 - 2023-11-03
1.13.6 - 2023-07-31
1.13.5 - 2023-07-04
1.13.4 - 2023-03-10
1.13.3 - 2023-02-28
1.13.2 - 2023-02-03
1.13.1 - 2022-11-08
1.13.0 - 2022-11-07
1.12.1 - 2022-05-19

from datatables.net-bs4 GitHub release notes

Package name: jquery-ui-dist

1.13.3 - 2024-05-26
https://blog.jqueryui.com/2024/04/jquery-ui-1-13-3-released/
1.13.2 - 2022-08-13
https://blog.jqueryui.com/2022/07/jquery-ui-1-13-2-released/

from jquery-ui-dist GitHub release notes

Package name: jquery-validation

1.21.0 - 2024-07-17
What's Changed
- Core: Add support for Web Components by @ dhobi in #2493
- Core: Allow negative decimal with no 0 by @ cstieg in #2483
New Contributors
- @ dhobi made their first contribution in #2493
- @ cstieg made their first contribution in #2483
Full Changelog: 1.20.1...1.21.0
1.20.1 - 2024-06-13
What's Changed
- Localization: Update Arabic translations by @ 5baddi in #2485
- Core: fix remote validation when input is the same as in aborted request by @ bidord in #2481
New Contributors
- @ 5baddi made their first contribution in #2485
Full Changelog: 1.20.0...1.20.1
1.20.0 - 2023-10-09
1.20.0 / 2023-10-10

Additional
- Fixed vinUS validation failing on valid vin numbers #2460
Core
- Fixed race condition in remote validation rules #2435
- Removed pending class from fields with an aborted request #2436
- Fixed remote validation error tracking #2242
- Added escapeHtml option to avoid XSS attacks via showLabel method #2462
Demo
- Fixed minlength validation in ajaxSubmit-integration-demo.html #2454
Localisation
- Improved required translation in pt_BR #2445
- Added Hindi translation #2453
- Added French currency translation #2471
1.19.5 - 2022-07-01
1.19.5 / 2022-07-01

Chore
- Add CodeQL analysis 3d3c1fb
Core
- Fixed jQuery .submit() event shorthand deprecation notice #2430
- Fixed ReDos vulnerability in url, and url2 validation 5bbd80d
Localisation
- Added periods to messages #2266

from jquery-validation GitHub release notes

Package name: bootstrap-touchspin

4.7.3 - 2023-05-25
Disable tabindex on the up/down buttons
4.7.2 - 2023-05-25
Added Babel to the build process to make the dist file ES5 compatible.
4.7.1 - 2023-05-25
- Firing the min and max events as soon as the value reaches the minimum or the maximum.
  Beware that if step is not 1 then the minimum and maximum settings will be overwritten with the values that can be reached with the given step. Like if step is 3 and min is specified as 44 then the touchspin.on.min event will be fired as soon as the value reaches 45, which is the minimum value that can be reached with the given step.
4.7.0 - 2023-05-24
- Better RTL support
- Refactored vertical button handling
- Better support for initializing with existing input group addons
4.6.2 - 2023-04-07
Fixing callback related bugs
4.6.1 - 2023-04-06
Fixes #115
4.6.0 - 2023-04-04
- Changing license to MIT
- Fixing bugs with readonly inputs
4.5.4 - 2023-04-04
- Adding support for the min/max/step attributes on an input
- If step is other than 1 then min and max values will be tweaked to be sure they are divisible by step
4.5.3 - 2023-04-04
Fixing change events for out-of-range values
4.5.2 - 2023-04-03
- Fixing #13
- Fixing #46
- Fixing #74
- Fixing #97
4.4.0 - 2023-03-30
4.3.0 - 2020-04-09

from bootstrap-touchspin GitHub release notes

Package name: cldr-data

36.0.2 - 2024-04-12
36.0.2
36.0.1 - 2022-04-11
36.0.1

from cldr-data GitHub release notes

Package name: datatables.net-buttons

1.7.1 - 2021-06-04
1.7.0 - 2021-03-09
1.6.5 - 2020-10-09

from datatables.net-buttons GitHub release notes

Package name: datatables.net-buttons-bs4

1.7.1 - 2021-06-04
1.7.0 - 2021-03-09
1.6.5 - 2020-10-09

from datatables.net-buttons-bs4 GitHub release notes

Package name: jquery-migrate

3.5.2 - 2024-07-17
This release introduces only one change:
- Make Migrate properly recognized as a CommonJS module in Node.js (#523, #525)
Note: you may also find jQuery Migrate 3.5.1 on npm. Do not use it, it's a result of a bad release.
3.5.1 - 2024-07-17
3.5.0 - 2024-07-12
Changes:
- Manipulation: Deprecate jQuery.UNSAFE_restoreLegacyHtmlPrefilter (#518)
- Attributes: Fix compatibility with jQuery 4.x (#496,

Snyk has created this PR to upgrade: - @fortawesome/fontawesome-free from 5.15.2 to 5.15.4. See this package in npm: https://www.npmjs.com/package/@fortawesome/fontawesome-free - bootstrap from 4.6.0 to 4.6.2. See this package in npm: https://www.npmjs.com/package/bootstrap - jquery from 3.6.0 to 3.7.1. See this package in npm: https://www.npmjs.com/package/jquery - moment from 2.29.4 to 2.30.1. See this package in npm: https://www.npmjs.com/package/moment - datatables.net from 1.12.1 to 1.13.11. See this package in npm: https://www.npmjs.com/package/datatables.net - datatables.net-bs4 from 1.12.1 to 1.13.11. See this package in npm: https://www.npmjs.com/package/datatables.net-bs4 - jquery-ui-dist from 1.13.2 to 1.13.3. See this package in npm: https://www.npmjs.com/package/jquery-ui-dist - jquery-validation from 1.19.5 to 1.21.0. See this package in npm: https://www.npmjs.com/package/jquery-validation - bootstrap-touchspin from 4.3.0 to 4.7.3. See this package in npm: https://www.npmjs.com/package/bootstrap-touchspin - cldr-data from 36.0.1 to 36.0.2. See this package in npm: https://www.npmjs.com/package/cldr-data - datatables.net-buttons from 1.6.5 to 1.7.1. See this package in npm: https://www.npmjs.com/package/datatables.net-buttons - datatables.net-buttons-bs4 from 1.6.5 to 1.7.1. See this package in npm: https://www.npmjs.com/package/datatables.net-buttons-bs4 - jquery-migrate from 3.4.0 to 3.5.2. See this package in npm: https://www.npmjs.com/package/jquery-migrate - jsrender from 1.0.11 to 1.0.15. See this package in npm: https://www.npmjs.com/package/jsrender - magnific-popup from 1.1.0 to 1.2.0. See this package in npm: https://www.npmjs.com/package/magnific-popup - swiper from 8.3.2 to 8.4.7. See this package in npm: https://www.npmjs.com/package/swiper - tinymce from 5.10.7 to 5.10.9. See this package in npm: https://www.npmjs.com/package/tinymce See this project in Snyk: https://app.snyk.io/org/batchusivaji/project/81d396d3-6007-4ea9-80a9-16232b61295b?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade: , bootstrap, jquery, moment, datatables.net, datatables.net-bs4, jquery-ui-dist, jquery-validation, bootstrap-touchspin, cldr-data, datatables.net-buttons, datatables.net-buttons-bs4, jquery-migrate, jsrender, magnific-popup, swiper, tinymce #20

[Snyk] Upgrade: , bootstrap, jquery, moment, datatables.net, datatables.net-bs4, jquery-ui-dist, jquery-validation, bootstrap-touchspin, cldr-data, datatables.net-buttons, datatables.net-buttons-bs4, jquery-migrate, jsrender, magnific-popup, swiper, tinymce #20

Uh oh!

shivajirepo commented Sep 8, 2024

Highlights

What's Changed

New Contributors

What's changed

Full changelog

What's Changed

New Contributors

What's Changed

New Contributors

1.20.0 / 2023-10-10

Additional

Core

Demo

Localisation

1.19.5 / 2022-07-01

Chore

Core

Localisation

Uh oh!

Uh oh!

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

[Snyk] Upgrade: , bootstrap, jquery, moment, datatables.net, datatables.net-bs4, jquery-ui-dist, jquery-validation, bootstrap-touchspin, cldr-data, datatables.net-buttons, datatables.net-buttons-bs4, jquery-migrate, jsrender, magnific-popup, swiper, tinymce #20

Are you sure you want to change the base?

[Snyk] Upgrade: , bootstrap, jquery, moment, datatables.net, datatables.net-bs4, jquery-ui-dist, jquery-validation, bootstrap-touchspin, cldr-data, datatables.net-buttons, datatables.net-buttons-bs4, jquery-migrate, jsrender, magnific-popup, swiper, tinymce #20

Uh oh!

Conversation

shivajirepo commented Sep 8, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

Highlights

What's Changed

New Contributors

What's changed

Full changelog

What's Changed

New Contributors

What's Changed

New Contributors

1.20.0 / 2023-10-10

Additional

Core

Demo

Localisation

1.19.5 / 2022-07-01

Chore

Core

Localisation

Uh oh!

Uh oh!

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.