[Snyk] Upgrade preact from 10.5.5 to 10.10.0 #10

MarcelRaschke · 2022-08-20T19:25:58Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade preact from 10.5.5 to 10.10.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 26 versions ahead of your current version.
The recommended version was released a month ago, on 2022-07-13.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Arbitrary File Write SNYK-JS-TAR-1579155	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	425/1000 Why? CVSS 8.5	No Known Exploit
Information Exposure SNYK-JS-SIMPLEGET-2361683	425/1000 Why? CVSS 8.5	Proof of Concept
Information Exposure SNYK-JS-SIMPLEGET-2361683	425/1000 Why? CVSS 8.5	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	425/1000 Why? CVSS 8.5	Proof of Concept
Directory Traversal SNYK-JS-MOMENT-2440688	425/1000 Why? CVSS 8.5	No Known Exploit
Command Injection SNYK-JS-LODASH-1040724	425/1000 Why? CVSS 8.5	Proof of Concept
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	425/1000 Why? CVSS 8.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-JPEGJS-2859218	425/1000 Why? CVSS 8.5	Proof of Concept
Prototype Pollution SNYK-JS-INI-1048974	425/1000 Why? CVSS 8.5	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-EJS-2803307	425/1000 Why? CVSS 8.5	Proof of Concept
Prototype Pollution SNYK-JS-CACHEDPATHRELATIVE-2342653	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	425/1000 Why? CVSS 8.5	Proof of Concept
Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	425/1000 Why? CVSS 8.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	425/1000 Why? CVSS 8.5	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1243891	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1085627	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	425/1000 Why? CVSS 8.5	Proof of Concept
Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary Code Injection SNYK-JS-EJS-1049328	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	425/1000 Why? CVSS 8.5	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-STRIPTAGS-1312310	425/1000 Why? CVSS 8.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: preact

10.10.0 - 2022-07-13
Feature 
- Microtick —> setTimeout for debouncing renders (mirror change for setTimeout debounce #3608, thanks @ JoviDeCroock)
We changed our debounce of our rendering to setTimeout!
Why? We've batched using microtasks for the past few major versions because it benchmarked well. This had a side-effect of flushing batched renders between event handlers, which can cause some strange behavior:
```
<input
      type="checkbox"
      onChange={onChange}
      checked={true}
      onClick={onClick}
/> 
```
An additional benefit of this change is that code causing an infinite rendering loop will no longer result in an unresponsive browser tab. Rendering in a loop is now capped to the browser's maximum timer frequency (~250Hz), which makes it possible to pause and debug the code triggering an accidental loop.
10.9.0 - 2022-07-06
Feature

We are adding support for the newly added React 18 hooks (apart from useId) (#3568, thanks @ JoviDeCroock)

FIxes
- Adding types for 'part' attribute (#3595, thanks @ rschristian)
- prevent _suspended and _force from colliding (#3585, thanks @ JoviDeCroock)
10.8.2 - 2022-06-22
Enhancements
- Add support for svg property shape-rendering (#3577, thanks @ DannyvanderJagt)
- Remove setState on unmounted component warning (#3576, thanks @ ekwoka)
Fixes
- Fix allow return undefined in useMemo after skipped render (#3580, thanks @ marvinhagemeister)
- Fix incorrect useMemo return value after skipped render (#3579, thanks @ marvinhagemeister)
- Commit hooks in options.diffed (#3578, thanks @ JoviDeCroock)
- restrict "oninputCapture" conversion to just "oninput" vs "oninput*" (#3573, thanks @ jramanat-oracle)
Improvements
- Improve unit tests to cover fix on #3573 (#3574, thanks @ marconi1992)
- Add _pendingValue to mangle.json (#3575, thanks @ marvinhagemeister)
10.8.1 - 2022-06-16
- Clear pending state from repeated renders (#3567, thanks @ JoviDeCroock)
10.8.0 - 2022-06-14
10.7.3 - 2022-06-01
10.7.2 - 2022-05-06
10.7.1 - 2022-04-05
10.7.0 - 2022-03-29
10.6.6 - 2022-02-14
10.6.5 - 2022-01-27
10.6.4 - 2021-12-09
10.6.3 - 2021-12-08
10.6.2 - 2021-11-29
10.6.1 - 2021-11-25
10.6.0 - 2021-11-23
10.5.15 - 2021-10-12
10.5.14 - 2021-07-01
10.5.13 - 2021-03-14
10.5.12 - 2021-01-26
10.5.11 - 2021-01-20
10.5.10 - 2021-01-14
10.5.9 - 2021-01-03
10.5.8 - 2020-12-30
10.5.7 - 2020-11-12
10.5.6 - 2020-11-12
10.5.5 - 2020-10-18