Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade flowbite from 1.5.3 to 1.8.1 #82

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade flowbite from 1.5.3 to 1.8.1 #82

wants to merge 1 commit into from

Conversation

m1kql
Copy link
Collaborator

@m1kql m1kql commented Mar 28, 2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade flowbite from 1.5.3 to 1.8.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 12 versions ahead of your current version.
  • The recommended version was released 8 months ago, on 2023-08-01.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ADOBECSSTOOLS-6096077		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-LOADERUTILS-3043105		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Sandbox Bypass
SNYK-JS-WEBPACK-3358798		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Path Traversal
SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Cross-site Request Forgery (CSRF)
SNYK-JS-AXIOS-6032459		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-AXIOS-6144788		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 No Known Exploit
Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ADOBECSSTOOLS-5871286		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-JSON5-3182856		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-JSON5-3182856		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-TOUGHCOOKIE-5672873		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-6124857		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Open Redirect
SNYK-JS-EXPRESS-6474509		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 No Known Exploit
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: flowbite
  • 1.8.1 - 2023-08-01
    • fix #628 by conditionally adding safelist pattern when chart is set to true
  • 1.8.0 - 2023-07-29
    • added new chart components
    • enable or disable styles via the Flowbite Plugin
    • addded new API option to the dropdowns to prevent closing when clicking on certain elements
    • small bug fixes and improvements overall
  • 1.7.0 - 2023-07-04
    • integrate new Flowbite Icons with all UI components
    • added new pagination examples and sizes
    • improved spacing and alignment for all buttons with icons
    • improved examples for popovers, toasts, and modals
    • updated docs and website icons
    • update Svelte docs for Svelte 4.0 by @ shinokada
  • 1.6.6 - 2023-06-14
    • new device mockups component
    • add nested accordions feature (#266 issue fixed by (@ jneuendorf)[https://github.com/jneuendorf])
    • make init functions (ie. initDropdowns, initFlowbite) available via the window object
    • fix Nuxt.js documentation config path for Tailwind CSS
  • 1.6.5 - 2023-04-10
    • New gallery component
    • New jumbotron component
    • LiveView support (issue #486) for Phoenix by @ jmnda-dev
    • Improve modal responsive behaviour by centering it vertically
    • Improve Svelte getting started guide by @ shinokada
    • Improve font smoothing by adding antialising to the docs and examples
    • Improve navbar spacings and font sizes to reflect Figma design system
  • 1.6.4 - 2023-03-10
    • New bottom navigation component
    • New sticky banner component
    • Export initFlowbite to set up event listeners for all data attributes
    • Fix for Turbo Frame load events (issue #88)
    • Include WindiCSS on NPM (thanks to @ rgvillanueva28)
    • Adds close tooltips with esc key to meet WCAG (by @ daveholst)
    • Update Symfony guide steps (by @ CorwinDev)
    • Astro integration guide
    • GatsbyJS integration guide
    • Symfony integration guide
    • SolidJS integration guide
    • Phoenix (Elixir) integration guide
  • 1.6.3 - 2023-01-23
    • Added dropdown hover functionality with delay option and examples (issue #208)
    • Fixed clicking outside of the Popover component not closing when using the "click" trigger type (issue #242)
    • Introduced the "none" option for Tooltip, Speed Dial, Popover and Dropdown components for trigger type (issue #181)
    • Fixed Tooltip and Popover click events on Safari browsers when using mobile devices (issue #246 and issue #413)
    • Improve the consistency of the dropdown components across the whole documentation using border-lg (issue #276)
    • Added the optional closable option to the Modal component preventing it from being closed when hitting the ESC button (thanks for the PR @ CorwinDev)
  • 1.6.2 - 2023-01-12
    • add event listeners for data attributes back to index.ts
    • fix #398 import maps for flowbite.turbo.min.js.map for Ruby on Rails
  • 1.6.1 - 2023-01-10
    • Nuxt.js integration guide + starter kit
    • Add data attribute initialization support for Vue 3 and Nuxt.js
    • Remove event listeners from the basic index.js file and keep it only for index.umd.js
    • Fix the drawer flickering issue
    • Update Laravel integration guide with Vite (thanks to @ CorwinDev for the PR)
    • Fixed checkbox dark mode focus state (thanks to @ CorwinDev for the PR)
    • Added Datepicker turbo load support for Ruby on Rails 7 (thanks to @ travisgalloway for the PR)
  • 1.6.0 - 2023-01-03
    • migrated code to TypeScript & introduced types and interfaces
    • integrated ESlint and Prettier
    • fixed event listeners stacking up for all interactive components
    • improved NPM build scripts
    • new stepper component
    • new indicator component
    • new breadcrumb components
    • new spinner examples
  • 1.5.5 - 2022-12-08
  • 1.5.4 - 2022-11-15
  • 1.5.3 - 2022-09-01
from flowbite GitHub release notes
Commit messages
Package name: flowbite
  • 75a443b fix(plugin): remove warning for `apexcharts` if not used
  • c1e070b docs(charts): improve copy of docs
  • 900e8c2 docs(README): add charts thumbnail
  • 119878e docs(charts): fix typos
  • d9adff6 Merge pull request #626 from themesberg/charts-plugin
  • 34763b6 chore(version): bump to `v1.8.0` and changelog
  • e6ce7cb docs(dropdown): add example with date range picker and document new JS option
  • 29ecbaa feature(dropdown): add new option to ignore outside clicks based on class
  • be17231 docs(charts): remove white space for line chart widget
  • b8e5265 docs(charts): add dropdown with range date picker
  • 01f8028 docs(charts): add three dot menu to pie chart example
  • 4b1561b docs(charts): remove the white space around the charts
  • 026af79 docs(charts): update column chart appearance
  • 630fc6c docs(charts): finish radial chart example
  • 198e5c6 docs(charts): add download CSV button
  • af15adc feature(chart): add donut checkboxes for device data selection
  • df90efd docs(charts): improve popover positioning
  • 4d0e59b docs(theming): add new plugin documentation
  • da072e0 docs(charts): improve main description
  • a72e308 docs(charts): add JS behaviour and more examples content
  • ebc6d4f docs(charts): update headings progress content
  • 8dfa79c docs(charts): documentation for data labels
  • 0168202 docs(charts): improve labels example
  • da77532 docs(charts): add options documentation

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@m1kql @snyk-bot