[Snyk] Upgrade: react, react-dom, , async, clsx, eventemitter2, fontfaceobserver, handlebars, image-size, jquery, neo4j-driver, prop-types, react-alert-template-basic, react-draggable, react-transition-group, stream-chain, stream-json, unzipper #15
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
react
from 16.13.1 to 16.14.0 | 1 version ahead of your current version | 4 years ago
on 2020-10-14
react-dom
from 16.13.1 to 16.14.0 | 1 version ahead of your current version | 4 years ago
on 2020-10-14
@fortawesome/fontawesome-free
from 5.14.0 to 5.15.4 | 5 versions ahead of your current version | 3 years ago
on 2021-08-04
async
from 2.6.3 to 2.6.4 | 1 version ahead of your current version | 2 years ago
on 2022-04-13
clsx
from 1.1.1 to 1.2.1 | 2 versions ahead of your current version | 2 years ago
on 2022-07-06
eventemitter2
from 6.4.3 to 6.4.9 | 6 versions ahead of your current version | 2 years ago
on 2022-09-12
fontfaceobserver
from 2.1.0 to 2.3.0 | 2 versions ahead of your current version | 2 years ago
on 2022-05-16
handlebars
from 4.7.6 to 4.7.8 | 2 versions ahead of your current version | a year ago
on 2023-08-01
image-size
from 0.8.3 to 0.9.7 | 7 versions ahead of your current version | 3 years ago
on 2021-03-15
jquery
from 3.5.1 to 3.7.1 | 7 versions ahead of your current version | a year ago
on 2023-08-28
neo4j-driver
from 4.1.0 to 4.4.11 | 35 versions ahead of your current version | a year ago
on 2023-06-19
prop-types
from 15.7.2 to 15.8.1 | 2 versions ahead of your current version | 3 years ago
on 2022-01-05
react-alert-template-basic
from 1.0.0 to 1.0.2 | 2 versions ahead of your current version | 3 years ago
on 2021-05-13
react-draggable
from 4.4.3 to 4.4.6 | 3 versions ahead of your current version | a year ago
on 2023-09-27
react-transition-group
from 4.4.1 to 4.4.5 | 4 versions ahead of your current version | 2 years ago
on 2022-08-01
stream-chain
from 2.2.3 to 2.2.5 | 2 versions ahead of your current version | 3 years ago
on 2022-02-17
stream-json
from 1.7.1 to 1.8.0 | 5 versions ahead of your current version | a year ago
on 2023-05-30
unzipper
from 0.10.11 to 0.12.3 | 9 versions ahead of your current version | a month ago
on 2024-07-31
Issues fixed by the recommended upgrade:
SNYK-JS-LODASH-567746
SNYK-JS-ASYNC-2441827
SNYK-JS-HANDLEBARS-1056767
SNYK-JS-HANDLEBARS-1279029
SNYK-JS-INFLIGHT-6095116
SNYK-JS-MINIMATCH-3050818
Release notes
Package name: react
React
React DOM
componentWillReceiveProps
,shouldComponentUpdate
, and so on). (@ gaearon in #18330)Artifacts
Package name: react-dom
React
React DOM
componentWillReceiveProps
,shouldComponentUpdate
, and so on). (@ gaearon in #18330)Artifacts
Package name: @fortawesome/fontawesome-free
Package name: async
Version 2.6.4
Version 2.6.3
Package name: clsx
Patches
clsx
export tooChores
Features
Add named
clsx
export alias (#43, #44): 56ab81fThank you @ danikaze~!
This is purely an alias for the default export so that TypeScript users can avoid the
esModuleInterop
setting. In other words, the followimport
statements are effectively identical, but the latter is preferred by TypeScript:Chores
tape
touvu
for tests: 1c36d10Thank you @ gingerrific~!
Patches
toVal
calls with truthy assertions: 4fa8811, 019ec02typeof
checks for common case: 08a5a7fChores
esm
hook with tests: 0287e40Benchmarks
The snippet below is comparing
[email protected]
(this version) to the previous version, and toclassnames
for ballpark comparison. All candidates are functionally identical!# Strings
classnames x 3,992,284 ops/sec ±1.64% (94 runs sampled)
[email protected] x 11,253,372 ops/sec ±0.35% (96 runs sampled)
[email protected] x 12,784,134 ops/sec ±0.42% (97 runs sampled)
Objects
classnames x 3,772,978 ops/sec ±0.46% (96 runs sampled)
[email protected] x 7,288,178 ops/sec ±0.31% (96 runs sampled)
[email protected] x 9,412,010 ops/sec ±0.42% (95 runs sampled)
Arrays
classnames x 1,665,275 ops/sec ±1.83% (93 runs sampled)
[email protected] x 8,340,174 ops/sec ±0.53% (96 runs sampled)
[email protected] x 9,141,916 ops/sec ±0.42% (95 runs sampled)
Nested Arrays
classnames x 1,164,706 ops/sec ±1.60% (95 runs sampled)
[email protected] x 6,284,485 ops/sec ±0.58% (90 runs sampled)
[email protected] x 7,165,151 ops/sec ±0.47% (91 runs sampled)
Nested Arrays w/ Objects
classnames x 1,597,180 ops/sec ±1.49% (93 runs sampled)
[email protected] x 6,345,248 ops/sec ±0.21% (95 runs sampled)
[email protected] x 7,651,411 ops/sec ±0.56% (95 runs sampled)
Mixed
classnames x 2,129,199 ops/sec ±1.46% (94 runs sampled)
[email protected] x 6,557,515 ops/sec ±0.73% (91 runs sampled)
[email protected] x 8,119,210 ops/sec ±0.42% (93 runs sampled)
Mixed (Bad Data)
classnames x 1,166,577 ops/sec ±0.84% (94 runs sampled)
[email protected] x 2,018,654 ops/sec ±0.15% (98 runs sampled)
[email protected] x 2,238,939 ops/sec ±0.34% (95 runs sampled)
from clsx GitHub release notes
Package name: eventemitter2
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
Added
Fixed
Fixed
Package name: fontfaceobserver
2.3.0
2.2.0
2.1.0
Package name: handlebars
Commits
v4.7.7
v4.7.6
Package name: image-size
0.9.7
0.9.6
0.9.5
No content.
0.9.3
No content.
0.9.1
0.8.3
Package name: jquery
https://blog.jquery.com/2023/08/28/jquery-3-7-1-released-reliable-table-row-dimensions/
https://blog.jquery.com/2023/05/11/jquery-3-7-0-released-staying-in-order/
https://blog.jquery.com/2023/03/08/jquery-3-6-4-released-selector-forgiveness/
https://blog.jquery.com/2022/12/20/jquery-3-6-3-released-a-quick-selector-fix/
https://blog.jquery.com/2022/12/13/jquery-3-6-2-released/
https://blog.jquery.com/2022/08/26/jquery-3-6-1-maintenance-release/
https://blog.jquery.com/2021/03/02/jquery-3-6-0-released/
3.5.1
Package name: neo4j-driver
Package name: prop-types
.data
; callhasOwnProperty
properly (#370)it
functions to arrow functions (#370)eslint
PropTypes.bigint
(#365)oneOfType
: Add expected types to warning (#198)checkPropTypes
: Friendlier message when using a type checker that is not a function (#51)has
(#261, #125, #124)elementType
(#335)PropTypes.node
: add link to react docscheckPropTypes
(#258)sideEffects
field. (#350)in-publish
to avoid running the build on installreact-is
(#347, #346, #345, #340, #338)browserify
,bundle-collapser
,eslint
,in-publish
,react
,uglifyify
,uglifyjs
v15.7.2
Package name: react-alert-template-basic
Package name: react-draggable
release v4.4.6
release v4.4.5
release v4.4.4
release v4.4.3
Package name: react-transition-group
4.4.5 (2022-08-01)
Bug Fixes
4.4.4 (2022-07-30)
Bug Fixes
4.4.3 (2022-07-30)
Bug Fixes
4.4.2 (2021-05-29)
Bug Fixes
nodeRef
prop type for cross-realm elements (#732) (8710c01)4.4.1 (2020-05-06)
Bug Fixes
Package name: stream-chain
New version: 2.2.5.
New version: 2.2.4.
Restricted published package size.
Package name: stream-json
Remove CodeQL analisys.
New version: 1.7.5.
Assembler can treat numbers as strings.
Merge branch 'maboily-fix-jsonl-parser-unhandled-errors'
New version: 1.7.1.
Package name: unzipper
Add @ ts-ignore to unblock typescript errors
fstream
replaced withfs-extra
big-integer
replaced withnode-int64
(up to 20x performance increase on large encrypted files)pipeline
to propagate errors in a chain of streamsImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"react","from":"16.13.1","to":"16.14.0"},{"name":"react-dom","from":"16.13.1","to":"16.14.0"},{"name":"","from":"fortawesome/fontawesome-free","to":"fortawesome/fontawesome-free"},{"name":"async","from":"2.6.3","to":"2.6.4"},{"name":"clsx","from":"1.1.1","to":"1.2.1"},{"name":"eventemitter2","from":"6.4.3","to":"6.4.9"},{"name":"fontfaceobserver","from":"2.1.0","to":"2.3.0"},{"name":"handlebars","from":"4.7.6","to":"4.7.8"},{"name":"image-size","from":"0.8.3","to":"0.9.7"},{"name":"jquery","from":"3.5.1","to":"3.7.1"},{"name":"neo4j-driver","from":"4.1.0","to":"4.4.11"},{"name":"prop-types","from":"15.7.2","to":"15.8.1"},{"name":"react-alert-template-basic","from":"1.0.0","to":"1.0.2"},{"name":"react-draggable","from":"4.4.3","to":"4.4.6"},{"name":"react-transition-group","from":"4.4.1","to":"4.4.5"},{"name":"stream-chain","from":"2.2.3","to":"2.2.5"},{"name":"stream-json","from":"1.7.1","to":"1.8.0"},{"name":"unzipper","from":"0.10.11","to":"0.12.3"}],"e...