chore(deps): bump the vulnerabilities-fixes group with 39 updates
Type: Pull Request
State: Closed
![dependabot[bot]](https://github.com/dependabot.png)
Association: Contributor
Comments: 0
(4 months ago)
(4 months ago)
(4 months ago)
dependencies javascript
Bumps the vulnerabilities-fixes group with 39 updates:
Package | From | To |
---|---|---|
@dynamic-framework/ui-react | 1.34.0 |
1.35.1 |
axios | 1.8.4 |
1.9.0 |
i18next | 23.16.8 |
25.1.3 |
liquidjs | 10.20.2 |
10.21.1 |
react | 18.2.0 |
18.3.1 |
react-dom | 18.2.0 |
19.1.0 |
@types/react-dom | 18.3.5 |
19.1.5 |
react-i18next | 13.3.2 |
15.5.1 |
@babel/preset-env | 7.26.7 |
7.27.2 |
@babel/preset-react | 7.26.3 |
7.27.1 |
@babel/preset-typescript | 7.26.0 |
7.27.1 |
@commitlint/cli | 19.6.1 |
19.8.1 |
@commitlint/config-conventional | 19.6.0 |
19.8.1 |
@testing-library/react | 16.2.0 |
16.3.0 |
@types/node | 18.19.74 |
22.15.18 |
@typescript-eslint/eslint-plugin | 6.21.0 |
8.32.1 |
@typescript-eslint/parser | 6.21.0 |
8.32.1 |
babel-loader | 9.2.1 |
10.0.0 |
css-loader | 6.11.0 |
7.1.2 |
css-minimizer-webpack-plugin | 5.0.1 |
7.0.2 |
eslint | 8.57.1 |
9.26.0 |
eslint-config-airbnb-typescript | 17.1.0 |
18.0.0 |
eslint-plugin-react | 7.37.4 |
7.37.5 |
eslint-plugin-react-hooks | 4.6.2 |
5.2.0 |
glob | 10.4.5 |
11.0.2 |
lint-staged | 15.4.3 |
16.0.0 |
postcss-loader | 7.3.4 |
8.1.1 |
sass | 1.69.7 |
1.89.0 |
sass-loader | 13.3.3 |
16.0.5 |
shx | 0.3.4 |
0.4.0 |
style-loader | 3.3.4 |
4.0.0 |
stylelint | 16.16.0 |
16.19.1 |
terser-webpack-plugin | 5.3.11 |
5.3.14 |
ts-jest | 29.2.5 |
29.3.3 |
typescript | 5.7.3 |
5.8.3 |
webpack | 5.97.1 |
5.99.8 |
webpack-cli | 5.1.4 |
6.0.1 |
webpack-dev-server | 4.15.2 |
5.2.1 |
webpack-manifest-plugin | 5.0.0 |
5.0.1 |
Updates @dynamic-framework/ui-react
from 1.34.0 to 1.35.1
Changelog
Sourced from @dynamic-framework/ui-react
's changelog.
1.35.1 (2025-05-14)
Bug Fixes
1.35.0 (2025-05-14)
Features
- DBoxFile: set custom behavior and new examples (#813) (80d74cb)
- DDatepicker: all API support on react-datepicker v8 (#818) (da0a064)
- DPopover: remove deprecated state and update docs (#792) (b5f42a3)
- update react version and peer deps (#799) (244d3e9)
Bug Fixes
- add matchMedia property as global in jest (#801) (e6b2ed8)
- DInput: set icon size variables on sm and lg (#807) (f89effb)
- DListGroupItem: set button type as button (#805) (4fc27b8)
- DPortalContext: keep tab navigation inside active portal (#811) (64ab54d)
- DToast: add toast gap variable and set all variables in docs (#806) (c529e42)
- remove duplicated properties by scoping icon button (#796) (9b67890)
- style: expose DInputSwitch css variables (#803) (4aa746a)
- style: remove fixed size and use min and max (#798) (4430932)
- style: remove padding from nav pills and underline (#804) (d8ce6b5)
- update hot toast version to 2.5.2 (#808) (decf2fa)
- update README.md (#817) (6bce4d2)
- use input group color on validation (#795) (5efd629)
Commits
85261e4
chore(master): release 1.35.1 (#829)1e2e302
fix(style): remove overflow on DDatepicker (#828)46593ea
chore(master): release 1.35.0 (#827)5919ba9
chore: codestyleda0a064
feat(DDatepicker): all API support on react-datepicker v8 (#818)80d74cb
feat(DBoxFile): set custom behavior and new examples (#813)6bce4d2
fix: update README.md (#817)66de4a0
style: set base sizing on select arrow icons (#814)fbe9381
chore: change storybook icon (#815)6e7170e
chore: rename example files (#812)- Additional commits viewable in compare view
Updates axios
from 1.8.4 to 1.9.0
Release notes
Sourced from axios's releases.
Release v1.9.0
Release notes:
Bug Fixes
- core: fix the Axios constructor implementation to treat the config argument as optional; (#6881) (6c5d4cd)
- fetch: fixed ERR_NETWORK mapping for Safari browsers; (#6767) (dfe8411)
- headers: allow iterable objects to be a data source for the set method; (#6873) (1b1f9cc)
- headers: fix
getSetCookie
by using 'get' method for caseless access; (#6874) (d4f7df4)- headers: fixed support for setting multiple header values from an iterated source; (#6885) (f7a3b5e)
- http: send minimal end multipart boundary (#6661) (987d2e2)
- types: fix autocomplete for adapter config (#6855) (e61a893)
Features
Contributors to this release
Changelog
Sourced from axios's changelog.
1.9.0 (2025-04-24)
Bug Fixes
- core: fix the Axios constructor implementation to treat the config argument as optional; (#6881) (6c5d4cd)
- fetch: fixed ERR_NETWORK mapping for Safari browsers; (#6767) (dfe8411)
- headers: allow iterable objects to be a data source for the set method; (#6873) (1b1f9cc)
- headers: fix
getSetCookie
by using 'get' method for caseless access; (#6874) (d4f7df4)- headers: fixed support for setting multiple header values from an iterated source; (#6885) (f7a3b5e)
- http: send minimal end multipart boundary (#6661) (987d2e2)
- types: fix autocomplete for adapter config (#6855) (e61a893)
Features
Contributors to this release
Commits
cdcfd21
chore(release): v1.9.0 (#6891)987d2e2
fix(http): send minimal end multipart boundary (#6661)f112edf
chore(ci): add PR files guard action; (#6890)61de4c0
chore(ci): update github actions; (#6889)c3aba3d
chore(ci): add labeler github action; (#6888)f7a3b5e
fix(headers): fixed support for setting multiple header values from an iterat...e61a893
fix(types): fix autocomplete for adapter config (#6855)6c5d4cd
fix(core): fix the Axios constructor implementation to treat the config argum...dfe8411
fix(fetch): fixed ERR_NETWORK mapping for Safari browsers; (#6767)d4f7df4
fix(headers): fixgetSetCookie
by using 'get' method for caseless access; (...- Additional commits viewable in compare view
Updates i18next
from 23.16.8 to 25.1.3
Release notes
Sourced from i18next's releases.
v25.1.3
v25.1.2
- do not mutate t options, fixes 2307
v25.1.1
- fix options type for
parseMissingKeyHandler
v25.1.0
- feat:
parseMissingKeyHandler
now takes options as parameter like in missingKeyHandler 2304v25.0.2
- fix
cloneInstance
withforkResourceStore: true
addresses 2303v25.0.1
- optimize
changeLanguage
to correctly usegetBestMatchFromCodes
(string or array) 2299 and improveresolvedLanguage
set for non canonical codesv25.0.0
This is a potentially breaking release:
- fix multiple changeLanguage call that may have result in wrong order in previous versions 1605 2298
- adapt
changeLanguage
to always (string or array) usegetBestMatchFromCodes
2299getBestMatchFromCodes
now tries to fallback to language code with same script 2299v24.2.3
- Upgrade
@babel/runtime
package to version v7.26.10 2293v24.2.2
- fix: Interpolation fails with arrays (TypeError) and doesn't work with objects in defaultValue 1829
v24.2.1
- Standardize null/undefined checks across codebase 2275
- fix(typescript): make TFunction augmentable again 2279, fixes 2278
v24.2.0
- feat(typescript): Add strictKeyChecks option to enforce checking key existence when defaultValue is used 2274, fixes 2043
v24.1.2
- optimize fix: Bug Report: Unsafe Behavior in i18n.t Function Leading to Potential Code Execution 2273
v24.1.1
- fix: Bug Report: Unsafe Behavior in i18n.t Function Leading to Potential Code Execution 2273
v24.1.0
v24.0.5
- remove extra log for 2268
... (truncated)
Changelog
Sourced from i18next's changelog.
25.1.3
25.1.2
- do not mutate t options, fixes 2307
25.1.1
- fix options type for
parseMissingKeyHandler
25.1.0
- feat:
parseMissingKeyHandler
now takes options as parameter like in missingKeyHandler 230425.0.2
- fix
cloneInstance
withforkResourceStore: true
addresses 230325.0.1
- optimize
changeLanguage
to correctly usegetBestMatchFromCodes
(string or array) 2299 and improveresolvedLanguage
set for non canonical codes25.0.0
This is a potentially breaking release:
- fix multiple changeLanguage call that may have result in wrong order in previous versions 1605 2298
- adapt
changeLanguage
to always (string or array) usegetBestMatchFromCodes
2299getBestMatchFromCodes
now tries to fallback to language code with same script 229924.2.3
- Upgrade
@babel/runtime
package to version v7.26.10 229324.2.2
- fix: Interpolation fails with arrays (TypeError) and doesn't work with objects in defaultValue 1829
24.2.1
- Standardize null/undefined checks across codebase 2275
- fix(typescript): make TFunction augmentable again 2279, fixes 2278
24.2.0
- feat(typescript): Add strictKeyChecks option to enforce checking key existence when defaultValue is used 2274, fixes 2043
24.1.2
... (truncated)
Commits
0b4a3d3
25.1.30b3d167
releasef50472f
RespectnsSeparator
whenappendNamespaceToMissingKey
istrue
(#2311)32979d8
chore: update dependencies (#2309)ec86d00
25.1.2ba1a6dc
do not mutate t options, fixes #230734bcdb5
25.1.1de7100d
fix options type forparseMissingKeyHandler
#2304fa7d117
25.1.06caace4
feat:parseMissingKeyHandler
now takes options as parameter like in missing...- Additional commits viewable in compare view
Updates liquidjs
from 10.20.2 to 10.21.1
Release notes
Sourced from liquidjs's releases.
v10.21.1
10.21.1 (2025-05-14)
Bug Fixes
v10.21.0
10.21.0 (2025-02-23)
Features
v10.20.3
10.20.3 (2025-02-09)
Bug Fixes
Changelog
Sourced from liquidjs's changelog.
10.21.1 (2025-05-14)
Bug Fixes
10.21.0 (2025-02-23)
Features
10.20.3 (2025-02-09)
Bug Fixes
Commits
de12359
chore(release): 10.21.1 [skip ci]025c40f
fix: block.super with strictVariables, #806 (#807)2f414f8
docs: Fix formatting bug in echo.md (#805)40c5212
docs: Fix typo in options.md (#802)ae0c07e
docs: add gurdiga as a contributor for doc (#804)3b92024
docs: A lil Markdown fix (#803)fc42ad7
docs: update financial contributors050a7fc
docs: add edh649 as a contributor for doc (#801)0fdc5c7
Update register-filters-tags.md90d2ecb
chore(release): 10.21.0 [skip ci]- Additional commits viewable in compare view
Updates react
from 18.2.0 to 18.3.1
Release notes
Sourced from react's releases.
18.3.1 (April 26, 2024)
- Export
act
fromreact
f1338f18.3.0 (April 25, 2024)
This release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.
Read the React 19 Upgrade Guide for more info.
React
- Allow writing to
this.refs
to support string ref codemod 909071- Warn for deprecated
findDOMNode
outside StrictMode c3b283- Warn for deprecated
test-utils
methods d4ea75- Warn for deprecated Legacy Context outside StrictMode 415ee0
- Warn for deprecated string refs outside StrictMode #25383
- Warn for deprecated
defaultProps
for function components #25699- Warn when spreading
key
#25697- Warn when using
act
fromtest-utils
d4ea75React DOM
Changelog
Sourced from react's changelog.
18.3.1 (April 26, 2024)
- Export
act
fromreact
f1338f18.3.0 (April 25, 2024)
This release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.
Read the React 19 Upgrade Guide for more info.
React
- Allow writing to
this.refs
to support string ref codemod 909071- Warn for deprecated
findDOMNode
outside StrictMode c3b283- Warn for deprecated
test-utils
methods d4ea75- Warn for deprecated Legacy Context outside StrictMode 415ee0
- Warn for deprecated string refs outside StrictMode #25383
- Warn for deprecated
defaultProps
for function components #25699- Warn when spreading
key
#25697- Warn when using
act
fromtest-utils
d4ea75React DOM
Commits
Maintainer changes
This version was pushed to npm by react-bot, a new releaser for react since your current version.
Updates react-dom
from 18.2.0 to 19.1.0
Release notes
Sourced from react-dom's releases.
19.1.0 (March 28, 2025)
Owner Stack
An Owner Stack is a string representing the components that are directly responsible for rendering a particular component. You can log Owner Stacks when debugging or use Owner Stacks to enhance error overlays or other development tools. Owner Stacks are only available in development builds. Component Stacks in production are unchanged.
- An Owner Stack is a development-only stack trace that helps identify which components are responsible for rendering a particular component. An Owner Stack is distinct from a Component Stacks, which shows the hierarchy of components leading to an error.
- The captureOwnerStack API is only available in development mode and returns a Owner Stack, if available. The API can be used to enhance error overlays or log component relationships when debugging. #29923, #32353, #30306, #32538, #32529, #32538
React
- Enhanced support for Suspense boundaries to be used anywhere, including the client, server, and during hydration. #32069, #32163, #32224, #32252
- Reduced unnecessary client rendering through improved hydration scheduling #31751
- Increased priority of client rendered Suspense boundaries #31776
- Fixed frozen fallback states by rendering unfinished Suspense boundaries on the client. #31620
- Reduced garbage collection pressure by improving Suspense boundary retries. #31667
- Fixed erroneous “Waiting for Paint” log when the passive effect phase was not delayed #31526
- Fixed a regression causing key warnings for flattened positional children in development mode. #32117
- Updated
useId
to use valid CSS selectors, changing format from:r123:
to«r123»
. #32001- Added a dev-only warning for null/undefined created in useEffect, useInsertionEffect, and useLayoutEffect. #32355
- Fixed a bug where dev-only methods were exported in production builds. React.act is no longer available in production builds. #32200
- Improved consistency across prod and dev to improve compatibility with Google Closure Complier and bindings #31808
- Improve passive effect scheduling for consistent task yielding. #31785
- Fixed asserts in React Native when passChildrenWhenCloningPersistedNodes is enabled for OffscreenComponent rendering. #32528
- Fixed component name resolution for Portal #32640
- Added support for beforetoggle and toggle events on the dialog element. #32479 #32479
React DOM
- Fixed double warning when the
href
attribute is an empty string #31783- Fixed an edge case where
getHoistableRoot()
didn’t work properly when the container was a Document #32321- Removed support for using HTML comments (e.g.
<!-- -->
) as a DOM container. #32250- Added support for
<script>
and\<template>
tags to be nested within<select>
tags. #31837- Fixed responsive images to be preloaded as HTML instead of headers #32445
use-sync-external-store
- Added
exports
field topackage.json
foruse-sync-external-store
to support various entrypoints. #25231React Server Components
- Added
unstable_prerender
, a new experimental API for prerendering React Server Components on the server #31724- Fixed an issue where streams would hang when receiving new chunks after a global error #31840, #31851
- Fixed an issue where pending chunks were counted twice. #31833
- Added support for streaming in edge environments #31852
- Added support for sending custom error names from a server so that they are available in the client for console replaying. #32116
- Updated the server component wire format to remove IDs for hints and console.log because they have no return value #31671
- Exposed
registerServerReference
in client builds to handle server references in different environments. #32534- Added react-server-dom-parcel package which integrates Server Components with the Parcel bundler #31725, #32132, #31799, #32294, #31741
19.0.0 (December 5, 2024)
Below is a list of all new features, APIs, deprecations, and breaking changes. Read React 19 release post and React 19 upgrade guide for more information.
Note: To help make the upgrade to React 19 easier, we’ve published a react@18.3 release that is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19. We recommend upgrading to React 18.3.1 first to help identify any issues before upgrading to React 19.
... (truncated)
Changelog
Sourced from react-dom's changelog.
19.1.0 (March 28, 2025)
Owner Stack
An Owner Stack is a string representing the components that are directly responsible for rendering a particular component. You can log Owner Stacks when debugging or use Owner Stacks to enhance error overlays or other development tools. Owner Stacks are only available in development builds. Component Stacks in production are unchanged.
- An Owner Stack is a development-only stack trace that helps identify which components are responsible for rendering a particular component. An Owner Stack is distinct from a Component Stacks, which shows the hierarchy of components leading to an error.
- The captureOwnerStack API is only available in development mode and returns a Owner Stack, if available. The API can be used to enhance error overlays or log component relationships when debugging. #29923, #32353, #30306, #32538, #32529, #32538
React
- Enhanced support for Suspense boundaries to be used anywhere, including the client, server, and during hydration. #32069, #32163, #32224, #32252
- Reduced unnecessary client rendering through improved hydration scheduling #31751
- Increased priority of client rendered Suspense boundaries #31776
- Fixed frozen fallback states by rendering unfinished Suspense boundaries on the client. #31620
- Reduced garbage collection pressure by improving Suspense boundary retries. #31667
- Fixed erroneous “Waiting for Paint” log when the passive effect phase was not delayed #31526
- Fixed a regression causing key warnings for flattened positional children in development mode. #32117
- Updated
useId
to use valid CSS selectors, changing format from:r123:
to«r123»
. #32001- Added a dev-only warning for null/undefined created in useEffect, useInsertionEffect, and useLayoutEffect. #32355
- Fixed a bug where dev-only methods were exported in production builds. React.act is no longer available in production builds. #32200
- Improved consistency across prod and dev to improve compatibility with Google Closure Complier and bindings #31808
- Improve passive effect scheduling for consistent task yielding. #31785
- Fixed asserts in React Native when passChildrenWhenCloningPersistedNodes is enabled for OffscreenComponent rendering. #32528
- Fixed component name resolution for Portal #32640
- Added support for beforetoggle and toggle events on the dialog element. #32479 #32479
React DOM
- Fixed double warning when the
href
attribute is an empty string #31783- Fixed an edge case where
getHoistableRoot()
didn’t work properly when the container was a Document #32321- Removed support for using HTML comments (e.g.
<!-- -->
) as a DOM container. #32250- Added support for
<script>
and\<template>
tags to be nested within<select>
tags. #31837- Fixed responsive images to be preloaded as HTML instead of headers #32445
use-sync-external-store
- Added
exports
field topackage.json
foruse-sync-external-store
to support various entrypoints. #25231React Server Components
- Added
unstable_prerender
, a new experimental API for prerendering React Server Components on the server #31724- Fixed an issue where streams would hang when receiving new chunks after a global error #31840, #31851
- Fixed an issue where pending chunks were counted twice. #31833
- Added support for streaming in edge environments #31852
- Added support for sending custom error names from a server so that they are available in the client for console replaying. #32116
- Updated the server component wire format to remove IDs for hints and console.log because they have no return value #31671
- Exposed
registerServerReference
in client builds to handle server references in different environments. #32534- Added react-server-dom-parcel package which integrates Server Components with the Parcel bundler #31725, #32132, #31799, #32294, #31741
19.0.0 (December 5, 2024)
Below is a list of all new features, APIs, deprecations, and breaking changes. Read React 19 release post and React 19 upgrade guide for more information.
... (truncated)
Commits
7943da1
Set accurate value for alwaysThrottleRetries on www (#32684)476f538
Add getClientRects to fragment instances (#32660)c69a5fc
Add blur() and focusLast() to fragment instances (#32654)cd28a94
Add observer methods to fragment instances (#32619)6aa8254
Add ref to Fragment (#32465)029e8bd
Add Owner Stack to attribute hydration mismatches (#32538)aac177c
Support beforetoggle/toggle events for dialog (#32479)e0fe347
[flags] remove enableOwnerStacks (#32426)2e4db33
Use valid CSS selectors in useId format (#32001)9b042f9
[Fizz] Responsive images should not be preloaded with link headers (#32445)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by react-bot, a new releaser for react-dom since your current version.
Updates @types/react-dom
from 18.3.5 to 19.1.5
Commits
- See full diff in compare view
Updates react-i18next
from 13.3.2 to 15.5.1
Changelog
Sourced from react-i18next's changelog.
15.5.1
add typescript as optional peer dependency 1843
15.5.0
feat: use const type parameters for useTranslation() 1842
15.4.1
fix: unique key warning on componentized element 1835
15.4.0
feat: add meta with codes on warnings to allow conditional logging 1826
15.3.0
Uses the i18next logger instead of the default console logger, if there is a valid i18next instance. Now the debug i18next option is respected, and you can also inject your own logger module: https://www.i18next.com/misc/creating-own-plugins#logger
15.2.0
This version may be breaking if you still use React < v18 with TypeScript. For JS users this version is equal to v15.1.4
15.1.4
- Fix: warning each child should have a unique key 1820
15.1.3
- fix: Self-closing REACT components in translation strings should not attempt to replace the component's children 1815 1816
15.1.2
- fix: Attempted to assign to readonly property 1813
15.1.1
- fix: Not all namespaces are loaded when passing the lng option to useTranslate 1809
15.1.0
- fix:
<Trans />
warns 'Each child in a list should have a unique "key" prop.' for react 19 180615.0.3
- try to fix unexpected token issue
... (truncated)
Package Dependencies
@typescript-eslint/parser
npm
6.21.0 → 8.32.1
Major
@typescript-eslint/eslint-plugin
npm
6.21.0 → 8.32.1
Major
@commitlint/config-conventional
npm
19.6.0 → 19.8.1
Minor
eslint-config-airbnb-typescript
npm
17.1.0 → 18.0.0
Major
css-minimizer-webpack-plugin
npm
5.0.1 → 7.0.2
Major
@dynamic-framework/ui-react
npm
1.34.0 → 1.35.1
Minor
Technical Details
ID: | 364323 |
UUID: | 2524841790 |
Node ID: | PR_kwDOIhH_dM6Wfgc- |
Host: | GitHub |
Repository: | dynamic-framework/dynamic-react-base-template |
Mergeable: | Yes |
Merge State: | Unstable |