Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(Security): bump the react group with 7 updates #3885

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 17, 2024

Bumps the react group with 7 updates:

Package From To
react 17.0.2 18.3.1
@types/react 17.0.80 18.3.7
react-day-picker 7.4.10 9.0.9
react-merge-refs 1.1.0 2.1.1
@types/react-transition-group 4.4.10 4.4.11
react-dom 18.2.0 18.3.1
@types/react-dom 18.2.24 18.3.0

Updates react from 17.0.2 to 18.3.1

Release notes

Sourced from react's releases.

18.3.1 (April 26, 2024)

  • Export act from react f1338f

18.3.0 (April 25, 2024)

This release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.

Read the React 19 Upgrade Guide for more info.

React

  • Allow writing to this.refs to support string ref codemod 909071
  • Warn for deprecated findDOMNode outside StrictMode c3b283
  • Warn for deprecated test-utils methods d4ea75
  • Warn for deprecated Legacy Context outside StrictMode 415ee0
  • Warn for deprecated string refs outside StrictMode #25383
  • Warn for deprecated defaultProps for function components #25699
  • Warn when spreading key #25697
  • Warn when using act from test-utils d4ea75

React DOM

  • Warn for deprecated unmountComponentAtNode 8a015b
  • Warn for deprecated renderToStaticNodeStream #28874

18.2.0 (June 14, 2022)

React DOM

React DOM Server

  • Pass information about server errors to the client. (@​salazarm and @​gnoff in #24551 and #24591)
  • Allow to provide a reason when aborting the HTML stream. (@​gnoff in #24680)
  • Eliminate extraneous text separators in the HTML where possible. (@​gnoff in #24630)
  • Disallow complex children inside <title> elements to match the browser constraints. (@​gnoff in #24679)
  • Fix buffering in some worker environments by explicitly setting highWaterMark to 0. (@​jplhomer in #24641)

Server Components (Experimental)

18.1.0 (April 26, 2022)

React DOM

... (truncated)

Changelog

Sourced from react's changelog.

18.3.1 (April 26, 2024)

  • Export act from react f1338f

18.3.0 (April 25, 2024)

This release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.

Read the React 19 Upgrade Guide for more info.

React

  • Allow writing to this.refs to support string ref codemod 909071
  • Warn for deprecated findDOMNode outside StrictMode c3b283
  • Warn for deprecated test-utils methods d4ea75
  • Warn for deprecated Legacy Context outside StrictMode 415ee0
  • Warn for deprecated string refs outside StrictMode #25383
  • Warn for deprecated defaultProps for function components #25699
  • Warn when spreading key #25697
  • Warn when using act from test-utils d4ea75

React DOM

  • Warn for deprecated unmountComponentAtNode 8a015b
  • Warn for deprecated renderToStaticNodeStream #28874

18.2.0 (June 14, 2022)

React DOM

React DOM Server

  • Pass information about server errors to the client. (@​salazarm and @​gnoff in #24551 and #24591)
  • Allow to provide a reason when aborting the HTML stream. (@​gnoff in #24680)
  • Eliminate extraneous text separators in the HTML where possible. (@​gnoff in #24630)
  • Disallow complex children inside <title> elements to match the browser constraints. (@​gnoff in #24679)
  • Fix buffering in some worker environments by explicitly setting highWaterMark to 0. (@​jplhomer in #24641)

Server Components (Experimental)

18.1.0 (April 26, 2022)

React DOM

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by react-bot, a new releaser for react since your current version.


Updates @types/react from 17.0.80 to 18.3.7

Commits

Updates react-day-picker from 7.4.10 to 9.0.9

Release notes

Sourced from react-day-picker's releases.

v9.0.9

This release fixes a regression causing the calendar to reset when selecting the days, improves compatibility with the previous version and fixes some other bugs.

What's Changed

New Contributors

Full Changelog: gpbl/react-day-picker@v9.0.8...v9.0.9

v9.0.8

This release fixes a regression in v9.0.7 affecting range mode.

What's Changed

Full Changelog: gpbl/react-day-picker@v9.0.7...v9.0.8

v9.0.7

This release improves compatibility with v8 and fix an issue with the calendar navigation.

What's Changed

New Contributors

Full Changelog: gpbl/react-day-picker@v9.0.6...v9.0.7

v9.0.6

This release addresses the failed import of the common-js module for some app builder and add new data- attributes to help the integration with Tailwind. Thanks for your feedback!

What's Changed

... (truncated)

Changelog

Sourced from react-day-picker's changelog.

Changelog

DayPicker follows Semantic Versioning. See the Releases page on Github for the complete list of changes, diffs and contributors, or the list of versions published on npm.

v9.0

Release date: 2024-07-20

This release includes important updates related to accessibility, styles and localization. See the updated docs at https://daypicker.dev and the Upgrading Guide for more details.

Install the Latest Version

npm install react-day-picker@latest

What’s New

  • Moved date-fns from peer dependencies to dependencies.
  • Added support for UTC dates and Jalali Calendar.
  • Enhanced accessibility to better comply with WCAG 2.1 recommendations.
  • Simplified styles and new CSS variables for easier customization.
  • New excludeDisabled prop for range mode.
  • New dropdown-years and dropdown-months caption layouts.
  • New hideWeekdayRow and hideNavigation props.
  • Updated for a complete custom components support.
  • Improved typings and props for better compatibility in TypeScript strict mode.

Breaking Changes

While we tried to keep the API as stable as possible, some breaking changes were necessary to improve the library:

  • The updated ARIA labels could require new translations or updated unit tests selectors.
  • Custom CSS styles will likely break, due to the updated CSS classes and simplified styles.
  • Custom Components have new API and may break.
  • Some typings have been renamed or deprecated.
  • The useInput hook has been removed. See Input fields guide for more details.
  • onWeekNumberClick has been removed. Use a custom component to handle week number clicks.
  • Some of the onDay* events, like onDayTouchStart or onDayDoubleClick have been removed. To reimplement them, use a custom DayButton component (example).
  • The updated build system to ESM and CommonJS could break some custom bundler.

Upgrading Guide

We prepared a Upgrading guide for help upgrading your app to v9. We welcome feedback about the upgrade process, to ensure it's smooth for everyone.

Get Support and Report Issues

Please report any issues or provide feedback on the GitHub repository.

... (truncated)

Commits

Updates react-merge-refs from 1.1.0 to 2.1.1

Release notes

Sourced from react-merge-refs's releases.

v2.1.1

Problem during the publishing of v2.1.0 on the npm registry. This version is strictly the same as version 2.1.0.

v2.1.0

Features

  • allow a ref to be undefined in the types (#33) (d9079dd)

v2.0.2

Bug Fixes

  • move types condition to the front (#30) (c91c4e4)

v2.0.1

Bug Fixes

  • esm: add default export to maximize compat (8189083), closes #27

v2.0.0

Bug Fixes

  • fix incorrect CJS / ESM distribution (#17) (048c4ea)

Features

  • ESM only & named export (a928d61)

BREAKING CHANGES

  • The package now exports ESM only and a named export.

Before:

import mergeRefs from "react-merge-refs";

After:

</tr></table> 

... (truncated)

Changelog

Sourced from react-merge-refs's changelog.

2.1.1 (2023-09-28)

2.1.0 (2023-09-28)

Features

  • allow a ref to be undefined in the types (#33) (d9079dd)

2.0.2 (2023-05-09)

Bug Fixes

  • move types condition to the front (#30) (c91c4e4)

2.0.1 (2022-06-27)

Bug Fixes

  • esm: add default export to maximize compat (8189083), closes #27

2.0.0 (2022-06-19)

⚠ BREAKING CHANGES

  • The package now exports ESM only and a named export.

Before:

import mergeRefs from "react-merge-refs";

After:

import { mergeRefs } from "react-merge-refs";

Features

  • ESM only & named export (a928d61)

Bug Fixes

  • fix incorrect CJS / ESM distribution (#17) (048c4ea)
Commits

Updates @types/react-transition-group from 4.4.10 to 4.4.11

Commits

Updates react-dom from 18.2.0 to 18.3.1

Release notes

Sourced from react-dom's releases.

18.3.1 (April 26, 2024)

  • Export act from react f1338f

18.3.0 (April 25, 2024)

This release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.

Read the React 19 Upgrade Guide for more info.

React

  • Allow writing to this.refs to support string ref codemod 909071
  • Warn for deprecated findDOMNode outside StrictMode c3b283
  • Warn for deprecated test-utils methods d4ea75
  • Warn for deprecated Legacy Context outside StrictMode 415ee0
  • Warn for deprecated string refs outside StrictMode #25383
  • Warn for deprecated defaultProps for function components #25699
  • Warn when spreading key #25697
  • Warn when using act from test-utils d4ea75

React DOM

  • Warn for deprecated unmountComponentAtNode 8a015b
  • Warn for deprecated renderToStaticNodeStream #28874
Changelog

Sourced from react-dom's changelog.

18.3.1 (April 26, 2024)

  • Export act from react f1338f

18.3.0 (April 25, 2024)

This release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.

Read the React 19 Upgrade Guide for more info.

React

  • Allow writing to this.refs to support string ref codemod 909071
  • Warn for deprecated findDOMNode outside StrictMode c3b283
  • Warn for deprecated test-utils methods d4ea75
  • Warn for deprecated Legacy Context outside StrictMode 415ee0
  • Warn for deprecated string refs outside StrictMode #25383
  • Warn for deprecated defaultProps for function components #25699
  • Warn when spreading key #25697
  • Warn when using act from test-utils d4ea75

React DOM

  • Warn for deprecated unmountComponentAtNode 8a015b
  • Warn for deprecated renderToStaticNodeStream #28874
Commits
  • d6c42f7 Bump to 18.3.1
  • 8a015b6 Add deprecation warning for unmountComponentAtNode
  • c3b2839 Add deprecation warning for findDOMNode
  • d4ea75d ReactDOMTestUtils deprecation warnings
  • 7548c01 Deprecate renderToStaticNodeStream (#28872) (#28874)
  • 5894232 Enable warning for defaultProps on function components for everyone (#25699)
  • c2a246e Turn on string ref deprecation warning for everybody (not codemoddable) (#25383)
  • 2cfb474 Bump version from 18.2 to 18.3
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by react-bot, a new releaser for react-dom since your current version.


Updates @types/react-dom from 18.2.24 to 18.3.0

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
react-day-picker [>= 8.a, < 9]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot requested a review from m7kvqbe1 as a code owner September 17, 2024 13:45
@dependabot dependabot bot added the Type: Dependencies Issues that relate to a dependency label Sep 17, 2024
Copy link

netlify bot commented Sep 17, 2024

Deploy Preview for storybook-navy-digital-mod-uk failed.

Name Link
🔨 Latest commit 1b3a1aa
🔍 Latest deploy log https://app.netlify.com/sites/storybook-navy-digital-mod-uk/deploys/66e98fa21a7cf50008e5c7e8

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/react-f62a2382cd branch from 5b62980 to 79b29f1 Compare September 17, 2024 14:02
Bumps the react group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `17.0.2` | `18.3.1` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `17.0.80` | `18.3.7` |
| [react-day-picker](https://github.com/gpbl/react-day-picker) | `7.4.10` | `9.0.9` |
| [react-merge-refs](https://github.com/gregberge/react-merge-refs) | `1.1.0` | `2.1.1` |
| [@types/react-transition-group](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-transition-group) | `4.4.10` | `4.4.11` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.2.0` | `18.3.1` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.2.24` | `18.3.0` |


Updates `react` from 17.0.2 to 18.3.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v18.3.1/packages/react)

Updates `@types/react` from 17.0.80 to 18.3.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-day-picker` from 7.4.10 to 9.0.9
- [Release notes](https://github.com/gpbl/react-day-picker/releases)
- [Changelog](https://github.com/gpbl/react-day-picker/blob/main/CHANGELOG.md)
- [Commits](https://github.com/gpbl/react-day-picker/commits/v9.0.9)

Updates `react-merge-refs` from 1.1.0 to 2.1.1
- [Release notes](https://github.com/gregberge/react-merge-refs/releases)
- [Changelog](https://github.com/gregberge/react-merge-refs/blob/main/CHANGELOG.md)
- [Commits](gregberge/react-merge-refs@v1.1.0...v2.1.1)

Updates `@types/react-transition-group` from 4.4.10 to 4.4.11
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-transition-group)

Updates `react-dom` from 18.2.0 to 18.3.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v18.3.1/packages/react-dom)

Updates `@types/react-dom` from 18.2.24 to 18.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: react
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: react
- dependency-name: "@types/react"
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: react
- dependency-name: react-day-picker
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: react
- dependency-name: react-merge-refs
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: react
- dependency-name: "@types/react-transition-group"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: react
- dependency-name: react-dom
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: react
- dependency-name: "@types/react-dom"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: react
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/react-f62a2382cd branch from 79b29f1 to 1b3a1aa Compare September 17, 2024 14:18
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 18, 2024

Superseded by #3889.

@dependabot dependabot bot closed this Sep 18, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/react-f62a2382cd branch September 18, 2024 04:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Dependencies Issues that relate to a dependency
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants