[Snyk] Upgrade @primer/behaviors from 1.3.1 to 1.3.5

[Woodpile37]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @primer/behaviors from 1.3.1 to 1.3.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2023-06-01.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Undesired Behavior SNYK-JS-STYLEDCOMPONENTS-3149924	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @primer/behaviors

• 1.3.5 - 2023-06-01
  

  Patch Changes

  • #197 ac8ea59 Thanks @ jonrohan! - Check if popover supported in isTopLayer
• 1.3.5-rc.d479f9d - 2023-05-22
• 1.3.4 - 2023-05-11
  

  Patch Changes

  • #195 bddd6c5 Thanks @ keithamus! - Special case anchored-position calls on top-layer elements
• 1.3.4-rc.8269a12 - 2023-05-11
• 1.3.3 - 2023-02-08
  

  Patch Changes

  • #180 eca845b Thanks @ colebemis! - FocusZone: If custom focusInStrategy is defined, use it to initialize tabIndexes
• 1.3.3-rc.be41306 - 2023-02-08
• 1.3.2 - 2023-02-06
  

  Patch Changes

  • #176 5e74867 Thanks @ jbrown1618! - Use a binary search to find the insertion index for new elements managed by the focus zone.
    For a use case with 1000 elements managed by the focus zone, added one at a time (by react),
    this takes us from 500,000 calls to compareDocumentPosition over 1000ms to 8,000 calls
    over 16ms.
• 1.3.2-rc.b275ab5 - 2023-02-06
• 1.3.1 - 2022-11-01
  

  Patch Changes

  • #155 b14b5ac Thanks @ colebemis! - focusZone: Add Backspace key to list of FocusKeys

from @primer/behaviors GitHub release notes

Commit messages

Package name: @primer/behaviors

• 1229471 Merge pull request Update linking-a-pull-request-to-an-issue.md github/docs#198 from primer/changeset-release/main
• d479f9d Version Packages
• a5c41e2 Merge pull request specify licenses in package.json github/docs#197 from primer/jonrohan-patch-1
• 5c19922 Update anchored-position.ts
• 02a35af Update anchored-position.ts
• ac8ea59 Create tender-suns-allow.md
• 22c9849 Check if popover supported
• db22925 Merge pull request Update exploring-the-dependencies-of-a-repository.md github/docs#196 from primer/changeset-release/main
• 8269a12 Version Packages
• 3f2f45a Merge pull request Update running-code-scanning-in-your-ci-system.md github/docs#195 from primer/special-case-anchored-position-for-top-layer-elements
• bddd6c5 changeset
• e2a58d3 special case anchored-position for top-layer elements
• 9dacc0b Merge pull request Fix merged-notification workflow github/docs#183 from primer/dependabot/npm_and_yarn/changesets/changelog-github-0.4.8
• be25645 Bump @ changesets/changelog-github from 0.4.2 to 0.4.8
• 8f3bc3e Merge pull request repo sync github/docs#181 from primer/changeset-release/main
• be41306 Version Packages
• 99dda1f Merge pull request Fix tests for Actions AllowList github/docs#180 from primer/colebemis-patch-1
• d1b0c78 Update package-lock
• 70fcffe Remove unused code
• 65be60b Test inital tabIndex
• eca845b Create .changeset/eighty-peaches-smoke.md
• 9ac3a5a Change initally focused element
• 051bd48 Format
• 973b617 Update src/focus-zone.ts

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[changeset-bot]

⚠️ No Changeset found

Latest commit: 3ac915c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR