[Snyk] Upgrade: grapesjs, grapesjs-mjml, grapesjs-preset-mautic #99

aleHRevirtus · 2024-09-20T07:57:56Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

grapesjs
from 0.17.29 to 0.21.13 | 23 versions ahead of your current version | 22 days ago
on 2024-08-29
grapesjs-mjml
from 0.5.8 to 0.6.0 | 1 version ahead of your current version | 3 years ago
on 2022-02-21
grapesjs-preset-mautic
from 1.0.0 to 1.0.4 | 3 versions ahead of your current version | 10 months ago
on 2023-11-15

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	382	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-GRAPESJS-2342412	382	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-GRAPESJS-2935960	382	Proof of Concept

Release notes

Package name: grapesjs

0.21.13 - 2024-08-29
What's Changed
- Fixed number input value does not persist when using up/down arrows, Issue #6012 by @ aswinkumar863 in #6013
- Clean properly viewLayer from the component by @ artf in #6021
- Fix typos in german translations by @ DanielBiegler in #6037
- refactor: remove dist from src by @ danstarns in #6041
- refactor: remove commit hooks by @ danstarns in #6060
- development environment upgrades by @ danstarns in #6059
- add label to ButtonProps type definition by @ havijs in #6066
- Refactor binary numbers to boolean to fix TypeScript type error by @ havijs in #6065
- Small bug fixes and improvements by @ artf in #6067
- docs: fix grammar error by @ havijs in #6068
- Add Dependabot by @ danstarns in #6069
- ci: add doc generation step into ci by @ danstarns in #6078
- package: lock all dependencies by @ danstarns in #6079
- docs: fix the 404 Github Action build badge in README by @ WilliamDASILVA in #6085
- feat: add findFirstType method to Component by @ WilliamDASILVA in #6084
- Remove element border reset by @ artf in #6093
- Avoid removing meaningful whitespaces #5984
- Avoid default strict name escaping for Selector names #5994
New Contributors
- @ aswinkumar863 made their first contribution in #6013
- @ DanielBiegler made their first contribution in #6037
- @ havijs made their first contribution in #6066
- @ WilliamDASILVA made their first contribution in #6085
Full Changelog: v0.21.12...v0.21.13
0.21.12 - 2024-07-02
What's Changed
- Added the possibility to add blocks via Components.addType
```
editor.Components.addType('hero-section', {
  model: { ... },
  block: { label: 'Hero section' },
});
```
- Added component.setName method to simplify component name update.
- docs: local setup notes by @ danstarns in #5974
- Fixed Symbols with text components by @ artf in #5983
- Prevent component selection during text editing and drag #5517
New Contributors
- @ danstarns made their first contribution in #5974
Full Changelog: 0.21.11...v0.21.12
0.21.11 - 2024-06-24
Added
- Symbols API (beta) #5958
  Documentation here
- Introduce HTML string document import (beta) #5895
- Show style applied on tag (p, span, div) and private selectors as parent rules instead of hiding them by @ Dobby85 in #5890
- Added an option to return inline style even if we want to avoid it at the beginning by @ Dobby85 in #5933
- Added block:category:update event for listening block category updates.
- Added trait:category:update event for listening trait category updates.
Fixed
- Updated Selector escapeName to accommodate special characters used in tailwind class names by @ bernesto in #5719
- Added support for parsing properly <template> elements #5857
- Fixed selector view on attribute id change #5882
- Fix possible double entry in Layers #5820
- Toggle the move icon in Layers when component draggable changes #5943
- Move last selected component by @ stfnzl in #5847
- Add Indonesian (Bahasa) locale support by @ yanuaraditia in #5872
Docs
- Fix typo in I18n.md by @ itmaxxx in #5796
- Update Plugins.md by @ chrisgarber in #5859
- Document um.skip by @ stfnzl in #5852
- Fix link in asset manager doc by @ Dobby85 in #5899
New Contributors
- @ itmaxxx made their first contribution in #5796
- @ chrisgarber made their first contribution in #5859
- @ stfnzl made their first contribution in #5852
- @ yanuaraditia made their first contribution in #5872
- @ Dobby85 made their first contribution in #5899
Full Changelog: v0.21.10...0.21.11
0.21.10 - 2024-04-03
Added
- Added the ability to preselect page on project load via new config.pageManager.selected option #5463
- Added new command events. Added these events mainly for consistency with other module events. Previous are still there and working but should be considered from now as deprecated.
Fixed
- Fix ColorPickerOptions TS #5739
- Remove by default unsafe attribute values from HTML #5743
- Skip component resizer if already enabled #5753
- Always place the tools above the highlighter by @ bernesto in #5736
Full Changelog: v0.21.9...v0.21.10
0.21.9 - 2024-03-09
Docs
- Updated Traits module docs with the addition of trait categories and custom trait manager.
- Added Traits API docs.
- Fixed broken link of Resizer by @ Afrin127329 in #5716
Added
- Added categories to Traits by @ amirrahmani76 in #5606
- Added multiUploadSuffix config to AssetManager by @ merlinschumacher in #5672
- Added ru.js by @ zaharovrd in #5678
- Added Russian language #5678
- Added emptyValue property to StyleManager stack type #5583
- Added onPaste and onKeydown options to RTE module #5682
Changed
- Color picker offset relative to editor container by @ bernesto in #5704
- Allow to unlock components inside a locked one #5635
- Take into account borders during a component move #5621
Fixed
- Fix Layers view not changing on page switch #5593
- Fix update of layers #5607
- Fix TS in StyleManagerConfig.sectors.properties #5613
- Fix SelectComponent resizer with custom options #5630
- Fix ComponentDelete command #5633
- Allow comment Components in Text #5657
- Prevent errors with layerable textnodes #5720
- Fix boolean values when getting HTML with withProp
New Contributors
- @ amirrahmani76 made their first contribution in #5606
- @ bgrand-ch made their first contribution in #5642
- @ merlinschumacher made their first contribution in #5672
- @ zaharovrd made their first contribution in #5678
- @ Wayne-Mather made their first contribution in #5651
- @ bernesto made their first contribution in #5704
- @ Afrin127329 made their first contribution in #5716
Full Changelog: v0.21.8...v0.21.9
0.21.8 - 2023-12-20
Added
- Allow / in class names by @ mahmudz #5433
- Added CSS variables #5437 by @ quentin-bettoum
- Support nomodule attribute for canvas.scripts options
- Added a new built-in delegate property to Component. Example of usage #5507
Changed
- Updates default layers layout to flex style #5422 by @ mapsmarketing
- Update Component.replaceWith (now returns always an array of components)
Fixed
- Fixed resizing when zoomed by @ UnderKoen #5436
- Trigger component:styleUpdate on component.addStyle/setStyle #5424
- Update rules id with remapped duplicate components in Pages #5425
- Ensure components with script return id in HTML export #5441
- Preserve custom styles on text component change #5442
- Prevent crash if block category id is an object builtin method name #5478
- Fix style bg image property with URLs containing parentheses #5497
- Fix default Resizer on style update #5501
- Fix TS type for replaceWith method by @ MaxwellTheSecond #5504
- Allow paste when nothing is selected by @ lexoyo #5524
- Fix UndoManager start/stop #5530
- Fix built-in RTE with custom rendered components #5536
- Fix autoplay for Youtube videos #5542
- Fix Portuguese translations by @ brenoassp #5546
- Avoid triggering rte:disable on component move #5545
- Fix performance issues with components having a lot of classes #5525
- Allow ComponentScriptView with custom type attribute #5563
- Spelling fix in docs - Components.md by @ bryanjamesmiller #5488
New Contributors
- @ mahmudz made their first contribution in #5433
- @ UnderKoen made their first contribution in #5436
- @ quentin-bettoum made their first contribution in #5437
- @ mapsmarketing made their first contribution in #5422
- @ bryanjamesmiller made their first contribution in #5488
- @ MaxwellTheSecond made their first contribution in #5504
- @ brenoassp made their first contribution in #5546
Full Changelog: v0.21.7...v0.21.8
0.21.7 -

Snyk has created this PR to upgrade: - grapesjs from 0.17.29 to 0.21.13. See this package in npm: https://www.npmjs.com/package/grapesjs - grapesjs-mjml from 0.5.8 to 0.6.0. See this package in npm: https://www.npmjs.com/package/grapesjs-mjml - grapesjs-preset-mautic from 1.0.0 to 1.0.4. See this package in npm: https://www.npmjs.com/package/grapesjs-preset-mautic See this project in Snyk: https://app.snyk.io/org/alejandro.hermosilla/project/a04ef900-8b59-4857-ab1f-f443cfed660f?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: grapesjs, grapesjs-mjml, grapesjs-preset-mautic #99

[Snyk] Upgrade: grapesjs, grapesjs-mjml, grapesjs-preset-mautic #99

aleHRevirtus commented Sep 20, 2024

What's Changed

New Contributors

What's Changed

New Contributors

Added

Fixed

Docs

New Contributors

Added

Fixed

Docs

Added

Changed

Fixed

New Contributors

Added

Changed

Fixed

New Contributors

[Snyk] Upgrade: grapesjs, grapesjs-mjml, grapesjs-preset-mautic #99

Are you sure you want to change the base?

[Snyk] Upgrade: grapesjs, grapesjs-mjml, grapesjs-preset-mautic #99

Conversation

aleHRevirtus commented Sep 20, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

What's Changed

New Contributors

What's Changed

New Contributors

Added

Fixed

Docs

New Contributors

Added

Fixed

Docs

Added

Changed

Fixed

New Contributors

Added

Changed

Fixed

New Contributors