[Snyk] Upgrade: , , , , , , , axios, moment, oauth4webapi, react-hook-form, react-monaco-editor, react-redux, yaml #339
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@badgateway/oauth2-client
from 2.3.0 to 2.4.1 | 2 versions ahead of your current version | a month ago
on 2024-08-22
@openid/appauth
from 1.3.1 to 1.3.2 | 1 version ahead of your current version | 5 months ago
on 2024-04-15
@patternfly/react-icons
from 4.93.6 to 4.93.7 | 1 version ahead of your current version | a year ago
on 2023-06-05
@patternfly/react-catalog-view-extension
from 4.96.0 to 4.96.1 | 1 version ahead of your current version | a year ago
on 2023-08-31
@patternfly/react-charts
from 6.94.19 to 6.94.21 | 2 versions ahead of your current version | a year ago
on 2023-06-05
@reduxjs/toolkit
from 1.9.5 to 1.9.7 | 2 versions ahead of your current version | a year ago
on 2023-10-04
@storybook/builder-webpack5
from 7.6.17 to 7.6.20 | 3 versions ahead of your current version | 3 months ago
on 2024-06-24
axios
from 1.6.7 to 1.7.7 | 12 versions ahead of your current version | 21 days ago
on 2024-08-31
moment
from 2.29.4 to 2.30.1 | 2 versions ahead of your current version | 9 months ago
on 2023-12-27
oauth4webapi
from 2.10.3 to 2.12.0 | 4 versions ahead of your current version | a month ago
on 2024-08-19
react-hook-form
from 7.51.1 to 7.53.0 | 8 versions ahead of your current version | a month ago
on 2024-08-24
react-monaco-editor
from 0.55.0 to 0.56.1 | 2 versions ahead of your current version | a month ago
on 2024-08-13
react-redux
from 8.1.1 to 8.1.3 | 2 versions ahead of your current version | a year ago
on 2023-10-01
yaml
from 2.4.2 to 2.5.0 | 4 versions ahead of your current version | 2 months ago
on 2024-07-24
Issues fixed by the recommended upgrade:
SNYK-JS-AXIOS-7361793
SNYK-JS-BODYPARSER-7926860
SNYK-JS-BRACES-6838727
SNYK-JS-FOLLOWREDIRECTS-6141137
SNYK-JS-SEMVER-3247795
SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555
SNYK-JS-EXPRESS-6474509
SNYK-JS-EXPRESS-7926867
SNYK-JS-FOLLOWREDIRECTS-6444610
SNYK-JS-FOLLOWREDIRECTS-6444610
SNYK-JS-PATHTOREGEXP-7925106
SNYK-JS-SERIALIZEJAVASCRIPT-6147607
SNYK-JS-WEBPACK-7840298
SNYK-JS-SEND-7926862
SNYK-JS-SERVESTATIC-7926865
Release notes
Package name: @badgateway/oauth2-client
response_mode=fragment
in theauthorization_code
flow.client_id
.resource
parameter from RFC 8707.scope
parameter torefresh()
.Package name: @openid/appauth
Package name: @patternfly/react-icons
Package name: @patternfly/react-catalog-view-extension
4.96.1 (2023-08-31)
chore(ci): Update tag format
Package name: @patternfly/react-charts
Package name: @reduxjs/toolkit
This bugfix release rewrites the RTKQ hook TS types to significantly improve TS perf.
Changelog
RTKQ TS Perf
A number of users had reported that Intellisense for RTKQ API objects was extremely slow (multiple seconds) - see discussion in #3214 . We did some perf investigation on user-provided examples, and concluded that the biggest factor to slow RTKQ TS perf was the calculation of hook names like
useGetPokemonQuery
, which was generating a large TS union of types.We've rewritten that hook names type calculation to use mapped types and a couple of intersections. In a specific user-provided stress test repo, it dropped TS calculation time by 60% (2600ms to 1000ms).
There's more potential work we can do to improve things, but this seems like a major perf improvement worth shipping now.
What's Changed
Full Changelog: v1.9.6...v1.9.7
This bugfix release adds a new dev-mode middleware to catch accidentally dispatching an action creator, adds a new listener middleware option around waiting for forks, adds a new option to update provided tags when
updateQueryData
is used, reworks internal types to better handle uses with TS declaration output, and fixes a variety of small issues.Changelog
Action Creator Dev Check Middleware
RTK already includes dev-mode middleware that check for the common mistakes of accidentally mutating state and putting non-serializable values into state or actions.
Over the years we've also seen a semi-frequent error where users accidentally pass an action creator reference to
dispatch
, instead of calling it and dispatching the action it returns.We've added another dev-mode middleware that specifically catches this error and warns about it.
Additional Options
The listener middleware's
listenerApi.fork()
method now has an optionalautoJoin
flag that can be used to keep the effect from finishing until all active forked tasks have completed.updateQueryData
now has anupdateProvidedTags
option that will force a recalculation of that endpoint's provided tags. It currently defaults tofalse
, and we'll likely turn that totrue
in the next major.Other Fixes
The
builder.addCase
method now throws an error if atype
string is empty.fetchBaseQuery
now uses an alternate method to clone the originalRequest
in order to work around an obscure Chrome bug.The immutability middleware logic was tweaked to avoid a potential stack overflow.
Types Changes
The internal type imports have been reworked to try to fix "type portability" issues when used in combination with TS declaration outputs.
A couple additional types were exported to help with wrapping
createAsyncThunk
.What's Changed
Full Changelog: v1.9.5...v1.9.6
This bugfix release includes notable improvements to TS type inference when using the
enhancers
option inconfigureStore
, and updates the listener middleware to only check predicates if the dispatched value is truly an action object.What's Changed
Full Changelog: v1.9.4...v1.9.5
Package name: @storybook/builder-webpack5
Package name: axios
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
ReferenceError: navigator is not defined
for custom environments; (#6567) (fed1a4b)Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Features
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Install
Package name: moment
2.30.1
2.30.0
2.29.4
Package name: oauth4webapi
Features
Documentation
Fixes
Features
Refactor
Documentation
Refactor
Documentation
Refactor
Documentation
Package name: react-hook-form
🌫️ feat: #12148 support isValid when mode is set to onBlur (#12194)
🐞 fix #12021 issue with disable prop not reflecting on re-render without trigger by useEffect (#12193)
👩🌾 close #12168 optimise re-render with validating fields subscription (#12192)
🐞 fix #12127 issue with compare object value changed with object input (#12185)
🎲 improve : break out of recursive loops on first focus (#11827)
📖 fix example of ObjectKeys type (#11965)
thanks to @ suke & @ DPflasterer
👍 close #12108 useController should subscribe to exact field name of form's state (#12109)
👍 chore: upgrade app deps
🩻 fix: add useCallback for ref callback (#12078)
🚀 fix: skip call executeBuiltInValidation if no sub-fields left (#12054)
thanks to @ newsiberian, @ Wendystraite and @ abnud11
🐞 fix #12024 dirty not update issue with values prop (#12041)
🐞 fix: field array validate rules shift errors (#12033)
thanks to @ JardelCheung
⚛️ close #11932 enable react 19 peer dependency (#11935)
👮♀️ close #11954 getFieldState remove unnessaried inValidating and touched subscription (#11995)
🐞 fix #11985 logic createFormControl check field before usage (#11986)
⌨️ fix: enforce type safety for deps property in RegisterOptions (#11969)
🐞 fix #11922 keep dirty on reset with dirty fields (#11958)
🚔 close #11937 add validation in the cleanup process in useController (