[Snyk] Upgrade antd from 5.13.2 to 5.21.2 #9

nerds-github · 2024-10-27T00:12:14Z

Snyk has created this PR to upgrade antd from 5.13.2 to 5.21.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 39 versions ahead of your current version.
The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-ADOBECSSTOOLS-6096077	464	No Known Exploit
Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	464	Proof of Concept
Prototype Pollution SNYK-JS-AXIOS-6144788	464	No Known Exploit
Improper Handling of Extra Parameters SNYK-JS-FOLLOWREDIRECTS-6141137	464	Proof of Concept
Denial of Service (DoS) SNYK-JS-HTTPPROXYMIDDLEWARE-8229906	464	Proof of Concept
Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	464	Proof of Concept
Denial of Service (DoS) SNYK-JS-WS-7266574	464	Proof of Concept
Denial of Service (DoS) SNYK-JS-WS-7266574	464	Proof of Concept
Denial of Service (DoS) SNYK-JS-WS-7266574	464	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	464	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	464	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-7361793	464	Proof of Concept
Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	464	No Known Exploit
Uncontrolled resource consumption SNYK-JS-BRACES-6838727	464	Proof of Concept
Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	464	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ADOBECSSTOOLS-5871286	464	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	464	Proof of Concept
Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	464	No Known Exploit
Open Redirect SNYK-JS-EXPRESS-6474509	464	No Known Exploit
Cross-site Scripting SNYK-JS-EXPRESS-7926867	464	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	464	Proof of Concept
Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	464	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-WEBPACK-7840298	464	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	464	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	464	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WORDWRAP-3149973	464	Proof of Concept
Cross-site Scripting SNYK-JS-SEND-7926862	464	No Known Exploit
Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	464	No Known Exploit
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	464	Proof of Concept

Release notes

Package name: antd

5.21.2 - 2024-09-30
- 🐞 Revert #49221 to fix Typography copyable icon align issue. #51066 @ afc163
- 🐞 Fix Tabs flicker when browser zoom is enabled. #51072 @ afc163
- 🐞 Fix Select incorrect activeBorderColor token when variant is filled. #51054 @ coding-ice
- 🐞 Fixed Input.Search alignment issue between the input field and search button at different zoom levels. #50926 @ nathanlao
- 💄 MISC: Tweak outline width of focus style from 4px to 3px. #51069 @ afc163
- Splitter
  - 🐞 Fixed the issue with Splitter dragging abnormally on touch screen devices. #51060 @ sakuraee
  - 💄 Fixed Splitter.Panel style is invalid error. #51032 @ wanpan11
- ⚡️ Remove TransButton in Table/Transfer/Typography. #51068 @ afc163
- 🐞 回滚 #49221 以修复 Typography copyable 图标位置偏上的问题。#51066 @ afc163
- 🐞 修复 Tabs 在浏览器缩放时无限闪烁的问题。#51072 @ afc163
- 🐞 修复了 Input.Search 组件中在不同缩放级别下输入框和按钮的对齐问题。#50926 @ nathanlao
- 🐞 修复 Select variant="filled" 时 activeBorderColor token 失效的问题。#51054 @ coding-ice
- 💄 MISC: 调整 focus 时的 outline 边框宽度，从 4px 调整到 3px。#51069 @ afc163
- Splitter
  - 🐞 修复 Splitter 在触屏设备上拖拽异常的问题。#51060 @ sakuraee
  - 💄 修复 Splitter.Panel 无法隐藏的问题。#51032 @ wanpan11
- 📦 移除 Table/Transfer/Typography 内的 TransButton 实现以降低打包体积。#51068 @ afc163
5.21.1 - 2024-09-25
- 🐞 Fix Button issue where type="link" incorrectly used colorPrimary. #50962 @ coding-ice
- 🐞 Fix Button style class name weight issue that caused custom gradient styles to be overridden. #50962 @ coding-ice
- 🐞 Fix Transfer width issue when customized as TableTransfer. #50974 @ zombieJ
- 🇹🇷 Add Turkish text for filterCheckall in Table component. #51000 @ ytahirkose
- 🐞 修复 Button type="link" 错误使用 colorPrimary 的问题。#50962 @ coding-ice
- 🐞 修复 Button 样式类名权重问题导致的自定义渐变样式覆盖失效的问题。#50962 @ coding-ice
- 💄 修复 Transfer 在自定义为 TableTransfer 时，宽度不正确的问题。#50974 @ zombieJ
- 🇹🇷 补充 Table 组件 filterCheckall 的土耳其语文案。#51000 @ ytahirkose
5.21.0 - 2024-09-22
- 🔥 Introduce the new Splitter component, draggale split panel. #50038 @ wanpan11
- Button
  - 🔥 Button supports variant and color properties for more combination styles. #50051 @ coding-ice
  - 💄 Button adds textColor, textHoverColor and textActiveColor tokens. #47870 @ madocto
- FloatButton
  - 🆕 FloatButton supports placement property, allowing menus to pop up from multiple directions. #50407 @ li-jia-nan
  - 🆕 FloatButton supports htmlType prop. #50892 @ li-jia-nan
  - 💄 Unify FloatButton and FloatButton.Group button round style. #50513 @ Layouwen
  - 💄 Manage FloatButton's z-index with useZIndex to improve compatibility with other popup components. #50311 @ li-jia-nan
- Menu
  - 🆕 Menu.Item and Dropdown's menu supports extra prop now. #50431 @ coding-ice
  - 🐞 Fix Menu popupStyle not working on SubMenu. #50922 @ Wxh16144
- Table
  - 🆕 Table supports minWidth for columns. #50416 @ linxianxi
  - 🐞 Fix Table empty and shadow issues in virtual mode. #50416 @ linxianxi
  - 🐞 Fix Table column selection issue where deselection was not possible under certain circumstances. #50746 @ Jarryxin
- Input
  - 🆕 Input.OTP support type to help handle some case need number only. #50811 @ zombieJ
  - 🐞 Fix Select inside Input addon text color when Select is focused. #50486 @ DDDDD12138
- Modal
  - ⌨️ Fix Modal throws warning avoid using aria-hidden on a focused element or its ancestor. #50823 @ afc163
  - 🆕 Modal supports closable.disabled prop now. #50522 @ Ke1sy
- Descriptions
  - 🐞 Fix Descriptions column is missing in some cases. #50895 @ yezhonghu0503
  - 🐞 Revert #49946 to fix the issue where the popup layer component inside Descriptions is being cut off. #50891 @ afc163
- Upload
  - 🆕 Upload will pass name prop to <input type="file" />. #50652 @ Wxh16144
  - 🆕 Upload showUploadList.showXxxIcon accept a function value now. #50245 @ guoyunhe
- ColorPicker
  - 🐞 Fix ColorPicker when type hex input may not get correct color with precision issue. #50843 @ zombieJ
  - 🐞 Adjust ColorPicker popup panel not lock by value to allow control mode with onChangeComplete scenarios. #50785 @ zombieJ
- App
  - 🐞 Fixed App warn about zIndex too large when using the modal with having popup component method via useApp. #50829 @ zombieJ
  - 🐞 Fix App rtl style does not respect ConfigProvider direction prop. #50246 @ li-jia-nan
- Pagination
  - 🆕 Pagination showSizeChanger accepts Select props now. #50952 @ afc163
  - 💄 Remove Pagination default font family. #50808 @ afc163
- Select
  - 💄 Add more tokens for Select to customize hover/focus style. #50951 @ kiner-tang
  - 🐞 Fix Select search text overlap with arrow icon. #50917 @ yezhonghu0503
  - 🐞 Fix Select extra background of clear icon when enable allowClear and variant="filled". #50916 @ thinkasany
- 🆕 Segmented adds vertical property and improves accessibility. #50708 @ liangchaofei
- 🆕 Radio.Group supports block prop now. #50828 @ yuanliu147
- 🆕 ConfigProvider supports configuring the className and style properties of the Splitter component. #50855 @ li-jia-nan
- 🆕 Image add onActive to toolbarRender for toggling images . #50812 @ madocto
- 🆕 Add ref on List component. #50772 @ Asanio06
- 🆕 Collapse support classNames and styles for semantic style customization. #50557 @ wanpan11
- 💄 Make Skeleton.Node custom node by remove it's default icon children. #50278 @ afc163
- 🐞 Fix Layout.Sider can not modify theme when used alone. #50780 @ zombieJ
- 🐞 Fix Typography copyable with array children has additional , string issue. #50813 @ zombieJ
- 🐞 Fix Tour where long title will overlap with close button. #50942 @ kiner-tang
- 🌐 Localization
  - 🇯🇵 Added ja_JP locale for DatePicker's shortWeekDays and shortMonths text. #50893 @ harapeko
  - 🇪🇬 Added Arabic ar_EG text for Image preview feature. #50851 @ nathanlao
  - 🇬🇷 Added Greek text for the Form component. #50825 @ nathanlao
  - 🇪🇸 Added Spanish es_ES text for the Tour component. #50805 @ thinkasany
- TypeScript
  - 🤖 Checkbox adds onFocusandonBlur` in type definition. #50842 @ huiliangShen
  - 🤖 Fix Badge property type definition to support passing mouse events. #50774 @ yuanliu147
- 🔥 全新 Splitter 区域分割组件，自由拖拽调整区域大小。#50038 @ wanpan11
- Button
  - 🔥 Button 支持 variant 变体和 color 颜色属性，以支持更多组合样式。#50051 @ coding-ice
  - 💄 Button 添加 textColor、textHoverColor 和 textActiveColor 三个 token。#47870 @ madocto
- FloatButton
  - 🆕 FloatButton 组件支持 placement 属性，支持从四个方向弹出菜单。（实现方式改为 position: absolute + flex 布局，可能会对你现有的布局造成 breaking change，请注意兼容）#50407 @ li-jia-nan
  - 💄 统一 FloatButton 和 FloatButton.Group 的按钮圆角。#50513 @ Layouwen
  - 💄 FloatButton 组件的 z-index 加入 useZIndex 管理，兼容弹层类组件。#50311 @ li-jia-nan
  - 🆕 FloatButton 支持传入 htmlType 属性。#50892 @ li-jia-nan
- Menu
  - 🆕 Menu.Item 和 Dropdown 的 menu 支持 extra 属性。#50431 @ coding-ice
  - 🐞 修复 Menu popupStyle 在 SubMenu 上失效的问题。#50922 @ Wxh16144
- Table
  - 🆕 Table 列支持配置 minWidth 属性。#50416 @ linxianxi
  - 🐞 修复 Table 虚拟表格下的空数据和阴影问题。#50416 @ linxianxi
  - 🐞 修复 Table 列选择在某些情况下无法取消选择的问题。#50746 @ Jarryxin
- Input
  - 🆕 Input.OTP 添加 type 属性以支持只需要输入数字的场景。#50811 @ zombieJ
  - 🐞 修复 Input Addon 内 Select 选中时的文字颜色。#50486 @ DDDDD12138
- Modal
  - ⌨️ 修复 Modal 抛出 avoid using aria-hidden on a focused element or its ancestor 警告的问题。#50823 @ afc163
  - 🆕 Modal 支持 closable.disabled 属性以禁用关闭按钮。#50522 @ Ke1sy
- Descriptions
  - 🐞 优化 Descriptions 在某些情况下列内容消失的问题。#50895 @ yezhonghu0503
  - 🐞 回滚 #49946 以修复 Descriptions 内弹层组件被截断的问题。#50891 @ afc163
- Upload
  - 🆕 Upload name 属性将透传给 <input type="file" />。#50652 @ Wxh16144
  - 🆕 Upload 的 showUploadList.showXxxIcon 选项支持传入函数。#50245 @ guoyunhe
- ColorPicker
  - 🐞 修复 ColorPicker 在 hex 输入框输入颜色时，部分颜色会因为精度问题得到不正确的颜色的问题。#50843 @ zombieJ
  - 🐞 调整 ColorPicker 在受控时，弹出面板现在不会被 value 锁定从而允许与 onChangeComplete 配合使用的受控场景。#50785 @ zombieJ
- App
  - 🐞 修复 App 的 useApp 调用 modal 方法时，填入弹层组件会警告 zIndex 过大的问题。#50829 @ zombieJ
  - 🐞 修复 App rtl 样式不遵守 ConfigProvider direction 配置。#50246 @ li-jia-nan
- Pagination
  - 🆕 Pagination showSizeChanger 属性现在支持传入 Select 属性对象。#50952 @ afc163
  - 💄 移除 Pagination 默认 font-family 样式。#50808 @ afc163
- Select
  - 💄 Select 组件新增一些 token 以支持自定义 hover 和 focus 样式。#50951 @ kiner-tang
  - 🐞 修复 Select 搜索模式下搜索词内容覆盖右侧图标的问题。#50917 @ yezhonghu0503
  - 🐞 修复 Select 同时启用 allowClear 和 variant="filled" 时清除图标多余的白色背景的问题。#50916 @ thinkasany
- 🆕 Segmented 新增 vertical 属性以支持垂直模式，并优化了可访问性。#50708 @ liangchaofei
- 🆕 Radio.Group 支持 block 属性以撑满一行。#50828 @ yuanliu147
- 🆕 ConfigProvider 支持配置 Splitter 组件的 className 和 style 属性。#50855 @ li-jia-nan
- 🆕 Image 新增 onActive 到 toolbarRender 以切换图片。#50812 @ madocto
- 🆕 List 组件支持传递 ref 属性。#50772 @ Asanio06
- 🆕 Collapse 支持语义化 classNames 和 styles 属性。#50557 @ wanpan11
- 💄 移除 Skeleton.Node 默认的图标 children 使其成为真正的自定义节点。#50278 @ afc163
- 🐞 修复 Typography copyable 对数组 children 复制时会有额外 , 字符的问题。#50813 @ zombieJ
- 🐞 修复 Layout.Sider 单独使用时无法修改主题的问题。#50780 @ zombieJ
- 🐞 修复 Tour 组件标题过长时会遮挡关闭按钮的问题。#50942 @ kiner-tang
- 🌐 本地化
  - 🇯🇵 补充 DatePicker ja_JP 语言环境的 shortWeekDays 和 shortMonths 文案。#50893 @ harapeko
  - 🇪🇬 补充 Image 预览功能的 ar_EG 阿拉伯语文案。#50851 @ nathanlao
  - 🇬🇷 补充 Form 组件的希腊语文案。#50825 @ nathanlao
  - 🇪🇸 补充 Tour 组件的西班牙语文案。#50805 @ thinkasany
- TypeScript
  - 🤖 Checkbox 新增 onFocus 和 onBlur 类型定义。#50842 @ huiliangShen
  - 🤖 修复 Badge 属性类型定义不支持传递鼠标事件的问题。#50774 @ yuanliu147
5.20.6 - 2024-09-09
- 🐞 Improve Menu collapse animation smoothness. #50751 @ afc163
- 🐞 Fix Table cell overflow bug if edit with virtual scroll. #50737 @ huiliangShen
- 🐞 Fix Input.Search button radius not changing with size. #50734 @ afc163
- 🐞 Fix Form password still can be toggle show/hide even if disabled. #50616 @ Jarryxin
- 🐞 Revert #49899 to fix wrap behavior for Dropdown, and re-fix wrap when out of screen edge. #50718 @ afc163
- 💄 Fix Badge background transition when mouse out. #50743 @ coding-ice
- TypeScript
  - 🤖 Fix Collapse types for onChange arguments. #50754 @ yuanliu147
- 🐞 修复 Menu 折叠动画不够丝滑的问题。#50751 @ afc163
- 🐞 修复 Table 虚拟滚动时单元格宽度可能溢出的问题。#50737 @ huiliangShen
- 🐞 修复 Input.Search 的按钮圆角不随 size 变化的问题。#50734 @ afc163
- 🐞 修复 Form 禁用时仍可切换密码显隐的问题。

Snyk has created this PR to upgrade antd from 5.13.2 to 5.21.2. See this package in npm: antd See this project in Snyk: https://app.snyk.io/org/nerds-github/project/474d651f-6193-4589-884f-44e3b5846fab?utm_source=github&utm_medium=referral&page=upgrade-pr

sourcery-ai · 2024-10-27T00:12:18Z

🧙 Sourcery has finished reviewing your pull request!

Tips and commands

Interacting with Sourcery

Trigger a new review: Comment @sourcery-ai review on the pull request.
Continue discussions: Reply directly to Sourcery's review comments.
Generate a GitHub issue from a review comment: Ask Sourcery to create an
issue from a review comment by replying to it.
Generate a pull request title: Write @sourcery-ai anywhere in the pull
request title to generate a title at any time.
Generate a pull request summary: Write @sourcery-ai summary anywhere in
the pull request body to generate a PR summary at any time. You can also use
this command to specify where the summary should be inserted.

Customizing Your Experience

Access your dashboard to:

Enable or disable review features such as the Sourcery-generated pull request
summary, the reviewer's guide, and others.
Change the review language.
Add, remove or edit custom review instructions.
Adjust other review settings.

Getting Help

Contact our support team for questions or feedback.
Visit our documentation for detailed guides and information.
Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

sweep-ai · 2024-10-27T00:12:25Z

Hey @nerds-github, here is an example of how you can ask me to improve this pull request:

@Sweep Add unit tests for the new Button `variant` and `color` props to verify the correct styles are applied for different combinations of these props.

📖 For more information on how to use Sweep, please read our documentation.

sourcery-ai

We have skipped reviewing this pull request. Here's why:

It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
We don't review packaging changes - Let us know if you'd like us to change this.

sourcery-ai bot reviewed Oct 27, 2024

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade antd from 5.13.2 to 5.21.2 #9

[Snyk] Upgrade antd from 5.13.2 to 5.21.2 #9

nerds-github commented Oct 27, 2024

sourcery-ai bot commented Oct 27, 2024 •

edited

Loading

Interacting with Sourcery

Customizing Your Experience

Getting Help

sweep-ai bot commented Oct 27, 2024 •

edited

Loading

sourcery-ai bot left a comment

[Snyk] Upgrade antd from 5.13.2 to 5.21.2 #9

Are you sure you want to change the base?

[Snyk] Upgrade antd from 5.13.2 to 5.21.2 #9

Conversation

nerds-github commented Oct 27, 2024

Snyk has created this PR to upgrade antd from 5.13.2 to 5.21.2.

Issues fixed by the recommended upgrade:

sourcery-ai bot commented Oct 27, 2024 • edited Loading

Interacting with Sourcery

Customizing Your Experience

Getting Help

sweep-ai bot commented Oct 27, 2024 • edited Loading

sourcery-ai bot left a comment

Choose a reason for hiding this comment

sourcery-ai bot commented Oct 27, 2024 •

edited

Loading

sweep-ai bot commented Oct 27, 2024 •

edited

Loading