[Snyk] Upgrade: @fortawesome/fontawesome-svg-core, @fortawesome/free-solid-svg-icons, @fortawesome/react-fontawesome #7
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @fortawesome/fontawesome-svg-core from 1.2.0-14 to 1.2.27.
See this package in NPM: https://www.npmjs.com/package/@fortawesome/fontawesome-svg-core
- @fortawesome/free-solid-svg-icons from 5.1.0-11 to 5.12.1.
See this package in NPM: https://www.npmjs.com/package/@fortawesome/free-solid-svg-icons
- @fortawesome/react-fontawesome from 0.1.0-11 to 0.1.8.
See this package in NPM: https://www.npmjs.com/package/@fortawesome/react-fontawesome
See this project in Snyk:
https://app.snyk.io/org/maximsan/project/c801be0b-ccf3-41ca-b433-b96eaf8e1eec?utm_source=github&utm_medium=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
from 1.2.0-14 to 1.2.27
on 2020-02-05
from 5.1.0-11 to 5.12.1
on 2020-02-05
from 0.1.0-11 to 0.1.8
on 2019-12-06
Release notes
Package name: @fortawesome/fontawesome-svg-core
-
1.2.27 - 2020-02-05
-
1.2.26 - 2019-12-10
-
1.2.26-2 - 2019-12-10
-
1.2.26-1 - 2019-11-06
-
1.2.25 - 2019-09-23
-
1.2.24 - 2019-09-18
-
1.2.23 - 2019-09-18
-
1.2.22 - 2019-08-22
-
1.2.21 - 2019-08-02
-
1.2.20 - 2019-07-29
-
1.2.20-14 - 2019-07-25
-
1.2.20-13 - 2019-07-25
-
1.2.20-12 - 2019-07-23
-
1.2.20-11 - 2019-06-25
-
1.2.20-10 - 2019-06-24
-
1.2.20-9 - 2019-06-24
-
1.2.20-8 - 2019-06-21
-
1.2.20-7 - 2019-06-20
-
1.2.20-6 - 2019-06-19
-
1.2.20-5 - 2019-06-17
-
1.2.20-4 - 2019-06-14
-
1.2.20-3 - 2019-06-12
-
1.2.20-2 - 2019-05-29
-
1.2.20-1 - 2019-05-28
-
1.2.19 - 2019-06-04
-
1.2.18 - 2019-05-07
-
1.2.17 - 2019-03-21
-
1.2.16 - 2019-03-19
-
1.2.15 - 2019-02-12
-
1.2.14 - 2019-02-01
-
1.2.13 - 2019-01-28
-
1.2.12 - 2018-12-20
-
1.2.11 - 2018-12-20
-
1.2.10 - 2018-12-12
-
1.2.9 - 2018-12-07
-
1.2.8 - 2018-11-02
-
1.2.8-2 - 2018-11-01
-
1.2.8-1 - 2018-11-01
-
1.2.7 - 2018-10-25
-
1.2.6 - 2018-10-11
-
1.2.5 - 2018-10-08
-
1.2.4 - 2018-08-28
-
1.2.3 - 2018-08-27
-
1.2.2 - 2018-07-23
-
1.2.1 - 2018-07-17
-
1.2.0 - 2018-06-20
-
1.2.0-14 - 2018-05-10
from @fortawesome/fontawesome-svg-core GitHub release notesPackage name: @fortawesome/free-solid-svg-icons
-
5.12.1 - 2020-02-05
- user-unlock icon #13280
- mixer brand icon #11242
- coffin-cross icon #15646
- instagram-square icon #9223
- shopify icon #3850
- dailymotion icon #3890
- Do not separate web fonts files for Free Kits
- The .fab CSS class now has explicit weight of 400 instead of inheriting 'normal'
- Balance the plus symbol in file-plus and folder-plus #16004
- Removed cross from coffin (new coffin-cross still available) #15646
- Updated edge brand icon #15771
- Updated clock hands #15779
- Guard against run-away pseudo element searching with String.codePointAt ponyfill
- Silence errors when using the conflict detector
-
5.12.0 - 2019-12-10
- New science fiction and household icons
- Metadata in Yaml format now available in JS packages
- Updated twitch, safari, pied-piper, and android brand icon
- Renaming haykal icon to bahai
- Added "sideEffects: false" to JS icon packages to aid with tree-shaking
- Improved eye position on the dog icon
- Updated solid style of the shape icon
- Adding missing versions for balance-scale-left and balance-scale-right icons
- Corrected missing cut-outs for envelope-open-dollar and envelope-open-text
- Fixing icon mismatch for contract and expand icons in the version 4 shim
- TypeScript definition includes optional params for layer() API call
- Symbols can now be inserted using Windows Character Map, Word, and PowerPoint
- Correcting the LICENSE.txt for @fortawesome/fontawesome-svg-core and
-
5.12.0-2 - 2019-12-10
-
5.12.0-1 - 2019-11-06
-
5.11.2 - 2019-09-23
- Updated laravel brand icon
- New scanner-image icon was using the same unicode value as scanner causing overlapped icons
- The film-canister icon was incorrectly spelled film-cannister
-
5.11.1 - 2019-09-18
- Duotone icons updated in 5.11.0 had incorrect attribute order which caused
-
5.11.0 - 2019-09-18
- New tech, music, and western-themed icons
- Added umbraco, swift, orcid, mdb (and one more surprise) brand icons
- SVG with JavaScript no longer duplicates the id attribute when in nesting mode
- Corrected inconsistencies with the send-back and send-backward icons
- Corrected inconsistencies with duotone icon viewBox widths that did not match
-
5.10.2 - 2019-08-22
- SVG with JS API function layers() now accepts params to add additional classes
- Lots of updates to various duotone icons
- Updated the keybase brand icon
- Duotone icon updates #15396
-
5.10.1 - 2019-08-02
- README file in the otfs/ directory to help direct folks to documentation for the new Duotone OTF file
- A lot of visual improvements and consistency fixes to many of the new Duotone icons
- The fa-swap-opacity class now works with parent containers where Duotone icons as children
- Duotone SCSS files were not being correctly compiled with the Dart-Sass tool
- Font Awesome logo was not appearing in desktop application in font pickers
-
5.10.0 - 2019-07-29
- Duotone icons style added with over 1,600 new icons
- New conflict detection script to help identify conflicting versions of Font Awesome (js/conflict-detection.js)
- Icons border-center-v and border-center-h
- New brand icon for cotton-bureau
- Updated version 4 shim to more accurately match sort-alpha-desc, sort-amount-desc, sort-numeric-desc
- Icon sort-amount-down-alt incorrectly matching sort-amount-down
- Icon border-outer icon missing inner grid shapes
-
5.10.0-14 - 2019-07-25
-
5.10.0-13 - 2019-07-25
-
5.10.0-12 - 2019-07-23
-
5.10.0-11 - 2019-06-25
-
5.10.0-10 - 2019-06-24
-
5.10.0-9 - 2019-06-24
-
5.10.0-8 - 2019-06-21
-
5.10.0-7 - 2019-06-20
-
5.10.0-6 - 2019-06-19
-
5.10.0-5 - 2019-06-17
-
5.10.0-4 - 2019-06-14
-
5.10.0-3 - 2019-06-12
-
5.10.0-2 - 2019-05-29
-
5.10.0-1 - 2019-05-28
-
5.9.0 - 2019-06-04
- An assortment of voted icons, updated icons, and new icons
- New icons and updates to the text editor category
- A flipped version of the phone and phone-alt icon
- Removed the nintendo-switch icon by request of Nintendo
- Sorted out the sort icons #9464 #9419 FortAwesome/Font-Awesome-Pro#915
- De-crevassed the brain icons
- Proportions corrected on facebook-messenger brand icon
-
5.8.2 - 2019-05-07
- New brand icon stackpath
- Updated redhat, mailchimp brand icons
- Updated Facebook brand icons in accordance with http://facebookbrand.com (facebook, facebook-f, facebook-square)
- Updated Git brand icons (git, git-square, git-alt)
- Removing the "at" character to prevent overlap with the at icon
- Missing version for the route icon #13804
- Corrected the orientation of radiation and radiation-alt icons
- Alignment fixed for check-double
- Moved the notch into the correct location for sim-card
- Allow the role attribute to be specified #14791
- Prevent IE11 CSS selector error from crashing SVG with JS execution
-
5.8.1 - 2019-03-21
-
5.8.0 - 2019-03-19
-
5.7.2 - 2019-02-12
-
5.7.1 - 2019-02-01
-
5.7.0 - 2019-01-28
-
5.6.3 - 2018-12-20
-
5.6.2 - 2018-12-20
-
5.6.1 - 2018-12-12
-
5.6.0 - 2018-12-07
-
5.5.0 - 2018-11-02
-
5.5.0-2 - 2018-11-01
-
5.5.0-1 - 2018-11-01
-
5.4.2 - 2018-10-25
-
5.4.1 - 2018-10-11
-
5.4.0 - 2018-10-08
-
5.3.1 - 2018-08-28
-
5.3.0 - 2018-08-27
-
5.2.0 - 2018-07-23
-
5.1.1 - 2018-07-17
-
5.1.0 - 2018-06-20
-
5.1.0-11 - 2018-05-10
from @fortawesome/free-solid-svg-icons GitHub release notesAdded
Changed
Fixed
Added
@fortawesome/fontawesome-free and @fortawesome/fontawesome-pro
Changed
Fixed
which made swap opacity incorrect
#14614
@fortawesome/fontawesome-common-types
Changed
Fixed
Fixed
them to fail to load for all kits
Added
Fixed
the solid style
Added
Changed
Fixed
#15409 #15413
#15325 #15334
#15339 #15346
Added
Changed
Fixed
Added
Changed
Fixed
Minor version upgrade notice: there are some backward-incompatible changes to this release. See the
UPGRADING.md guide for more
information.
Added
Changed
Fixed
Added
Changed
Fixed
Package name: @fortawesome/react-fontawesome
-
0.1.8 - 2019-12-06
- Add swapOpacity to Typescript definitions #308
-
0.1.7 - 2019-10-19
- Add DOM attributes to FontAwesomeIconProps to Typescript definitions #151 #196
-
0.1.6 - 2019-10-10
- Ignore null values for pull, rotation, and size props #289
-
0.1.5 - 2019-09-29
- Full support for Duotone icons
-
0.1.4 - 2019-01-15
- Upgrade to Babel 7 and Rollup 1 #213
- Thrown error in IE11
-
0.1.4-1 - 2018-11-08
-
0.1.3 - 2018-09-06
- Add title prop #180
-
0.1.2 - 2018-08-12
-
0.1.1 - 2018-08-07
- Added tabIndex to TypeScript definitions #168
-
0.1.0 - 2018-06-20
-
0.1.0-11 - 2018-05-15
from @fortawesome/react-fontawesome GitHub release notesFixed
Fixed
Fixed
Added
Changed
Fixed
Added
Changed
Commit messages
Package name: @fortawesome/react-fontawesome
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs