[Snyk] Upgrade swagger-ui from 4.1.3 to 4.6.2 #1
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade swagger-ui from 4.1.3 to 4.6.2. See this package in npm: https://www.npmjs.com/package/swagger-ui See this project in Snyk: https://app.snyk.io/org/dengkun001/project/68cbff80-5ea3-4e98-bb5d-87c8a2812e49?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade swagger-ui from 4.1.3 to 4.6.2.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-URLPARSE-2407770
Why? CVSS 8.1
SNYK-JS-URLPARSE-2412697
Why? CVSS 8.1
SNYK-JS-URLPARSE-2407759
Why? CVSS 8.1
SNYK-JS-URLPARSE-2401205
Why? CVSS 8.1
SNYK-JS-PRISMJS-2404333
Why? CVSS 8.1
SNYK-JS-NODEFETCH-2342118
Why? CVSS 8.1
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: swagger-ui
-
4.6.2 - 2022-03-10
- examples: allow string created by regex pattern (#7829) (3d79c24)
- swagger-ui-react: amend prop validation for plugins (#7900) (5874d2b)
-
4.6.1 - 2022-03-02
- build: correct export of
- swagger-ui-react: fix prop type for plugins (#7877) (544d16d)
- docker-nginx: Output yml/yaml as text/plain (#7749) (4109efd)
- oauth2: addEventListener only if document state is not 'loading' (#7828) (824917c), also (#7879) (3eb0528)
-
4.6.0 - 2022-03-01
- build: webpack@5 and webpack-dev-server@4 (#7826) (07d346b)
- swagger-ui-react: add support for persistAuthorization prop (#7842) (67dd4f6), closes #7389
- ES Module output bundle path now points to
- No change to CommonJS output bundle or path
- Now uses Asset Modules, which replaces
- Removed unused rules/loaders for
- Node polyfills are no longer bundled with
- Now imports
- Order of execution matters for the production npm build scripts.
-
4.5.2 - 2022-02-21
- swagger-ui-react: load spec on initial render (#7856) (a81341d), closes #7578
-
4.5.1 - 2022-02-19
- build: do not pull whole highlight.js and refractor libs (#7852) (c73d718), closes #7851
-
4.5.0 - 2022-02-04
- requestSnippets: handle type: string, format: binary or base64 file upload data (#7545) (2b30a34)
- oauth2: generate default oauth2RedirectUrl based on page location and path (#7476) (a89c90e)
- serverVariables: refresh state on definition change (#7821) (a0e9923)
-
4.4.1 - 2022-01-31
- auth: compensate for uninitialized config (6c10e4a), closes #7814
-
4.4.0 - 2022-01-27
- plugins: make swagger-js wrapActions overridable (#7753) (8ea3cfd), closes #7730
- security: update swagger-client to v3.18.3 (#7798) (6c417e4)
- view-plugin: provide resolvers for memoized functions (#7801) (d638e58), closes #7800
- do not ask for client secret when using auth code with PKCE (#7438) (c6d8d77), closes #6290
-
4.3.0 - 2022-01-25
- swagger-ui-react: fix prop type for defaultModelRendering (6b10708), closes #7783
- error-handling: introduce unified and configurable error handling (#7761) (8b1c4a7), closes #7778
-
4.2.1 - 2022-01-19
- chore(deps-dev): babel plugins needed to build swagger-ui-react #7779
-
4.2.0 - 2022-01-19
-
4.1.3 - 2021-12-10
from swagger-ui GitHub release notes4.6.2 (2022-03-10)
Bug Fixes
4.6.1 (2022-03-02)
Bug Fixes
./dist/swagger-ui.css(#7878) (eece9f5)4.6.0 (2022-03-01)
Features
Additional Notes
SwaggerUI is now built using
webpack@5, with dev support forwebpack-dev-server@4swagger-ui-es-bundle-core, which does not include dependenciesfile-loader,raw-loader, andurl-loader.woff | .woff2 | .ttf | .eotfonts and htmlwebpack@5, and must be loaded separately and/or useresolve.fallback. As an example, SwaggerUI loadsprocess,buffer, andstream-browserifyasdevDependenciesin order to build development and production bundles.SwaggerUI-React:
swagger-ui-es-bundle-core, and similarly outputsswagger-ui-es-bundle-coreto itsdistdirectoryDev:
build-stylesheetsneeds to get built first,then cleanup of any empty artifacts, before building the various production bundles
Dev-helpersnow relies onHTMLWebpackPluginto inject css and bundle files4.5.2 (2022-02-21)
Bug Fixes
4.5.1 (2022-02-19)
Bug Fixes
4.5.0 (2022-02-04)
Features
Bug Fixes
4.4.1 (2022-01-31)
Bug Fixes
4.4.0 (2022-01-27)
Bug Fixes
Features
4.3.0 (2022-01-25)
Bug Fixes
Features
This release comes with a release article that contains more information about the new unified SwaggerUI error handling mechanism
4.2.1 (2022-01-19)
This is a patch release that supersedes v4.2.0 to properly build the downstream
swagger-ui-reactpackage. No other/srcchanges in this version.Commit messages
Package name: swagger-ui
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs