[Snyk] Upgrade bootstrap from 4.2.1 to 4.6.1 #33

snyk-bot · 2022-04-19T19:07:56Z

Snyk has created this PR to upgrade bootstrap from 4.2.1 to 4.6.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 10 versions ahead of your current version.
The recommended version was released 6 months ago, on 2021-10-28.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-BOOTSTRAP-173700	539/1000 Why? Has a fix available, CVSS 6.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: bootstrap

4.6.1 - 2021-10-28
What's changed
- Replace Sass division with multiplication and custom divide() function by @ mdo in #34571
- Update RFS to v8.1.0 by @ XhmikosR in #34571
- fix(forms): input-group and validation icons by @ ffoodd in #32968
- Fix minor visual bug in Firefox caused by moz-focusring by @ kremit in #32821
- Adjust SAFE_URL_PATTERN regex for use with test method of regexes by @ nikonthethird in #33153
- Add sms in the SAFE_URL_PATTERN for sanitizer by @ XhmikosR in #35074
- Adjust feedback icon position and padding for select.form-control by @ mdo in #33206
- Carousel: use buttons, not links, for prev/next controls by @ patrickhlauke in #33165
- v4: Sass docs for default variables by @ mdo in #33392
- Handle complex expressions in add() & subtract() by @ ffoodd in #34047
- More concise improvements for add() and subtract() by @ ffoodd in #34432
- Remove aria-haspopup from dropdowns by @ patrickhlauke in #33624
- Dropdown: support .dropdown-item wrapped in <li> tags by @ cpsievert in #33649
- Update Node versions in JS tests (drop Node 10, add Node 16), update docs JS assets and add variables for vertical-align in spinners by @ XhmikosR in #33807
- Replace Freenode with Libera IRC server by @ midzer #34050
- Fix repetition in the Navbar docs description by @ coliff in #34208
- Enable 0.x with negative margins in utilities by @ k-utsumi in #33593
- Remove print thead rule by @ coliff in #34426
- Fix prevented show event disabling modals with fade class from being displayed again by @ alpadev in #34087
- Input group validation with custom-file input by @ ffoodd in #33239
- Add eslint-plugin-qunit and tighten JS tests by @ XhmikosR in #32270
- Update our tests to Node 16 and npm 8 by @ XhmikosR in #35142
- Disabled link cleanup by @ patrickhlauke in #34924
- Updated our devDependencies including terser; also enabled two passes for terser by @ XhmikosR
Full changelog

v4.6.0...v4.6.1
4.6.0 - 2021-01-19
4.5.3 - 2020-10-13
4.5.2 - 2020-08-06
4.5.1 - 2020-08-04
4.5.0 - 2020-05-12
4.4.1 - 2019-11-28
4.4.0 - 2019-11-26
4.3.1 - 2019-02-13
4.3.0 - 2019-02-11
4.2.1 - 2018-12-21

from bootstrap GitHub release notes

Commit messages

Package name: bootstrap

043a03c Release v4.6.1 (#35272)
ef6a418 images.md: remove zero-width space (#35234)
3f88326 Update devDependencies (#35271)
4133069 Update devDependencies and switch to Node.js 16/npm 8
fc492ed terser: specify 2 passes as it offers slightly better compression
fe73da9 JS: minor refactoring
4f0187c Revert "Bundlewatch: stop ignoring dependabot branches (#33192)" (#35069)
6d0fd8c Backport #35074
7b3a47e Update terser to v5.9.0.
e482fbb fix(input-group): custom-file with validation (#33239)
8133c3e Fix capitalization after period in Markdown files (#35112)
44a01ec Update devDependencies (#35068)
8ebd6d9 Remove extra spaces in Markdown files (#35047)
bdab948 Remove unneeded conditional
af52795 Remove duplicate test.
f6ff736 Change test description so that it's unique
77e0855 Merge duplicate test.
ed62ab6 Remove commented out test
d4e162f Skip tests if `attachShadow` is not present
551f37a tests: comply to the new rules
5391ecd Add eslint-plugin-qunit
e202996 Update devDependencies
cb55e38 Update CodeQL workflow (#34961)
08a550a Backport #34937