Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade bootstrap from 4.1.1 to 4.3.1 #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk have raised this PR to upgrade bootstrap from 4.1.1 to 4.3.1.

  • The recommended version is 7 versions ahead of your current version.
  • The recommended version was released 7 months ago, on 2019-02-13.

The recommended version fixes:

Severity Title Issue ID
Cross-site Scripting (XSS) SNYK-JS-BOOTSTRAP-173700
Cross-site Scripting (XSS) SNYK-JS-BOOTSTRAP-73560
Cross-site Scripting (XSS) npm:bootstrap:20180529
Release notes
  • 4.3.1 - 2019-02-13
    • Security: Fixed an XSS vulnerability (CVE-2019-8331) in our tooltip and popover plugins by implementing a new HTML sanitizer
    • Fixed a small issue with our RFS (responsive font sizes) mixins
  • 4.3.0 - 2019-02-11

    Highlights

    • New: Added .stretched-link utility to make any anchor the size of it's nearest position: relative parent, perfect for entirely clickable cards!
    • New: Added .text-break utility for applying word-break: break-word
    • New: Added .rounded-sm and .rounded-lg for small and large border-radius.
    • New: Added .modal-dialog-scrollable modifier class for scrolling content within a modal.
    • New: Added responsive .list-group-horizontal modifier classes for displaying list groups as a horizontal row.
    • Improved: Reduced our compiled CSS by using null for variables that by default inherit their values from other elements (e.g., $headings-color was inherit and is now null until you modifier it in your custom CSS).
    • Improved: Badge focus styles now match their background-color like our buttons.
    • Fixed: Silenced bad selectors in our JS plugins for the href HTML attribute to avoid JavaScript errors. Please try to use valid selectors or the data-target HTML attribute/target option where available.
    • Fixed: Reverted v4.2.1's change to the breakpoint and grid container Sass maps that blocked folks from upgrading when modifying those default variables.
    • Fixed: Restored white-space: nowrap to .dropdown-toggle (before v4.2.1 it was on all .btns) so carets don't wrap to new lines.
    • Deprecated: img-retina, invisible, float, and size mixins are now deprecated and will be removed in v5.

    Links

  • 4.2.1 - 2018-12-21

    Bump to v4.2.1 to republish package on npm. See v4.2.0 release notes for changes introduced in v4.2.

  • 4.1.3 - 2018-07-24
    • Fixed: Removed the :not(:root) selector from our svg Reboot styles, resolving an issue that caused all inline SVGs ignore vertical-align styles via single class due to higher specificity.
    • Fixed: Moved the browserslist config from our package.json to a separate file to avoid unintended inherited browser settings across npm projects.
    • Fixed: Buttons in custom file inputs are once again clickable when focused.
    • Improved: Bootstrap's plugins can now be imported separately in any contexts because they are now UMD ready.
    • Improved: .form-controls now have a fixed height to compensate for differences in computed height across different types. This also fixes some IE alignment issues.
    • Improved: Added Noto Color Emoji to our system font stack for better rendering in Linux OSes.
  • 4.1.2 - 2018-07-12
    • Fixed an XSS vulnerability in tooltip, collapse, and scrollspy plugins
    • Improved how we query elements in our JavaScript plugins
    • Inline SVGs now have the same vertical alignment as images
    • Fixed issues with double transitions on carousels
    • Added Edge and IE10-11 fallbacks to our floating labels example
    • Various improvements to form controls, including disabled states on file inputs and unified focus styles for selects

    Checkout the v4.1.2 ship list and GitHub project for the full details.

  • 4.1.1 - 2018-04-30

    Our first patch release for Bootstrap 4! Here's a quick rundown of some of the changes:

    • Added validation styles for file inputs
    • Improved printing of dark tables
    • Suppressed that text-hide deprecation notice by default
    • Cleaned up some JS globals and improve coverage
    • Bumped dependencies, namely Jekyll
    • Fixed docs issue with incorrect name for our monospace font utility

    Checkout the v4.1.1 ship list and GitHub project for the full details.

from bootstrap GitHub Release Notes


馃 View latest project report

馃洜 Adjust upgrade PR settings

馃敃 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant